Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
File: 3tsgAwkB_y3069H0nkiRyyj-BzA.mft (raw, json)
Hash identifier: GNJfIN2jmpZRZuvvejEBdhk5pQJn9VdmWBnxonn0GFM=
Subject key identifier: AC:5B:7E:3B:09:67:67:D2:24:20:EB:34:0D:19:C6:9A:80:22:F7:2B
Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Certificate issuer: /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Certificate serial: 0194BD8591F9ED0F87D5AAD470793E713550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: 3tsgAwkB_y3069H0nkiRyyj-BzA.crl (hash: BwuEuayDHRXRfLDPUmYehZVG0lvZFteOsiXrBqFwVCY=)
2: ZJCu1yU9m3Cq5WWLkeWOotibU-k.roa (hash: km1a7hNobV+/Bq/2l3UQLOxoqTuuQQAxWKpbP+WCwQ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:91:f9:ed:0f:87:d5:aa:d4:70:79:3e:71:35:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=ac5b7e3b096767d22420eb340d19c69a8022f72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:e8:ea:d1:f7:fb:a2:c3:d3:62:6b:ca:96:
62:b3:bd:9a:83:2d:d9:ed:0f:10:fe:ab:da:10:9b:
2a:ea:6a:54:15:fb:c9:10:75:c5:07:a8:66:b0:93:
7f:58:49:40:3a:00:96:33:cf:15:2a:c4:f5:02:da:
04:7b:8a:cb:6d:0b:d0:40:84:ae:80:93:a0:98:b8:
25:58:4e:f0:46:05:2a:d6:b5:ac:1b:10:32:5b:17:
d3:15:22:72:17:8f:7a:73:7c:ad:8f:04:cd:06:88:
d9:20:e8:8f:02:5d:37:39:3f:01:0f:51:17:33:13:
b6:bd:6d:2f:12:f1:1b:86:89:d2:63:f6:14:f1:5e:
f2:3a:26:fa:e7:09:5a:0e:6b:32:a6:be:a3:8f:0e:
64:38:d6:c1:f5:80:4a:76:29:32:00:4e:0e:ea:4d:
04:3b:72:79:10:38:a6:93:a0:71:4d:f3:87:61:07:
72:62:72:2b:31:8e:e3:96:5e:65:8f:f1:66:44:a8:
7b:0f:8c:fc:7a:25:a1:32:92:5d:34:40:d4:22:dd:
71:ad:cb:ea:3e:1a:7c:13:09:01:c1:f8:4e:e3:ce:
df:b8:da:19:24:11:2e:99:db:95:9d:c6:56:86:24:
79:6c:ea:7a:ec:ec:b1:cc:ae:80:2a:32:63:35:20:
f7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5B:7E:3B:09:67:67:D2:24:20:EB:34:0D:19:C6:9A:80:22:F7:2B
X509v3 Authority Key Identifier:
keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:be:79:a9:9b:28:b1:b1:4e:f6:15:66:16:c8:fd:a0:b8:33:
69:c9:b8:53:3e:62:0d:5f:a7:bd:26:e5:90:c9:bb:37:96:e3:
0d:0e:18:24:59:ed:bc:c9:47:05:00:53:35:87:e8:b0:f6:b8:
2f:7f:d1:d3:7c:b1:6d:3f:89:27:1c:b3:5a:c9:7c:9d:b5:56:
2f:71:2a:72:20:43:8d:3c:80:09:41:07:10:f9:2a:a2:bc:04:
a8:09:f5:2d:6f:1b:ac:fc:5a:2f:c3:9f:11:1e:7c:87:48:15:
d2:1a:b8:8e:df:9f:ae:91:8c:2e:0d:2b:05:93:10:1e:ee:98:
89:31:a8:cc:7c:be:d7:e3:ce:dc:28:3d:60:26:4a:e9:0e:72:
c3:3a:fd:7a:9b:98:1c:93:7b:b3:6c:17:e6:ac:a9:26:a7:85:
a7:1c:31:96:d4:b4:60:fe:f7:e4:ad:56:ee:fa:d1:42:0a:b6:
52:fc:b1:b3:0f:5c:52:fc:9b:6b:83:fe:a9:9f:de:5f:03:91:
73:6c:69:05:3c:60:29:a4:a2:ce:0b:71:7a:09:93:d7:23:0a:
1d:19:9f:13:8c:cc:14:25:cf:35:bb:5f:5a:ed:95:4a:c8:f6:
1d:1f:38:d0:79:09:56:d2:5f:f3:bb:9a:30:dc:33:3a:46:99:
a6:93:29:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:36:05 2025 by rpki-client