Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
File: R3faFXdoQj_LqSFzkux_SDs7lEI.mft (raw, json)
Hash identifier: iYSUKuGASHPhk+PAdVRwM20h0D0JwS1CDzFeJFfrvVk=
Subject key identifier: 03:C8:8B:23:40:17:95:98:41:6C:2B:69:25:58:44:42:08:86:28:5E
Authority key identifier: 47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
Certificate issuer: /CN=4777da157768423fcba9217392ec7f483b3b9442
Certificate serial: 0194BCE05C1971F8DC9D01503E53FB9A7A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 15:00:07 +0000
Manifest this update: Fri 31 Jan 2025 15:00:07 +0000
Manifest next update: Sat 01 Feb 2025 15:00:07 +0000
Files and hashes: 1: Q3JTPjWcEREqifdCmIjbHLzzn7s.roa (hash: vaz4o+tAP641StTPMvLecOpfelAjJS1sX1oCmpWNCoo=)
2: R3faFXdoQj_LqSFzkux_SDs7lEI.crl (hash: 13F1t8dHd0v7sw5RqhgKKSkS8FpG62M719ujB0B5smg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5c:19:71:f8:dc:9d:01:50:3e:53:fb:9a:7a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4777da157768423fcba9217392ec7f483b3b9442
Validity
Not Before: Jan 31 15:00:07 2025 GMT
Not After : Feb 1 15:00:07 2025 GMT
Subject: CN=03c88b2340179598416c2b69255844420886285e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ff:20:46:41:79:aa:af:30:87:e7:a2:97:c4:
4a:97:6a:88:40:71:dc:fe:48:8b:34:60:87:5d:ca:
e5:33:32:c0:b1:c8:70:ee:6f:39:45:52:4d:d2:e4:
d4:dc:57:4e:e0:0d:fc:05:6f:e7:86:3b:01:dc:09:
eb:7a:ed:4f:9c:57:49:b6:e8:69:5d:96:79:82:55:
e4:12:6f:56:f8:ef:54:69:b1:02:de:40:06:5f:e5:
93:9d:92:a6:8c:b1:75:48:09:96:6b:00:7a:34:2f:
b9:12:0d:82:0a:1b:b4:0b:77:7f:4d:26:90:7c:84:
0d:75:a6:34:fe:3c:dc:d0:91:d3:ce:e1:3e:cd:c9:
ef:de:15:8d:36:4f:3b:00:e1:9d:12:3d:d5:ed:67:
38:ba:3a:cb:86:ea:b0:6e:b2:c4:b9:66:f6:a2:b7:
9d:52:2b:81:00:cd:c7:27:7a:79:86:01:0b:6a:1b:
24:72:99:25:49:5c:06:2a:b5:c2:ba:a3:62:61:02:
d7:42:b1:b7:8e:07:a1:0e:7e:4b:69:fe:a7:6e:44:
d0:6f:8d:81:8f:b2:47:e6:1b:c6:f4:ae:4e:d2:71:
33:cf:84:ba:2b:a5:49:eb:f5:a0:7f:01:80:68:27:
54:15:9e:55:d4:43:8e:3b:f4:f6:35:50:86:6d:9a:
5d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C8:8B:23:40:17:95:98:41:6C:2B:69:25:58:44:42:08:86:28:5E
X509v3 Authority Key Identifier:
keyid:47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:41:35:83:24:f9:9f:d1:52:1a:3f:e7:b1:45:e2:63:a1:f8:
16:9a:06:ca:d6:57:1c:7e:bb:dc:d9:29:a1:db:02:2c:c6:ce:
e5:7e:82:d5:f1:ab:b1:31:b7:1a:ce:c2:c2:fc:58:01:b2:4a:
c3:73:78:71:3f:64:41:b9:ba:ff:3d:5b:1d:8d:5a:e8:64:78:
da:e2:dd:96:5f:c0:6b:f5:72:25:65:48:ed:d0:4e:c2:f8:ab:
47:a5:3d:11:31:37:a0:78:98:e4:59:2e:5f:39:d5:93:52:42:
22:b2:fb:09:20:f9:e9:4f:d4:46:77:1c:4f:c6:b8:ab:a1:0f:
70:77:00:7e:2d:e4:71:11:28:ae:b9:87:37:7b:7a:90:ab:2f:
ab:e5:e4:5e:4c:dd:c8:30:19:5a:58:47:40:d5:b8:d9:a5:f9:
cd:69:dc:3d:0c:17:e8:af:34:b6:cc:2f:a8:a8:86:6e:78:b0:
a0:d8:1f:d3:cc:8a:1c:6b:fd:6f:05:40:4a:00:08:31:a8:f9:
7c:bc:41:de:fb:ee:1b:ad:06:0e:15:59:14:19:23:15:f1:94:
15:b8:9b:30:f4:b2:af:9a:c6:c5:b1:10:4e:4e:45:0a:49:22:
9c:a6:58:89:2c:c4:b2:0c:6a:4b:5e:ac:ef:57:6f:5d:79:b2:
26:f4:79:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:47 2025 by rpki-client