Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
File: 3c6wiktA8fheTroXzcfIPke7WX0.mft (raw, json)
Hash identifier: Zm1Aub9+0kM9Frv42wzd5GUzoVkncCtiFlzxD9oKrSw=
Subject key identifier: 88:3C:C1:5C:EC:E7:7B:DA:91:A2:E3:FD:AD:5D:B6:19:43:24:22:7D
Authority key identifier: DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D
Certificate issuer: /CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
Certificate serial: 0194BC73255FD25E95DAA97C3A6C45DFEB4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
Manifest number: 099F
Signing time: Fri 31 Jan 2025 13:00:50 +0000
Manifest this update: Fri 31 Jan 2025 13:00:50 +0000
Manifest next update: Sat 01 Feb 2025 13:00:50 +0000
Files and hashes: 1: 3c6wiktA8fheTroXzcfIPke7WX0.crl (hash: 22oL60b/9Mn2eD1mr34c4fblMVikQAHPhBLDRCxq4CY=)
2: wkcnsTzQjgo9eEySS50APSZKqWQ.roa (hash: SKv++65s2nAU0vbkJDBqrGiZUMw6xX7YKBnglQkJRuE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:25:5f:d2:5e:95:da:a9:7c:3a:6c:45:df:eb:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
Validity
Not Before: Jan 31 13:00:50 2025 GMT
Not After : Feb 1 13:00:50 2025 GMT
Subject: CN=883cc15cece77bda91a2e3fdad5db6194324227d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ac:fd:fe:ef:c0:42:7d:71:38:b1:bf:eb:6b:
ba:b8:25:fb:e4:68:6b:95:a1:52:7f:25:bf:5c:ad:
a7:80:af:f2:8d:fa:2c:db:e0:ee:73:55:94:fa:a5:
21:9d:c4:0f:05:c1:41:70:0f:e1:c6:67:6c:f8:64:
49:80:ab:4d:e4:08:10:0e:ff:1f:09:9a:65:8a:03:
1c:04:1d:37:6a:57:1e:bd:be:fb:64:53:96:45:60:
df:57:0e:4b:9f:19:f7:6c:43:59:81:b8:5c:c0:3e:
09:c8:bc:de:6a:53:ed:6a:03:99:7e:5b:80:30:43:
07:51:f7:fd:56:c0:be:f3:00:7b:5a:00:28:67:19:
1a:8e:46:a4:f1:37:5c:f4:65:37:b3:2c:95:f2:2c:
42:1e:e1:13:05:b1:56:fd:71:7b:f1:ab:2e:c1:ea:
6a:80:36:f7:da:0a:cf:78:eb:64:c4:4c:8e:8a:da:
10:a1:36:67:74:f3:f0:e4:f0:10:c0:0f:12:c7:0f:
49:c2:7b:c0:b6:bd:a8:54:f2:27:d2:93:16:e9:b3:
f0:53:31:c4:f9:3a:68:9d:e0:f7:08:4e:8a:22:aa:
f1:54:7a:8e:c2:ab:8e:e5:15:69:9d:45:9d:6c:b9:
5e:b0:33:25:3c:6e:01:23:6f:7c:0c:5d:d5:5f:99:
69:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3C:C1:5C:EC:E7:7B:DA:91:A2:E3:FD:AD:5D:B6:19:43:24:22:7D
X509v3 Authority Key Identifier:
keyid:DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:1a:2c:2c:14:15:3d:23:2b:07:f8:bc:0d:30:17:10:03:47:
93:9b:46:ce:29:04:55:e2:00:b5:46:69:e9:28:92:cd:74:ba:
51:86:63:77:69:6b:64:d4:f9:27:c4:ef:c1:40:3a:7b:0c:f6:
0b:30:20:4e:65:c2:9a:e8:e6:9a:81:a8:bd:98:8a:27:63:05:
dc:e3:d2:e0:02:c5:b4:90:e1:6d:e7:4b:41:70:72:78:e0:9d:
62:21:a4:f1:39:48:34:81:b8:ac:ea:47:3e:07:1e:b4:8b:c7:
d6:3a:5a:10:97:e9:75:23:59:8a:4c:1f:ab:57:ad:7b:27:84:
4b:5e:86:fe:e2:63:fb:a3:1c:04:8c:66:7f:fc:d6:bd:f6:02:
c7:2a:0a:b6:ba:45:62:d5:b5:05:29:e9:84:20:2c:86:57:1b:
38:a7:e3:2e:9a:05:6d:c2:6d:d0:68:1e:70:a5:28:d7:47:b1:
a6:12:11:77:71:86:46:c0:e4:14:12:66:7d:2c:2e:be:1f:c9:
9d:76:9e:43:c0:35:fd:ca:2d:09:76:d8:56:3a:2c:dd:c4:cf:
61:82:3e:07:0c:b5:d5:21:58:7b:22:4d:95:a0:dd:43:ab:4d:
0c:3f:b1:d9:b2:5f:de:0e:c5:c1:62:f3:5a:c5:0a:07:5b:dd:
83:11:3a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:20:48 2025 by rpki-client