Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
File: J3bWTqj9AotoiON0VXu5HwXuDsY.mft (raw, json)
Hash identifier: k3+Q179/AqpgYVo+ZScQaAKKGdAEFps19vZf3XMdEeo=
Subject key identifier: F4:1D:7F:EB:47:1A:8B:5F:14:33:C9:5D:63:C9:EE:16:F8:17:62:83
Authority key identifier: 27:76:D6:4E:A8:FD:02:8B:68:88:E3:74:55:7B:B9:1F:05:EE:0E:C6
Certificate issuer: /CN=2776d64ea8fd028b6888e374557bb91f05ee0ec6
Certificate serial: 0194BCA9C3E71CAD0FA469BDB0A886086020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
Manifest number: 0A3F
Signing time: Fri 31 Jan 2025 14:00:29 +0000
Manifest this update: Fri 31 Jan 2025 14:00:29 +0000
Manifest next update: Sat 01 Feb 2025 14:00:29 +0000
Files and hashes: 1: J3bWTqj9AotoiON0VXu5HwXuDsY.crl (hash: /VUd3bpqa9Y0FPDLBe321592H7TBE2d4IHTrJHqqxxQ=)
2: T_CxlSwnknQox-JCH593XHkgLvM.roa (hash: CV6mCgtIXghwvOdJmAcgD8Xq7LAE7fozTfYdfKC5Sfg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c3:e7:1c:ad:0f:a4:69:bd:b0:a8:86:08:60:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2776d64ea8fd028b6888e374557bb91f05ee0ec6
Validity
Not Before: Jan 31 14:00:29 2025 GMT
Not After : Feb 1 14:00:29 2025 GMT
Subject: CN=f41d7feb471a8b5f1433c95d63c9ee16f8176283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a3:2f:36:00:69:2b:49:6b:d7:41:42:c1:9a:
0e:06:d0:a8:9a:4d:44:6e:b3:1e:ea:bb:1a:83:bb:
97:a2:ce:9c:ba:1d:7e:da:2f:58:31:21:b9:db:1c:
b7:18:a0:39:71:49:d6:e6:e6:0b:4c:27:d4:05:9b:
66:64:ff:b0:09:f6:74:65:df:a0:af:47:e7:13:04:
f2:d7:95:f8:fb:a7:76:d3:de:98:14:d8:af:43:a0:
78:5d:b4:52:4c:e5:99:58:e4:5e:36:60:ca:dd:2d:
96:61:2e:4e:21:6d:c6:71:bc:f3:33:0f:0a:e6:d3:
9d:2a:09:74:cf:ba:4c:a2:9a:a5:90:54:e5:40:b4:
da:37:64:c8:87:22:a6:8f:69:ee:44:b9:33:a4:39:
9b:2e:a8:72:ec:5b:c3:f1:eb:30:67:34:f3:33:69:
9f:c3:30:2b:7c:31:9a:95:65:7f:78:34:36:3e:bd:
ca:a0:e4:9c:5f:46:53:d9:63:2b:e4:9e:6b:34:e5:
dc:1b:70:02:f7:2a:39:12:a4:7d:0e:1a:1f:b2:57:
fa:ea:2f:43:94:69:2f:18:11:b1:9d:20:5c:3c:ba:
ee:b2:01:0e:c0:cd:68:24:31:85:89:39:1a:46:3a:
cc:ee:f6:06:90:13:04:f7:0b:90:02:d4:01:85:46:
b0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1D:7F:EB:47:1A:8B:5F:14:33:C9:5D:63:C9:EE:16:F8:17:62:83
X509v3 Authority Key Identifier:
keyid:27:76:D6:4E:A8:FD:02:8B:68:88:E3:74:55:7B:B9:1F:05:EE:0E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:02:23:3f:95:cd:d0:49:41:19:38:39:ea:f6:4d:c8:ca:be:
2d:e7:80:83:8e:78:76:b8:70:7e:6e:4a:b2:06:88:92:7d:61:
b7:55:68:e4:74:96:98:42:c9:5f:8a:9a:01:e3:23:4b:d3:ee:
3e:a8:89:b8:4f:c5:f2:bb:64:99:3e:76:9c:e3:62:65:0a:45:
b3:6a:45:ff:09:03:1e:dd:eb:b2:5e:7e:94:2a:bb:4c:b0:d0:
b2:5d:bf:9c:77:54:a0:74:a7:8c:ea:99:e3:91:8f:6e:f1:45:
8f:8d:b3:dc:2a:65:c6:53:00:48:b6:b8:5d:f3:ea:ce:df:51:
b4:bf:16:53:41:88:9f:aa:ce:84:1c:2b:9f:0a:b5:92:01:d0:
5b:ac:4f:84:e3:6c:17:74:12:8b:b2:f7:19:df:ec:e3:7d:54:
fa:3f:81:2e:f1:13:68:d7:ba:2e:a6:f8:1d:91:68:16:16:06:
66:69:34:44:b4:85:12:b7:a5:9a:e0:d5:a1:42:d7:21:42:51:
b5:db:4c:7f:b0:0b:3d:0d:75:da:f2:7b:2f:af:7d:c5:9f:cf:
ba:36:50:5d:d9:83:f6:9e:aa:b6:be:f9:08:b2:14:b1:fb:53:
13:08:a8:96:cf:47:4c:63:ef:fd:bd:4c:07:29:de:01:d4:88:
45:43:eb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:25:01 2025 by rpki-client