Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
File: edQ3WEq9tIITYw3KpfAMnSw8wXk.mft (raw, json)
Hash identifier: psHqtjO5yjDEhsh7t4ERI1RdF0o2X0z3AbjdcITjXic=
Subject key identifier: 89:66:D2:F9:D1:12:38:09:5A:5E:AE:F7:CE:60:31:13:0E:34:EB:34
Authority key identifier: 79:D4:37:58:4A:BD:B4:82:13:63:0D:CA:A5:F0:0C:9D:2C:3C:C1:79
Certificate issuer: /CN=79d437584abdb48213630dcaa5f00c9d2c3cc179
Certificate serial: 0194BC3C98565389DA6551ED65CBE40F5035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
Manifest number: 0ED9
Signing time: Fri 31 Jan 2025 12:01:15 +0000
Manifest this update: Fri 31 Jan 2025 12:01:15 +0000
Manifest next update: Sat 01 Feb 2025 12:01:15 +0000
Files and hashes: 1: _6bJkuzxLJMC8zZKQrB-nCnecco.roa (hash: GqXUAXRZkYfH9YlSLUwHS7QBNR7+ywl2PUwYOYs72Io=)
2: edQ3WEq9tIITYw3KpfAMnSw8wXk.crl (hash: o/wfkTzFWN1QFRtwYWVaSJJ6ypVIU2ANQD7qvprOZR4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:98:56:53:89:da:65:51:ed:65:cb:e4:0f:50:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d437584abdb48213630dcaa5f00c9d2c3cc179
Validity
Not Before: Jan 31 12:01:15 2025 GMT
Not After : Feb 1 12:01:15 2025 GMT
Subject: CN=8966d2f9d11238095a5eaef7ce6031130e34eb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a8:72:29:94:cb:93:3b:de:2a:1a:29:a5:d4:
66:cc:91:dd:b7:67:b5:83:8a:5a:03:05:b6:07:2b:
b4:ef:39:f2:cf:ab:81:b7:c1:9d:eb:d0:e8:f2:03:
f0:17:b6:69:d4:1e:bd:10:b0:cb:f6:e7:e6:ce:d3:
1a:73:9d:98:4f:7a:2f:e5:3d:cc:70:23:c1:ce:8e:
a0:35:29:fc:d8:4f:64:e5:93:bf:6f:84:1c:87:94:
d2:c3:54:07:d2:5b:fd:40:c7:58:e2:a2:ad:a0:37:
61:16:1e:68:3a:72:67:09:17:be:2d:fd:95:71:c4:
3f:d1:28:02:10:72:08:9d:00:e0:1e:7a:37:45:1d:
0f:ec:92:8f:27:79:90:74:e6:d6:2b:62:73:fe:8b:
d3:1f:7e:48:d2:50:e8:8e:ac:34:b7:82:ac:75:68:
e0:ce:88:17:56:0c:c5:a4:9a:e0:91:1f:91:a6:a7:
f2:80:c5:c6:e9:32:6a:a7:4c:70:9a:11:f0:57:f8:
8e:97:f5:3a:fd:6c:68:10:f1:14:fe:1e:aa:f2:b7:
06:ad:6b:c2:0c:ae:5e:7e:4b:8a:34:92:6d:79:19:
4f:a4:db:74:ea:5e:d1:92:b1:e0:7e:07:29:b7:fd:
1e:90:ba:fe:ac:64:df:f9:25:20:f4:cf:61:3d:b6:
50:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:66:D2:F9:D1:12:38:09:5A:5E:AE:F7:CE:60:31:13:0E:34:EB:34
X509v3 Authority Key Identifier:
keyid:79:D4:37:58:4A:BD:B4:82:13:63:0D:CA:A5:F0:0C:9D:2C:3C:C1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:30:fc:c5:c3:ce:40:a2:d0:ca:41:10:ab:3c:9e:17:de:50:
84:d6:0c:e9:e7:67:0d:60:a4:a7:3f:f8:df:31:3d:b5:3e:61:
56:92:61:0d:b1:92:bb:7c:55:52:d5:79:ec:42:d5:83:6a:62:
32:3a:67:88:da:25:b3:47:9b:cf:bd:27:4e:46:b3:b2:67:8f:
a9:41:67:35:da:5f:c9:46:dc:0f:31:0f:db:45:58:50:01:64:
65:65:60:9d:47:ce:6c:bd:f4:9c:cd:88:c4:22:ae:39:e5:90:
fb:0e:76:72:c4:84:45:51:d8:ee:ac:cc:db:0b:91:5b:7d:b4:
69:a8:bd:6e:7f:0b:38:6e:f7:60:4f:02:fa:24:91:e1:9e:ea:
1c:9d:8f:9a:f4:34:54:17:84:3c:fa:34:a4:87:0f:18:85:48:
59:8c:2e:40:2c:d1:c1:32:17:19:a6:4e:07:c5:3a:2e:9f:93:
83:76:e9:4c:ef:4c:bb:45:fb:50:22:33:2c:9f:ec:a1:ab:d2:
cb:1e:08:c3:06:26:6b:14:52:59:00:5e:96:97:cc:48:91:94:
5e:d4:e2:26:78:98:e1:08:2f:e9:30:6d:e8:a4:7b:6b:54:33:
f4:84:10:ca:1e:bf:51:22:c7:d9:67:f3:cd:96:3b:7b:23:7f:
36:dc:af:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:36:45 2025 by rpki-client