Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft
File: d_bMQsdY59p8S_q8ISEtHSghYDE.mft (raw, json)
Hash identifier: HZDm9hV7i7fqxIcC7U9emylFn5GFeiZQYPUSZT2qcc8=
Subject key identifier: FE:7B:72:6B:4C:E8:04:61:82:86:7D:5F:B5:EA:28:91:83:46:0A:A1
Authority key identifier: 77:F6:CC:42:C7:58:E7:DA:7C:4B:FA:BC:21:21:2D:1D:28:21:60:31
Certificate issuer: /CN=77f6cc42c758e7da7c4bfabc21212d1d28216031
Certificate serial: 0194BC3C6BE095DCE0BCF4E917874FA5D3E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_bMQsdY59p8S_q8ISEtHSghYDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft
Manifest number: 03F3
Signing time: Fri 31 Jan 2025 12:01:03 +0000
Manifest this update: Fri 31 Jan 2025 12:01:03 +0000
Manifest next update: Sat 01 Feb 2025 12:01:03 +0000
Files and hashes: 1: d_bMQsdY59p8S_q8ISEtHSghYDE.crl (hash: MhqXSiqdDJOhQDz/h2QGLv0IxpeYf7RFxRDQogNzRpA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6b:e0:95:dc:e0:bc:f4:e9:17:87:4f:a5:d3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f6cc42c758e7da7c4bfabc21212d1d28216031
Validity
Not Before: Jan 31 12:01:03 2025 GMT
Not After : Feb 1 12:01:03 2025 GMT
Subject: CN=fe7b726b4ce8046182867d5fb5ea289183460aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:65:5c:77:51:d8:9e:fd:12:26:cf:6d:14:
7f:a2:a8:73:53:72:53:6c:25:50:c7:6f:ed:b6:1d:
9f:1a:90:85:eb:28:d3:a4:46:a9:40:b7:06:0e:48:
59:03:ed:e3:ad:64:19:49:66:3c:50:83:6a:22:5c:
c1:e0:0d:ac:75:41:cb:80:d3:87:f1:4a:9a:24:15:
8d:58:41:4b:1b:13:5d:05:45:f2:88:86:66:d2:47:
d9:69:a8:78:ac:4b:49:07:f3:74:a8:a1:42:51:9e:
b8:3c:d4:21:04:aa:09:e2:ba:3a:01:cd:38:d1:95:
1f:7e:f8:7f:fc:7b:dd:4d:93:da:16:e1:38:6f:90:
ec:a6:5a:ec:e9:07:d5:54:56:8f:06:20:bc:8c:4f:
98:32:21:6c:91:64:1a:10:65:ac:ca:29:00:fa:90:
dd:41:08:bb:d3:bf:2c:ca:a8:b1:78:9f:5d:5f:aa:
3d:68:86:e0:5a:25:09:1d:5b:46:29:d5:04:26:99:
9a:0f:e9:7f:dd:8a:d0:58:7f:80:79:87:7f:b8:44:
4b:d6:e2:89:91:b5:3b:f8:1b:f5:46:01:fa:c5:46:
d9:27:16:d2:79:0f:76:cf:12:15:5a:86:48:3f:d4:
20:35:d6:9e:c8:2d:3d:b3:fc:e0:a4:91:5d:ef:af:
03:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7B:72:6B:4C:E8:04:61:82:86:7D:5F:B5:EA:28:91:83:46:0A:A1
X509v3 Authority Key Identifier:
keyid:77:F6:CC:42:C7:58:E7:DA:7C:4B:FA:BC:21:21:2D:1D:28:21:60:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_bMQsdY59p8S_q8ISEtHSghYDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:99:f1:e0:a3:ec:ec:f0:92:73:f6:85:3f:47:42:91:e5:41:
81:17:a5:85:0c:3f:0f:40:5f:08:76:6a:c6:ed:83:70:71:1b:
5f:26:6b:47:19:81:cf:eb:70:99:81:75:f6:a8:61:67:2c:aa:
44:91:88:83:24:2b:81:2b:19:c8:e6:c1:0a:72:b1:56:7a:37:
19:39:1a:7a:61:8b:09:46:af:df:a8:3b:75:4f:93:f3:1a:1d:
96:29:bb:10:67:74:b1:9d:98:74:22:c7:04:b3:8f:88:2d:52:
83:66:4a:82:52:ae:46:75:b1:50:f0:fe:66:fc:e7:29:92:24:
ac:23:14:87:ff:89:d7:12:96:16:a8:ef:02:f1:b8:bf:a1:0f:
df:10:23:d1:a8:c8:67:56:d2:1d:90:bb:fd:ea:fc:bd:de:b2:
71:2f:bd:8b:d4:9b:44:9d:fe:76:76:ae:e4:1d:2a:f8:c5:ad:
4e:0c:90:ed:28:84:0d:73:c4:78:11:74:55:b3:a7:3d:42:64:
45:40:7e:22:64:42:25:df:9d:7a:9b:97:fe:21:0d:46:d8:a8:
27:19:bd:a3:c7:4d:b7:ed:97:97:d3:53:49:2b:87:25:6f:ab:
db:05:0e:38:cc:4f:a5:5d:09:8c:13:b8:60:15:e4:c5:d4:8f:
f8:ac:52:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:59:40 2025 by rpki-client