Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1ba419-acbe-4d71-8c0e-6a1a368aa62f/1/3KECtaSoa_R_8E6OprIOzQviOCY.mft
File: 3KECtaSoa_R_8E6OprIOzQviOCY.mft (raw, json)
Hash identifier: XzcR9FQ1LL9JPKm6NMOOJ4PwqxdAdxlXvOnc0iQZXFQ=
Subject key identifier: BA:F7:75:E6:F8:9C:D6:74:EE:97:AA:B8:01:6B:AC:C6:8A:6B:1E:CE
Authority key identifier: DC:A1:02:B5:A4:A8:6B:F4:7F:F0:4E:8E:A6:B2:0E:CD:0B:E2:38:26
Certificate issuer: /CN=dca102b5a4a86bf47ff04e8ea6b20ecd0be23826
Certificate serial: 01926711D86B8A725106034834EEA1C0D58D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KECtaSoa_R_8E6OprIOzQviOCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1ba419-acbe-4d71-8c0e-6a1a368aa62f/1/3KECtaSoa_R_8E6OprIOzQviOCY.mft
Manifest number: 0813
Signing time: Mon 07 Oct 2024 13:01:15 +0000
Manifest this update: Mon 07 Oct 2024 13:01:15 +0000
Manifest next update: Tue 08 Oct 2024 13:01:15 +0000
Files and hashes: 1: 3KECtaSoa_R_8E6OprIOzQviOCY.crl (hash: mI+P/HMuVyqhtLvxsP3lo21UbM5mvJE7fD50HCFyyiY=)
2: mzpE5QIUDk2HkeVCYpwXV3rlGnA.roa (hash: d8vnw+4MmaDVPudrpNRptJYRV49C3VHXYHCAqK6C48k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:67:11:d8:6b:8a:72:51:06:03:48:34:ee:a1:c0:d5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca102b5a4a86bf47ff04e8ea6b20ecd0be23826
Validity
Not Before: Oct 7 13:01:15 2024 GMT
Not After : Oct 8 13:01:15 2024 GMT
Subject: CN=baf775e6f89cd674ee97aab8016bacc68a6b1ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ac:c7:f0:3a:57:d7:80:3e:ad:dd:87:49:eb:
0f:d3:50:60:9b:a9:49:e4:6e:ba:16:97:22:9b:1c:
e4:ec:e4:4a:3a:81:6c:f6:6b:4e:04:ad:39:ce:bc:
bd:5e:a0:27:e6:12:24:ca:21:08:a0:e9:90:5d:9e:
de:a7:58:c8:58:93:f8:c4:07:e1:f4:66:3b:73:a9:
7c:b0:b5:0d:6b:fd:5d:39:8d:cf:e7:72:14:32:63:
90:b5:8d:f1:a8:3d:4e:d4:f5:d2:1d:67:57:db:a8:
77:27:f6:77:17:06:a4:1d:99:2f:40:04:04:3e:b1:
a1:da:a7:0a:01:a0:2c:d4:9a:72:35:6a:5d:f7:8b:
59:a9:3a:91:13:09:d5:25:24:6f:5f:ee:c5:92:7f:
11:dd:a7:24:eb:79:83:c1:10:51:2b:ee:a6:ca:21:
8a:29:e0:7b:d3:9a:2e:81:c0:fc:75:40:7a:e7:22:
3a:0e:f2:a4:8d:72:0a:96:7e:e2:97:f8:15:64:c4:
80:47:be:34:53:af:f7:02:ff:3d:56:bc:45:36:bb:
a0:05:18:c8:e2:d8:57:53:4f:b4:13:39:b8:35:c9:
ab:07:0d:e4:fd:90:2a:a7:55:65:64:13:6e:89:5d:
08:eb:6e:35:4a:e1:cd:c4:b9:0c:d7:21:40:98:b5:
c6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F7:75:E6:F8:9C:D6:74:EE:97:AA:B8:01:6B:AC:C6:8A:6B:1E:CE
X509v3 Authority Key Identifier:
keyid:DC:A1:02:B5:A4:A8:6B:F4:7F:F0:4E:8E:A6:B2:0E:CD:0B:E2:38:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KECtaSoa_R_8E6OprIOzQviOCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1ba419-acbe-4d71-8c0e-6a1a368aa62f/1/3KECtaSoa_R_8E6OprIOzQviOCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1ba419-acbe-4d71-8c0e-6a1a368aa62f/1/3KECtaSoa_R_8E6OprIOzQviOCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e3:a9:c2:62:30:f5:51:5b:25:be:bd:20:a8:31:9e:bd:ca:
31:61:62:7b:70:2d:14:bb:60:dd:dc:fc:48:1f:13:16:19:bd:
d9:a0:ad:af:98:d0:c9:43:81:2f:13:64:88:8a:55:16:b5:fd:
e2:bd:d0:bc:ef:75:3e:b2:9d:a5:8c:8b:08:aa:0a:e5:04:d2:
d6:2b:fd:58:9c:23:00:11:56:f3:d6:ce:97:58:7f:8b:27:79:
b5:bd:cd:e2:27:8c:97:f4:38:69:41:ed:b1:49:ab:b0:ca:d4:
d4:7e:e4:a1:98:48:ca:3e:15:5a:05:ba:87:99:24:fd:a7:ba:
4b:19:28:14:15:74:10:ed:73:f7:d4:8a:f6:11:28:05:b9:d5:
f6:0f:8d:9e:80:4f:16:fe:76:7c:03:1e:6d:a6:f4:7a:ea:46:
f8:cb:e1:bd:f5:b1:46:7e:ed:e3:61:6e:64:24:6f:95:aa:fd:
31:fa:c5:76:35:53:76:0b:da:e2:1a:07:30:8d:96:d2:10:66:
88:33:93:d7:e7:85:c3:be:31:e7:74:9c:ca:4f:79:a2:34:74:
3a:41:02:cb:cf:03:e7:f6:0e:fc:dc:ba:e0:09:f4:8f:06:db:
65:75:fd:dc:2e:9b:e3:3a:8e:be:8a:00:0e:22:ce:a7:23:98:
74:21:8c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:45 2025 by rpki-client