Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
File: 3xRM6OjkQV5chqCygEmaOFwU7_I.mft (raw, json)
Hash identifier: 9SDSFFbUk/7rBdCgWD6NLUN6mDPi4vlVKyggljt+kgo=
Subject key identifier: 5C:D4:6D:E4:1F:2E:AF:80:35:3C:A2:3A:97:C1:9A:CD:BE:42:50:21
Authority key identifier: DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
Certificate issuer: /CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Certificate serial: 0194BCA9AFF7B5D4386B3B2CB91E438C4A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
Manifest number: 0AA1
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: 3xRM6OjkQV5chqCygEmaOFwU7_I.crl (hash: uwk97uHjJc6OzEu2Bvqll2tlf+LBpn0OKPxaP4flm/g=)
2: 7d2ToMhT-5ZAU4qsYQXruw_MoIU.roa (hash: vm5X1sab9HJagyLFII3df7BekSqzu2gNn9apIe4J5uw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:af:f7:b5:d4:38:6b:3b:2c:b9:1e:43:8c:4a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=5cd46de41f2eaf80353ca23a97c19acdbe425021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:62:c3:0f:d3:ce:c8:bf:46:8e:99:2e:ec:db:
de:65:a5:b1:e9:76:ad:b5:90:f3:e9:34:de:cb:ec:
79:41:31:52:a2:90:46:b7:1d:97:4d:fe:98:42:b0:
4a:f8:9c:05:0f:ce:72:ce:40:af:4d:b2:8e:d5:90:
60:51:9c:96:5b:e0:4a:c5:a1:77:76:e9:cd:13:3b:
5b:8b:44:f4:ee:08:5c:0c:91:00:95:01:f7:d1:bb:
f2:c7:66:38:54:d6:82:ac:66:7a:9c:14:af:8e:e5:
e9:fa:7f:f4:d5:8b:2f:45:90:d2:32:28:93:8b:e2:
c2:c7:f1:bc:17:3b:e3:61:30:10:26:85:af:31:d4:
a9:61:f0:06:81:1b:c3:09:59:13:11:f9:80:fa:0e:
6c:1f:3d:33:c0:ee:8e:18:f3:65:86:3f:2c:43:43:
5d:95:79:f2:68:a0:18:38:af:57:5e:0d:d1:7e:62:
2d:be:7c:24:9d:81:9f:07:20:81:34:59:0b:bb:94:
1a:4b:c5:79:9b:87:63:1e:14:aa:9a:14:5b:77:af:
d2:27:48:20:09:94:b0:6c:1f:74:4e:b1:a3:b2:4d:
02:6d:2a:46:a8:cd:43:63:19:d8:78:b5:bf:e4:c4:
2e:e2:65:da:44:6f:9f:41:ae:20:c2:3b:2c:8f:fa:
1b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D4:6D:E4:1F:2E:AF:80:35:3C:A2:3A:97:C1:9A:CD:BE:42:50:21
X509v3 Authority Key Identifier:
keyid:DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:6d:b6:19:ea:06:dc:47:ac:c5:f5:fb:4d:a5:28:c5:07:8b:
02:bb:1b:28:b1:fc:11:b7:17:f7:00:89:54:5f:2d:a5:bc:8e:
eb:3c:ab:e0:bc:e7:d4:33:d4:96:77:e8:a9:fa:60:f9:86:c6:
41:9c:36:79:fa:00:32:d8:03:ba:db:a1:24:bc:e3:69:68:c5:
75:8f:aa:8c:13:96:3a:0f:d7:7d:63:e7:7a:14:ab:bf:8f:ea:
b8:00:76:b4:49:28:e4:69:ad:1d:0e:c4:f7:c9:53:42:b0:84:
70:a6:76:fb:d8:21:79:b7:5a:81:ba:79:bb:f9:f5:a1:b4:43:
99:4c:d1:13:3a:69:a7:26:26:c3:9d:3b:c6:e0:c2:09:14:81:
08:4b:6f:f1:91:87:8b:81:1f:e3:cf:ea:ad:8e:32:e3:f0:a0:
ea:58:97:c5:cb:c4:a0:76:08:20:8f:c1:f1:80:da:4d:e8:f7:
79:7b:a3:92:e6:45:85:1c:b7:58:fb:5d:21:77:17:81:86:78:
ee:32:77:5d:40:b5:68:36:b3:e5:f5:03:45:7b:0c:31:be:53:
d7:c6:63:3c:ef:c0:24:b5:f6:00:43:07:fd:9d:d6:8f:b4:5d:
94:32:ad:c9:9d:bd:fc:4f:b9:cc:59:71:c7:33:a2:a9:2d:e4:
b0:a1:db:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:37 2025 by rpki-client