Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5d3a83-ea9f-4d83-b06b-a35b1bb3dfbd/1/3W6a_JMYMzgCLH2PGGr3GXOu9bo.mft
File: 3W6a_JMYMzgCLH2PGGr3GXOu9bo.mft (raw, json)
Hash identifier: DzoZQMXksO8wGZkxILAMF46LZaLETPBuNuKTfQtolYg=
Subject key identifier: 25:3A:9D:6B:1C:51:3C:04:E0:54:A9:57:83:C3:17:55:33:41:96:97
Authority key identifier: DD:6E:9A:FC:93:18:33:38:02:2C:7D:8F:18:6A:F7:19:73:AE:F5:BA
Certificate issuer: /CN=dd6e9afc93183338022c7d8f186af71973aef5ba
Certificate serial: 0194BBCDCDF93C0BAD7A8458854FF783A0BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W6a_JMYMzgCLH2PGGr3GXOu9bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/5d3a83-ea9f-4d83-b06b-a35b1bb3dfbd/1/3W6a_JMYMzgCLH2PGGr3GXOu9bo.mft
Manifest number: 0E87
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: 3W6a_JMYMzgCLH2PGGr3GXOu9bo.crl (hash: fnB3cQC1dxYsei1n1K/AjaX7HtNyQ5mUsAWJzP8Fadc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cd:f9:3c:0b:ad:7a:84:58:85:4f:f7:83:a0:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6e9afc93183338022c7d8f186af71973aef5ba
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=253a9d6b1c513c04e054a95783c3175533419697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a4:4c:91:2b:69:1a:f9:06:a1:4b:9c:00:0d:
02:f2:36:eb:49:61:4f:3f:0c:b8:c9:d4:2e:fa:89:
1b:73:08:86:23:40:d7:ad:0e:c7:98:94:c4:3c:20:
88:91:fa:21:85:bc:8f:9c:84:bf:e7:fc:61:30:64:
8f:03:d5:81:c0:b3:18:31:39:0e:36:25:5b:fe:20:
1d:20:fc:cf:09:11:55:a6:fb:a5:7e:c8:8a:0f:cc:
8b:4e:5e:00:f9:8d:08:c0:41:67:a3:c4:0e:99:60:
4b:04:db:9f:0e:6e:c1:6e:ee:7a:7a:e0:40:89:1d:
77:66:aa:ae:31:97:a9:d4:c6:3b:f8:eb:1e:c7:cf:
af:9f:13:79:1f:c4:54:62:6b:23:ca:cb:4b:0a:bc:
60:81:fa:04:e3:4c:b5:cc:fa:6c:56:7d:ae:62:05:
fb:2e:f2:d0:ff:73:bf:5a:49:bc:31:ea:40:2f:53:
fa:d3:5a:5d:ae:b7:e4:f9:66:86:bb:46:36:59:4f:
ad:cd:2d:fd:ad:4f:ef:d2:14:37:c6:7a:5d:9b:9c:
cd:92:7f:21:1a:ac:eb:ec:7a:40:67:92:fb:89:6b:
bc:f3:af:9c:bd:2a:1f:c0:ab:5e:08:d6:80:bc:3a:
fb:7a:89:ac:ba:64:c4:59:62:0d:05:1b:02:97:f0:
03:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3A:9D:6B:1C:51:3C:04:E0:54:A9:57:83:C3:17:55:33:41:96:97
X509v3 Authority Key Identifier:
keyid:DD:6E:9A:FC:93:18:33:38:02:2C:7D:8F:18:6A:F7:19:73:AE:F5:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W6a_JMYMzgCLH2PGGr3GXOu9bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5d3a83-ea9f-4d83-b06b-a35b1bb3dfbd/1/3W6a_JMYMzgCLH2PGGr3GXOu9bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5d3a83-ea9f-4d83-b06b-a35b1bb3dfbd/1/3W6a_JMYMzgCLH2PGGr3GXOu9bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:57:a4:de:9c:03:be:b4:a4:07:ec:cf:24:5b:2b:b1:9a:af:
ed:72:2c:8e:60:da:8e:8c:b1:c5:3e:79:c1:09:8a:d5:92:09:
66:3a:24:c0:da:7d:74:8a:73:3d:be:94:b9:65:22:4b:52:95:
51:c2:36:0e:fd:9c:c9:53:57:31:17:88:85:f0:fe:6c:98:e2:
41:7d:a9:9d:c5:c4:91:7b:76:30:07:42:e1:0e:f4:61:d0:56:
b9:d2:48:6b:e6:9c:bd:f3:e9:6c:ad:1b:ee:3d:41:c2:41:cc:
b9:88:22:ee:eb:c6:03:e2:92:4b:58:c4:85:01:5d:75:e9:ee:
f9:f8:b2:f4:52:65:89:ff:e2:56:4a:8e:fd:f9:d6:bd:ae:96:
ea:7c:33:23:f0:16:21:e5:41:0c:f8:05:f4:75:e5:c6:8a:42:
ea:82:8f:78:1d:cd:95:59:f4:65:07:f3:88:35:2f:78:94:04:
64:6a:09:c7:3e:16:52:f0:2b:79:62:7c:11:3b:81:5d:a1:24:
0d:7a:96:b1:3b:1e:23:92:12:52:12:e9:ed:3b:db:cb:95:1c:
ee:df:6c:b9:4b:78:04:77:71:eb:c2:f4:53:23:4a:94:64:9b:
94:d5:f9:d2:1a:7d:04:52:5e:99:9d:60:98:44:62:fe:68:42:
6b:39:bb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:23 2025 by rpki-client