Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
File: 3HbS9D7BffyAXNsF8AChV5ie1Eg.mft (raw, json)
Hash identifier: qUHjT9tvZ2bxBu3xEZ44XHCIK6QMjAWf731UBFmYdBc=
Subject key identifier: EA:4C:81:77:A1:35:27:22:84:E0:B3:F8:86:1F:26:60:1F:95:1C:B6
Authority key identifier: DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
Certificate issuer: /CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Certificate serial: 0194BD4EA61001A69F24C97F1EE6FEA581B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
Manifest number: 13BF
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: 3HbS9D7BffyAXNsF8AChV5ie1Eg.crl (hash: zFJOGkIGxpamtnwU2Y99+P8YwSrffti13wjraUk+Y6Q=)
2: vMasAu2YCDgiGttPAAgT_LUqims.roa (hash: vZV6QUfnrQuKBHkkqaJTtSdtOrcdYKhNNa/gcjcEoTQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a6:10:01:a6:9f:24:c9:7f:1e:e6:fe:a5:81:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=ea4c8177a135272284e0b3f8861f26601f951cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:9d:f3:6a:1e:f0:7d:ba:ba:2f:b4:b9:85:
ac:07:82:b9:02:08:a7:6b:04:37:b3:d7:69:e2:97:
0e:0e:40:b2:e5:da:1f:5f:8a:b9:13:0b:00:dc:a2:
9f:7d:62:cf:f6:f5:4a:2b:a7:49:47:61:e7:f1:69:
1c:fc:11:f2:a3:b5:1e:2c:2a:ef:a6:29:01:03:2d:
3a:74:f6:32:c3:b3:1a:47:40:68:eb:41:6f:7e:8b:
72:64:91:50:36:ee:09:54:80:c2:08:1d:82:f2:b2:
f8:80:66:cf:2c:d0:f6:3d:24:ab:fd:94:a2:14:b5:
f0:ee:b5:67:52:5d:5b:56:cc:dc:2c:61:fd:a2:49:
25:e3:5e:1a:28:c4:19:40:bc:13:bf:85:bf:ac:a0:
f2:d6:11:69:fc:a7:43:68:6c:bb:c8:5e:d0:cd:9d:
3f:0b:f2:dd:30:22:67:d5:5a:a6:f0:05:98:ef:26:
2d:da:95:83:15:79:27:36:08:b1:a0:e6:f8:ff:fa:
ee:9e:6f:9d:20:fb:4f:45:7c:72:68:2b:07:d1:30:
04:80:be:0c:06:3a:9c:72:1e:0c:7c:eb:51:da:5c:
d9:c0:5e:59:9d:a2:2a:ca:99:fa:ea:ba:19:c2:bb:
39:78:3f:67:e3:7a:1e:3f:e2:f8:b9:6b:a7:a0:a1:
55:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4C:81:77:A1:35:27:22:84:E0:B3:F8:86:1F:26:60:1F:95:1C:B6
X509v3 Authority Key Identifier:
keyid:DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:68:be:37:12:6c:29:60:db:63:a6:09:51:fa:83:f0:af:91:
db:ea:24:c6:25:fb:bf:73:7e:3b:11:70:72:70:fa:5f:c4:ad:
61:6e:2d:04:d7:71:65:d1:0a:b4:28:68:4a:43:69:18:3b:43:
ca:a0:6b:e5:af:f7:65:79:28:02:1f:5f:a2:99:e7:53:09:3a:
21:c7:20:bf:48:02:41:84:72:4e:4b:5d:7c:9f:f6:7c:ac:db:
a8:c5:10:cd:3c:a1:f5:c7:46:a9:91:42:36:46:1f:f7:49:7b:
cb:b9:0e:f3:fc:3a:31:ce:40:85:31:cf:d2:9b:c3:f9:aa:1d:
91:65:ce:74:40:65:57:3e:b9:76:07:39:e2:2b:29:24:8c:6e:
d0:6d:05:b9:36:62:d9:47:51:c8:9b:06:40:be:a6:43:db:69:
ca:aa:e9:b7:79:61:a0:c4:af:56:22:d0:26:c4:4b:85:f9:fe:
39:f7:af:94:fb:79:a9:16:54:4c:be:a2:60:6e:81:1e:f1:e6:
83:6f:c5:3e:2b:8c:af:a0:00:6e:0c:6b:6d:4c:af:64:da:6f:
ed:0c:86:08:50:35:50:c6:4c:67:32:b0:c6:dd:8a:c7:03:5a:
9b:ba:e0:fa:de:d7:22:05:a0:e6:ee:c3:3a:b4:7c:ee:2e:31:
89:1e:6f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:18 2025 by rpki-client