Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
File: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft (raw, json)
Hash identifier: rOMTLxFbAFonk0RYaVrngd5ISRwIOybbVHlgQKu9oEI=
Subject key identifier: 3C:E7:D0:DA:91:1C:05:37:C8:B2:DA:9F:DE:F2:D9:D2:7E:C3:A4:8B
Authority key identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
Certificate issuer: /CN=dce670a6ed4c78fdd77686792f7e087598906f73
Certificate serial: 0194BC04A08102C5F88FBDF09ECD8AC5EB15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 11:00:07 +0000
Manifest this update: Fri 31 Jan 2025 11:00:07 +0000
Manifest next update: Sat 01 Feb 2025 11:00:07 +0000
Files and hashes: 1: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl (hash: Vp8HN3Tl0h/pCxsbmH8pU+Gi8dQYz27Nu4bRr5RgRyI=)
2: g0yMZ7il9emhd1JLy44dXjFFySY.roa (hash: upEcQV7OguWVHmW7d8FqJOmDo+LgE3TCsH4ZkA5EIG4=)
3: lpLAX-iLgxGlZZSBLJie0NVzh8E.roa (hash: 02iqlYXgXHQoWIaTZBmK8Kguo5WiydJoXfvw36P2tkc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a0:81:02:c5:f8:8f:bd:f0:9e:cd:8a:c5:eb:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce670a6ed4c78fdd77686792f7e087598906f73
Validity
Not Before: Jan 31 11:00:07 2025 GMT
Not After : Feb 1 11:00:07 2025 GMT
Subject: CN=3ce7d0da911c0537c8b2da9fdef2d9d27ec3a48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f9:82:7f:de:65:4e:92:56:c2:da:f8:db:19:
b6:96:62:57:68:a2:de:79:63:cd:2c:8f:68:01:18:
fb:59:e3:b8:11:49:7f:68:73:d0:1e:02:28:1e:62:
47:43:2a:fd:96:0a:c5:23:ee:21:ba:f3:3e:d2:d9:
90:63:1a:e0:54:2b:27:ac:de:90:ff:05:9a:a3:3d:
7f:a4:09:d6:a4:9d:06:17:7f:86:1c:a9:68:e4:e2:
93:69:74:3b:2f:53:fe:fb:5b:55:95:09:05:a9:41:
e5:cc:e9:1f:08:cf:96:09:1b:fc:a0:b9:cd:24:be:
53:27:67:3c:0b:ad:f1:9e:17:3c:0d:fb:40:d5:a2:
c3:d7:f5:dc:5f:65:a8:ea:8b:0c:d6:38:96:cf:0b:
18:ca:16:3c:8b:08:37:de:c5:68:c2:5d:4d:85:db:
d1:12:7a:db:ac:e5:72:aa:eb:36:42:cf:0d:f3:09:
20:82:d3:c9:4d:42:88:52:b2:5a:f2:4d:1c:82:dc:
72:c6:97:57:16:44:ba:e0:46:43:96:4d:71:ed:63:
ec:df:bf:41:0d:98:de:52:7b:7d:d8:43:6d:10:b4:
a6:88:ce:dc:ae:23:5a:fd:69:93:0b:35:eb:23:08:
e4:91:f0:59:1f:33:81:d8:2d:d5:09:b1:24:47:bd:
45:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E7:D0:DA:91:1C:05:37:C8:B2:DA:9F:DE:F2:D9:D2:7E:C3:A4:8B
X509v3 Authority Key Identifier:
keyid:DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e3:09:c2:fa:1e:18:87:54:bd:79:c1:a7:98:c0:87:0a:35:
39:2b:52:fe:62:25:2a:cb:f7:7f:be:3b:d1:ca:09:47:78:61:
f7:54:25:c8:ab:28:62:67:6e:f4:49:2a:2a:0c:12:a6:21:3f:
6a:0d:3c:5d:fe:f9:68:14:f3:09:c7:1a:34:bb:61:e5:17:62:
ee:35:b6:c2:b4:57:81:5f:64:a8:d5:5d:f6:62:d0:03:07:07:
fd:6a:c0:b1:e0:18:5e:5e:f3:b0:4f:c3:87:23:2a:ce:a3:c8:
98:3c:8e:1d:d9:0d:26:ea:aa:76:b5:b4:26:6c:a0:d8:e6:c9:
02:d1:bc:ec:79:09:48:ee:3d:7a:c8:d4:0b:b3:59:05:3c:03:
5e:25:59:33:76:d7:b9:8b:fc:48:56:06:cb:16:11:81:35:e4:
fb:a1:54:c5:aa:7a:c8:3a:56:27:52:25:27:0a:aa:21:d2:92:
e4:85:47:0c:a4:a5:ee:7d:ce:a2:a0:61:ab:78:98:5f:99:31:
06:dc:d8:2e:75:97:84:d1:f1:d6:3b:4a:d2:41:c1:cf:a2:49:
bf:4e:db:c3:72:53:97:f3:d8:de:77:36:3e:38:9d:55:d2:62:
4b:77:78:94:38:39:11:1b:b3:40:4f:a9:fd:82:4f:b0:db:bd:
cf:b2:84:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:05:58 2025 by rpki-client