Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
File: 36vRQuiUFoiDzkUicxf5-lAiGU8.mft (raw, json)
Hash identifier: iH43CvfnGW0JaBad7TJNR2HFQp6HGiP3NPSn+bxk9uA=
Subject key identifier: B8:51:5F:EB:DD:2C:79:6C:6B:77:57:83:56:29:72:3F:18:B3:B7:7F
Authority key identifier: DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F
Certificate issuer: /CN=dfabd142e894168883ce45227317f9fa5022194f
Certificate serial: 0194BCE0D998F6431E68A66441A716C3CC27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
Manifest number: 0A26
Signing time: Fri 31 Jan 2025 15:00:39 +0000
Manifest this update: Fri 31 Jan 2025 15:00:39 +0000
Manifest next update: Sat 01 Feb 2025 15:00:39 +0000
Files and hashes: 1: 36vRQuiUFoiDzkUicxf5-lAiGU8.crl (hash: DmRd6ETO7sAgezAJoHouwl9bcf52oW0W4Nm8AN4wIPU=)
2: q9fcvPSCGF87XIMkqAi6UV4OZNg.roa (hash: tkmW6OPW8Rw8o76e0nZ8YOnHGwglb96QyBZechqQT9g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d9:98:f6:43:1e:68:a6:64:41:a7:16:c3:cc:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfabd142e894168883ce45227317f9fa5022194f
Validity
Not Before: Jan 31 15:00:39 2025 GMT
Not After : Feb 1 15:00:39 2025 GMT
Subject: CN=b8515febdd2c796c6b7757835629723f18b3b77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:75:c8:15:ec:e5:12:8f:8c:55:19:be:06:a5:
6e:df:cf:51:d8:95:a3:81:ec:ed:0d:89:66:65:eb:
a9:4d:1b:44:b2:ad:cc:10:cf:f0:f4:98:3e:55:ed:
81:60:04:48:7a:a1:6a:87:90:94:67:74:a6:c5:6a:
91:95:c6:db:69:07:7d:20:4f:a3:a2:bc:7e:21:f5:
33:86:94:76:09:ab:ab:f3:4e:d2:b8:f3:8c:05:2d:
3d:08:29:5e:b9:66:c8:3d:35:0e:ef:96:89:54:27:
bd:31:bb:85:d6:a1:7d:6b:9b:f1:b0:0d:ed:81:dd:
45:49:b9:4a:2d:bb:f4:ab:56:2b:4e:d4:dc:61:34:
c4:8a:06:f7:11:c4:2b:18:b2:79:fa:6c:82:ce:70:
39:54:15:56:e9:31:6b:ce:7e:a3:af:e1:2d:5a:6b:
c3:47:80:9e:37:a6:10:76:61:49:89:91:ed:c0:8e:
6a:5a:dc:52:2b:29:df:1b:a3:f4:9d:e9:e1:dd:87:
32:63:cc:7e:9d:a1:b8:a4:5c:e1:15:47:aa:db:ea:
60:a0:70:fa:1a:6a:5f:63:84:47:67:68:48:6d:02:
94:d4:b3:32:db:f6:99:51:78:1e:2c:57:e2:ed:57:
6e:5c:ce:7b:59:4e:b5:7a:e6:a4:54:3e:71:2c:ef:
d1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:51:5F:EB:DD:2C:79:6C:6B:77:57:83:56:29:72:3F:18:B3:B7:7F
X509v3 Authority Key Identifier:
keyid:DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:17:c3:c5:94:5f:61:24:87:37:e0:2f:39:94:ad:0d:5f:eb:
17:2a:e6:5c:21:20:2a:21:84:27:ac:45:e1:3a:fc:cd:87:1a:
45:98:10:69:bf:09:1d:20:b9:20:88:ce:f9:d4:ed:54:8b:06:
f5:d2:38:46:0b:c1:92:ca:1f:47:23:25:7d:0c:38:a1:1a:a1:
2d:85:6b:ba:77:93:82:22:0d:c5:e4:2d:96:48:2e:9d:3b:94:
fb:db:8e:9d:0f:fd:52:7f:49:df:56:e8:82:79:1a:eb:66:29:
a4:d7:a5:d4:cd:24:f0:62:97:12:cd:6c:62:42:8f:99:31:ca:
03:ee:39:c0:26:dc:8a:2e:c4:84:88:5c:12:e5:1d:60:02:c2:
d6:fd:ce:3c:30:27:9c:96:4c:f4:6b:69:29:71:c5:b2:b1:6a:
e5:6b:ff:e2:c2:42:91:86:f7:6b:03:73:1a:d7:cf:aa:6d:c8:
e2:f2:f3:5f:a2:36:b2:a5:4b:c3:8e:04:86:08:64:51:30:9c:
a3:81:c0:33:34:c3:7d:20:e9:70:55:4e:0e:48:1e:ca:d4:18:
75:67:18:93:58:c3:3e:c0:cc:fa:85:87:70:d5:af:e4:42:22:
6f:44:5a:08:01:c1:97:6e:b0:a8:a6:8e:07:d2:10:56:5e:65:
90:22:f2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:52:08 2025 by rpki-client