Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a3c775-39c5-4bbb-b33e-d929e2b76d68/1/38Cx3w570ABF6-EDAsMg_726BxY.mft
File: 38Cx3w570ABF6-EDAsMg_726BxY.mft (raw, json)
Hash identifier: HEpPGmaPUWRqij/RmmkxNnSnU7FV0tVb6j0spNy9QS0=
Subject key identifier: 30:A5:F9:FA:9E:01:99:6C:C6:EA:10:DD:65:3D:A2:58:DC:38:ED:5D
Authority key identifier: DF:C0:B1:DF:0E:7B:D0:00:45:EB:E1:03:02:C3:20:FF:BD:BA:07:16
Certificate issuer: /CN=dfc0b1df0e7bd00045ebe10302c320ffbdba0716
Certificate serial: 0193F1AC6ABDB9F8C4D6226BFC4E11784A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/38Cx3w570ABF6-EDAsMg_726BxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a3c775-39c5-4bbb-b33e-d929e2b76d68/1/38Cx3w570ABF6-EDAsMg_726BxY.mft
Manifest number: 13C4
Signing time: Mon 23 Dec 2024 04:00:28 +0000
Manifest this update: Mon 23 Dec 2024 04:00:28 +0000
Manifest next update: Tue 24 Dec 2024 04:00:28 +0000
Files and hashes: 1: 38Cx3w570ABF6-EDAsMg_726BxY.crl (hash: Bkj8jO4yajMKtltM9I7vTz+CW+QzTaM1BXpihMyiuZA=)
2: hlHy87qau-urwDHT7EnyS-T8r7E.roa (hash: cd9XMnhYOlvm4qqxTIT7UTrHbL1XAjJzcOapSNV2mas=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f1:ac:6a:bd:b9:f8:c4:d6:22:6b:fc:4e:11:78:4a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfc0b1df0e7bd00045ebe10302c320ffbdba0716
Validity
Not Before: Dec 23 04:00:28 2024 GMT
Not After : Dec 24 04:00:28 2024 GMT
Subject: CN=30a5f9fa9e01996cc6ea10dd653da258dc38ed5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:ec:cf:8a:6f:5f:cb:d6:d8:b7:19:77:a7:
86:76:61:33:b9:55:76:c5:b7:65:53:35:f7:2c:d9:
5d:ba:e5:a0:df:6c:4a:55:be:ef:6e:99:c8:c5:29:
e7:f9:47:f9:75:cb:63:2c:27:f1:bd:2f:da:ad:a8:
ee:1f:39:b5:56:58:cd:f1:d7:b2:75:ff:a5:95:81:
2a:78:d7:30:5b:94:24:0a:fb:43:e6:70:b0:ea:f6:
56:df:47:0e:7d:9f:cf:d7:d8:54:6e:e2:c0:20:1b:
c6:77:d1:39:94:11:47:b3:7a:17:3d:2f:9a:0a:32:
6c:95:49:86:18:1e:1e:9a:76:fe:3c:33:bd:7f:1c:
70:b9:ee:0c:cb:a4:85:c0:6c:63:6b:27:a0:69:cc:
75:17:a2:1e:6c:1f:90:07:cf:4e:fe:ff:bc:fe:4b:
8c:a5:98:5f:62:9e:5a:cf:33:92:96:b9:c1:5a:4a:
b9:89:34:55:f5:ae:3b:0e:40:98:32:0a:96:a6:a4:
42:20:64:d5:8d:f4:30:a1:19:01:50:0f:12:1c:06:
56:cc:4e:40:01:69:d2:81:1f:d7:1d:84:8f:27:d3:
c6:b9:9b:4f:d1:66:36:31:2d:0b:2d:ae:b3:47:31:
cd:fa:15:76:3b:a3:be:e4:c6:98:70:aa:1e:56:ad:
86:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A5:F9:FA:9E:01:99:6C:C6:EA:10:DD:65:3D:A2:58:DC:38:ED:5D
X509v3 Authority Key Identifier:
keyid:DF:C0:B1:DF:0E:7B:D0:00:45:EB:E1:03:02:C3:20:FF:BD:BA:07:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38Cx3w570ABF6-EDAsMg_726BxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a3c775-39c5-4bbb-b33e-d929e2b76d68/1/38Cx3w570ABF6-EDAsMg_726BxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a3c775-39c5-4bbb-b33e-d929e2b76d68/1/38Cx3w570ABF6-EDAsMg_726BxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:42:38:72:94:a3:c8:6e:9c:fd:94:85:05:8d:46:9e:bd:93:
0c:38:a9:09:00:58:a5:b8:2c:53:0f:a4:bf:4d:d5:d0:b8:5c:
d8:98:b0:02:d9:f0:5c:b6:29:b0:b3:87:1c:2d:1d:06:b4:fd:
e4:fe:7f:a9:6f:2d:fc:20:e7:e7:e7:07:a1:ba:52:73:4e:a3:
79:e8:02:23:5b:31:87:96:84:86:a6:a0:8c:4e:8d:50:ed:bb:
6c:84:89:31:90:ae:91:d8:a0:96:24:3a:30:34:23:bc:a5:3a:
bb:41:ca:38:12:97:6c:d0:f8:97:22:eb:f5:a8:af:bb:e9:1b:
66:1c:c0:ab:c7:97:fc:7c:43:db:24:63:06:38:cb:5c:a5:68:
72:ad:bd:c5:47:60:cd:73:21:65:4d:42:6d:b7:b8:e1:bb:8c:
35:50:ab:cc:ff:bc:a0:18:f3:fc:33:c0:87:40:9b:0c:e2:82:
e8:52:b0:be:4e:78:82:db:ef:06:ab:60:a0:66:07:bc:9f:4e:
97:61:4e:f7:47:f2:b9:f4:20:f1:75:4f:12:7c:74:60:2f:89:
12:b9:5a:55:70:c3:55:6f:da:7e:57:33:1a:1a:be:0d:66:0a:
85:46:e9:58:ae:89:c7:d0:66:83:ac:32:44:28:3b:f9:8d:9c:
d9:a6:5f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:47 2025 by rpki-client