Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
File: 3keU2fyrI-wF3d1QSKP8cgQAKio.mft (raw, json)
Hash identifier: w1qzvVBD+i4GtHCGoSFZ0d2Xyq0kZriW3Gh691JXRqk=
Subject key identifier: DB:9F:78:56:1F:66:98:00:6D:F8:98:22:72:FF:AC:A3:56:C8:9A:99
Authority key identifier: DE:47:94:D9:FC:AB:23:EC:05:DD:DD:50:48:A3:FC:72:04:00:2A:2A
Certificate issuer: /CN=de4794d9fcab23ec05dddd5048a3fc7204002a2a
Certificate serial: 0194BD4E9DBA376A962C057CF500CD2B7DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
Manifest number: 0D5A
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: 3keU2fyrI-wF3d1QSKP8cgQAKio.crl (hash: mubE+QSCxqccHPxqhhCbfiAaus1PCoFR17XjIJ8jyOY=)
2: ZK9gU4FBN8KUQTPHGhgGaXPIWjk.roa (hash: YFHfAWvmuV1pyKRAlUfEUWxi+ZLKrTZD/d9TC0Av1JQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9d:ba:37:6a:96:2c:05:7c:f5:00:cd:2b:7d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de4794d9fcab23ec05dddd5048a3fc7204002a2a
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=db9f78561f6698006df8982272ffaca356c89a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:90:b3:b1:70:da:f2:cc:93:aa:79:99:32:
a0:e3:e0:2f:11:4d:8a:33:b7:3e:6c:f9:a2:13:40:
c1:5c:2b:2c:06:45:5d:39:22:6c:ba:1c:cd:c6:a1:
b5:39:ca:48:b6:e2:e1:bf:e6:a9:f6:55:48:12:0b:
d1:77:a9:43:10:6f:95:94:62:a1:3e:76:69:b7:8d:
18:6c:2f:a6:9b:c4:99:0f:30:66:7b:e0:16:01:cd:
1e:cb:e8:e3:a4:37:a8:bb:09:40:ab:67:51:6c:54:
45:b0:5c:a6:be:4e:71:ab:34:12:44:75:ad:70:99:
ef:cb:7f:8b:d9:ff:35:84:8a:7f:0e:e9:92:53:20:
1d:d5:55:1c:ef:32:44:41:89:da:c9:16:9a:27:e2:
c5:6a:15:8a:f7:c7:a5:1c:6b:0d:d3:ec:8d:c2:5c:
8e:08:4f:59:cf:40:9e:b0:d3:c4:d2:05:57:ec:50:
d1:fb:3c:1b:ea:53:f4:b1:d7:80:25:cb:c1:62:a2:
05:58:a4:35:c5:57:9c:a3:25:a9:b7:62:16:ec:b9:
8d:db:74:2f:21:db:10:cb:0c:0b:bc:4a:02:f8:f2:
1c:b9:fa:d5:19:a7:61:a2:7c:71:c8:e1:ca:30:98:
b1:d4:3a:aa:75:58:89:f9:33:46:1d:f5:06:43:8c:
27:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9F:78:56:1F:66:98:00:6D:F8:98:22:72:FF:AC:A3:56:C8:9A:99
X509v3 Authority Key Identifier:
keyid:DE:47:94:D9:FC:AB:23:EC:05:DD:DD:50:48:A3:FC:72:04:00:2A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e6:61:67:b5:a9:db:f4:0f:9d:b7:d6:33:27:5d:eb:a5:13:
b8:f9:47:a2:0f:e0:15:db:94:3e:9e:45:f0:57:41:e3:b2:f1:
b3:ef:82:f6:1d:9e:5b:aa:a3:43:6b:79:65:c7:47:95:65:5b:
c6:f7:85:78:cc:e4:9f:e6:80:53:57:cb:4b:35:a7:a0:5e:ab:
e9:e1:3e:0c:24:80:f2:33:04:85:79:cf:3a:4b:35:01:a3:d2:
2f:90:f3:7c:80:d7:db:ea:14:f7:d8:27:1a:2d:8a:3a:39:93:
50:6b:1c:34:88:72:9a:14:25:77:1a:48:b5:2a:77:b3:20:9a:
7d:f0:2f:8d:0a:d8:f8:34:91:92:c6:c4:a2:0a:4d:10:00:85:
64:72:59:5e:77:2e:2c:25:9c:a6:37:83:cc:36:38:f0:f6:f5:
27:18:ee:2c:0b:19:37:bc:8e:a8:70:09:bc:3c:e1:ef:00:64:
59:b4:f6:6e:40:2f:48:c7:ad:25:78:84:b2:6e:22:e8:12:ed:
6b:1f:b7:bc:64:4d:b7:bd:08:6f:70:0b:ca:10:44:29:7f:5b:
b5:aa:c0:6f:05:00:e1:37:52:b3:a5:69:4b:a8:4c:d4:8c:97:
cc:d2:8f:1e:72:1f:53:95:e4:52:55:ed:d8:6a:c9:1d:61:b6:
7f:f0:cb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:19 2025 by rpki-client