Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
File: 82DHix1GLWuv33NZ08Iz3b-SnTE.mft (raw, json)
Hash identifier: fDWGXJRk5xjCV3S674oME9dZEcn6vIaErOJHtraBlyE=
Subject key identifier: 74:4F:E0:AB:44:3E:B0:7C:72:7D:52:DE:60:EF:A7:47:D3:A0:E7:09
Authority key identifier: F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31
Certificate issuer: /CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
Certificate serial: 0194BCA96D92AABF6F2EA49855B8CB0A2B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
Manifest number: 039A
Signing time: Fri 31 Jan 2025 14:00:07 +0000
Manifest this update: Fri 31 Jan 2025 14:00:07 +0000
Manifest next update: Sat 01 Feb 2025 14:00:07 +0000
Files and hashes: 1: 82DHix1GLWuv33NZ08Iz3b-SnTE.crl (hash: yIt3AQ6KOr5WsQRgqy+cz+TZAf7iChX/NgnK+21kp+U=)
2: nPeojOrbaPs45UMM5xBsx67HUyw.roa (hash: I+r6NKoTQ/LaZOROIxMVJyc2C7XDOY211tQjVI17x0w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6d:92:aa:bf:6f:2e:a4:98:55:b8:cb:0a:2b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
Validity
Not Before: Jan 31 14:00:07 2025 GMT
Not After : Feb 1 14:00:07 2025 GMT
Subject: CN=744fe0ab443eb07c727d52de60efa747d3a0e709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7a:f2:96:59:5a:a2:ba:e1:d8:37:84:b4:80:
d9:32:d9:15:38:27:c5:10:71:35:78:ee:b2:51:71:
c1:83:f0:6b:a5:bc:28:f2:da:42:89:c8:3c:2b:be:
d2:68:f3:c9:de:0a:b9:13:b3:76:95:1c:c5:02:66:
28:12:3e:ec:c4:c3:34:9b:99:43:b2:12:3e:cf:96:
cd:f6:c9:f8:30:8f:45:94:b8:9d:5b:0c:4f:e5:2e:
6d:4e:25:01:52:cf:1e:30:c9:2e:e7:fe:da:76:07:
5b:5d:f3:52:77:3d:05:14:cc:e8:68:0a:ca:9b:81:
5d:8e:ad:aa:5c:5b:6d:24:00:6a:aa:77:08:1d:bc:
13:58:10:71:4d:15:a5:ea:77:fb:cd:03:90:97:50:
f7:68:6c:4c:fc:3e:9f:c8:05:83:df:f2:c0:df:91:
86:d2:ab:57:14:e8:da:ba:9a:29:a7:8c:4b:4e:ab:
4e:88:8f:e9:5b:15:d3:61:09:3c:82:96:9d:7e:e8:
01:2f:03:91:ec:36:9c:b4:af:19:4e:34:ca:c2:b0:
8a:c7:a0:e9:25:9e:81:04:7c:57:e6:67:01:7e:96:
ac:a2:88:72:d6:3e:13:5b:62:67:ae:9b:47:8b:14:
9f:d8:1f:81:b2:4f:ed:ae:e3:51:c1:41:dd:98:bf:
af:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4F:E0:AB:44:3E:B0:7C:72:7D:52:DE:60:EF:A7:47:D3:A0:E7:09
X509v3 Authority Key Identifier:
keyid:F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f8:e3:4a:16:94:16:83:5f:ca:65:ed:eb:98:28:44:66:0f:
bf:a6:71:32:c3:32:89:dd:aa:64:88:c2:9e:2f:39:3f:09:8b:
8e:0a:fd:72:02:8c:e3:9b:ea:5b:84:25:06:c3:8e:7b:3f:14:
a6:f3:b0:95:78:a4:31:a4:b1:55:a3:5a:56:5c:cc:a3:bd:55:
72:62:ec:d8:b4:fd:85:50:61:64:d6:15:44:39:24:77:7c:3a:
cb:ce:6a:a9:ec:f6:47:79:16:09:11:cd:b1:ca:9e:9c:64:ee:
c4:6e:c2:2d:a8:9f:76:58:9b:2e:11:4f:b3:58:92:14:0c:a7:
d5:7f:e6:39:52:82:33:cb:ea:df:60:7c:71:fe:fc:8f:9b:90:
25:b0:5d:ec:44:82:0f:af:a6:01:f6:1b:c9:16:a5:22:f8:07:
5f:57:89:db:a5:42:5b:f5:8a:fc:58:c7:00:1e:e7:2d:d2:67:
e1:c1:91:2d:c3:34:07:be:14:44:c6:ff:ae:80:f9:17:b0:02:
cc:df:bd:05:47:30:ff:7c:35:a9:d6:01:a1:22:09:28:ae:27:
cb:bb:4f:af:62:83:28:a8:c3:74:e8:53:4a:c1:c2:f5:fc:52:
7c:9c:de:e9:cd:e0:c7:f6:83:d6:44:e3:90:47:b4:2d:ea:9f:
16:a9:36:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:18:00 2025 by rpki-client