Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
File: P3lU2IwK4_Y5hpe_38GVanU-g9g.mft (raw, json)
Hash identifier: dfVrFHvE+ATlp1p02Gz9GewhCHlrdhfC5H9iIMq71O0=
Subject key identifier: 99:E3:5F:F6:9B:B2:73:65:58:0F:18:00:D0:9C:86:7A:BC:98:A5:CF
Authority key identifier: 3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
Certificate issuer: /CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Certificate serial: 0194BCAA1066E9C247FAD951BDEF45A7B30C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
Manifest number: 1403
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: P3lU2IwK4_Y5hpe_38GVanU-g9g.crl (hash: HFSNCwwToXeH0fP9gWTno4GqVx7NRyZeT88ydClz9JM=)
2: rf7Y9BfnjDYuwCtely2bugyEpys.roa (hash: 9y+7Sb1Y7U3Xr15ca0JClSv0KalX6Si92Kt+rNAmTHY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:10:66:e9:c2:47:fa:d9:51:bd:ef:45:a7:b3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=99e35ff69bb27365580f1800d09c867abc98a5cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fc:b2:76:b0:4c:58:b0:5b:f5:14:27:33:a1:
63:dc:70:d8:d3:ee:9c:3a:03:06:65:06:06:f6:da:
68:4d:4b:3e:ee:e4:90:a4:bc:e1:65:73:32:f6:ae:
70:17:1b:e3:4a:e1:7d:33:d9:b5:ba:b5:39:20:7a:
ff:9a:71:bc:e3:3a:84:9b:c1:31:34:26:22:f4:53:
e7:8d:fe:06:9c:73:f6:73:83:d1:db:ba:a1:ca:71:
97:c1:03:4a:96:60:4e:93:c9:ca:e1:19:fb:57:91:
10:e1:09:00:ab:09:23:ba:db:17:f5:fd:3a:00:5e:
2f:ec:b3:1d:87:71:af:66:2a:eb:e5:be:66:3e:eb:
04:0d:cd:86:a0:b8:38:c9:c1:a8:ab:dc:17:1e:08:
6a:78:6d:76:fa:cc:0e:e7:4c:f5:52:fd:97:4d:b7:
54:d4:ab:26:21:06:9b:3d:1b:f1:da:05:95:f2:79:
2d:44:c8:43:b6:f0:42:85:20:b4:79:ea:63:0f:79:
7c:19:9c:fa:7d:0b:8d:dc:6f:02:99:6e:85:5a:02:
c5:e7:37:02:22:8a:31:a7:9b:ed:df:59:90:9b:06:
8c:be:90:fd:19:44:f8:1f:2f:36:ee:fd:f3:f9:3b:
64:f3:46:ca:d5:9a:3f:80:11:a0:56:c6:84:1c:f3:
b5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E3:5F:F6:9B:B2:73:65:58:0F:18:00:D0:9C:86:7A:BC:98:A5:CF
X509v3 Authority Key Identifier:
keyid:3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:63:8d:2e:ba:ed:6e:1e:b5:a2:e9:db:6f:f2:2a:e0:6b:31:
b6:eb:44:b1:78:28:05:49:21:b6:22:52:c4:8b:43:d8:69:1b:
6a:63:e5:cb:42:34:d1:1d:67:25:cb:93:1a:56:36:20:89:49:
9d:61:14:72:8d:a6:bc:97:52:f3:0c:1b:e9:ca:2b:f1:39:28:
51:97:f2:48:bf:87:1e:82:ea:62:63:de:e6:81:ff:da:8c:45:
93:c1:54:68:7d:99:df:ae:7e:55:b3:b3:cf:72:0c:6c:30:f8:
51:c7:f5:f4:c4:1c:96:8d:1c:f1:0c:3c:cd:0a:97:d7:44:35:
03:64:35:1a:c0:b4:b1:67:99:5e:e4:5a:0d:1b:34:ab:c2:83:
6d:a0:9f:97:73:ee:ed:06:0d:1c:97:d8:46:e4:2c:73:7b:01:
2b:2b:cd:26:53:2e:9f:12:40:39:6f:35:57:6e:3e:51:bf:c2:
e0:5b:f9:27:99:ad:32:49:f3:e2:b1:b2:68:2f:a4:c1:88:2f:
e0:c7:ba:37:5a:30:5e:2b:5e:0a:1a:d2:05:76:5a:9d:e2:88:
c1:38:d0:ff:6b:0d:c5:37:6a:67:03:3c:1d:53:9b:08:4b:ed:
9f:4e:46:ae:16:ab:fc:21:9e:c0:43:b1:e2:ab:f0:86:05:90:
ab:35:87:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:01:03 2025 by rpki-client