Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/41a53b-3543-46c7-a567-c95004f4b891/1/b3AW9KTPZ0YJ8GKnppXK0eSgPfU.mft
File: b3AW9KTPZ0YJ8GKnppXK0eSgPfU.mft (raw, json)
Hash identifier: s+6HkRzCRhh0TXrhogr/Z2DrdhfVahk0rxkyeQZyPjA=
Subject key identifier: 4E:A9:50:11:39:21:6D:88:BB:78:32:0F:D9:59:47:78:32:DC:4F:D3
Authority key identifier: 6F:70:16:F4:A4:CF:67:46:09:F0:62:A7:A6:95:CA:D1:E4:A0:3D:F5
Certificate issuer: /CN=6f7016f4a4cf674609f062a7a695cad1e4a03df5
Certificate serial: 0195A24395C12A0E188FF06C7E3A0962B8D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3AW9KTPZ0YJ8GKnppXK0eSgPfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/41a53b-3543-46c7-a567-c95004f4b891/1/b3AW9KTPZ0YJ8GKnppXK0eSgPfU.mft
Manifest number: 07D8
Signing time: Mon 17 Mar 2025 04:01:32 +0000
Manifest this update: Mon 17 Mar 2025 04:01:32 +0000
Manifest next update: Tue 18 Mar 2025 04:01:32 +0000
Files and hashes: 1: b3AW9KTPZ0YJ8GKnppXK0eSgPfU.crl (hash: 0cCTPXS6292p91xxrLLB2YkaJijlJLcmDOTIB6UgcPQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a2:43:95:c1:2a:0e:18:8f:f0:6c:7e:3a:09:62:b8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7016f4a4cf674609f062a7a695cad1e4a03df5
Validity
Not Before: Mar 17 04:01:32 2025 GMT
Not After : Mar 18 04:01:32 2025 GMT
Subject: CN=4ea9501139216d88bb78320fd959477832dc4fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ca:cc:5f:63:35:14:2c:9d:f3:f5:83:22:7a:
6c:94:9e:99:27:d5:7d:c0:d6:cd:b0:63:d0:e6:92:
2b:4a:6c:5d:d8:5b:e7:1c:e7:0d:30:8d:78:9f:bf:
bf:61:e8:b0:1d:50:e7:47:7c:eb:48:68:4f:7c:c5:
3f:9d:b8:34:cb:fa:73:e9:bd:a8:a7:2d:15:b9:39:
9e:86:0c:c3:6e:37:b1:3e:a9:a9:67:4a:83:08:76:
3c:1c:35:9f:d1:20:f5:7b:dc:c2:a9:e9:ea:38:1b:
59:83:c5:f2:9d:ca:bc:08:3b:0f:27:f3:e9:b4:cf:
81:5b:b7:c8:49:2c:9c:98:80:02:de:dc:bd:e5:b4:
00:3d:85:e1:a0:ff:bb:94:77:26:84:29:af:62:86:
48:1e:a2:6b:35:14:ee:38:d9:6d:a3:63:b5:d1:6d:
a4:07:62:c9:30:a3:1b:25:d6:dd:4f:93:e8:02:32:
a0:fc:49:0a:50:09:94:97:4c:e5:ed:49:79:2b:e1:
e8:f2:55:0e:da:30:23:73:f9:ab:29:8a:6a:0d:c8:
e9:d7:1f:b5:ea:de:f0:c7:81:37:e7:50:48:5e:1b:
cc:00:16:f8:4c:67:0e:17:38:eb:21:48:25:d4:f5:
89:54:96:5f:bb:f3:28:39:8b:a1:bf:ed:56:01:77:
bf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A9:50:11:39:21:6D:88:BB:78:32:0F:D9:59:47:78:32:DC:4F:D3
X509v3 Authority Key Identifier:
keyid:6F:70:16:F4:A4:CF:67:46:09:F0:62:A7:A6:95:CA:D1:E4:A0:3D:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3AW9KTPZ0YJ8GKnppXK0eSgPfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/41a53b-3543-46c7-a567-c95004f4b891/1/b3AW9KTPZ0YJ8GKnppXK0eSgPfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/41a53b-3543-46c7-a567-c95004f4b891/1/b3AW9KTPZ0YJ8GKnppXK0eSgPfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:bb:0e:0b:95:b5:ba:c7:36:13:af:63:5c:44:d4:1e:13:04:
2b:83:80:2a:98:03:35:a3:ab:10:9c:04:18:a4:78:b6:00:dd:
e6:9f:6c:41:7f:ab:3b:e6:84:06:dc:bf:46:ca:79:54:c2:77:
c4:3d:63:00:47:fa:71:02:af:ae:37:18:3c:f4:11:b9:1b:57:
1d:48:79:8c:95:d9:a1:1b:98:10:e2:94:0b:d7:58:5b:00:5d:
cd:7d:a6:74:ba:a2:62:bf:08:68:eb:25:66:08:ef:70:be:fb:
d6:8b:9a:54:5a:a7:74:d4:b0:f9:ca:54:62:38:83:7d:4e:7b:
85:f7:0d:5c:a6:87:a1:70:70:45:2b:7d:5c:16:19:8e:29:43:
2b:7d:d2:5e:fc:4c:16:ee:d6:d2:bc:aa:7d:e9:cc:2e:61:1d:
b8:1a:bb:e2:30:60:e9:d9:09:4a:94:d9:96:ac:12:f4:37:d5:
e9:ec:ea:4f:31:4e:c5:44:26:96:8d:76:8d:54:f2:a8:d8:65:
43:b3:20:59:35:f5:45:17:c3:9d:a9:f3:3b:8c:7a:47:c4:3e:
8b:5d:c8:ff:9c:ec:7b:63:9c:d3:ff:97:ac:86:6f:b1:db:35:
35:0e:38:00:8a:d2:36:9f:0f:86:c0:e7:79:87:5b:97:36:01:
e6:8a:31:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:46:12 2025 by rpki-client