Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
File: 3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft (raw, json)
Hash identifier: oH0rNtvb4g7awOFMznLVG53Ft8hVYiuc9KmZjkJF8Zg=
Subject key identifier: B5:86:39:8C:E5:84:88:42:A5:99:0E:EE:8B:13:2F:AA:A7:2D:90:4A
Authority key identifier: DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6
Certificate issuer: /CN=dc73be387af552970cf62f69517e3f3c9c12d2f6
Certificate serial: 0194BCA9D2736C4B8D4A6D6A8EB1695C84C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
Manifest number: 0D2C
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: 3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl (hash: ygtXpI1ubqKtKBSAau2osirBasuyyvzp5XHdeJmvhg8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d2:73:6c:4b:8d:4a:6d:6a:8e:b1:69:5c:84:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc73be387af552970cf62f69517e3f3c9c12d2f6
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=b586398ce5848842a5990eee8b132faaa72d904a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:06:90:a1:72:d5:8a:1d:bc:06:7b:db:c2:b8:
f0:2a:06:ff:01:78:a1:79:6e:df:22:32:68:26:e1:
34:4b:a9:15:3a:6c:44:6e:81:c6:6c:f5:71:1c:14:
f9:ed:6c:da:57:b5:6f:01:9e:ab:08:48:29:df:46:
d6:1d:9e:ed:81:8f:09:23:db:8c:40:2d:a8:40:3e:
61:12:15:cb:b0:29:f1:1d:d0:4a:87:87:84:b7:18:
9b:dd:c2:c4:2a:d6:d0:e4:fc:04:ba:80:83:b6:f8:
58:26:ba:f8:d6:0a:44:b7:8a:34:ac:00:5c:aa:67:
c8:fa:f6:a3:86:0a:32:82:36:e3:b8:6d:f5:8d:a4:
a7:e9:51:9f:d6:86:42:a3:a7:4e:51:5b:04:19:2c:
da:86:86:81:47:04:b8:3e:3c:93:9d:8f:de:b8:9a:
b4:47:d5:e0:db:2c:ad:f4:3a:35:18:f8:61:d2:29:
d5:4b:32:26:00:c7:d7:2e:c5:7c:65:37:33:5d:19:
06:1b:72:35:89:13:3d:42:73:b3:6a:ce:b9:a0:95:
21:81:b6:81:d1:4a:85:fb:a2:12:64:c1:30:d9:cf:
fd:e1:e2:c6:18:8a:03:4c:56:4e:e2:73:8d:c1:57:
2c:ba:96:c1:cc:7c:12:a5:d7:a7:0c:48:80:32:af:
53:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:86:39:8C:E5:84:88:42:A5:99:0E:EE:8B:13:2F:AA:A7:2D:90:4A
X509v3 Authority Key Identifier:
keyid:DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b9:fa:96:65:90:cd:e6:44:7a:02:d3:d6:95:ff:bb:04:37:
1b:b6:2e:bf:30:e6:96:72:9f:38:f6:3a:b0:0a:74:c5:e6:17:
a4:58:a9:a8:b7:e1:ca:a7:88:91:69:3f:4e:76:d3:2f:6a:a7:
6d:51:7b:cc:a7:f5:b9:4a:e3:5f:7e:a3:d1:19:f3:8b:ff:02:
fc:05:25:f6:69:e2:33:57:43:71:bb:6a:f5:fa:c3:f2:2e:71:
4e:ec:45:77:e4:14:e4:a5:bb:55:e9:f3:2f:45:4a:e8:c1:88:
e6:95:33:55:29:0d:7a:e9:22:c1:34:81:d6:50:58:52:3d:36:
b7:8d:bc:a1:fa:0a:47:1d:39:dc:8e:25:7d:11:ea:7b:3d:cb:
b4:cc:91:fd:e4:c6:e3:e3:fc:1a:71:97:1f:fd:e0:dd:72:ab:
72:7f:22:1d:d7:aa:1f:cb:ab:1f:6a:ee:73:e8:08:54:67:b2:
3f:92:ac:d4:da:c2:ed:5a:a3:7c:0f:e5:e6:c6:eb:ea:da:ed:
8b:22:53:6d:65:db:a1:f2:95:e3:a6:70:60:7c:a8:5d:66:42:
8b:2d:a8:8c:be:25:75:9a:e9:11:0a:95:06:83:0d:ef:99:6a:
89:ea:f0:88:9c:86:ed:06:b3:6a:f3:d0:5f:6a:85:ca:c9:86:
b1:b5:60:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:18 2025 by rpki-client