Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
File: 32QSxd3xKOxxSvrqSD6Hsbx01B8.mft (raw, json)
Hash identifier: xVV2zNeV3X3QVrgKRIyALC2N6jtjKUYMRcE0TYlB3BY=
Subject key identifier: 3F:96:9B:52:C1:B8:F5:31:E9:38:B4:08:EE:F2:C0:A2:8A:77:FD:E3
Authority key identifier: DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
Certificate issuer: /CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Certificate serial: 0195E159EB16370C01AF593FBDF3BDB15312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
Manifest number: 037B
Signing time: Sat 29 Mar 2025 10:02:01 +0000
Manifest this update: Sat 29 Mar 2025 10:02:01 +0000
Manifest next update: Sun 30 Mar 2025 10:02:01 +0000
Files and hashes: 1: 32QSxd3xKOxxSvrqSD6Hsbx01B8.crl (hash: fZKnZfo84JnRsCitthebE/zeUBroioF+5DXi0ey2h7U=)
2: NldJhq1MAVdUgbD6n6XKOd_rYuI.roa (hash: nicnFQBAIXmcU10eabjaRC66nw/nEzjS6x4xuq2azqI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:eb:16:37:0c:01:af:59:3f:bd:f3:bd:b1:53:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Validity
Not Before: Mar 29 10:02:01 2025 GMT
Not After : Mar 30 10:02:01 2025 GMT
Subject: CN=3f969b52c1b8f531e938b408eef2c0a28a77fde3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:02:5b:f2:b6:0c:40:f2:10:5b:9a:a0:bf:30:
d2:7a:99:81:63:18:97:97:8d:8e:f8:34:fc:ce:db:
9d:d1:79:03:50:89:ff:5f:bf:f9:56:3b:4a:84:5c:
3b:e3:a5:50:e8:20:23:55:c1:a8:df:ad:ad:bf:51:
32:60:47:37:4d:c2:60:29:0c:b6:94:a4:62:85:8c:
26:04:68:87:91:fc:3e:c7:3d:24:43:37:6e:a8:bb:
4f:bf:86:7c:f3:b7:3c:ba:fd:08:71:08:57:b0:1c:
fc:9e:d4:ad:bd:7c:6d:df:a9:5b:04:0c:8d:16:55:
70:4c:53:4e:79:fc:88:66:c3:e5:c0:cc:8f:89:6f:
7a:f6:99:75:e7:5b:4b:07:00:e0:3f:08:ee:7f:7b:
da:ed:0b:4f:7f:65:99:d6:ea:f5:fb:e8:62:f0:7f:
b1:d8:5a:67:fb:b8:5d:e6:79:78:0a:4b:41:39:6f:
fd:6d:0e:c5:0b:03:58:91:1c:f5:ba:f2:ee:9c:a4:
a1:6d:0b:f6:5b:c7:1b:c0:3f:33:79:66:f9:d0:08:
6b:85:3b:dd:a1:d7:21:9f:05:af:2d:13:12:e7:29:
1e:f7:46:7a:f2:bf:81:96:76:86:13:ed:95:fa:c4:
a7:60:3e:16:02:77:48:44:06:30:5f:46:12:38:99:
5a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:96:9B:52:C1:B8:F5:31:E9:38:B4:08:EE:F2:C0:A2:8A:77:FD:E3
X509v3 Authority Key Identifier:
keyid:DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c7:5d:3f:da:60:3a:1d:c3:e8:2a:10:55:54:06:74:7c:46:
b5:92:4e:9d:ba:6c:fc:f1:fa:13:e2:06:a3:5e:16:0d:d7:f0:
c2:45:15:93:8c:09:1c:76:cc:94:a4:bf:d5:3e:b7:65:a0:bc:
a9:55:26:3c:15:c5:c0:b7:52:38:a6:da:00:f4:01:14:1a:96:
a7:2a:72:e1:4d:4c:a8:15:0d:94:cd:40:a5:ee:a8:8c:81:2d:
e7:2e:bc:bb:dc:a4:dc:f0:df:9c:ab:f1:c4:a8:99:e7:48:51:
f7:a9:04:06:99:31:85:59:da:7e:32:b2:31:c5:a1:1e:eb:d6:
7b:54:9c:45:b0:d9:bf:a6:ee:1e:f3:44:ce:a2:71:32:70:d9:
9d:f0:d4:24:bc:b4:1f:f3:12:8b:8d:83:7c:42:e1:45:75:94:
a5:25:25:fd:de:7e:36:c0:c4:44:06:21:1e:05:63:92:a5:64:
89:27:5d:c1:7d:5d:74:77:48:8b:7f:e2:eb:37:fb:b3:88:f0:
59:af:42:8a:30:97:26:1b:55:17:23:3f:59:4d:df:54:28:6f:
fb:29:83:aa:14:76:dd:04:8e:7b:fe:6a:c1:ca:7b:14:8e:0d:
5b:ef:13:51:8a:6e:e7:ea:dd:e7:a4:3f:62:33:3a:5e:0c:fb:
f0:ed:2b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:05:16 2025 by rpki-client