Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a146c7-81e9-4862-974f-e0ecd5342ed8/1/36aNFIY6RUuJVHtZtcw0Fc0tjzc.mft
File: 36aNFIY6RUuJVHtZtcw0Fc0tjzc.mft (raw, json)
Hash identifier: 0VB6kT1q54z43lP6Y2rkfZiTmEeNVok7oLNAT86HUls=
Subject key identifier: 3E:24:7C:94:6F:AF:56:FC:54:83:AE:1B:F3:0B:BA:8C:36:35:81:C1
Authority key identifier: DF:A6:8D:14:86:3A:45:4B:89:54:7B:59:B5:CC:34:15:CD:2D:8F:37
Certificate issuer: /CN=dfa68d14863a454b89547b59b5cc3415cd2d8f37
Certificate serial: 0193A995F93506B4E59C33131BFC57B2908D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36aNFIY6RUuJVHtZtcw0Fc0tjzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a146c7-81e9-4862-974f-e0ecd5342ed8/1/36aNFIY6RUuJVHtZtcw0Fc0tjzc.mft
Manifest number: 139A
Signing time: Mon 09 Dec 2024 04:03:18 +0000
Manifest this update: Mon 09 Dec 2024 04:03:18 +0000
Manifest next update: Tue 10 Dec 2024 04:03:18 +0000
Files and hashes: 1: 36aNFIY6RUuJVHtZtcw0Fc0tjzc.crl (hash: m3+0S/izMiDjD9dBXU7fOawKygKu3QwDs3XgU8NvvYs=)
2: bSBaZbXyGK6s-45ETJbR2_RRyog.roa (hash: AE9bc+6rfxb8joZMQ0FdtiMtcQNUyac0ka4fvtDIFk0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a9:95:f9:35:06:b4:e5:9c:33:13:1b:fc:57:b2:90:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfa68d14863a454b89547b59b5cc3415cd2d8f37
Validity
Not Before: Dec 9 04:03:18 2024 GMT
Not After : Dec 10 04:03:18 2024 GMT
Subject: CN=3e247c946faf56fc5483ae1bf30bba8c363581c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:aa:12:47:38:7a:93:d8:d8:2f:c4:93:5b:
e9:76:56:40:ca:bb:12:c9:c1:c8:a1:6f:d7:9d:3a:
43:72:a5:43:38:81:bf:4d:b6:37:34:e1:8a:b2:ac:
fd:87:a8:ca:5b:f0:d8:59:33:d1:23:f4:f7:1b:72:
a2:13:0c:2e:76:ef:82:33:d5:4c:f0:64:d6:c5:c7:
50:44:de:9b:e8:c0:d6:ad:37:27:0f:51:29:87:90:
b7:cc:0b:d8:2b:a7:9b:4b:d1:a8:dd:96:6b:d6:20:
d0:b2:e7:35:bd:02:24:f6:f9:58:3c:f1:43:45:c8:
17:7e:01:1a:c5:1f:a3:a7:20:ff:e4:4f:d3:3c:14:
6c:bb:06:64:f5:5e:2b:1d:31:f0:97:70:70:fb:12:
d1:14:a7:a9:87:ef:dd:4f:fc:fc:db:34:94:c6:d8:
6a:40:57:2c:e9:d8:e0:7c:75:e6:79:6b:cc:69:1b:
ec:30:64:5f:f3:8c:f4:0e:20:0e:e9:34:d0:75:65:
87:8a:a0:b1:93:19:89:91:dc:64:3a:08:37:b1:c2:
fe:fb:b4:77:c0:88:08:1a:d9:30:8c:d9:6d:fa:a8:
71:21:dc:2f:37:20:7c:02:51:05:70:91:a2:31:e6:
72:83:f0:3b:2f:21:6f:8d:cf:4d:01:5c:c0:22:aa:
7b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:24:7C:94:6F:AF:56:FC:54:83:AE:1B:F3:0B:BA:8C:36:35:81:C1
X509v3 Authority Key Identifier:
keyid:DF:A6:8D:14:86:3A:45:4B:89:54:7B:59:B5:CC:34:15:CD:2D:8F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36aNFIY6RUuJVHtZtcw0Fc0tjzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a146c7-81e9-4862-974f-e0ecd5342ed8/1/36aNFIY6RUuJVHtZtcw0Fc0tjzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a146c7-81e9-4862-974f-e0ecd5342ed8/1/36aNFIY6RUuJVHtZtcw0Fc0tjzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:52:64:4e:75:a5:b7:fe:a3:39:7c:19:3e:c1:be:ca:54:a5:
dc:93:50:19:fb:f5:ed:0f:56:65:d2:db:6e:69:31:8b:c2:0a:
bf:8a:28:a4:fc:2d:8d:db:19:08:02:8b:43:6a:e2:2f:f8:53:
0e:18:1b:40:db:5f:49:95:7a:28:22:e8:88:4d:ca:ee:74:b9:
bc:62:8f:c8:ca:cd:f8:ed:32:9b:67:28:6b:ab:3a:b8:03:b6:
b5:f9:73:8c:56:d1:68:1e:ee:85:33:53:b3:38:0c:a3:45:5e:
fe:ed:b3:16:92:68:84:78:4a:fc:18:ea:4a:4c:3a:75:1f:76:
dc:47:3b:13:18:af:0f:39:1f:2c:ad:4e:10:fe:59:28:94:52:
7b:2e:e9:09:40:cb:24:d2:c9:60:a0:82:d6:d3:0f:90:55:62:
9d:ac:f7:09:b7:bb:0c:72:0c:c5:b9:e5:b0:4d:f5:d2:e3:63:
36:cd:b6:21:a7:94:69:76:82:74:dc:c6:44:96:fa:7e:d3:57:
fc:a9:97:bc:ca:3a:fe:3f:2e:04:23:ae:13:cb:f9:ed:46:d3:
c4:35:2d:72:c0:52:af:ba:61:e9:ae:d0:18:03:dd:09:57:2d:
bc:38:ab:98:0f:0e:d2:33:50:67:8c:2c:1d:7f:9b:10:0d:6d:
77:0c:e5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:24:06 2025 by rpki-client