Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
File: D8T3CpLUasAsjf5_l1vkir1i56Q.mft (raw, json)
Hash identifier: cMb11O9vPF9vnc9460mmSrt1oetRvMMABveMkdK5vHY=
Subject key identifier: 6B:F7:6D:30:40:12:02:4E:19:6C:B5:B8:D1:48:4A:38:A8:48:8E:5D
Authority key identifier: 0F:C4:F7:0A:92:D4:6A:C0:2C:8D:FE:7F:97:5B:E4:8A:BD:62:E7:A4
Certificate issuer: /CN=0fc4f70a92d46ac02c8dfe7f975be48abd62e7a4
Certificate serial: 0194BCAA3FC0D34971CA98A887A0FCAD4999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:01:01 +0000
Manifest this update: Fri 31 Jan 2025 14:01:01 +0000
Manifest next update: Sat 01 Feb 2025 14:01:01 +0000
Files and hashes: 1: D8T3CpLUasAsjf5_l1vkir1i56Q.crl (hash: r5PA/BdjrejpzabuFigndxifgiAavdHeVgEomCWdjSo=)
2: KV7Ah7ECaAsyXag5Rq5pooWC9JA.roa (hash: VgR4uMVD7rCZUo7Z3bX/mNyr94Jdnu1Q2sOy20+13Cw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3f:c0:d3:49:71:ca:98:a8:87:a0:fc:ad:49:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fc4f70a92d46ac02c8dfe7f975be48abd62e7a4
Validity
Not Before: Jan 31 14:01:01 2025 GMT
Not After : Feb 1 14:01:01 2025 GMT
Subject: CN=6bf76d304012024e196cb5b8d1484a38a8488e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3b:4d:b2:64:e3:7d:6c:5b:2e:37:89:5f:a1:
99:c3:09:9f:2f:b6:9e:6c:29:84:41:73:36:af:bc:
93:b1:59:0e:ac:29:6c:01:f6:9a:5a:76:bf:23:f5:
14:bc:b5:b4:2f:0f:5c:62:5d:f6:2d:61:08:3a:cb:
bc:0b:4b:f5:e9:66:61:b2:ce:ff:66:31:2c:91:a4:
0e:30:2e:84:b5:13:1f:27:86:be:82:a2:5a:7c:7a:
7c:f0:ff:bd:79:55:1c:82:34:6d:76:e3:0b:73:52:
20:0f:f9:cf:81:50:9b:5d:d2:15:a2:71:3a:af:e0:
37:2b:02:8c:32:f8:b1:33:29:a5:7a:90:8a:b2:b8:
ac:46:c7:3c:25:ea:08:71:9e:0d:3f:7b:3b:9a:5c:
d7:a9:1c:be:45:ee:d2:bf:e8:3d:21:b8:63:c0:16:
6d:43:2f:da:a2:79:30:4f:7a:dd:37:7c:65:11:6b:
d9:25:5b:5f:8a:b6:0b:b0:51:2c:9d:3e:09:4f:44:
a7:03:1a:39:c9:43:e0:78:3d:7a:ee:ce:ce:39:4b:
2b:14:d6:a0:00:2e:ca:44:c8:65:43:ed:20:b8:f6:
8e:1f:8b:d1:cf:60:77:f3:fb:3b:d4:39:21:aa:77:
13:da:7e:95:62:dc:52:f2:95:9c:42:9e:5b:5c:2e:
ed:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F7:6D:30:40:12:02:4E:19:6C:B5:B8:D1:48:4A:38:A8:48:8E:5D
X509v3 Authority Key Identifier:
keyid:0F:C4:F7:0A:92:D4:6A:C0:2C:8D:FE:7F:97:5B:E4:8A:BD:62:E7:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:3c:94:d5:80:00:14:cb:12:96:e3:75:b7:4b:3a:4d:59:cd:
fe:60:98:08:c6:79:52:79:b0:ca:be:c7:67:6e:f9:63:fa:53:
7e:e7:a4:27:74:97:2f:8e:ff:52:5d:fa:1c:82:e3:d3:c9:e3:
92:85:af:05:bf:7b:52:e5:8a:e7:f9:2e:33:d0:0b:39:69:6b:
ef:72:8d:32:ee:29:30:ee:f2:05:fa:a8:9e:a4:a1:2a:b3:25:
60:4f:75:f6:90:80:66:d2:f5:23:f4:7e:22:44:a2:bf:3b:00:
21:05:a2:3a:09:59:43:f7:73:8f:99:78:83:91:8a:69:78:d5:
65:0b:91:40:d6:ff:08:51:a6:cf:4c:92:f1:aa:a6:25:f8:ec:
9e:79:0e:ea:5b:ea:b7:1d:a1:35:43:6a:4d:37:6d:b2:35:64:
69:05:40:da:31:31:c3:38:d9:53:8e:e7:8a:18:bf:99:31:37:
b2:b3:48:71:9a:c0:ee:7c:d4:fa:d2:98:a3:b6:a3:cb:9d:db:
0e:3f:c5:03:61:97:a8:72:09:7c:6f:d9:0f:97:7c:c1:81:8d:
b2:79:47:50:a8:cb:a3:76:9d:c6:65:14:72:80:88:97:cf:f0:
78:62:bc:c2:79:03:04:44:28:28:3d:31:73:fe:97:18:5a:c8:
8c:d1:69:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:46 2025 by rpki-client