Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
File: 3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft (raw, json)
Hash identifier: Gd+o1Lx3/S/ZI0pFfkV2gYtK3/ZjDP/xsrtnNpAzheA=
Subject key identifier: CF:FB:86:81:DE:1D:12:E9:23:D4:1B:93:4B:DF:C4:16:44:47:65:FD
Authority key identifier: DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
Certificate issuer: /CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Certificate serial: 0194BC3BC34724436123474B3564C800C4C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
Manifest number: 0D68
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: 3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl (hash: QK2zdcU0zA87O0JcU0X2o46Sk9cSj691sTZeRfOQ8Xw=)
2: s199ikwEffBbz4N51o9Z93m71rk.roa (hash: Tb9twTEkz+iPQZdYGEiHKKRquApELQ9qVFqV3IE19gE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c3:47:24:43:61:23:47:4b:35:64:c8:00:c4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=cffb8681de1d12e923d41b934bdfc416444765fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b5:a1:b0:67:d5:ab:ce:99:14:62:e6:96:c7:
f7:81:5f:24:fe:ee:19:aa:56:cf:e4:a3:9c:ce:68:
34:02:c0:7d:47:4a:3d:0d:e1:e8:28:57:37:8d:8b:
17:b1:20:38:30:02:ee:f4:9a:c6:17:7f:f1:37:f3:
33:51:57:f8:2e:de:1c:c6:60:d8:ca:73:bd:11:0e:
fa:a3:4b:3e:49:13:b0:c3:73:e8:d6:90:86:db:95:
a3:2f:6a:58:37:4e:23:2e:b1:db:6c:5f:07:8b:b9:
89:3f:58:d1:53:84:d2:c8:53:60:81:dc:45:da:cb:
c5:01:52:89:ac:db:8c:42:f5:de:04:c7:12:34:f2:
1f:da:48:f9:7f:6b:a5:67:52:fb:b5:2b:5f:34:94:
74:36:df:0a:ea:c6:3c:04:9a:33:b5:90:57:12:9b:
8d:3b:89:8f:e4:1b:d7:aa:13:91:cc:7f:89:d7:2d:
bb:35:a4:cf:79:08:ae:90:a8:4f:22:b3:b4:23:25:
90:c1:cc:c3:53:14:d9:12:3e:76:2a:1e:11:ca:6d:
e1:3a:c0:de:a4:31:13:44:aa:71:55:c2:4d:25:6d:
d8:bf:4a:3b:be:fc:91:e6:fd:19:88:eb:71:56:3c:
69:6c:b5:da:da:eb:eb:94:22:8d:b3:71:f2:f3:cf:
7f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FB:86:81:DE:1D:12:E9:23:D4:1B:93:4B:DF:C4:16:44:47:65:FD
X509v3 Authority Key Identifier:
keyid:DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c9:d6:24:b9:11:de:ff:bb:b5:de:3c:89:7a:d0:b7:9e:bb:
62:52:3d:dc:7f:2d:8a:ba:86:aa:b0:c1:7e:90:89:6d:fc:e6:
a8:84:1e:aa:8a:74:9f:32:94:e0:94:15:bb:12:3f:54:42:d1:
a1:61:37:08:7f:71:8b:ad:2e:61:df:00:72:58:f5:7d:f0:5f:
14:1d:8c:48:b3:af:89:ef:70:a1:a3:ba:20:b6:e1:da:6e:b8:
3a:41:5d:3e:64:58:70:de:fc:a6:10:81:00:c1:63:2c:1e:55:
91:48:b9:0a:b2:39:65:4c:62:a1:bb:19:1f:51:57:dc:2c:20:
81:5a:59:7b:d0:c7:7f:7c:2f:80:79:ab:d3:f9:4a:f6:c9:0e:
e3:38:56:6e:1e:78:28:9b:c4:76:c5:18:f5:eb:1e:66:b9:9e:
8c:f2:50:ae:45:7d:2a:aa:b9:5b:77:a6:be:38:62:9d:00:e3:
36:09:c8:8c:21:f9:82:05:6d:52:3c:25:3b:1e:62:34:0a:45:
cc:b6:22:26:df:d1:9d:13:2f:fc:7c:41:a2:72:e3:12:ee:7c:
b7:c9:6e:a0:0c:e8:c9:5f:a9:03:a2:7a:d0:6a:95:fa:de:07:
23:1d:19:70:31:14:c5:5f:04:35:98:35:d8:85:c2:93:cb:ec:
be:44:99:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:14 2025 by rpki-client