Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.mft
File: 3JXMdjEwknpvvB6y_XRD-s-hGh8.mft (raw, json)
Hash identifier: kyC+PdbwXBrwGmHzmANmekb5i9YIDklE+I/Yk6SuD6I=
Subject key identifier: 11:65:2F:08:DA:F4:40:94:71:B4:A0:D6:F5:D5:1F:32:AF:DF:6F:41
Authority key identifier: DC:95:CC:76:31:30:92:7A:6F:BC:1E:B2:FD:74:43:FA:CF:A1:1A:1F
Certificate issuer: /CN=dc95cc763130927a6fbc1eb2fd7443facfa11a1f
Certificate serial: 019414A664D91D53A45C2FD15CF122DC855C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JXMdjEwknpvvB6y_XRD-s-hGh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.mft
Manifest number: 0275
Signing time: Sun 29 Dec 2024 23:00:36 +0000
Manifest this update: Sun 29 Dec 2024 23:00:36 +0000
Manifest next update: Mon 30 Dec 2024 23:00:36 +0000
Files and hashes: 1: 3JXMdjEwknpvvB6y_XRD-s-hGh8.crl (hash: an3YlD/r95Ptvd0EdOJzoVIPPb9Hhji47v1x39CgKOc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:14:a6:64:d9:1d:53:a4:5c:2f:d1:5c:f1:22:dc:85:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc95cc763130927a6fbc1eb2fd7443facfa11a1f
Validity
Not Before: Dec 29 23:00:36 2024 GMT
Not After : Dec 30 23:00:36 2024 GMT
Subject: CN=11652f08daf4409471b4a0d6f5d51f32afdf6f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:00:75:82:53:69:5f:8b:af:b5:72:9d:58:9b:
26:fc:55:91:f7:76:47:0d:e7:68:77:36:38:e1:b5:
64:5c:c1:16:48:c5:a9:b4:a3:82:ef:d2:f9:b5:6c:
c0:4f:f4:2e:b6:c7:13:c8:6c:3e:e8:64:5f:e8:19:
e4:3b:8e:25:60:38:cb:d9:42:0d:69:85:89:43:54:
2a:7e:f9:7b:86:4a:eb:a6:19:8b:7e:f3:8a:2c:b0:
78:00:a8:ed:56:24:ca:de:2c:df:f4:c0:1a:8f:45:
1d:ae:e4:40:34:93:89:fd:94:f1:11:44:86:0a:6b:
2d:df:0d:2d:8b:ad:d6:99:0b:ab:a4:59:87:3b:03:
f5:02:fb:9e:e9:2a:0e:c2:c7:84:f7:78:32:bf:cb:
cb:95:79:6f:e3:a0:31:66:e1:73:c0:e8:0f:a2:b0:
6f:b9:80:40:04:44:6b:2d:23:a6:8c:bc:36:6a:f8:
bb:1b:a4:d5:25:69:8c:6f:f6:d5:67:dd:1c:8c:c0:
33:0f:09:67:32:3c:71:59:0a:ff:50:12:6f:3c:d5:
96:9b:64:ca:15:f6:21:04:12:af:35:bb:55:e0:33:
14:32:1f:22:19:e9:75:81:5a:8d:82:de:e5:d6:5a:
fe:23:1e:ec:b0:8f:3b:f0:b1:a3:0e:3a:8d:d4:45:
22:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:65:2F:08:DA:F4:40:94:71:B4:A0:D6:F5:D5:1F:32:AF:DF:6F:41
X509v3 Authority Key Identifier:
keyid:DC:95:CC:76:31:30:92:7A:6F:BC:1E:B2:FD:74:43:FA:CF:A1:1A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JXMdjEwknpvvB6y_XRD-s-hGh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b3:45:75:a2:d5:47:b1:56:40:aa:96:1e:f4:34:60:7e:a4:
55:df:89:4c:c3:67:58:a8:69:d9:cf:f7:4a:5a:40:dc:e8:db:
25:39:f4:6d:19:8c:09:20:25:63:f1:3f:7d:69:2e:32:6c:67:
dc:76:85:59:80:cb:9d:3b:bd:11:a6:14:bd:00:a2:14:e0:f2:
b9:59:73:d8:61:3d:63:5b:4e:4a:d1:8b:2c:aa:49:30:ae:5a:
1e:76:02:dd:46:bb:22:15:ef:72:07:80:a5:48:b5:ed:47:7e:
83:b6:4f:d4:d2:20:71:fe:f2:48:57:96:37:99:8c:55:8c:18:
fb:01:a1:f3:ab:53:ba:f1:e0:94:85:4a:5f:e7:3f:5f:d3:e2:
9f:50:5c:0f:a5:5a:00:00:d7:0d:d4:92:4c:ab:c5:4f:85:ad:
7a:ad:99:44:f9:3f:5f:2f:fd:4a:9c:50:68:49:ff:f2:8c:0c:
1c:a6:fe:66:b9:c0:06:1f:42:03:7f:40:c8:c7:3c:86:1c:86:
3e:4e:82:90:65:99:a1:44:ca:41:16:64:64:bd:a1:6e:91:ab:
6e:23:89:94:e5:b5:da:b8:35:a6:a4:ab:15:7d:61:70:2d:8c:
8b:98:63:f7:85:c4:f1:29:d6:8b:dd:0f:18:bc:05:a6:54:bb:
6d:62:ee:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:48 2025 by rpki-client