Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
File: x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft (raw, json)
Hash identifier: xqIrj0pjmyObYREnQprOeTRfsk5jeNH68WhzU4WoFdI=
Subject key identifier: 68:3F:0A:0B:D1:89:2B:5C:F5:2A:55:87:3E:4B:DB:A0:57:62:B5:8B
Authority key identifier: C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
Certificate issuer: /CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Certificate serial: 0194BC3BDD74DA454F8809F265F286EDDE9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
Manifest number: 0462
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl (hash: EV1NdQBqPMKYspZ3yh87dXEA2+nE5lL+lVwms9Ux/IU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:dd:74:da:45:4f:88:09:f2:65:f2:86:ed:de:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=683f0a0bd1892b5cf52a55873e4bdba05762b58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:5e:86:e7:d4:a2:0f:61:ed:61:f6:82:35:9f:
52:79:28:4e:49:d6:c4:8b:b2:4b:a6:8f:db:8b:0c:
f6:38:32:14:b4:72:b0:4e:cf:ed:8d:b2:4c:f3:d5:
55:c2:24:9c:69:63:3a:82:3d:cb:7d:cd:1e:84:fa:
4e:a4:78:43:24:ba:ca:4d:d9:12:40:af:5c:d2:46:
b8:a3:e9:e9:e6:3a:7d:a9:47:48:42:48:09:98:3c:
eb:3d:1c:11:0d:1f:b8:68:92:84:57:97:5e:81:b3:
bd:ed:2b:4f:00:26:5d:37:86:3f:7d:8d:71:50:c8:
6c:94:a3:59:42:8c:66:58:b0:0c:bb:c8:97:8f:2c:
fd:14:d7:fd:8e:0b:a5:cd:20:78:6b:c4:fd:50:92:
e9:ad:0a:bc:c6:0e:14:99:28:96:2e:9b:3d:ef:b5:
11:4c:dd:1c:55:4d:fe:e8:5e:0c:fd:4e:90:09:a4:
fc:4d:a1:53:f8:82:60:78:fe:3c:ee:f0:2f:47:f3:
b3:23:f9:7d:0b:ff:2a:17:93:67:5f:b4:46:0a:6f:
6f:59:c0:db:28:0e:eb:5f:e5:72:bb:0f:f8:4f:e7:
a3:3c:f9:f4:a7:91:44:63:c8:1a:06:91:d2:17:70:
fe:96:55:3e:c1:36:00:46:57:2f:4c:50:d7:3b:85:
c7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3F:0A:0B:D1:89:2B:5C:F5:2A:55:87:3E:4B:DB:A0:57:62:B5:8B
X509v3 Authority Key Identifier:
keyid:C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d4:eb:1e:60:3a:4e:fe:f4:61:43:1e:55:48:3f:bd:70:7e:
9d:83:26:b9:05:4a:3a:a7:09:74:3b:4b:0e:07:4d:b2:29:22:
c3:70:72:88:4d:54:10:6f:b3:c3:33:1a:9b:fc:65:57:20:11:
7c:eb:8e:3a:5d:d9:f8:e4:7b:79:9c:a4:6c:c2:30:aa:97:cc:
b8:40:8e:35:52:77:02:78:1d:50:9b:66:07:ad:10:cf:65:46:
6b:a9:2b:fc:6e:f6:13:5a:38:ec:46:90:6a:60:94:30:15:2d:
c4:e1:fd:2a:4c:c2:36:95:09:af:69:f3:f1:81:d9:55:31:fb:
8c:ee:c0:ed:60:98:26:a3:3f:da:ce:b4:c2:25:89:64:e6:cb:
51:7b:11:11:fd:6a:38:da:13:b8:ca:65:7a:bb:09:44:89:38:
29:ab:54:2b:63:d8:60:a4:d7:29:a5:30:e5:e2:d8:3e:dd:c7:
37:88:4f:32:2b:9e:d1:1b:25:bb:81:93:67:86:73:99:04:98:
13:33:90:eb:15:06:b0:7b:52:3a:d6:f6:66:96:8a:43:c8:7c:
68:ab:bb:27:7f:b7:e0:62:e6:aa:13:b7:60:f8:1c:c7:5e:3b:
79:f1:e7:f5:f9:79:f8:fe:16:eb:b6:6b:7c:cc:a9:b5:a8:56:
91:2e:2f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:49 2025 by rpki-client