Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
File: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft (raw, json)
Hash identifier: Sdqge3Z7+WXRkX8QFpXmMuu64W1qPfwyt+qmlqA/K0w=
Subject key identifier: 6A:81:41:ED:99:F7:9A:1F:F0:5D:68:36:7B:64:38:AD:CC:46:5C:5D
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial: 0194BBCEC2A6D3AD58CE78F7749A9341231B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:17 +0000
Manifest this update: Fri 31 Jan 2025 10:01:17 +0000
Manifest next update: Sat 01 Feb 2025 10:01:17 +0000
Files and hashes: 1: 2MtCsLRfRRVkmWmmR_RgvP_iiYM.roa (hash: HuLQbolqCGZmiUhvPO/wiFvtWi3Okwmgccu/aBpptuc=)
2: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl (hash: qDuiGs99+5WvmpjuieCohnsF2y6i1IIKil3FaCuDLbg=)
3: S87qjShx0Cde64tPkPpF-gZYMZE.roa (hash: KfR58Ep5CQd0S3bEgqtjtqAMWmdjTVJqVmZhBaCwNRo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c2:a6:d3:ad:58:ce:78:f7:74:9a:93:41:23:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Validity
Not Before: Jan 31 10:01:17 2025 GMT
Not After : Feb 1 10:01:17 2025 GMT
Subject: CN=6a8141ed99f79a1ff05d68367b6438adcc465c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:03:ef:f8:43:79:d6:6f:f1:fb:06:09:31:db:
41:82:95:f3:6f:13:52:8a:32:9a:d0:06:cc:5e:7f:
82:b4:68:5e:44:79:ed:57:5b:02:20:83:ee:59:9f:
7c:0c:a3:44:55:0f:20:96:bf:9c:ce:44:0a:13:95:
59:d8:84:8e:17:a1:c3:bd:50:d2:b1:04:fc:90:c2:
dd:8c:42:dd:11:e7:27:82:d5:af:b1:61:9c:4f:b4:
d9:ea:0d:9f:48:e0:ae:81:ab:72:24:3d:f6:97:64:
54:e9:6d:22:ba:1f:fc:35:3d:1e:9b:73:11:13:2d:
5b:bd:96:10:83:a4:74:1b:73:65:3b:b7:82:c7:f3:
59:a0:01:4f:40:6a:cf:a1:e1:96:b8:12:79:3d:82:
64:cf:9e:1f:e3:c8:e2:1f:94:e5:d9:53:a5:fa:fc:
b9:1e:36:43:0f:78:43:39:1d:64:8d:16:3c:5f:f8:
63:f3:44:b4:0b:b1:f6:e6:e7:bf:b9:8a:9a:36:8e:
d2:b7:57:86:fe:27:cc:7c:05:e4:ef:c9:f0:f6:aa:
29:83:e4:44:ed:57:5f:39:49:b4:cf:53:8a:2a:ba:
17:95:f1:ec:2b:ba:44:bf:90:af:67:85:12:6e:59:
3f:25:79:78:d3:f1:ed:f1:de:d3:28:f4:b9:9f:d2:
92:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:81:41:ED:99:F7:9A:1F:F0:5D:68:36:7B:64:38:AD:CC:46:5C:5D
X509v3 Authority Key Identifier:
keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:0a:80:7f:5f:b3:ee:c9:2b:d3:9d:d1:e5:7d:c5:f8:b8:bd:
d7:b1:9d:54:a1:3b:29:7a:19:0f:45:4e:5d:57:91:32:24:f2:
fb:d5:b9:bc:58:3d:4b:8e:80:d2:dd:9e:63:a0:66:f5:3d:2b:
5d:8c:ba:fa:1b:3d:af:5e:5e:7f:2d:36:14:06:fe:e0:c8:14:
5e:58:8b:e7:5d:3e:4e:2e:1e:da:67:f0:f3:81:a4:d1:d4:27:
b0:1d:52:65:62:f1:dc:c6:95:73:9d:d5:a3:f6:d2:9a:a8:db:
21:11:80:63:d5:ed:61:40:3d:b1:c0:90:27:9b:5d:ba:81:05:
8a:9a:d1:99:51:4d:e8:eb:f5:91:e5:06:61:82:c4:52:dc:5f:
d9:d2:60:12:66:32:7a:7b:ab:d1:da:96:3a:1a:e3:13:a6:4a:
e6:4a:58:d5:86:fd:cc:db:f6:31:12:e8:97:ad:8b:77:2b:2b:
67:72:b4:9a:84:1c:5e:50:50:ce:84:03:40:08:e8:f1:43:fe:
ae:33:d7:e8:26:67:09:73:c6:3a:81:a5:b3:35:48:a5:d1:72:
43:86:58:f3:c5:58:21:8a:39:25:92:10:42:e7:12:2a:47:4e:
82:6a:c2:a8:9d:5d:24:99:33:24:ae:21:49:18:24:20:b9:ba:
0d:94:5a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:08 2025 by rpki-client