Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
File: 3pj4NjKYKX-6uupodyArXEQOWpA.mft (raw, json)
Hash identifier: S+/GM9s/8rCejXbJ+pi/CxwI0SOqUHLtZZv3GMNTlzM=
Subject key identifier: 3B:23:CB:D2:45:06:D3:A7:4E:98:31:D2:6D:6A:53:CB:2E:F4:3B:00
Authority key identifier: DE:98:F8:36:32:98:29:7F:BA:BA:EA:68:77:20:2B:5C:44:0E:5A:90
Certificate issuer: /CN=de98f8363298297fbabaea6877202b5c440e5a90
Certificate serial: 0194BBCE7147DBA4870C3F36FBCE12070817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
Manifest number: 0AB9
Signing time: Fri 31 Jan 2025 10:00:56 +0000
Manifest this update: Fri 31 Jan 2025 10:00:56 +0000
Manifest next update: Sat 01 Feb 2025 10:00:56 +0000
Files and hashes: 1: 3pj4NjKYKX-6uupodyArXEQOWpA.crl (hash: j8igh4Rn35QWFJ7eKqdc2kf0dTYX8+cjctU07LHKu6o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:71:47:db:a4:87:0c:3f:36:fb:ce:12:07:08:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de98f8363298297fbabaea6877202b5c440e5a90
Validity
Not Before: Jan 31 10:00:56 2025 GMT
Not After : Feb 1 10:00:56 2025 GMT
Subject: CN=3b23cbd24506d3a74e9831d26d6a53cb2ef43b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:10:ea:4f:de:89:88:06:de:77:ed:2f:7a:8c:
e2:2f:36:fd:b2:58:b5:85:c6:04:da:0d:82:2b:c7:
a6:f9:1a:57:0c:04:77:c5:19:a8:0b:90:1e:4f:2a:
93:8d:e9:ec:4a:b4:b3:0a:f6:5d:ee:be:66:53:47:
65:59:30:10:0c:c1:79:0b:5c:ee:44:b8:6b:7a:8d:
6b:3b:a4:28:de:be:5c:94:fe:ef:75:1b:71:97:91:
d1:2b:76:bd:47:c8:db:8d:06:48:1f:83:53:c2:37:
77:a4:47:04:85:e7:04:e7:d1:11:34:2f:1c:61:f4:
3c:fd:91:cb:3a:ed:e2:eb:80:04:31:fb:6b:e3:ce:
c5:db:54:88:dc:c4:21:fe:0c:e6:ca:c8:6f:ee:a5:
4c:86:5e:13:38:e8:7c:8a:07:13:89:c6:d4:d7:89:
93:db:3b:fd:58:2a:8e:75:40:a7:38:0e:d6:61:14:
6e:5e:84:af:25:03:d6:92:c7:e0:0c:2e:06:30:35:
93:b6:9d:db:38:60:9d:7f:e9:15:6d:f8:3b:9f:1f:
54:f5:78:d8:5b:2d:7e:fe:67:ba:d4:f2:33:07:0c:
ce:76:7e:b4:2e:fc:db:7c:18:f4:9c:a7:6e:c3:8c:
27:f0:e3:5d:fc:4b:0d:64:dd:f1:49:03:ab:fe:1b:
d0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:23:CB:D2:45:06:D3:A7:4E:98:31:D2:6D:6A:53:CB:2E:F4:3B:00
X509v3 Authority Key Identifier:
keyid:DE:98:F8:36:32:98:29:7F:BA:BA:EA:68:77:20:2B:5C:44:0E:5A:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:86:07:fa:c3:77:2d:d8:4f:0f:55:d1:28:ab:f9:ae:60:ea:
39:08:d3:16:fd:2b:3a:9d:35:ae:55:3b:0c:9b:a3:95:62:02:
39:4a:cc:37:13:5c:e3:09:45:2e:f0:7f:c2:99:cd:85:d5:40:
83:bd:06:47:09:3c:d0:2d:0e:23:d7:5d:65:08:82:39:40:77:
b3:f1:fd:7a:42:cb:89:d6:da:bf:14:cf:31:60:7d:a5:fb:25:
47:13:c3:5d:60:09:8c:9d:b5:5d:df:3d:57:fc:31:6c:59:fe:
61:1f:43:8e:80:1e:24:21:51:f3:bd:fb:fb:5e:0e:c5:d2:a9:
61:89:70:82:6b:84:17:d1:d1:27:e5:1f:9e:a2:2a:0c:81:41:
26:d8:4b:b6:6b:11:0a:bb:d4:2b:f0:ca:74:ce:06:71:f4:f1:
18:09:96:a8:1a:7a:fc:1e:af:ea:68:ba:c2:be:45:0f:d0:b5:
de:e1:9d:74:ce:66:45:18:3e:d4:af:75:57:f2:21:e4:5b:d7:
0b:c0:96:71:d6:11:61:0c:d3:88:90:53:d2:c8:9a:66:76:41:
b1:93:95:0f:c4:6b:e5:9f:a9:00:ce:eb:1c:bb:2d:d2:ee:70:
e3:10:9e:ac:5b:4a:87:33:a2:37:5b:b7:b1:49:21:d9:04:33:
48:3d:60:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:22:40 2025 by rpki-client