Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/04619f-25de-4de7-96e6-9c010e6b6c08/1/3qVl-s_KijdP5vDNpHENUpBdrJw.mft
File: 3qVl-s_KijdP5vDNpHENUpBdrJw.mft (raw, json)
Hash identifier: mGIC2kd5C9T4dhUspTdO99D0ZlXmUIQshVG0H0afh4E=
Subject key identifier: EA:F7:0C:EA:F9:11:A5:03:1A:56:2D:AA:69:94:BD:7F:23:6C:9B:72
Authority key identifier: DE:A5:65:FA:CF:CA:8A:37:4F:E6:F0:CD:A4:71:0D:52:90:5D:AC:9C
Certificate issuer: /CN=dea565facfca8a374fe6f0cda4710d52905dac9c
Certificate serial: 01852D5AEB559DD6934BF1BFDBDEDDDEA49D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qVl-s_KijdP5vDNpHENUpBdrJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/04619f-25de-4de7-96e6-9c010e6b6c08/1/3qVl-s_KijdP5vDNpHENUpBdrJw.mft
Manifest number: 0BD8
Signing time: Tue 20 Dec 2022 02:26:51 +0000
Manifest this update: Tue 20 Dec 2022 02:26:51 +0000
Manifest next update: Wed 21 Dec 2022 02:26:51 +0000
Files and hashes: 1: 3qVl-s_KijdP5vDNpHENUpBdrJw.crl (hash: /ZCdWQuWTbRpnCkHchr3ppivZ64ZdaA3iFt48nipXU4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2d:5a:eb:55:9d:d6:93:4b:f1:bf:db:de:dd:de:a4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea565facfca8a374fe6f0cda4710d52905dac9c
Validity
Not Before: Dec 20 02:26:51 2022 GMT
Not After : Dec 21 02:26:51 2022 GMT
Subject: CN=eaf70ceaf911a5031a562daa6994bd7f236c9b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3a:51:34:f3:26:82:5d:f9:ff:4f:d4:a6:e4:
96:62:4d:1d:2f:ca:f9:a7:3c:97:11:2b:e9:0c:13:
68:bb:c1:56:8e:89:a7:0f:27:11:f1:25:3d:f1:4e:
3f:41:5a:08:f4:72:ba:2d:b9:37:81:e3:ef:1a:44:
29:c7:f0:25:a3:ed:63:1b:2f:43:96:60:cc:3f:b1:
15:82:ba:d5:86:88:f2:a2:c7:1c:8b:aa:bf:0b:a6:
6d:9a:13:10:6d:68:1a:f3:1f:6f:61:e5:7d:97:a1:
21:86:83:d3:6b:15:19:6c:37:8e:95:8c:00:83:1c:
87:fd:30:3a:d6:8c:ad:9e:1d:6d:5d:f6:72:8e:31:
c3:85:c0:b3:ae:cd:42:83:9e:1a:f0:d6:0d:29:10:
b6:7b:ed:9f:7e:af:46:3d:97:cb:b0:b6:3b:f8:d5:
15:1c:53:77:8c:54:90:8b:12:72:35:25:bd:bd:a6:
ac:65:4d:86:9f:cc:97:4b:93:05:76:b2:8d:5a:0d:
32:a4:bd:dd:97:f2:a7:75:8f:b7:ec:dc:57:27:cd:
25:ac:4e:f2:b1:40:58:14:87:d6:60:3c:3a:c2:1c:
7c:02:7b:fb:c1:9e:9d:2e:62:ca:cf:43:05:f5:84:
bc:50:e0:83:de:3e:3a:bd:bb:a0:b7:1f:38:f7:70:
5d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F7:0C:EA:F9:11:A5:03:1A:56:2D:AA:69:94:BD:7F:23:6C:9B:72
X509v3 Authority Key Identifier:
keyid:DE:A5:65:FA:CF:CA:8A:37:4F:E6:F0:CD:A4:71:0D:52:90:5D:AC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qVl-s_KijdP5vDNpHENUpBdrJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/04619f-25de-4de7-96e6-9c010e6b6c08/1/3qVl-s_KijdP5vDNpHENUpBdrJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/04619f-25de-4de7-96e6-9c010e6b6c08/1/3qVl-s_KijdP5vDNpHENUpBdrJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e3:dd:63:e4:39:37:57:c7:cc:65:16:63:a7:e1:6b:04:45:
1b:ad:24:6c:e3:96:5d:cc:de:18:db:67:ae:e2:69:1d:4a:44:
38:d7:a0:66:81:bb:ce:97:b2:f1:41:53:dc:93:7d:60:00:a4:
44:6e:d4:7d:86:74:b5:7d:84:58:81:32:92:e0:e8:4e:15:65:
9a:e9:c9:13:0c:76:38:0f:f9:f8:19:cc:88:c2:0c:61:f3:01:
6e:71:53:25:88:20:ad:03:3c:fa:0b:dd:3f:e1:37:64:67:8c:
3a:a7:bb:03:38:84:ed:a9:f9:ea:a6:3c:da:bc:2c:4f:c8:dd:
1d:02:fd:47:47:f2:22:59:a6:29:c8:05:be:0d:41:74:81:b6:
74:7e:a3:97:04:e4:e6:38:0d:c8:4d:b8:a6:07:bf:e6:20:4a:
86:83:9f:54:ee:2c:0f:7f:6d:42:ce:5d:1a:b1:c8:af:74:31:
34:24:00:0f:8a:cd:89:82:40:99:ef:ca:38:7e:2a:ca:f4:4d:
65:5e:55:53:62:c1:a0:21:00:99:25:a5:ad:09:f2:b9:af:db:
49:58:48:86:ee:9f:36:d0:ea:a8:fc:26:5a:25:c9:f2:1c:44:
26:1a:05:80:e3:c8:48:91:11:9a:ff:df:f5:fe:0f:e6:06:b8:
67:0f:7e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:25 2025 by rpki-client