Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
File: 32QSxd3xKOxxSvrqSD6Hsbx01B8.mft (raw, json)
Hash identifier: Q+d3V5+A3GmjgUzQKUOcVpKKIbcQdjhrLEUKai1UhWk=
Subject key identifier: 76:4A:2B:B0:4A:72:B0:8C:A6:5F:5C:B9:F2:C7:B0:99:0F:BD:5C:23
Authority key identifier: DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
Certificate issuer: /CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Certificate serial: 0194BBCE13B06038989EF066A3AAD8CEF631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
Manifest number: 02E3
Signing time: Fri 31 Jan 2025 10:00:32 +0000
Manifest this update: Fri 31 Jan 2025 10:00:32 +0000
Manifest next update: Sat 01 Feb 2025 10:00:32 +0000
Files and hashes: 1: 32QSxd3xKOxxSvrqSD6Hsbx01B8.crl (hash: ibQwq4/Cda4RiSdndi4/+OJUWLVmjv51cyPJRsMBEfQ=)
2: NldJhq1MAVdUgbD6n6XKOd_rYuI.roa (hash: nicnFQBAIXmcU10eabjaRC66nw/nEzjS6x4xuq2azqI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:13:b0:60:38:98:9e:f0:66:a3:aa:d8:ce:f6:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Validity
Not Before: Jan 31 10:00:32 2025 GMT
Not After : Feb 1 10:00:32 2025 GMT
Subject: CN=764a2bb04a72b08ca65f5cb9f2c7b0990fbd5c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d2:64:0c:18:f9:69:2d:69:ae:40:65:63:48:
b1:38:88:9d:76:3c:c7:04:df:cd:a7:7e:0c:fe:5f:
c2:54:d4:3b:74:9c:8e:4f:05:80:cf:93:a9:52:e3:
10:6e:89:43:dd:54:21:1b:b9:cc:42:6c:0a:6d:04:
1e:4b:ed:53:0e:29:9c:53:21:46:55:05:92:96:63:
ac:6c:e1:56:4a:5c:ed:b7:6b:38:9d:6e:df:03:e9:
9c:99:82:11:c5:ce:d5:a5:36:62:a3:b4:92:ea:44:
97:fb:52:2c:0b:f0:b1:c3:b9:ca:4d:e5:ce:58:e9:
c4:ed:d8:3d:fc:74:83:ba:e5:13:21:f2:0c:ca:da:
bb:84:b3:87:db:f3:e8:bb:0a:a4:44:be:39:24:16:
f4:79:27:a1:e1:b1:48:cb:a0:96:af:7f:dc:0d:3c:
52:ec:f8:36:71:3d:a4:3a:02:26:3c:e8:09:4b:b4:
a4:f6:a4:03:91:6a:e7:6e:e1:de:54:ae:fd:14:2d:
f2:99:ad:8f:79:75:3d:a0:37:9b:53:6b:6a:7d:e6:
7b:ba:0d:de:b5:b7:94:bb:83:4e:56:42:36:73:85:
ac:43:1e:39:75:ed:fd:80:07:89:af:e7:87:6c:d7:
54:e1:4a:60:05:d1:64:3a:f4:50:04:d2:6e:48:1c:
a8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4A:2B:B0:4A:72:B0:8C:A6:5F:5C:B9:F2:C7:B0:99:0F:BD:5C:23
X509v3 Authority Key Identifier:
keyid:DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:1c:37:b0:43:64:9e:54:32:9b:85:ee:aa:32:75:f7:86:6c:
ae:cc:ee:8a:01:c5:04:5a:93:0d:8b:84:5a:60:88:4b:8a:21:
38:5f:65:49:1a:7b:9f:2f:aa:2b:8e:5c:21:2c:14:72:ec:1a:
53:10:3c:3a:86:06:12:ae:ef:df:f0:d7:3e:d2:58:5b:46:3e:
4b:df:10:8e:58:28:c5:0a:d0:93:77:d6:71:f7:37:35:2d:2b:
77:86:ea:20:56:58:cc:81:b4:71:16:a9:bb:39:11:67:c1:55:
3f:36:6b:25:76:43:2a:93:b7:31:d9:52:db:6d:2e:e5:fe:c3:
92:ac:46:a3:7c:3e:07:92:ee:c5:02:16:6e:04:94:0f:ef:cf:
0f:72:d8:96:8e:5f:e2:76:62:82:e0:d9:24:2c:aa:fe:2a:90:
18:83:16:d3:45:40:bf:ab:ec:12:bb:d6:32:69:a4:b0:16:5e:
bb:7a:3d:91:47:39:3f:6d:ec:76:ba:14:de:aa:43:99:e8:1c:
c0:ad:ab:07:63:22:99:a9:ef:19:1c:b9:86:bb:42:e0:07:20:
78:68:62:fd:83:cd:b3:f7:78:db:15:d4:74:1f:72:9d:5a:69:
f5:fd:82:45:87:ac:ae:e9:65:c4:ed:95:c5:c7:c2:1a:59:3c:
f8:1c:be:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:04:21 2025 by rpki-client