Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
File: 3gr32Dxe6w1DStdTxqX0dUlpizc.mft (raw, json)
Hash identifier: RQUYeVzR2jgUlOy9yDb3V98eFzntdIQCmCWE6qoejs8=
Subject key identifier: FC:79:FB:01:5B:DC:5E:CB:18:1E:53:8C:7B:81:15:29:DC:71:DA:3C
Authority key identifier: DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37
Certificate issuer: /CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37
Certificate serial: 0194BC04BCBF774731ACA0E43ED09FE334C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: 3gr32Dxe6w1DStdTxqX0dUlpizc.crl (hash: 8j2omGOxy9ZxaU7eC6pd5IwmK5eLxrIkxF7trZSFgMA=)
2: Aqgmt-0kmHhTxI4TNwO6CqQUAvI.roa (hash: OT3qKlUhR0guc2qzeYETLZJZRi9SFdXOekAamRFDQh0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bc:bf:77:47:31:ac:a0:e4:3e:d0:9f:e3:34:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=fc79fb015bdc5ecb181e538c7b811529dc71da3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1a:1a:81:6f:58:f7:e7:e1:68:f1:03:0b:17:
72:e3:db:34:d7:f8:d4:cd:6c:4d:85:4f:93:b8:95:
23:7d:87:59:76:b0:be:3b:bd:1c:b7:cf:13:f1:11:
80:8b:f9:ac:a4:5d:ae:d3:14:ee:a8:7e:62:03:25:
b7:0f:d1:98:78:91:bf:5f:c0:31:05:80:ba:c9:03:
9f:88:e7:09:5c:79:ba:1a:41:4f:6e:44:9e:dc:bc:
f7:76:b9:a4:c9:1d:5d:7f:b3:e4:c3:e4:c3:d1:f0:
f3:4b:73:79:73:53:3c:86:d5:8d:4f:60:06:4c:20:
b8:8b:1e:a5:a5:9a:b8:b3:1b:0d:2e:bf:0b:c4:03:
a4:7a:00:ec:81:f8:8a:d1:19:ec:ed:10:82:d5:b9:
66:33:be:f8:b1:aa:ca:b1:d0:c5:35:77:d5:50:54:
fb:6a:31:2e:a6:83:37:fb:e1:a8:47:8c:2a:50:ab:
22:c7:49:11:b0:de:92:c9:4c:3c:61:83:aa:cd:b0:
a0:9c:89:15:64:4d:ea:3b:d0:6e:fb:70:51:79:1d:
2b:a5:a6:69:51:8b:65:d3:d6:e2:13:99:65:44:4a:
2b:7f:53:36:4e:96:90:43:5c:69:16:e0:32:14:dc:
22:19:a0:6d:d8:e1:f1:6e:cf:24:cb:c9:03:78:99:
69:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:79:FB:01:5B:DC:5E:CB:18:1E:53:8C:7B:81:15:29:DC:71:DA:3C
X509v3 Authority Key Identifier:
keyid:DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:e6:80:5b:95:58:71:af:fa:4f:05:08:91:76:43:86:5a:84:
90:70:98:c2:66:20:58:b7:94:d4:7a:67:82:04:51:cf:85:85:
6d:6c:aa:4a:be:16:41:47:70:43:6a:4b:09:26:8b:a3:af:c7:
f6:51:a4:26:38:cb:ca:4c:c1:18:6c:40:34:6b:46:9d:84:a1:
28:0c:df:c6:17:5c:9d:dd:e9:99:84:98:9b:76:41:c7:08:5d:
3b:bc:70:82:d0:da:14:a4:19:a7:bd:c8:c8:18:40:39:a8:6b:
b1:0f:b6:0b:6b:80:81:4f:cc:10:3c:64:34:2f:cc:85:c7:fe:
10:04:1c:4b:1e:fb:76:7e:8f:58:de:e8:f4:1f:9d:1a:af:63:
ac:f2:3c:ec:13:4b:ab:75:75:dc:6d:26:23:d4:c1:19:ed:85:
09:70:96:d2:f2:16:36:e7:73:50:8d:b2:28:c7:e3:02:d0:f0:
be:4d:07:e3:e0:e6:3a:c0:1f:93:67:80:d2:c0:36:a7:cc:74:
22:23:be:5b:9e:11:13:94:53:80:16:1e:09:ca:ed:8b:10:22:
5d:8d:88:04:8e:6e:e6:00:0d:cf:f4:5b:89:4e:9f:30:bb:bc:
d9:62:e9:18:ac:74:da:a7:62:6a:14:e0:6c:e5:b3:c8:fc:12:
ba:d7:e6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:46 2025 by rpki-client