Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft
File: e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft (raw, json)
Hash identifier: vhAwAbd9oIOZUWr5ry19seGRHttZjD8J7fnViR8kTgI=
Subject key identifier: 30:A7:90:72:D5:27:DD:AB:52:0E:D3:50:B6:C8:12:43:46:3A:97:6F
Authority key identifier: 7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F
Certificate issuer: /CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f
Certificate serial: 0194BC72B516E98E172D620A08C8A2EBF1B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 13:00:21 +0000
Manifest this update: Fri 31 Jan 2025 13:00:21 +0000
Manifest next update: Sat 01 Feb 2025 13:00:21 +0000
Files and hashes: 1: e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl (hash: NTTS++mJmxZdgDOLSb9o7XFpZMa9phRcJvaMBIoRvaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b5:16:e9:8e:17:2d:62:0a:08:c8:a2:eb:f1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f
Validity
Not Before: Jan 31 13:00:21 2025 GMT
Not After : Feb 1 13:00:21 2025 GMT
Subject: CN=30a79072d527ddab520ed350b6c81243463a976f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5c:0f:03:51:ee:85:8d:7e:ca:37:05:87:0e:
8a:8d:21:21:9d:6f:15:f1:07:d5:f1:7a:e9:6b:05:
29:15:04:3b:c1:db:51:07:89:14:8c:1f:6b:4e:02:
e5:d5:42:85:ca:c8:8e:f1:47:4d:a2:8e:4b:66:9e:
6f:d6:f3:b3:1d:cb:02:c3:51:31:3f:9a:bd:32:3f:
f7:e0:98:e9:5b:bd:37:e1:54:96:79:c3:41:1e:71:
96:ad:03:01:ac:e0:2e:9f:96:c2:01:4c:e7:ca:9d:
49:d0:02:63:b4:a2:5d:27:a8:cd:cf:90:45:cd:69:
0f:1a:ee:f8:41:27:63:6e:02:21:97:f0:fd:36:9b:
40:9f:c5:6d:17:12:34:8e:30:06:1d:b6:5e:47:02:
7d:10:80:55:db:9b:2e:7c:75:37:b7:c4:ae:33:b7:
f5:50:c0:db:3f:c8:49:ce:18:83:2c:4a:0b:a4:d4:
1f:40:81:bb:01:b5:83:11:9e:20:7f:18:3d:df:4c:
ae:e8:6c:52:be:1f:a0:0a:47:a4:5d:df:4c:5a:2d:
a9:28:77:46:96:a7:2f:aa:5d:18:b0:ff:09:2d:12:
6b:f2:a6:15:5f:91:0f:b7:ae:e3:13:93:c7:df:ec:
21:06:32:b5:2c:b0:58:94:39:e7:00:d6:eb:2c:51:
36:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A7:90:72:D5:27:DD:AB:52:0E:D3:50:B6:C8:12:43:46:3A:97:6F
X509v3 Authority Key Identifier:
keyid:7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:a1:a8:71:28:a9:a0:48:9c:3d:5d:f8:b2:97:48:5d:72:d7:
a2:94:e2:8d:4c:8c:83:47:66:87:87:6a:f0:99:3d:0a:f3:7f:
49:40:3f:d0:57:f7:28:f3:8f:de:b0:8a:c8:ee:20:4e:08:6c:
ea:82:ac:9e:f4:63:d6:be:00:49:05:0c:85:b0:40:9b:7b:6f:
cc:a0:b2:79:75:fa:7e:0f:5f:d6:12:db:e8:17:a0:50:d0:ec:
62:19:d7:a6:cd:e1:1f:47:27:93:a5:0f:98:d0:66:91:a9:5b:
76:11:67:b8:e7:a4:64:eb:7f:ad:72:f8:9e:52:28:e6:e6:42:
4f:9a:81:6e:f1:59:8e:ae:79:3a:57:53:8a:a8:29:7f:68:07:
39:39:51:d3:a1:ea:fd:72:e3:34:47:85:d1:54:a3:ff:14:0f:
2e:14:66:58:24:b2:06:e7:23:57:dd:c9:b9:9e:82:f1:0c:d4:
e7:e8:74:d1:49:e2:7e:8d:b7:13:66:4f:f6:41:60:e2:15:ba:
32:9e:c9:43:5f:75:25:69:0c:52:32:eb:0b:e8:f9:b2:28:04:
1d:26:da:74:99:e3:09:2e:a9:f3:e2:de:b0:67:62:cf:6a:38:
80:37:70:5f:70:7a:ad:80:20:86:fc:8e:b0:c8:4a:0a:51:08:
bb:b8:b3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:09:26 2025 by rpki-client