Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
File: 3Cc-HiGEHOLDNf4clhznaAF-7ik.mft (raw, json)
Hash identifier: ayAeJDpL5Oxrsx2AZH+tkGMNssi6+iyM+jvi5WK7wSk=
Subject key identifier: 5A:61:94:D1:62:43:B6:B2:0C:76:AE:97:0E:10:13:57:11:25:82:E2
Authority key identifier: DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
Certificate issuer: /CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Certificate serial: 0194BBCEF0BBB503B8660173ACB218BD0246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: 3Cc-HiGEHOLDNf4clhznaAF-7ik.crl (hash: dtGUyfquy8Pl++cLL86W05hbGSUKjEzCOKXR8KihZgc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f0:bb:b5:03:b8:66:01:73:ac:b2:18:bd:02:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=5a6194d16243b6b20c76ae970e101357112582e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:d6:d3:f5:bc:ab:0a:33:12:e5:ff:60:43:
31:d4:ea:88:94:0f:c7:ef:61:91:62:44:bc:d5:dd:
75:26:bb:c7:8f:c9:66:23:e2:e4:0b:84:f6:cc:1a:
34:6a:d9:c9:56:36:e0:93:2a:9b:fc:4b:f1:5f:11:
ae:03:47:09:ee:90:4b:33:bc:ae:77:70:76:49:71:
57:ba:b6:43:c9:72:fc:01:b7:c7:0e:50:f1:0f:98:
c4:3e:d8:53:6d:1d:e4:50:54:8c:99:97:e2:88:71:
a1:83:00:f1:10:b9:98:9b:3a:57:ad:4f:22:48:34:
23:e0:98:40:1b:c6:6e:e2:ef:2d:b7:b9:b4:fe:97:
a7:08:13:08:db:1a:c1:bf:cb:fc:3d:68:6b:26:25:
f6:6f:8d:84:e9:22:6a:e5:6f:49:8e:d2:b0:bd:bd:
45:5d:7e:6d:31:63:f2:a7:00:7f:d4:a4:70:5d:5f:
c2:e5:13:d7:8f:41:85:25:b1:ce:7b:4a:95:42:3e:
26:c9:05:0e:ea:af:71:23:2d:9d:f7:79:88:6d:d1:
cd:dd:bc:06:73:5f:f8:95:5c:ac:ba:b8:16:55:81:
13:5d:b0:74:ae:90:b9:2d:d4:8c:c2:fe:ee:f8:dc:
d4:90:81:bc:db:c9:30:9d:e8:72:fe:44:81:bf:e4:
c6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:61:94:D1:62:43:B6:B2:0C:76:AE:97:0E:10:13:57:11:25:82:E2
X509v3 Authority Key Identifier:
keyid:DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4a:60:f5:9d:d5:47:b6:cc:37:4f:3c:99:69:11:df:e7:dc:
3a:61:0c:35:bd:80:e9:7f:20:a9:9d:4d:a6:1a:b7:2d:61:b1:
2f:e5:80:84:9d:26:9f:a2:1b:d1:20:b7:a5:1f:20:ea:1a:28:
da:0b:d7:b4:cd:89:fb:97:4d:d3:a0:50:7e:70:04:6e:c7:b7:
e6:7d:41:e6:57:fe:1f:a3:96:cf:63:7d:96:dc:c7:82:ee:b0:
f3:6a:5a:f5:cb:28:d0:1c:7f:1b:de:15:23:6e:e5:2a:91:d6:
a3:25:04:d5:92:10:3b:54:2d:98:75:e9:d1:7f:24:8c:7d:7b:
06:f7:50:cc:d6:84:f2:89:ac:70:37:1d:ee:24:35:e2:85:57:
f0:ab:a9:68:9c:f7:ff:bd:f5:1f:4d:8d:36:9e:80:0c:3c:c6:
ac:cf:df:13:06:8b:16:7f:de:c2:37:32:f1:7b:8e:c5:24:d0:
b7:85:2d:b5:c2:28:e0:9c:52:58:29:12:ff:88:3a:53:93:51:
6a:3b:a7:4f:ec:40:1e:bd:ea:17:1f:64:eb:24:ca:32:b3:8c:
4a:dc:d2:c4:55:a7:3f:3c:1b:9a:c9:6b:e7:41:c3:70:85:a0:
8e:88:b1:b1:ff:ae:d0:8c:08:94:4c:51:28:79:52:c2:42:8b:
b7:da:0e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:27 2025 by rpki-client