Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
File: 3QEJONnvchWPyYvUXecbCxqf9yk.mft (raw, json)
Hash identifier: g1IYsilE4SQKRmOQP+vSuNZxjXO6EDCRpxyCThfxGAE=
Subject key identifier: 5D:E7:51:42:DB:B8:CD:ED:23:51:28:C8:61:E2:91:9C:66:97:0F:6C
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial: 0194BD856F92918E4BBC1AB02E9D3A07C703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
Manifest number: 066D
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: 3QEJONnvchWPyYvUXecbCxqf9yk.crl (hash: rO7PsnfQWv+ByNa2dkG+GJCXvXIzu+yuGKLvK1SatWI=)
2: W8Dpmpt_1-01qSbotVM15n3GSek.roa (hash: 8bMbdbcHjYf7KXHu+ym0lwgv0cPY/hCCrTp1Qv0O4sU=)
3: d-If6rwOnPiVqU22C8IZzGvMPvc.roa (hash: giLRuwy5wW+MIOBjFAF7Pd0PEoYtI2K0pgdHGw83fkc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6f:92:91:8e:4b:bc:1a:b0:2e:9d:3a:07:c7:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=5de75142dbb8cded235128c861e2919c66970f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:85:00:67:f0:e6:91:82:62:e5:ff:1a:58:86:
b9:ea:6b:69:6a:5c:57:dc:63:28:9a:a5:48:ab:95:
1a:fe:b3:12:a5:06:bb:f8:1f:a4:1a:2a:fe:47:14:
2d:e3:92:97:74:9f:2f:0a:3b:38:cc:38:d3:01:4e:
13:88:a6:44:27:bc:08:43:db:8e:92:06:f9:07:be:
1a:6d:b8:34:22:0a:70:f1:ae:06:b3:ff:ba:99:e0:
00:46:8d:fe:15:84:e4:4d:52:e4:6f:d4:99:ec:0d:
47:ab:49:42:8e:ce:f0:50:07:5d:d8:1e:40:9b:ff:
ee:c2:3c:bd:6a:bc:d7:3d:5e:21:8b:70:da:fb:54:
8a:e4:ea:07:d8:a5:4b:39:7f:59:12:ab:59:29:9b:
7e:3f:2b:a1:7d:31:c6:e7:e1:3e:aa:ab:22:85:60:
19:ba:8e:6c:3d:68:09:aa:50:c8:5b:b7:a9:bf:b4:
e7:ef:dc:6c:81:ff:e1:23:d0:b3:67:f2:a5:b1:65:
ab:50:94:7b:9e:54:6a:f8:6a:32:e4:df:59:5e:e0:
2a:7a:a2:c1:1d:fb:f9:00:21:3f:3c:9d:5e:11:14:
c6:9a:51:3e:0e:4d:0b:24:4c:1b:49:e6:94:29:54:
7a:a0:f2:07:81:bc:e1:8f:44:d5:d2:8b:cf:2c:1b:
c1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E7:51:42:DB:B8:CD:ED:23:51:28:C8:61:E2:91:9C:66:97:0F:6C
X509v3 Authority Key Identifier:
keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:6f:f1:7b:67:fe:9f:73:2d:2b:31:52:3f:a3:06:37:f3:07:
c0:b0:d5:d2:b6:88:45:d8:7f:14:0e:c4:a4:d2:d0:e1:b8:53:
ae:75:aa:55:28:35:a7:62:23:af:a3:b0:e2:1e:c3:c0:61:72:
0a:6e:14:76:07:24:b6:77:c2:51:1b:5a:94:70:62:47:0a:91:
70:35:c4:cb:e3:83:bc:96:34:49:b3:1e:ba:70:20:e5:8e:25:
fb:50:14:7e:d5:22:a3:26:78:e2:fa:02:48:35:a9:ae:f0:15:
aa:1a:fe:97:d5:a2:46:6f:5e:40:98:d3:68:f4:b9:9d:a6:db:
83:26:31:f1:0f:55:ba:8f:5e:79:75:49:5f:87:a0:30:9c:35:
12:9c:cd:81:4d:6f:1f:5d:6b:bf:14:50:4f:65:b1:ca:cf:e7:
8d:5c:5d:16:88:10:30:29:a5:21:44:fc:02:c8:26:bc:f9:28:
aa:4f:a7:7c:fe:b0:66:a1:33:a9:6a:95:40:c7:be:5a:0e:76:
a5:bb:59:63:d2:8c:02:20:64:90:a6:ac:bd:54:76:3e:cf:df:
2a:18:3d:c0:e6:a7:b7:10:d2:a7:7e:30:97:d1:b2:ff:df:ed:
56:f5:8e:be:1c:44:fc:f7:67:80:ab:e9:74:c9:b2:c6:a2:50:
8f:2c:00:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:27 2025 by rpki-client