Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
File: 3hSkKeZlirtwo3ksFy1-1i64-iY.mft (raw, json)
Hash identifier: SDpgRqgO7QaTaMV8mc0m2JOcw6XzQoCU1phD1s6pPbc=
Subject key identifier: E8:1D:98:18:AB:E8:9B:2B:B7:3F:5B:ED:4F:27:00:92:AD:FC:E9:99
Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
Certificate issuer: /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Certificate serial: 0194BC0510639331CAEE3A1A738D8BB036AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
Manifest number: 0E10
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: 3hSkKeZlirtwo3ksFy1-1i64-iY.crl (hash: IXjkJciJLV3/YN4VFPhiBtIqLcUxHJ+k7yTcA8e872s=)
2: HbrG3H8i4MVchy7ux-rBNewfgN4.roa (hash: ZEnkqludW6ORRLo4vaUnR4azLQNvPJWfXdiBq5telHQ=)
3: eqT6wyPQANegQWczS_E8NsRIGH0.roa (hash: uVTDWyi87OupvvigMLyo7l17Ar6OD8Dv20/y/RB28lE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:10:63:93:31:ca:ee:3a:1a:73:8d:8b:b0:36:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=e81d9818abe89b2bb73f5bed4f270092adfce999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:62:9b:04:05:8c:2f:78:e0:1a:99:d1:c4:c8:
17:0d:53:9c:fa:46:a0:6b:5d:fe:ba:97:a2:2d:d4:
9b:a9:07:38:2f:a8:84:0d:1a:d4:96:98:22:12:0a:
1f:e5:e0:77:7d:2a:2d:29:99:56:20:97:a9:1e:ff:
01:0f:81:f4:b8:07:f3:60:6b:a2:c6:20:49:42:b2:
a7:59:23:e3:00:5c:eb:7e:12:d5:cf:13:bf:db:58:
94:9b:8f:68:49:92:09:b9:8f:6e:6e:54:de:0d:3e:
fc:09:c3:6b:2d:0f:c4:88:ae:b0:dd:4e:ed:5e:64:
2c:c5:8e:e4:3b:e0:77:c7:d5:d3:3c:e1:72:49:88:
71:04:c1:01:20:65:47:60:61:bb:7b:be:e8:27:a1:
df:51:cb:92:ff:27:a6:b1:8e:e4:4d:43:5b:ed:06:
18:5d:5c:60:0c:84:c6:9b:87:ae:76:f5:f9:3d:d8:
ff:a1:8c:c2:47:f6:09:67:28:1b:9d:32:9e:35:62:
d9:1c:3f:23:73:12:f0:26:0d:d6:8b:fd:80:a5:0b:
83:99:e1:75:0e:75:a0:f7:6d:d9:7e:91:25:88:a1:
48:25:9d:d5:15:f8:bf:f8:d1:bd:a7:7e:d0:ba:10:
94:87:18:56:76:64:d3:cb:0a:2c:7b:68:1d:f2:98:
8c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1D:98:18:AB:E8:9B:2B:B7:3F:5B:ED:4F:27:00:92:AD:FC:E9:99
X509v3 Authority Key Identifier:
keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:c2:72:9c:a3:c1:84:89:25:f7:96:a0:61:8d:dc:9a:01:be:
af:18:56:f4:e6:87:94:e8:27:7f:ec:bc:47:d4:a5:33:c9:88:
43:9e:75:62:93:76:77:f9:41:59:34:6a:b9:ce:77:9c:53:a5:
86:e3:81:d2:2e:55:c2:d2:bc:ee:7b:95:ee:ef:d1:04:71:f2:
07:39:fd:79:82:e8:a4:45:8e:1c:83:b4:96:bf:70:e0:0e:ac:
63:a4:66:a6:d0:97:19:28:b8:2a:b7:f2:cd:87:53:cd:d2:30:
02:d9:3d:4f:2f:c1:37:80:2f:6c:17:2d:f4:7b:89:e7:71:40:
56:11:48:7e:4a:e9:44:6b:f3:5b:68:42:b2:4c:3b:a3:0a:78:
73:27:b3:d9:07:2f:c1:17:8f:37:17:96:f3:b8:5b:85:6a:6e:
b9:3a:b0:56:3c:97:f1:63:99:01:7e:22:34:b1:b9:55:b6:06:
2f:23:bb:7d:0d:4d:dc:39:1b:e0:cd:5b:0c:d7:28:c5:35:27:
3b:59:aa:35:6b:49:c8:2b:81:0a:82:63:c3:72:0a:e8:d5:b5:
85:29:2d:71:28:39:c3:51:2f:07:a9:be:37:8a:cf:2d:ec:30:
58:b5:94:be:e5:34:20:76:12:5b:fe:3a:28:14:40:35:de:de:
47:5c:c6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:44 2025 by rpki-client