Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
File: 3I4FnV63dkn78ZuErzX2iR2cWAc.mft (raw, json)
Hash identifier: yfwraEu8LZONeunOlAV2xDil9SQKJPb5m9L0IkTGhoQ=
Subject key identifier: C7:84:13:83:33:F0:06:F7:F9:97:58:CC:DC:D7:CF:5C:2E:BE:53:FB
Authority key identifier: DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
Certificate issuer: /CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Certificate serial: 0194BD859CCAD330D0C8E60014347752F822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
Manifest number: 0B5B
Signing time: Fri 31 Jan 2025 18:00:37 +0000
Manifest this update: Fri 31 Jan 2025 18:00:37 +0000
Manifest next update: Sat 01 Feb 2025 18:00:37 +0000
Files and hashes: 1: 3I4FnV63dkn78ZuErzX2iR2cWAc.crl (hash: Xc8OVmtNJjlsnIIL/gKgDr8bLE9f0CmyIQ5OXRHkzt0=)
2: pKu7UglcJmA-j3iLVLdtywNO9BE.roa (hash: Zkb8HbwY2s1iIMkolnog2EvROcriM2gwSI0ajYjdw4E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9c:ca:d3:30:d0:c8:e6:00:14:34:77:52:f8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Validity
Not Before: Jan 31 18:00:37 2025 GMT
Not After : Feb 1 18:00:37 2025 GMT
Subject: CN=c784138333f006f7f99758ccdcd7cf5c2ebe53fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:05:bf:79:b2:0b:58:3b:03:76:92:06:95:
a9:0a:2f:2c:ba:86:55:3f:78:d9:c3:b0:95:b8:a2:
f8:4b:99:b5:8e:0f:18:77:45:2b:a6:72:9d:69:ec:
8c:96:2a:e0:ec:01:ed:bf:7c:30:81:5e:1e:7f:34:
92:28:90:ee:20:07:0e:98:d4:d0:a7:3d:bd:6a:73:
7b:3c:45:a2:db:de:48:f2:99:0c:d2:03:9b:22:75:
d8:3e:8b:0a:7c:8b:64:55:80:44:b0:25:44:b9:4a:
ac:7a:c1:c6:db:7a:52:6d:35:78:6c:c1:36:2d:6a:
76:92:36:23:06:aa:4d:44:17:26:d9:45:d1:18:9e:
84:ad:70:4e:3e:e5:4a:01:db:30:4a:9a:7c:63:ed:
ac:fa:e3:ef:06:4b:ba:b1:30:40:cb:e2:2d:98:55:
bf:f1:2f:38:47:cc:13:8e:55:00:91:29:7c:58:c1:
54:56:aa:d0:58:f7:a4:12:a5:46:f6:86:ae:91:b5:
3a:ef:4b:9e:f9:3f:de:41:10:bb:01:3a:c1:fb:e1:
34:7a:2b:5f:2c:08:9a:b3:58:42:da:fb:17:b3:90:
07:92:c0:17:2b:50:de:cd:83:58:54:9c:b5:f7:92:
45:d6:6d:94:9d:43:49:fa:04:39:24:f8:07:e3:6a:
35:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:84:13:83:33:F0:06:F7:F9:97:58:CC:DC:D7:CF:5C:2E:BE:53:FB
X509v3 Authority Key Identifier:
keyid:DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:35:c8:90:4d:0c:fc:25:31:68:c9:9c:b6:1e:3a:0e:69:20:
c2:36:55:76:fe:6d:08:fa:09:33:55:07:68:d3:97:c1:03:36:
d4:f7:3b:ac:ae:80:c2:2f:31:5f:9c:44:70:99:d1:6e:1a:13:
32:84:5c:eb:94:74:61:29:50:e0:9f:14:34:4d:90:8e:ad:dc:
8b:f0:08:6c:aa:3d:71:e5:4f:e0:4b:af:f2:33:ae:bc:4b:ed:
65:87:6a:26:ef:6c:a3:98:34:5f:be:fe:89:1f:68:45:e2:df:
1d:38:8f:1d:01:68:b6:f4:5a:3a:95:53:c0:50:32:ab:d2:ce:
28:fe:1b:8f:58:f3:40:1f:b7:d2:7d:5a:a0:0e:12:56:20:03:
fd:ae:c9:b2:4e:31:d5:57:ea:e3:ff:e6:60:36:28:55:3d:0e:
78:75:f2:9d:07:55:cf:ba:4f:d3:0b:62:39:2b:9a:aa:17:70:
b2:66:f9:dd:6a:71:53:30:1f:91:dd:22:96:b5:3a:52:d3:8d:
a2:37:b4:6a:fc:c9:0f:2a:67:31:bb:cd:25:66:ad:f5:2f:36:
35:60:10:1a:f4:85:91:a4:6f:7c:13:f3:02:87:cd:8e:31:01:
ab:d7:5f:6e:be:4f:e9:36:5a:84:76:7d:fa:c8:59:1b:1b:ba:
16:dc:d6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:40:49 2025 by rpki-client