Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
File: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft (raw, json)
Hash identifier: 1hocT3Qan4YzGqA55E5ZNVBalZc926ShXFBuQDJ4QNU=
Subject key identifier: 23:0C:3B:C2:1A:49:E8:C8:0B:B6:BB:22:2E:AE:C6:76:2E:CC:64:22
Authority key identifier: 07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
Certificate issuer: /CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Certificate serial: 0194BCAA32CAAD38CEFF8F91B843D470B4E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
Manifest number: 1226
Signing time: Fri 31 Jan 2025 14:00:57 +0000
Manifest this update: Fri 31 Jan 2025 14:00:57 +0000
Manifest next update: Sat 01 Feb 2025 14:00:57 +0000
Files and hashes: 1: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl (hash: YpK/QECzS9o8KPAmtgvzfnrWnoh6IyrfvzTiyKhjRfs=)
2: RFIhLbL5apmrV9lcic2R569sFqE.roa (hash: eQDwgZT68cMBWjVX4YIww5uW6xuaB6mxhLhX47tqj9U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:32:ca:ad:38:ce:ff:8f:91:b8:43:d4:70:b4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Validity
Not Before: Jan 31 14:00:57 2025 GMT
Not After : Feb 1 14:00:57 2025 GMT
Subject: CN=230c3bc21a49e8c80bb6bb222eaec6762ecc6422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:17:7a:2c:d2:e4:d2:ee:c8:71:b2:1a:02:71:
c0:aa:04:f5:56:38:9a:bb:21:dc:e4:97:f9:b9:e2:
3b:1b:8e:a1:f3:5b:d5:93:11:cd:08:63:78:e1:cb:
58:58:cc:9f:6c:ef:c1:54:03:42:16:bc:82:c4:5c:
dc:2a:10:4e:06:e9:9b:ef:9d:14:12:05:b6:e7:fe:
9f:53:31:72:8a:77:a0:16:61:e6:45:6e:2d:32:72:
28:40:35:2c:10:2e:66:1b:ca:08:6e:1a:3c:46:c5:
4f:16:0b:1f:33:f8:25:f5:03:9b:89:57:26:c9:17:
3f:a5:4e:fc:29:28:c8:f9:9e:6b:a6:94:ff:77:3e:
95:49:eb:8c:97:a7:10:19:06:e0:c1:5c:cd:4c:23:
a5:b6:03:e4:32:85:5d:e5:c8:c2:e7:c2:9a:b1:e6:
b5:53:3e:aa:39:16:ac:69:7f:5b:e0:5e:c0:da:ec:
be:89:e2:76:eb:09:ea:19:bf:b0:98:01:ab:77:a9:
00:67:52:36:24:d0:c2:b3:f6:e4:ab:7a:f3:f9:61:
a0:74:12:e9:a2:c7:c6:94:90:82:f9:c1:e6:c2:63:
33:a8:e5:39:39:07:4e:8b:fc:59:85:eb:fd:42:b9:
19:96:1a:47:1b:5a:87:4d:df:a6:f6:2e:84:08:59:
d0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0C:3B:C2:1A:49:E8:C8:0B:B6:BB:22:2E:AE:C6:76:2E:CC:64:22
X509v3 Authority Key Identifier:
keyid:07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3f:4b:61:1d:26:7c:c7:34:d3:09:9f:6d:62:26:7a:9c:e9:
21:9d:7b:04:a1:7f:dc:42:e4:ab:1b:65:ba:49:14:11:09:d0:
b1:5f:b6:b5:b8:0b:fa:8c:3c:2e:f1:38:0a:b4:c9:62:3a:99:
6d:a8:5c:97:3f:fc:a4:77:dc:5a:83:21:58:39:ec:f3:a3:0d:
2e:db:45:bf:62:b9:0a:46:de:1f:8c:4b:9c:d2:b3:c7:a3:1a:
24:19:95:82:a8:bf:48:80:a3:bd:43:12:68:95:5c:db:5f:1f:
85:a2:a7:7f:7e:7f:64:69:f9:cb:68:50:02:c1:32:f6:25:86:
aa:18:f8:e6:1e:08:28:bd:f9:4d:51:a6:bd:ee:52:53:3d:c2:
ae:f5:68:25:e8:0b:08:ea:7e:f4:64:06:59:59:c9:00:db:73:
bc:00:f9:03:5e:00:a0:cd:52:09:99:d3:6b:27:b1:52:1e:39:
a6:64:35:92:ba:6e:16:6d:ca:73:7a:69:08:05:a8:28:c9:0a:
ac:f5:4b:40:81:8a:eb:90:23:1d:e2:c2:f2:21:c8:87:d0:bd:
14:68:dc:94:57:c9:f8:4e:03:5a:71:ad:b9:80:ff:4d:1d:e3:
ef:a4:ed:cd:2c:6f:10:40:23:6b:a6:eb:c2:f0:cb:09:ec:4f:
d0:e5:cf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:19 2025 by rpki-client