Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
File: 3vwmhsKavvGPQLMOfpUTJHpm7xM.mft (raw, json)
Hash identifier: Ra4mc+c2jOsAeERWQAsmsdN9D5KY94a/qYjJuRdbLIA=
Subject key identifier: C0:38:F3:EB:87:7B:2A:7A:AF:2C:B0:95:3F:48:DF:62:5C:76:A8:45
Authority key identifier: DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
Certificate issuer: /CN=defc2686c29abef18f40b30e7e9513247a66ef13
Certificate serial: 0194BD855D6C754ECE452C3BD42EB1487437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:21 +0000
Manifest this update: Fri 31 Jan 2025 18:00:21 +0000
Manifest next update: Sat 01 Feb 2025 18:00:21 +0000
Files and hashes: 1: 2jede6KT-wWXlr-gV_HV5g4z3cE.roa (hash: mv6a2TTy4FTvxK1u9z+/AeZmzO5akrk+XnGtMMkB+UQ=)
2: 3vwmhsKavvGPQLMOfpUTJHpm7xM.crl (hash: q4PTHf56sz9QLz2phzkygX68U40cfmt/f8JymqIQCpc=)
3: IJD_U3KWZ58BdYUivTasUkoSb14.roa (hash: QMy/+qKyMyM01JHQHllqOzvjbF1AM/QefZV5csA0T9s=)
4: NxF2Cyt5llnCNI_vXdmc9sDjjDg.roa (hash: R2BQ5eg/vIm8OWNUAn8Iiim/Pq6eL5zypKjZ8nuw8W0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5d:6c:75:4e:ce:45:2c:3b:d4:2e:b1:48:74:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=defc2686c29abef18f40b30e7e9513247a66ef13
Validity
Not Before: Jan 31 18:00:21 2025 GMT
Not After : Feb 1 18:00:21 2025 GMT
Subject: CN=c038f3eb877b2a7aaf2cb0953f48df625c76a845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1f:48:bb:bb:11:9a:fb:6e:59:2a:b6:35:fe:
92:d1:07:19:a2:5f:64:1f:c3:54:85:d4:8f:96:fd:
be:88:92:5d:a6:1a:31:40:ab:19:f8:b2:e1:5f:fe:
8b:eb:f5:fc:83:61:09:07:35:17:b7:18:7c:cb:a9:
30:30:b4:3d:5b:a0:ee:c7:6c:7a:26:10:24:fc:1d:
33:43:1d:fd:10:7c:08:9b:fb:e4:15:7c:f9:a4:5a:
7e:7c:14:3a:41:6c:82:11:8d:2e:41:79:3f:d7:3a:
4c:23:89:33:06:df:11:eb:fb:02:ca:c2:8d:cd:aa:
b0:e9:bd:9b:57:ac:fd:51:e4:5d:4b:de:7d:88:bc:
83:64:17:f1:90:9d:99:70:19:33:f1:da:14:ee:c8:
ce:aa:fd:d7:56:e9:57:ae:30:ca:e5:f0:8f:6f:e0:
2f:34:40:2d:cf:8a:28:81:dc:41:00:e3:2d:ac:dc:
c1:34:96:f0:31:2e:a7:aa:ce:7f:9d:e8:16:c9:93:
85:2a:08:7e:0f:2b:98:4b:da:f7:e1:81:92:37:58:
d2:eb:e7:69:53:46:96:18:53:b8:c0:82:e7:58:bb:
7a:72:30:62:df:49:57:bd:57:af:4d:84:03:94:38:
30:98:1c:4a:25:7a:27:1c:26:ed:bb:c7:1b:a6:a7:
c9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:38:F3:EB:87:7B:2A:7A:AF:2C:B0:95:3F:48:DF:62:5C:76:A8:45
X509v3 Authority Key Identifier:
keyid:DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d9:86:d4:3f:8f:10:db:9d:f4:db:4d:83:64:20:40:bf:44:
3d:d6:e2:7d:b6:14:b6:e8:e8:0f:ce:c7:65:f7:c4:ab:83:38:
61:00:77:4d:f9:a7:3b:70:9b:49:63:4a:7a:9c:c5:e6:59:61:
4c:8a:c3:34:f4:3f:2a:08:2a:9e:93:3a:8c:1e:6d:76:63:b0:
d3:6f:5f:3c:cd:f7:f9:09:a6:6f:4c:2f:89:08:19:f2:d1:57:
f7:b3:7c:6d:ea:0a:e2:a0:77:c1:5a:d6:4d:b0:17:e6:c5:92:
bd:97:8b:8d:a0:42:92:6f:56:18:48:9b:48:8a:61:25:87:4b:
5b:24:18:a0:09:ce:cf:c1:07:ae:1f:39:8c:03:e6:91:56:fe:
10:08:6e:1c:fb:78:b6:b8:49:dc:d8:12:5b:fc:ea:d2:e5:fa:
2f:84:33:64:72:a7:6c:91:0d:b8:d2:89:2e:31:da:00:36:ce:
1b:b3:62:87:c8:82:ac:c4:03:bc:a3:41:f1:ee:28:89:fd:f9:
43:2e:b2:d4:dc:14:f6:4e:5a:e3:4c:17:8c:2b:14:a1:c9:a3:
1a:68:de:d8:1c:4d:ca:1c:d8:b1:b5:c8:ce:eb:14:9f:03:8a:
fb:fa:3b:e8:65:6c:c5:f2:1f:e0:c4:e1:63:49:ae:f8:6d:18:
09:36:47:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:22:04 2025 by rpki-client