Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
File: 3BHa76_4HH5QEnjYfZvCsgTXEVU.mft (raw, json)
Hash identifier: 0czkSqtwfv9Thq7x81wBJ3JL+3ofK5b5AZoxqGc/+b0=
Subject key identifier: 2F:F1:67:E1:00:53:D8:00:2E:BE:A5:FD:DB:9D:26:F1:F1:75:5B:F4
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 0194BCA9CDEE41B9DB032B77D85A5B2A3841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
Manifest number: 1385
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: 1-g5svdi3mwVaIcz7TjQ98u-lywc.roa (hash: /5gWQ+kjtVh0p0uPC7XtNfD5w0Tz6LYqaosg9b4frCs=)
2: 3BHa76_4HH5QEnjYfZvCsgTXEVU.crl (hash: ClXq/qp1ZIHiNMmx0IDfOLkKEmEYI3YTg9h9Wg7izYE=)
3: aV0HuR69hYJIPw5HwKLbzgnSUj8.roa (hash: SHFEsOqJwkOCmFGPA5WtYtOFrOaJ+2dQqhpAdP75uZE=)
4: dSNgoevWRyMUfgjNoi_GXJ4H8_k.roa (hash: mvhCiOx4Qlj1FzGtfnYTbx0VdAMMtllc6DDb99JSemU=)
5: iB-5Gh1pHVkAWY83mt70GWf7F_k.roa (hash: cjAD02BpLiwlKz0QWbmdYPtsy/2NR9/61nPXd4hWOkU=)
6: lICq0eo5P-Axsog5Hx6FXYSQY4k.roa (hash: JlcFYpOXnqLTDv9/pwm19BH50eR0rn9KZzLrCOo3RLY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:cd:ee:41:b9:db:03:2b:77:d8:5a:5b:2a:38:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=2ff167e10053d8002ebea5fddb9d26f1f1755bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cb:69:b0:dd:96:98:99:0a:af:21:12:dd:59:
9a:a5:91:95:31:71:80:27:58:50:50:6d:fc:d3:6b:
d2:14:13:5d:33:0b:2b:96:9b:47:57:cc:b6:05:83:
e8:b6:31:21:33:69:8f:47:f4:b2:f5:9e:8a:9a:79:
2f:54:67:86:2f:b9:48:ce:62:09:21:d3:03:fc:d4:
62:4a:46:ea:b7:ba:3e:53:e8:38:0d:79:1d:05:5f:
4d:b4:4a:08:ed:4c:f5:b4:95:35:59:94:fa:58:22:
3c:48:aa:d0:4a:32:ff:cb:92:10:32:a6:40:2b:17:
a5:b7:b4:d4:ae:20:cb:c5:8a:c3:2e:58:83:c7:8c:
e5:d9:7c:3c:50:eb:55:02:a0:d2:9a:d8:7a:08:7e:
73:3d:7c:24:b6:5c:40:16:45:ac:8f:aa:d9:15:22:
07:42:7d:b0:cb:86:48:15:f0:2f:ea:cc:1b:bb:0b:
3f:ae:6e:c1:e6:13:38:20:8f:4a:b5:2e:85:e9:0b:
6f:e6:5f:54:b4:13:91:c0:fc:9f:c2:21:1b:fb:31:
8c:9d:30:a2:61:40:41:a9:b6:74:32:5c:18:46:2f:
17:22:dd:18:56:fd:bb:81:1c:41:fa:a9:f0:6b:a4:
4f:69:6f:af:d2:4b:73:d9:15:a1:8d:4f:b4:38:38:
99:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F1:67:E1:00:53:D8:00:2E:BE:A5:FD:DB:9D:26:F1:F1:75:5B:F4
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ff:11:b1:1c:5f:9e:7e:91:5e:b4:99:fa:b8:ff:f8:f5:9c:
b3:0c:56:5c:ec:29:05:02:cf:42:be:49:37:40:da:e9:bc:be:
a1:2c:5f:e4:63:29:e5:59:e2:64:4f:38:19:86:84:c8:46:53:
49:e1:b3:74:6d:e4:e4:d3:0a:0d:e0:50:c0:b6:e1:48:9c:7a:
8e:ae:84:48:19:7f:70:28:ee:fc:12:f3:a6:3a:ad:7d:b0:64:
de:9b:85:ee:3c:09:2c:5f:a6:be:c1:81:6a:b8:04:5d:24:21:
b5:e5:1e:f5:ce:fa:97:e1:0e:c6:30:de:8a:cc:e6:b4:8e:93:
1b:41:1a:ca:49:18:91:95:26:24:c4:02:ed:bd:90:67:4f:ff:
56:1c:01:e4:00:7b:f9:20:51:f7:ea:82:88:ba:61:43:8e:2d:
31:2d:93:c4:48:71:e3:24:c4:c8:37:1b:65:b4:0e:da:3e:3e:
ee:1f:4b:68:cb:56:65:3f:d3:0d:fd:71:b4:f3:c1:9d:2b:6e:
ab:ca:56:fb:47:22:fe:2c:79:6b:35:be:9a:c9:b1:26:e7:72:
5a:79:4d:23:6e:44:c5:d8:33:c5:09:ea:30:8c:1f:27:06:3f:
75:e1:b4:32:01:f6:c8:a6:d6:45:01:dd:12:46:df:16:c8:5c:
a7:4f:75:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:21 2025 by rpki-client