Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
File: D3jqRswh1F7WEmjUqfVnMsheIVA.mft (raw, json)
Hash identifier: ANHcrH7Xetq9X5eHHZrvHZVV4ZKDrFZL9LenYccZBqQ=
Subject key identifier: 3D:94:8C:58:2C:2C:7C:AD:01:E0:8B:22:28:EC:68:54:55:25:9C:61
Authority key identifier: 0F:78:EA:46:CC:21:D4:5E:D6:12:68:D4:A9:F5:67:32:C8:5E:21:50
Certificate issuer: /CN=0f78ea46cc21d45ed61268d4a9f56732c85e2150
Certificate serial: 0194BC04C10AA7ACD163104D272E6969D3F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:15 +0000
Manifest this update: Fri 31 Jan 2025 11:00:15 +0000
Manifest next update: Sat 01 Feb 2025 11:00:15 +0000
Files and hashes: 1: 8SQTxy_p8cY9en9UR93vjFnnH74.roa (hash: LPCNfHY24fbVR2x4GxfhYD0c8Fxi97g9FBcWFfU2h/o=)
2: D3jqRswh1F7WEmjUqfVnMsheIVA.crl (hash: 7oqfECsdxAXDpNTLY9WQm1zUx6w18JGF6rnVlXxEgxg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c1:0a:a7:ac:d1:63:10:4d:27:2e:69:69:d3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f78ea46cc21d45ed61268d4a9f56732c85e2150
Validity
Not Before: Jan 31 11:00:15 2025 GMT
Not After : Feb 1 11:00:15 2025 GMT
Subject: CN=3d948c582c2c7cad01e08b2228ec685455259c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:f9:a0:61:87:f0:a3:1a:f5:ce:89:19:5f:
39:a7:4f:87:39:69:49:14:38:cc:dc:b4:8a:ad:15:
4c:7f:28:48:20:73:e9:1e:03:07:e7:fb:52:55:8a:
e2:75:04:1e:45:36:69:ce:2a:21:38:54:cb:41:ad:
df:3d:e3:2e:06:65:f5:9b:ba:64:39:63:61:8c:d9:
a6:fb:e4:b3:54:cd:1e:3d:4e:aa:d5:71:af:c5:12:
f0:42:cd:57:4b:02:b1:7f:e7:2e:b8:29:ac:5d:ae:
df:f3:74:6b:67:f3:29:35:f5:23:40:f0:e1:39:9d:
e5:ca:6a:64:c3:78:58:26:19:36:99:69:4a:f4:06:
e1:71:9b:3e:a9:68:db:13:73:6a:59:05:5c:62:a6:
ab:82:38:3d:0b:87:4c:ca:7a:6e:37:8f:58:15:49:
9b:29:94:25:bd:a0:53:bb:4a:cc:14:fe:79:ba:99:
c0:73:10:eb:16:9a:90:fd:c9:24:42:fb:b9:af:6d:
dd:f4:cf:c1:0e:1b:92:a9:18:5b:ab:59:d6:f4:ed:
06:b7:2f:93:37:d9:99:13:3d:47:a3:f4:5b:61:b1:
a5:66:31:47:da:05:d8:1c:06:4d:6e:e9:ba:06:d0:
dd:b3:99:d2:4a:85:52:3b:c2:d2:5f:2e:71:43:17:
e7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:94:8C:58:2C:2C:7C:AD:01:E0:8B:22:28:EC:68:54:55:25:9C:61
X509v3 Authority Key Identifier:
keyid:0F:78:EA:46:CC:21:D4:5E:D6:12:68:D4:A9:F5:67:32:C8:5E:21:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:13:ea:6f:e0:0d:e2:76:3a:ec:d6:dd:ac:d0:b2:32:1e:a8:
64:ac:ac:e4:96:68:9d:7d:95:7b:bd:a8:a7:23:f3:23:20:20:
13:61:ad:6a:9b:eb:71:52:24:34:cb:6d:6d:0c:3f:4d:51:96:
ac:e9:45:a8:69:ff:11:2c:3b:6f:86:3e:f3:bc:c5:cd:bc:94:
c3:00:fe:18:5b:4d:0a:4a:82:45:f2:f6:06:33:23:53:9f:0b:
04:89:82:d1:67:26:a1:22:b0:99:43:ab:8a:da:2d:22:d0:ac:
d0:7e:41:66:b7:0a:f3:20:b9:df:19:83:5c:81:b5:1b:5c:20:
fa:74:c8:67:84:a9:ee:64:ae:84:09:c2:2d:8a:82:f6:ac:d4:
28:0a:09:0d:ae:8b:e9:8b:99:40:a9:b3:f3:2f:56:ab:72:69:
fc:da:31:c7:45:11:d1:90:f8:99:c0:bf:5d:4f:c9:9b:6f:08:
3f:21:1e:e8:6f:24:97:a6:18:ee:57:3f:af:3e:93:36:37:f2:
79:a9:20:28:cc:32:ea:b4:6f:7c:ce:73:db:15:38:fb:ca:67:
0f:95:92:d6:ba:47:44:f3:24:85:d3:7e:a3:06:bb:3e:4d:74:
44:c6:10:66:84:4e:9a:03:39:03:f7:55:a6:16:da:aa:00:c7:
7a:12:8c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:44:50 2025 by rpki-client