Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
File: s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft (raw, json)
Hash identifier: dynGdrOOH+Bq5l7BJbvln5G4axoVBR7no4xiDCa3sw0=
Subject key identifier: 7B:39:DA:2D:DA:55:B5:DC:74:ED:1F:01:A0:34:B6:9F:99:C7:A7:9B
Authority key identifier: B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
Certificate issuer: /CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Certificate serial: 0194BC04D5532DADD43848F949CC10B59EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: 1Z0qsk9StCFAQktZcYQaKAQv6Eo.roa (hash: 7ZoC6UA8RmSyn6UoUQLfpDC2951iCi7ws/lgZfO/s3U=)
2: s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl (hash: WkPGg3BCjAwNz7opQ5gu/AsA/i1y692L7MVSLGPhf9o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d5:53:2d:ad:d4:38:48:f9:49:cc:10:b5:9e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=7b39da2dda55b5dc74ed1f01a034b69f99c7a79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c0:cf:a1:e0:54:cb:35:74:45:f4:67:d1:0c:
8e:83:01:2f:95:f2:aa:bb:97:9b:73:1a:83:2f:4c:
2b:47:45:e3:67:0b:b1:51:e3:49:25:ee:79:13:d4:
d1:84:7a:f5:94:4e:ae:82:0c:6a:e6:36:08:77:4b:
69:05:2c:2e:50:dc:53:1b:55:f3:c7:76:cf:09:b8:
64:4b:65:99:7f:2d:53:1e:81:d8:59:0b:8b:b4:6c:
bc:a2:f4:da:fb:b4:5a:4d:88:d7:d8:b2:30:d0:18:
99:45:7f:95:ea:d9:66:ab:f8:f6:1f:2a:e1:3a:dd:
eb:03:96:73:f9:49:8d:f2:c7:48:c8:60:d7:62:33:
ba:41:09:85:ac:96:88:6e:21:8e:4f:d2:fb:2f:a7:
62:e4:61:af:24:64:fa:fb:a3:64:49:3c:e8:88:c5:
32:5c:70:33:87:7e:f9:53:a2:fb:c5:7d:45:38:bd:
b3:ba:c6:0f:87:60:42:c5:94:29:43:25:d0:98:8d:
9e:af:5d:f1:9a:70:be:64:0c:70:32:98:27:a0:f4:
8e:14:c5:a7:b8:c5:85:4c:85:7f:3a:29:bf:c4:f6:
bb:fa:9b:83:2d:37:4e:b1:a0:2d:45:a2:76:62:42:
5c:48:89:27:89:d5:6a:88:58:55:0a:d5:ff:64:28:
52:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:39:DA:2D:DA:55:B5:DC:74:ED:1F:01:A0:34:B6:9F:99:C7:A7:9B
X509v3 Authority Key Identifier:
keyid:B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:bc:46:d4:01:e5:f7:8e:f2:71:82:e2:f9:b6:bc:86:99:66:
29:c7:e9:4f:d2:42:16:0a:00:3c:60:3d:c5:5b:ef:23:90:dc:
59:67:df:90:79:9e:2d:59:8f:be:89:c9:59:0e:f3:35:39:39:
4e:b9:f2:4a:3e:eb:28:e9:c9:e3:b8:01:83:8d:db:a9:ac:62:
35:9a:2a:89:e6:b6:80:0e:14:10:85:5c:cc:66:8f:a0:97:5f:
d0:b7:e8:2c:0b:6c:67:94:c4:42:cd:e0:ba:72:18:e6:14:bc:
cb:b9:e3:a4:ea:05:ea:b9:3e:1b:b6:d5:eb:17:ba:39:0d:f6:
f4:0d:e4:8d:e1:a2:63:24:2a:fc:8d:49:a7:47:b5:c8:0b:72:
dc:7f:0a:68:05:89:44:a5:c2:ab:71:38:c4:b6:e1:21:0f:b9:
eb:8b:b5:69:32:4a:92:f9:e4:d8:9f:0c:c8:2d:8d:fc:7b:12:
ed:f4:f2:89:28:a6:85:09:2a:67:7c:33:ee:be:a7:0e:14:5e:
78:32:2e:73:11:93:de:36:a5:dd:5c:7b:92:03:cc:d6:9b:bd:
66:34:17:95:e0:9e:bf:70:20:d6:b3:0d:f7:df:ac:d6:14:b2:
54:4b:2b:db:98:d7:49:e4:04:e1:24:e1:31:be:c0:f8:57:3c:
9a:43:27:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:16:46 2025 by rpki-client