Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.mft
File: db3TijiDJA5GxLGsi7-DF96P-IU.mft (raw, json)
Hash identifier: ZdVWm+GzfVgDMBLTF7qwRdXuIzUOLZOg6eoq3N40KK8=
Subject key identifier: 07:B7:20:D6:F0:1F:95:E0:54:CD:FD:0B:80:39:CC:C6:1B:25:23:45
Authority key identifier: 75:BD:D3:8A:38:83:24:0E:46:C4:B1:AC:8B:BF:83:17:DE:8F:F8:85
Certificate issuer: /CN=75bdd38a3883240e46c4b1ac8bbf8317de8ff885
Certificate serial: 0194BD177E7D91469F72235CF116C7519AC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/db3TijiDJA5GxLGsi7-DF96P-IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.mft
Manifest number: 1137
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: db3TijiDJA5GxLGsi7-DF96P-IU.crl (hash: kf8Qm3u/WyauGOlUbwocplxlqdYhavuDZqSSdrgBhcw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7e:7d:91:46:9f:72:23:5c:f1:16:c7:51:9a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bdd38a3883240e46c4b1ac8bbf8317de8ff885
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=07b720d6f01f95e054cdfd0b8039ccc61b252345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ac:02:23:53:e8:2f:5f:b7:6c:80:3c:6f:b9:
a9:e6:94:89:e3:4f:86:59:f0:75:a4:4c:25:23:b5:
da:d5:6c:2b:57:7f:ea:8f:49:fa:ee:e9:d3:0e:7f:
77:d1:5a:02:d6:6d:e2:b3:9f:2b:db:e1:e8:f0:94:
f9:45:69:7d:f5:18:b6:40:00:39:26:66:5f:79:e7:
ff:40:19:19:32:a2:ec:aa:80:af:cd:a2:04:96:3e:
37:d2:ec:62:38:2f:45:59:30:6a:99:4e:7b:39:e1:
f9:c3:78:36:69:fd:c7:18:8a:a2:2d:59:b9:bd:78:
d1:1c:f6:5d:26:76:68:20:f2:d8:98:ae:92:9a:66:
39:e7:f8:34:e4:0a:d0:a3:94:0a:bf:85:95:00:05:
b7:ef:e4:0e:97:ad:8a:b3:67:9c:c1:a9:d4:d1:97:
ec:8d:ea:d1:91:15:18:12:b2:14:3d:fc:f2:3a:97:
2e:dc:b5:40:22:ed:e2:f8:1c:8a:bc:f9:a1:16:68:
ff:0c:98:91:f7:c7:41:c4:81:60:93:08:4f:24:eb:
a0:9b:9c:96:57:f1:da:67:a8:0d:6a:41:1c:9f:10:
95:6a:c6:96:cd:fb:ec:4d:1d:7a:6a:8a:bc:7e:3c:
e8:91:37:96:d4:12:cc:ba:56:35:3c:43:46:ee:e1:
74:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B7:20:D6:F0:1F:95:E0:54:CD:FD:0B:80:39:CC:C6:1B:25:23:45
X509v3 Authority Key Identifier:
keyid:75:BD:D3:8A:38:83:24:0E:46:C4:B1:AC:8B:BF:83:17:DE:8F:F8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/db3TijiDJA5GxLGsi7-DF96P-IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:af:8d:b1:39:63:92:ab:4f:7d:e1:bd:3d:59:4f:40:24:96:
91:b7:7f:de:bb:35:54:85:71:e2:06:78:8f:53:c8:c7:d6:aa:
09:c5:9b:c9:c7:20:bd:7b:c2:00:6c:19:18:53:a9:76:1b:2f:
d6:58:c6:2d:de:ee:82:07:b3:9c:f1:66:25:67:30:7e:b8:8e:
53:87:70:59:be:98:a5:74:1e:30:cd:4d:5e:c4:ce:16:5b:5e:
85:89:c4:27:3c:b9:cc:3c:f8:75:3f:c6:a3:c8:6d:cb:2b:27:
f1:ac:c1:15:7c:95:cf:d1:67:21:76:51:09:ad:30:60:e1:bc:
0c:41:9c:41:06:f2:56:9b:f6:03:62:7f:9e:6e:3b:d9:9f:0d:
bc:b2:f0:08:b9:d2:16:0f:35:09:35:2a:d3:23:45:a5:87:86:
42:61:c2:d7:f1:90:ae:3c:40:a0:2b:af:89:38:c0:c0:e1:d5:
ea:29:f5:59:02:13:5f:d3:af:f1:87:36:a6:56:d2:48:b5:b9:
57:19:1a:d0:9d:52:b5:af:88:62:99:f5:33:f4:04:bd:01:b9:
2f:c3:9c:7e:95:43:2d:58:77:2f:18:13:d7:26:7b:a4:9c:08:
3a:ff:a6:0a:c3:0c:57:1e:01:da:d6:ef:d9:d0:66:5e:46:38:
d5:a1:ed:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:27:19 2025 by rpki-client