Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
File: x3FxpeRVBshskBa75bFLPbi8bMM.mft (raw, json)
Hash identifier: 3ArCgwA652OSFhfLzugDcVxzOQ9BA2ag3LElXRXA7Uo=
Subject key identifier: 81:19:27:C7:D2:C2:4B:E3:89:60:42:DE:12:C7:C3:74:5C:C0:C1:A5
Authority key identifier: C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
Certificate issuer: /CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Certificate serial: 0194BBCE60B1665187989920A099A972C007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:52 +0000
Manifest this update: Fri 31 Jan 2025 10:00:52 +0000
Manifest next update: Sat 01 Feb 2025 10:00:52 +0000
Files and hashes: 1: iMH-2vRf9YeMGRgtztJPUn14aQA.roa (hash: 76FrL/HDDuxO7pj6zl8q4Zgif4vNwjOmJyQV7tycvQk=)
2: x3FxpeRVBshskBa75bFLPbi8bMM.crl (hash: mLITaKh7+xuw+aKtF8ymowRUcZnTVkJD9FW5bAgeock=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:60:b1:66:51:87:98:99:20:a0:99:a9:72:c0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Validity
Not Before: Jan 31 10:00:52 2025 GMT
Not After : Feb 1 10:00:52 2025 GMT
Subject: CN=811927c7d2c24be3896042de12c7c3745cc0c1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:61:04:d1:e2:d3:3d:4f:49:0a:54:47:1d:ae:
e8:91:b1:74:ff:4c:db:48:68:95:90:28:9d:c7:6c:
e5:67:93:2b:b4:f5:08:97:6f:1f:f0:d0:34:b9:b0:
6d:71:9c:0d:0c:a9:5d:d8:55:22:cb:b5:08:fd:59:
6b:50:48:0c:37:e3:3c:53:8c:9b:df:f0:50:88:e5:
9f:63:02:4b:48:08:6e:a0:15:e5:8d:4d:15:d4:fa:
9e:2b:bf:30:ad:8c:e5:b6:7c:c3:49:c5:c1:f7:ce:
d1:92:d3:b2:a4:05:8d:5b:aa:15:11:b8:00:e3:70:
4d:af:9c:5b:9e:66:20:7f:76:43:c5:60:aa:62:e0:
9c:37:38:01:42:6e:f9:4c:70:b5:a4:02:80:29:f7:
81:3b:d2:69:3a:78:29:90:48:10:1b:4c:94:a6:96:
be:0a:0b:59:8a:c4:e0:29:e3:7b:7f:80:3f:9b:10:
cc:86:ba:b0:c3:27:92:54:60:d2:f5:fd:29:cf:2b:
de:38:80:c1:0b:d3:82:c5:cb:87:46:01:ca:84:91:
58:ea:b6:e9:c5:5f:f2:ac:7d:04:88:e1:a2:70:32:
f2:de:52:95:98:cc:03:a6:bd:5a:a2:ba:16:b2:49:
a5:7a:a5:8b:9d:05:37:24:24:01:f9:a0:2c:22:e9:
1a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:19:27:C7:D2:C2:4B:E3:89:60:42:DE:12:C7:C3:74:5C:C0:C1:A5
X509v3 Authority Key Identifier:
keyid:C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:70:f7:d8:b2:ed:a3:8d:b9:ec:11:8e:a6:04:b3:13:22:dd:
85:53:0a:e0:b5:2f:c2:a3:02:cc:f5:fd:6e:af:71:ee:6c:80:
5a:05:0a:53:64:9e:5a:46:42:a2:9e:ac:70:53:de:58:c6:04:
6e:4e:98:21:f8:99:3f:0a:4d:66:19:e0:55:84:19:99:f7:8a:
a7:b2:ab:1b:d6:d9:45:cd:e4:c3:c3:6a:52:bb:69:38:7b:13:
53:d7:d5:65:be:90:a1:40:53:09:3c:17:cb:b3:32:79:55:c1:
44:69:e7:c9:ad:ab:9f:92:72:51:a8:b8:7f:31:7c:8f:e8:11:
42:b6:d4:63:c4:1a:4a:36:04:3d:7b:4d:46:19:2d:4b:c7:97:
d4:80:82:9a:19:9b:30:da:fd:fb:84:c0:37:0d:7e:0e:5d:0c:
f2:e5:d0:2a:9a:dc:28:a7:0d:2f:76:a1:89:fd:3e:01:1b:82:
d6:4e:98:18:98:db:e7:9e:0d:10:c5:ac:2a:45:73:14:8e:49:
a8:10:21:91:9e:3a:c1:43:42:c9:39:55:c3:39:b3:eb:fa:9a:
b4:15:92:8b:5b:fd:92:39:f5:d1:e2:56:e5:c7:33:49:a0:d3:
00:fd:3a:40:fd:29:ed:b3:74:25:85:a6:ba:9b:1a:55:24:bf:
ce:c2:d7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:37 2025 by rpki-client