Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
File: 3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft (raw, json)
Hash identifier: t8fYgGjxzypLp54kKZFrUPKxAB/bYtRmoYAbJMu/Tlc=
Subject key identifier: 95:84:CD:20:F5:FA:A6:5B:83:24:50:FD:A5:CB:C5:53:1F:DD:BC:93
Authority key identifier: DE:3D:3A:98:49:5C:27:B9:CE:35:0A:E5:B8:9F:99:14:4B:0A:4C:9D
Certificate issuer: /CN=de3d3a98495c27b9ce350ae5b89f99144b0a4c9d
Certificate serial: 0194BC72AA19506094F81D14E03AEC09179A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
Manifest number: 79
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: 3j06mElcJ7nONQrluJ-ZFEsKTJ0.crl (hash: /Tr0MPGin+jt3qPHKbuYPapu6DmrB4I3sRsEbaLNAvU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:aa:19:50:60:94:f8:1d:14:e0:3a:ec:09:17:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d3a98495c27b9ce350ae5b89f99144b0a4c9d
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=9584cd20f5faa65b832450fda5cbc5531fddbc93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ca:bf:8d:2a:f6:b1:ff:c4:dc:70:2d:34:dd:
b1:12:9c:21:03:64:6a:d5:e8:13:5a:19:6a:af:21:
4d:72:0f:9a:75:25:0c:57:ca:37:ee:cf:1f:c0:b4:
27:81:78:c1:28:57:79:66:e5:b7:b3:1b:81:10:61:
86:ba:d7:4c:78:6e:92:d7:4e:93:bc:43:a4:b5:30:
68:c1:a9:a8:8e:d8:46:80:c3:63:76:b9:3f:7e:c3:
df:e8:83:d8:6d:e2:ee:50:12:ca:fd:7d:2e:10:8f:
ca:b1:58:53:d4:89:af:25:5a:1f:69:b4:0b:91:26:
6c:5d:51:5a:dc:a7:ad:f1:58:eb:c7:00:00:e6:81:
99:bc:f0:8b:3d:81:fb:75:a8:27:63:ab:90:99:55:
77:b9:f4:d1:eb:c9:40:a7:6f:74:ec:be:c3:da:c4:
cb:3b:6e:55:a3:26:40:b5:a2:76:12:5a:a4:21:4f:
87:0d:c8:60:e5:3f:a1:67:a9:ca:f5:eb:ae:21:d3:
68:17:99:a1:9a:97:d7:4b:22:67:d8:d7:ab:85:de:
fd:b0:2e:63:17:1c:60:4e:d7:4f:de:ea:9c:4c:9a:
8c:6f:bd:ac:a4:69:68:84:27:5a:97:f6:21:b5:32:
2e:bf:5c:a3:7b:75:c0:92:57:fd:99:e2:22:4f:e4:
8d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:84:CD:20:F5:FA:A6:5B:83:24:50:FD:A5:CB:C5:53:1F:DD:BC:93
X509v3 Authority Key Identifier:
keyid:DE:3D:3A:98:49:5C:27:B9:CE:35:0A:E5:B8:9F:99:14:4B:0A:4C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:82:70:94:da:7b:08:60:76:cb:05:ec:27:b9:5c:51:fa:00:
ee:ec:30:a2:6b:56:ac:df:ef:5c:1d:f5:8f:39:80:25:40:a4:
3e:ec:7a:28:a3:12:8a:6d:a9:2b:f5:d3:5d:ca:42:02:9b:e5:
ec:31:db:03:e9:a4:3d:42:47:f2:d1:89:15:c3:90:04:67:66:
d8:6c:d6:8b:0d:a2:f6:e4:ed:c1:b1:68:3c:f1:d6:ba:76:01:
59:6e:6b:5b:cd:9b:00:3c:8a:f3:f5:43:d9:6c:c5:36:43:5a:
91:ee:c9:21:c5:a1:5f:30:4d:9b:a3:a4:1d:e5:f4:cb:52:52:
ea:19:73:f9:7d:f4:fa:5d:90:c0:d7:d0:fe:c1:30:66:bc:34:
8f:68:2e:d3:f8:5c:25:c4:70:95:1c:d2:0b:b4:64:d0:4c:ba:
1e:3c:45:94:bb:7c:55:b0:0d:7c:66:2b:53:f1:12:f5:1f:17:
8c:82:b2:3a:8f:30:52:6c:77:a4:4e:7c:0d:8f:b9:3d:2e:0a:
9d:46:12:ae:74:24:2d:bd:f1:bc:81:a9:53:bc:b9:77:60:10:
47:1b:60:6e:e0:f0:d0:8b:21:fd:59:a5:1e:fb:20:61:44:ed:
eb:3a:f7:9c:9f:96:cd:d2:45:f1:1b:98:ea:5b:76:f0:8f:5b:
7d:30:cb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:44 2025 by rpki-client