Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
File: 3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft (raw, json)
Hash identifier: GilyaoCQSZizYFRU6Y5r6eh8UfXPxaJHJjRmBLIKJ0c=
Subject key identifier: 24:7E:6E:E6:4C:1D:2B:BC:2B:93:CC:23:47:70:43:71:4A:DB:B7:89
Authority key identifier: DE:A8:5F:21:66:8A:98:D7:E8:1A:74:18:3F:0C:CE:51:30:86:60:1B
Certificate issuer: /CN=dea85f21668a98d7e81a74183f0cce513086601b
Certificate serial: 0194BD85891E134FD9D63742EC268A0FE798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
Manifest number: 03BE
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: 3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl (hash: AnUCZ5rAApOR7oFpoa1ROXflfuSw569h4nV7fpbNULE=)
2: Vnw9H8iqt-gts3LY3CEVf7p6PaE.roa (hash: s2vDBc3kUppwqWxQSMIljxY/yV7+Xm77EH+5A9yGbgM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:89:1e:13:4f:d9:d6:37:42:ec:26:8a:0f:e7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea85f21668a98d7e81a74183f0cce513086601b
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=247e6ee64c1d2bbc2b93cc23477043714adbb789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:71:29:0e:ee:ef:86:c3:40:fa:e8:32:8c:b6:
c6:f6:7b:42:9c:da:3c:18:06:d8:55:98:84:19:cf:
2f:31:f0:69:b6:a2:d3:5e:fe:47:e4:d8:8a:55:61:
3e:64:53:e0:f9:4e:78:77:a4:9f:de:19:52:f9:a7:
24:5a:2e:f0:6d:56:9f:92:98:c7:42:ae:ae:1e:c5:
08:16:8e:1a:b1:7a:a9:4c:74:d7:2a:99:a9:e5:85:
4d:d2:a4:87:bf:2e:e4:0f:09:7d:c9:ff:54:f8:ac:
c3:d7:06:3d:bc:4d:b8:3c:db:6a:1b:82:75:6f:1c:
99:a6:a2:74:1e:4e:85:72:00:4f:48:ec:d3:ab:20:
23:93:80:cd:04:c6:79:07:0f:31:ec:93:35:1c:c3:
7f:a2:55:22:4d:8a:c7:c0:f2:e8:64:6b:26:9f:a9:
70:41:c6:d3:cf:55:7f:77:c8:5b:ee:aa:49:7a:8b:
10:0e:72:f2:e7:87:09:6c:9b:dd:12:50:a4:7f:86:
61:ed:b3:71:6c:e6:8a:e0:f0:df:11:af:b1:f3:5b:
42:ae:45:24:38:b8:01:0b:da:2a:88:9a:a2:7b:5b:
51:da:dd:87:24:1a:6f:2b:3f:07:7d:7b:31:d3:db:
1d:1b:01:3d:ef:8b:0e:76:dc:03:40:fc:99:0e:a2:
ca:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7E:6E:E6:4C:1D:2B:BC:2B:93:CC:23:47:70:43:71:4A:DB:B7:89
X509v3 Authority Key Identifier:
keyid:DE:A8:5F:21:66:8A:98:D7:E8:1A:74:18:3F:0C:CE:51:30:86:60:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:2c:22:f1:41:86:c2:60:73:80:a4:7c:7e:da:44:01:f6:4b:
c4:70:f1:a2:70:47:b4:58:17:48:d0:3d:20:5a:2c:f7:bd:cd:
ef:c9:1c:21:af:12:a4:5a:62:e7:c1:97:6a:56:47:1a:32:e3:
ff:f0:8d:91:cc:82:ad:bf:f1:1a:cf:47:ca:1d:20:92:a2:05:
cd:62:a8:ef:38:3d:81:40:cc:01:cd:85:88:08:61:b2:f9:1a:
06:7a:e7:87:3a:54:41:d1:44:f4:ae:54:93:1f:2f:7e:6e:29:
46:c3:cc:99:f0:2c:0d:2b:3d:f2:d1:a0:fc:1f:a4:20:92:58:
84:09:0c:22:eb:c4:de:ec:98:b7:ad:aa:08:7d:28:9f:be:26:
4d:dd:36:69:c6:ba:91:8d:0e:1b:da:65:bd:6d:00:62:9a:a3:
6f:6a:30:57:46:16:23:eb:00:dd:ff:40:63:7e:0c:59:89:b4:
1d:98:9d:4c:ac:e2:0c:fb:34:1a:8f:c3:41:d7:12:80:c7:21:
7a:11:0a:30:51:f1:28:f5:20:a0:44:12:ae:23:ed:6c:41:f6:
9c:57:91:98:a0:ee:4f:84:5c:35:6b:02:96:23:32:db:5a:51:
26:dd:38:ea:63:51:4e:90:56:ed:7c:ac:ad:5e:fe:f6:ac:92:
27:74:b2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:36:57 2025 by rpki-client