Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft
File: 3Mx29__HFoYLOtY56_kdxN1hMAA.mft (raw, json)
Hash identifier: f3+bTfj9sGR4BZ6nCrOnQRrIyalNffpG/7Vx7nAhoB4=
Subject key identifier: 89:06:16:14:76:ED:6E:FE:C6:B9:11:76:EF:D4:EA:C0:43:FF:CD:9E
Authority key identifier: DC:CC:76:F7:FF:C7:16:86:0B:3A:D6:39:EB:F9:1D:C4:DD:61:30:00
Certificate issuer: /CN=dccc76f7ffc716860b3ad639ebf91dc4dd613000
Certificate serial: 0194BBCDFF873DE959FB5E2E2DC4E074709F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Mx29__HFoYLOtY56_kdxN1hMAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft
Manifest number: 07ED
Signing time: Fri 31 Jan 2025 10:00:27 +0000
Manifest this update: Fri 31 Jan 2025 10:00:27 +0000
Manifest next update: Sat 01 Feb 2025 10:00:27 +0000
Files and hashes: 1: 3Mx29__HFoYLOtY56_kdxN1hMAA.crl (hash: Us9qOhy7nWIct+RoMuGi8HhmGQbgRtnZwqdDJwfwW+E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ff:87:3d:e9:59:fb:5e:2e:2d:c4:e0:74:70:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccc76f7ffc716860b3ad639ebf91dc4dd613000
Validity
Not Before: Jan 31 10:00:27 2025 GMT
Not After : Feb 1 10:00:27 2025 GMT
Subject: CN=8906161476ed6efec6b91176efd4eac043ffcd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:65:92:34:df:57:8c:1a:e9:c6:52:64:36:42:
3b:4b:0a:0a:3a:67:70:05:2e:7d:d4:61:5b:c6:33:
ff:62:f7:f8:1f:1e:65:cb:7c:aa:a5:a0:88:40:eb:
ce:1e:50:f9:ca:f7:d6:4b:4f:29:a6:ff:a4:ae:1e:
83:26:ae:4e:a3:08:5e:8e:5e:c0:15:52:11:98:b8:
87:a6:f8:cf:1a:7a:3b:61:6f:64:95:84:8b:58:37:
41:af:a3:88:3f:82:e1:d7:cf:c6:75:0a:13:d0:31:
0f:f3:4e:a7:77:55:0f:07:42:64:14:5d:2c:dc:c6:
1f:d2:19:4f:71:67:9a:4b:3e:71:60:fa:82:11:8d:
33:c6:70:d0:b8:9c:f7:0d:9a:80:c1:c3:3f:60:33:
cf:eb:96:54:00:0d:e7:e1:f9:c6:80:66:52:46:28:
d8:a5:36:1a:4c:36:73:1c:0a:e5:ff:94:f6:2c:5f:
a9:55:e9:6c:68:38:23:90:1a:1c:c3:50:80:29:3c:
24:1f:c7:f7:55:8c:dd:1e:0b:b3:01:c7:41:ba:26:
38:d0:f8:15:77:5b:89:15:3b:ff:6f:d7:f2:24:f1:
7b:91:09:4b:f5:9b:3e:4e:1c:46:7c:fe:df:d9:35:
71:fb:9a:85:9c:3e:0a:71:39:f9:a8:12:8b:a2:6a:
13:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:06:16:14:76:ED:6E:FE:C6:B9:11:76:EF:D4:EA:C0:43:FF:CD:9E
X509v3 Authority Key Identifier:
keyid:DC:CC:76:F7:FF:C7:16:86:0B:3A:D6:39:EB:F9:1D:C4:DD:61:30:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Mx29__HFoYLOtY56_kdxN1hMAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:44:13:eb:3b:d2:af:6d:d1:eb:f3:12:a8:5a:74:58:e8:4e:
a6:64:92:b1:cf:f6:12:ef:6b:d0:c6:6b:e5:e8:b9:aa:63:cf:
8d:b7:7c:90:1f:81:10:ee:b2:8d:ee:3a:81:31:bf:4b:2f:42:
3c:e2:7a:c6:5e:cd:8f:f8:9b:c5:fa:40:14:1f:65:c4:24:8d:
dd:ae:83:41:8a:e6:60:17:a9:c4:b1:cd:8e:6b:fa:0c:5e:41:
f6:db:c3:ef:f9:8e:ce:50:18:3d:c0:2a:62:b4:c1:44:02:2c:
78:68:ce:6f:a7:ae:91:b5:85:18:5b:67:63:7c:10:fe:db:52:
63:6d:3d:8c:5d:f6:84:28:4f:d4:02:7e:49:7f:0a:35:c6:20:
53:f8:9c:47:2e:bf:07:cf:f1:1a:0a:a7:03:0d:cd:63:99:57:
be:8b:1e:38:e4:63:15:b4:46:49:5a:a2:c7:df:3f:84:00:48:
d0:a8:f1:43:91:e1:dc:e6:e5:7a:98:11:98:3b:e7:6c:ee:61:
1f:c3:b0:98:62:6e:19:6c:38:98:61:57:f9:0b:07:f0:df:ef:
ce:47:46:f7:7a:99:71:e1:db:57:45:5c:0d:d7:81:1f:ba:d4:
f5:8a:57:6d:84:bb:99:42:f8:b5:d1:ba:a3:cf:a6:11:ac:b0:
f6:95:b8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:11 2025 by rpki-client