Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
File: b3c-s9MHlNItdc2HK5GjuoSIQtc.mft (raw, json)
Hash identifier: SnXcmLt361RtFZuCnRKYj6wYwpMnGo+nwIGKYFMlgfQ=
Subject key identifier: 2B:19:F7:B5:E0:3A:F6:A6:CA:5B:D2:73:8F:04:6A:BD:E3:6B:51:D7
Authority key identifier: 6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
Certificate issuer: /CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Certificate serial: 0194BBCDEA7B4A03E08E8DD1ECF2E4FE0B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
Manifest number: 1161
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: b3c-s9MHlNItdc2HK5GjuoSIQtc.crl (hash: cYG5Y8tHRDZz+ZJZswQbc9eiDU8GWXOb/2tLfhLa9J8=)
2: wCDrJf6K3N6SQxouZVxxkGAndwU.roa (hash: RDCOaghInO75GT81gEgSeMeIYDUyZ4Fou/t1PYJdixY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ea:7b:4a:03:e0:8e:8d:d1:ec:f2:e4:fe:0b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=2b19f7b5e03af6a6ca5bd2738f046abde36b51d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a3:e0:0b:62:6a:db:cb:77:31:40:ec:09:1a:
43:86:c8:a4:30:c6:ca:ec:75:a4:e6:55:dc:63:3e:
c5:1c:0c:b1:a0:96:41:14:ef:1b:d3:e5:37:ad:82:
d0:e8:03:b6:01:75:4b:79:2f:1a:15:58:48:9e:26:
3e:a9:f3:25:61:a2:97:37:16:33:9f:c0:b5:52:c0:
70:1a:2d:9c:bc:81:27:92:fc:fe:f0:87:e6:a1:63:
67:d6:40:54:b7:3e:88:95:cb:b8:f3:47:dc:ea:2a:
1d:c5:8a:03:44:95:77:f9:02:e5:91:fa:82:77:b6:
3f:ff:84:b2:92:c6:b7:26:43:b9:5f:b4:1c:23:28:
fd:ce:10:cb:3f:1e:c5:eb:b9:44:f3:51:ae:5d:d4:
b2:5d:1f:79:33:44:bf:07:75:f6:fb:f3:72:1f:07:
25:10:5d:b2:78:33:8d:4a:5b:b9:41:a1:52:0c:d9:
0f:a6:94:ec:62:1e:ae:99:a8:99:87:a9:c6:85:cd:
7b:08:ef:55:96:b6:43:ad:51:fa:ea:6f:c3:ad:3c:
75:e4:67:0c:1c:78:b9:81:25:34:ce:24:1e:02:cf:
ac:bb:4b:e4:ce:6d:5d:e7:f0:41:36:23:b3:2e:d0:
16:bf:9f:da:2d:8f:b5:31:83:ee:8d:1a:d1:21:2b:
77:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:19:F7:B5:E0:3A:F6:A6:CA:5B:D2:73:8F:04:6A:BD:E3:6B:51:D7
X509v3 Authority Key Identifier:
keyid:6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a1:e1:cd:3c:a2:66:09:53:34:2a:9e:8e:30:ab:b0:cd:db:
24:13:e2:64:13:9e:07:60:95:44:97:40:e0:b1:1b:ec:83:68:
40:1a:4d:98:cc:04:90:d8:e7:fa:c9:c6:3d:52:91:84:64:c6:
5e:5a:10:9a:f6:dd:79:d1:ad:01:5b:38:4e:ed:96:a4:fa:81:
4b:e2:7c:26:fe:38:94:29:e6:35:83:83:0d:75:83:20:0b:cc:
de:5e:9a:c3:ff:84:41:a9:61:b6:3d:39:77:c8:c9:ca:0c:76:
2f:1e:41:fe:35:73:08:1b:7e:b6:19:ee:a5:9e:b6:df:ef:42:
0f:a4:37:97:61:3b:5e:8a:ab:f5:ab:b4:b2:a2:e5:f0:3f:2b:
80:b2:45:08:b4:36:96:f1:58:4c:34:52:59:87:30:57:e8:0c:
f3:90:51:a3:27:d9:f1:9b:3d:5a:10:3c:34:02:f8:f8:c8:5e:
89:64:9e:06:2a:d2:1e:07:58:ad:cb:fa:58:e6:65:81:dc:df:
7f:a1:b3:ff:54:4c:b3:da:62:fb:ab:61:10:2e:77:2f:f3:d6:
c5:ba:67:ad:10:15:b3:62:5c:37:5d:f5:20:d7:c8:fc:50:17:
48:8c:da:2c:c8:e0:5b:5d:8c:83:be:8f:79:28:f1:bb:5e:b3:
51:63:f9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:10 2025 by rpki-client