Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
File: 03fcZqVjo68h7gerM-i__nr5KI4.mft (raw, json)
Hash identifier: Y4oMr+cylbwLBLOLPnGDvWlaNh+IoenEooAkCGwTMjQ=
Subject key identifier: 3F:44:5D:3F:95:C4:55:74:DC:75:7D:BC:BC:79:5E:70:7F:8F:6D:CB
Authority key identifier: D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E
Certificate issuer: /CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e
Certificate serial: 0194BC3C58C445FC70DB334944DBC3C4C8CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
Manifest number: 0275
Signing time: Fri 31 Jan 2025 12:00:58 +0000
Manifest this update: Fri 31 Jan 2025 12:00:58 +0000
Manifest next update: Sat 01 Feb 2025 12:00:58 +0000
Files and hashes: 1: 03fcZqVjo68h7gerM-i__nr5KI4.crl (hash: j8+bUalSzXE7vNaiWGv6xok2Utj5w0diBtRUsYQqzOM=)
2: 6NWP4SmZYIKGrMKHkiHYbZ6J5I4.roa (hash: m+2x+5LklJoq5rlCh1u/r9pBwdaQs57tN+EGau9SsmU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:58:c4:45:fc:70:db:33:49:44:db:c3:c4:c8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e
Validity
Not Before: Jan 31 12:00:58 2025 GMT
Not After : Feb 1 12:00:58 2025 GMT
Subject: CN=3f445d3f95c45574dc757dbcbc795e707f8f6dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:68:09:80:26:ad:90:f8:9d:2b:d1:64:91:fd:
b9:09:7c:da:75:67:4c:8e:8e:78:b5:9b:d6:fe:c8:
e0:cb:08:ea:0d:b9:2c:9e:15:58:b0:f3:90:1a:49:
0d:93:af:7b:37:7f:ec:7b:6b:82:6b:b8:83:f1:dc:
11:5e:02:a7:18:ff:16:9b:2f:21:dc:9f:4b:42:e3:
1d:54:1a:19:bb:2c:99:25:17:61:2a:cd:b4:2f:a7:
d9:65:db:72:c0:0d:b4:b3:64:dd:3a:8b:29:63:e0:
d5:fb:7f:d5:d8:be:05:01:cd:2f:3b:51:84:66:ae:
3a:b1:a7:0c:6e:29:04:1a:16:94:8d:12:59:c4:13:
a6:78:39:54:79:c7:88:10:43:95:1f:18:4c:d9:30:
35:f4:14:2d:1b:01:09:13:e5:0d:51:55:8c:8e:d2:
2b:c2:bd:51:f3:1c:0f:12:ab:01:05:dd:5b:f9:c1:
60:28:c2:f7:12:8b:49:bb:91:64:75:94:80:ae:d5:
f4:de:e1:1d:2b:20:98:2d:e8:d5:82:05:57:3e:c7:
b3:42:f4:7a:32:ee:74:c5:91:b9:76:6c:cd:68:17:
27:b7:6d:c4:1c:6f:69:9c:b1:b6:18:f2:aa:d7:84:
04:63:fa:8d:f7:20:6f:ee:a9:ec:96:19:e3:7b:28:
2f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:44:5D:3F:95:C4:55:74:DC:75:7D:BC:BC:79:5E:70:7F:8F:6D:CB
X509v3 Authority Key Identifier:
keyid:D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1a:36:85:fa:25:87:3b:cd:57:33:f7:55:d7:e7:ab:6e:58:
a8:c0:00:2b:c5:b9:fb:63:4a:82:39:8c:b6:e2:98:d6:86:c6:
43:78:ed:97:5e:2f:bb:86:d7:f8:f2:2a:22:47:d8:6f:9f:1f:
53:e8:1c:1b:3f:67:b8:c3:05:7f:7e:f1:60:d6:24:a0:1c:d4:
58:f9:7e:16:d2:7d:7b:1f:14:fa:c7:44:47:23:7c:e8:0c:1f:
30:28:f9:0e:ee:a9:fa:4e:26:a9:87:c4:b5:b0:56:14:d9:e3:
44:c6:f5:82:a2:1f:c4:32:74:1f:d5:b1:25:d4:ae:09:48:66:
34:48:b5:52:57:ef:5e:a2:c3:79:e3:4c:50:f3:2e:a6:51:a0:
71:71:b4:0b:43:28:6e:58:7f:5c:8a:6f:69:94:04:b9:3b:9b:
fd:33:07:4f:b2:eb:fa:b7:a7:4e:df:f4:74:b4:82:8c:9e:c9:
ff:f1:fd:93:fe:9e:c9:cc:df:f2:6b:b8:a7:fd:53:dd:6c:18:
b9:02:bc:13:c0:14:8d:dd:c4:9a:a5:c6:33:a6:90:34:a6:e1:
87:fa:00:b5:9c:53:25:60:56:d2:a4:d7:d8:e7:c6:be:34:06:
7b:e0:74:6c:08:ff:c3:67:39:4c:5f:35:cb:68:d5:81:3d:e1:
3c:65:bf:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:20:12 2025 by rpki-client