Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
File: 3hgnB8REwxBksYmcWX6e_XNDj5I.mft (raw, json)
Hash identifier: jdqqI+zzRG52JMlFmKefAvanAo5xBYwyhTPbgusTqfI=
Subject key identifier: 1B:DC:42:76:9A:45:A6:E7:94:60:B3:3B:20:D3:66:FA:0E:AA:24:5F
Authority key identifier: DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
Certificate issuer: /CN=de182707c444c31064b1899c597e9efd73438f92
Certificate serial: 0194BD4EB0FEB4FE889463C3A7E27912D9C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
Manifest number: 0391
Signing time: Fri 31 Jan 2025 17:00:38 +0000
Manifest this update: Fri 31 Jan 2025 17:00:38 +0000
Manifest next update: Sat 01 Feb 2025 17:00:38 +0000
Files and hashes: 1: 3hgnB8REwxBksYmcWX6e_XNDj5I.crl (hash: R8jS/lXJx2vDj1HqCH7E3rEkcO3aWRF3vymfcbl3Zxg=)
2: SjpygmvuDVwIZnGtkws35dO3t_U.roa (hash: zqB2pIJNo9UfgQpoICcptCQoFDw4jU4AoFMpyl6BXPs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b0:fe:b4:fe:88:94:63:c3:a7:e2:79:12:d9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de182707c444c31064b1899c597e9efd73438f92
Validity
Not Before: Jan 31 17:00:38 2025 GMT
Not After : Feb 1 17:00:38 2025 GMT
Subject: CN=1bdc42769a45a6e79460b33b20d366fa0eaa245f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fc:6f:d3:5f:e0:0d:38:d9:a2:58:a0:4e:34:
77:a4:97:39:cf:ac:fc:1c:cd:f6:2e:bf:47:7e:79:
17:64:85:78:f8:0a:d5:13:ff:f8:d8:6e:61:80:10:
79:40:d8:61:9a:42:57:c0:54:f7:40:c0:17:90:ef:
32:04:c0:5a:b0:b0:db:34:c6:75:f7:86:ec:13:e0:
d2:3b:35:f1:e5:88:53:1c:68:03:06:97:a2:f5:e8:
86:77:cf:e8:81:7d:73:bd:8f:a8:5d:94:69:28:97:
94:0c:77:9d:5a:e2:18:ac:a9:eb:fb:8f:cc:9f:c3:
bb:45:9f:7b:dd:e5:a2:77:f6:bc:d0:f2:22:51:fd:
0b:bf:e7:bc:d6:8d:55:30:8a:98:71:1a:01:35:89:
59:2f:88:85:a0:db:ff:52:76:3b:05:43:01:1e:6c:
b1:db:95:19:f5:ee:c6:89:a6:38:d5:b6:93:bb:2d:
ad:0a:a3:10:d5:fc:f9:52:2a:ae:3f:6f:db:03:6d:
35:39:b6:b7:0a:0b:fc:63:f9:f9:ed:d6:e0:23:06:
e3:03:03:01:52:17:ed:c7:bf:e2:46:8b:d6:62:f3:
83:5d:ea:ce:76:53:c0:20:0a:fe:30:80:fe:9d:8d:
02:61:c1:f6:aa:e4:9c:b3:3a:42:69:3c:20:4a:c0:
1e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DC:42:76:9A:45:A6:E7:94:60:B3:3B:20:D3:66:FA:0E:AA:24:5F
X509v3 Authority Key Identifier:
keyid:DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:26:13:09:e0:d8:6a:e9:fa:98:31:1f:56:65:c9:29:58:a7:
6d:7a:0b:39:2e:76:5d:df:1b:e0:c7:b0:d5:70:de:43:7f:9c:
08:ec:35:6e:da:ee:77:2f:1c:2e:62:61:01:0a:0c:41:9e:39:
26:66:73:37:04:1e:78:de:a3:0d:0b:62:1f:34:41:66:6b:f7:
e2:dd:91:8e:01:e7:c1:b3:bd:0b:f6:4a:60:19:5d:a0:89:64:
c6:7a:c9:14:87:91:28:76:79:e7:43:42:75:79:39:d1:57:21:
70:f6:70:d1:64:e1:4c:07:a4:4a:28:a1:61:19:c3:aa:c5:34:
64:0b:26:af:ba:63:f7:b4:4e:fb:34:88:dc:d5:a5:99:13:14:
5a:d3:7b:32:44:9a:10:6f:4a:78:cb:5b:66:e3:ca:06:6b:15:
94:e3:c4:b3:2c:0e:7e:3d:b0:43:9f:b4:71:7d:17:91:a9:3b:
a8:f8:ec:cf:7d:70:8c:e7:38:94:3c:b2:d4:6b:11:d0:3e:be:
30:fd:47:c6:5a:13:89:dc:b2:f2:5b:20:ec:fd:2e:a5:cf:f1:
d6:ad:32:25:06:6d:fd:d0:18:07:83:b6:69:24:ac:cd:83:01:
81:84:38:87:0c:e3:f1:76:e8:0f:a6:0a:47:f2:dc:5b:93:0f:
6c:1c:58:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:20:16 2025 by rpki-client