Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
File: V2si8nkFl0hL-WkVqDVDwZSz_R4.mft (raw, json)
Hash identifier: gv/o8EzD32n7oP7m4QY5v/Gh9k0x89Viahw3SONIEJ4=
Subject key identifier: B3:16:8E:1F:1B:6A:E8:D5:B0:86:38:E6:55:0B:93:02:5C:4A:53:E3
Authority key identifier: 57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E
Certificate issuer: /CN=576b22f2790597484bf96915a83543c194b3fd1e
Certificate serial: 0194BC3BE0FA6550A1A9DEAB6B134977369A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
Manifest number: 036D
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: V2si8nkFl0hL-WkVqDVDwZSz_R4.crl (hash: l6K3hzJQ80WSM5ZkLUOdu0Zt8MTCbhaJHIUkQhglndA=)
2: WnvN9eO0xROw8P2u2NunmIAmhFM.roa (hash: ICDMCpB80BuzlOdYTKVVB47BHhMFIG3MGwkKpb0Kjms=)
3: ga2NxvzjVumF5thvPvomOtqub-A.roa (hash: Fnu74FvZlaTUv1bGjbnayDCXm216CFcy4KRgAcWl9Rk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e0:fa:65:50:a1:a9:de:ab:6b:13:49:77:36:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576b22f2790597484bf96915a83543c194b3fd1e
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=b3168e1f1b6ae8d5b08638e6550b93025c4a53e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d3:93:e1:3f:39:c0:7a:ae:4b:3e:07:79:d4:
eb:cb:0b:24:cd:aa:eb:e3:52:2d:a8:b7:5b:07:92:
7a:c2:d5:e3:f8:f6:f3:e7:a9:47:fc:28:eb:75:49:
d4:e1:04:83:76:a9:99:20:53:84:04:5f:46:30:49:
95:75:13:fe:17:78:97:9a:0c:49:1a:5f:6d:94:5d:
ea:e0:2a:65:02:b2:7a:ec:6f:52:06:25:3f:fd:5f:
de:c4:43:6b:b7:7e:47:70:ec:5e:7a:23:8e:9e:f3:
a5:2a:73:56:67:4f:f5:dc:ea:53:c2:6c:f0:28:ab:
de:e4:a3:ad:33:21:ee:df:38:e6:6f:e7:06:54:0a:
50:67:7f:31:1a:c0:47:44:4a:59:c6:ab:3e:59:21:
fa:77:5a:d3:51:a3:ce:d4:30:b6:57:e5:b9:7b:9f:
87:2e:a4:7e:51:e6:81:e5:7d:49:69:0e:32:f7:db:
8f:f6:a7:81:06:72:f8:e5:27:dd:06:fa:f3:11:d4:
7b:ba:95:6f:88:d6:3e:6e:a4:60:42:8a:88:44:ab:
49:3a:1b:b1:ba:01:e9:d2:fe:44:bf:a5:dc:75:40:
d3:e9:69:fb:1c:66:0b:ad:aa:b7:db:60:f1:7a:51:
3c:ac:27:ab:3f:52:a5:72:67:47:90:34:eb:6a:b0:
75:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:16:8E:1F:1B:6A:E8:D5:B0:86:38:E6:55:0B:93:02:5C:4A:53:E3
X509v3 Authority Key Identifier:
keyid:57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a1:52:7b:4a:81:37:cf:b7:33:d3:5d:76:6c:e3:2f:02:dd:
72:48:b1:91:83:ec:4d:29:41:fe:8e:01:7c:ad:f2:7f:a0:da:
a6:4e:b9:97:84:55:dc:c7:4d:64:e0:d4:0f:2a:26:81:63:da:
4f:20:3f:79:e7:fd:6d:30:68:1b:44:51:39:0d:d9:f0:fb:48:
9a:84:67:b7:95:05:9c:b9:24:5a:83:aa:9e:0c:b3:4c:34:3f:
8f:3d:19:59:78:d8:f7:f2:19:ca:f3:bd:26:bf:40:5c:fa:19:
7c:52:c2:c6:44:8b:56:92:8c:1e:10:e6:43:1f:a4:7f:83:b9:
07:73:5d:c9:3a:a1:c6:9c:1f:ed:8f:ea:67:2a:f8:82:52:1a:
50:f3:cf:69:e2:23:7e:4c:06:8b:20:6b:f4:63:3e:1d:90:cd:
bb:e3:e1:be:c6:75:28:df:e7:b8:59:90:3b:2d:ca:b4:dc:ff:
ba:85:da:24:ba:38:91:03:ed:68:79:10:be:9c:e7:0d:c4:16:
0b:3f:fd:c7:4e:19:72:5c:5f:98:83:d1:ac:9a:bc:0a:69:cf:
1d:51:d4:cf:7d:1d:df:74:a4:02:e6:8c:43:6e:e0:bb:e3:ca:
46:c3:7d:98:5c:35:04:ec:9c:de:93:37:a5:d6:ae:ea:d0:9e:
dc:20:38:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:38 2025 by rpki-client