Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f48fe4-b8e9-4555-865e-e73afd1222c6/1/3-uby8pq1fjYmbOJCe77dZ46pg0.mft
File: 3-uby8pq1fjYmbOJCe77dZ46pg0.mft (raw, json)
Hash identifier: j3atOt5q+wfxIuUS5gZV8/jcFJBeJ2k+33snb2wFtmo=
Subject key identifier: 8E:66:C1:2C:9A:17:47:4B:D4:B1:75:70:09:32:DF:1B:BA:32:61:DD
Authority key identifier: DF:EB:9B:CB:CA:6A:D5:F8:D8:99:B3:89:09:EE:FB:75:9E:3A:A6:0D
Certificate issuer: /CN=dfeb9bcbca6ad5f8d899b38909eefb759e3aa60d
Certificate serial: 01938AADDF3432EE8BBF706FA041F9E2F8D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-uby8pq1fjYmbOJCe77dZ46pg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f48fe4-b8e9-4555-865e-e73afd1222c6/1/3-uby8pq1fjYmbOJCe77dZ46pg0.mft
Manifest number: 0AB0
Signing time: Tue 03 Dec 2024 04:01:10 +0000
Manifest this update: Tue 03 Dec 2024 04:01:10 +0000
Manifest next update: Wed 04 Dec 2024 04:01:10 +0000
Files and hashes: 1: 3-uby8pq1fjYmbOJCe77dZ46pg0.crl (hash: xlwykK+EzG8jF/yeoK3/yURWIC0jVI7j6L7+5UEZOHw=)
2: PE34AAQM9jiDUgP7ydltWSTBO7Q.roa (hash: jMBDOBg1y6tmmZFLUyZZ+ZXvGwbuxp9x5WGQhnazZwI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8a:ad:df:34:32:ee:8b:bf:70:6f:a0:41:f9:e2:f8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfeb9bcbca6ad5f8d899b38909eefb759e3aa60d
Validity
Not Before: Dec 3 04:01:10 2024 GMT
Not After : Dec 4 04:01:10 2024 GMT
Subject: CN=8e66c12c9a17474bd4b175700932df1bba3261dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:f6:7e:42:d3:2b:1e:f9:90:4c:b2:33:bc:
87:b0:8e:6f:cf:f6:ba:f8:58:69:56:5e:bb:6a:2c:
92:00:d8:3b:4d:f5:a0:92:74:9f:c2:42:d2:b1:86:
53:b3:8a:88:92:66:c0:97:93:08:c2:f8:e4:c7:a3:
97:c9:18:4b:18:60:b1:f7:31:cc:37:ad:ab:41:c5:
c3:40:76:53:e0:d3:be:f9:aa:1d:e8:74:fa:49:2e:
71:d4:fd:43:09:ff:d3:20:b8:bd:f4:74:e3:e4:a5:
0d:0a:1e:2a:fe:03:d2:70:c8:17:e8:a7:77:61:61:
3f:7e:57:b4:fb:67:ed:c0:d4:e0:a1:b9:44:b6:45:
20:c7:75:f6:88:16:5b:d3:ee:4c:3f:e2:61:5e:84:
e8:45:76:f6:0a:38:a6:1e:90:17:01:cf:27:d7:66:
70:2a:b7:3f:a3:51:91:fa:1d:00:90:83:df:7f:e0:
c9:25:1f:b6:04:fe:37:d7:77:92:a1:fc:e4:49:a4:
2d:f0:aa:73:e6:5f:16:a7:e5:f8:8e:29:a5:30:75:
c5:d7:06:fe:c6:df:43:5e:05:a7:eb:91:2c:fd:ec:
76:c6:4f:07:6a:34:59:fc:5e:b9:8c:9a:ab:e3:d1:
e6:2c:ae:01:5e:32:08:ad:65:55:12:92:9b:79:40:
ee:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:66:C1:2C:9A:17:47:4B:D4:B1:75:70:09:32:DF:1B:BA:32:61:DD
X509v3 Authority Key Identifier:
keyid:DF:EB:9B:CB:CA:6A:D5:F8:D8:99:B3:89:09:EE:FB:75:9E:3A:A6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-uby8pq1fjYmbOJCe77dZ46pg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f48fe4-b8e9-4555-865e-e73afd1222c6/1/3-uby8pq1fjYmbOJCe77dZ46pg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f48fe4-b8e9-4555-865e-e73afd1222c6/1/3-uby8pq1fjYmbOJCe77dZ46pg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6f:80:c7:a8:8c:fc:e1:de:83:f2:ec:f8:cd:6c:0b:fe:e7:
96:be:65:39:9c:6b:cd:93:55:e9:37:03:53:56:5f:7b:ee:d6:
c9:fc:b2:59:66:91:2c:9e:22:34:d4:78:e1:b3:0c:e7:33:82:
75:fe:38:57:6e:2e:14:78:44:1d:48:3d:8c:94:66:f3:4a:e5:
4e:4c:f1:f7:69:85:b4:9d:13:88:f4:ce:62:7a:64:67:d3:92:
eb:9b:9c:8a:8f:ee:1c:38:d8:2b:5c:d3:b2:fb:f9:b5:ba:0c:
d5:92:91:0d:24:1d:c7:34:3e:80:40:e9:67:f9:e3:42:f8:43:
46:8f:e3:f5:53:a4:bf:13:cf:56:59:5a:a6:b9:89:3a:e8:76:
5d:30:31:5c:3f:94:c9:e0:2a:de:69:87:a9:e7:c8:e8:7d:a4:
fe:47:ac:b7:f9:4f:76:4e:ca:dd:bf:16:b8:28:bb:a6:3f:4f:
4e:82:fc:5b:c2:d0:be:47:e7:aa:12:6f:ad:e3:e2:f9:2b:82:
dc:2c:db:c1:2a:cb:28:a4:1d:f4:4a:77:de:de:af:13:bd:8f:
e0:30:cb:35:d6:91:43:87:42:7f:d7:ed:5b:ab:a3:0a:ac:a7:
21:ea:1d:7f:1c:68:20:d8:4b:ee:27:c6:d9:c3:31:3c:49:19:
89:6a:6f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:23 2025 by rpki-client