Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
File: 3U3LVvefSh3tjZVIIzOWHQJk-qU.mft (raw, json)
Hash identifier: JGzkcEZp9ximBBYUA9QT5wM9Odoe5T6xB+rpfuhryw0=
Subject key identifier: 6D:2E:8E:B1:71:C4:71:63:46:44:2D:7E:7F:84:28:EE:D8:39:5F:02
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Certificate issuer: /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial: 0194BC72D0B91C98D077C78C0D77ED90E13F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
Manifest number: 0A53
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: 3U3LVvefSh3tjZVIIzOWHQJk-qU.crl (hash: tBNaRFgoZcpUEMFMyWz1TOP0GshMYR5OMBPvr1JaQ5Y=)
2: Iq-f1EnfL9Yhl-QlX-qFh7tpN7I.roa (hash: WJuJSZpxmjSdIh4Z1HVT6GKRflZm//sdti8VMNi88hk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d0:b9:1c:98:d0:77:c7:8c:0d:77:ed:90:e1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=6d2e8eb171c4716346442d7e7f8428eed8395f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:be:01:42:07:97:7a:4a:03:01:48:3b:f6:df:
fe:7e:e2:6c:d9:1e:98:d1:ed:4c:af:be:95:0e:64:
f5:d4:1a:eb:ae:8d:7e:68:b9:32:7f:12:0a:99:4e:
0b:da:64:70:f4:4c:39:0b:ca:75:9b:9d:2a:9d:9b:
05:74:bd:8c:59:c4:d0:20:61:13:ba:e8:31:91:ba:
b9:a5:68:91:a8:3e:e1:ee:59:36:e7:2a:14:72:a7:
96:93:3a:4d:63:1f:86:72:41:d3:19:70:2f:2a:92:
67:99:c5:c6:4b:88:ce:ec:21:c3:94:99:61:df:45:
71:19:f8:9c:8f:29:d2:8e:c9:e5:ae:e1:ac:c1:62:
b5:84:94:fb:38:7c:39:41:89:aa:d6:ce:31:97:cb:
67:aa:ac:36:cb:ed:47:28:f9:04:c9:d0:6d:3c:6b:
f7:67:c4:22:26:d5:44:11:dc:e9:1f:9e:42:17:6c:
e3:13:bc:4d:f9:6f:ec:88:1c:46:91:4a:2e:08:70:
e5:03:31:b5:6c:ad:1f:45:a4:be:b0:df:0d:72:9f:
69:e9:bc:23:97:24:ea:2c:54:45:45:a4:d6:cf:d7:
9b:81:86:c5:4f:f2:9d:f7:80:f5:86:17:49:ee:ea:
a7:c8:05:1f:37:86:99:c2:d7:ba:77:ad:71:8c:18:
a6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2E:8E:B1:71:C4:71:63:46:44:2D:7E:7F:84:28:EE:D8:39:5F:02
X509v3 Authority Key Identifier:
keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ef:eb:41:02:3c:5b:20:ae:1e:07:bc:9e:6f:a6:ee:34:30:
a3:03:cb:61:e5:07:09:0c:fd:b6:d3:a0:20:e3:12:d5:3d:15:
ab:c6:26:e3:92:e5:81:bf:b3:86:95:55:f5:59:c0:2f:b8:01:
f4:5a:c9:21:5a:8e:d6:3d:19:7b:9e:aa:d8:63:c9:e1:38:60:
ce:66:54:79:d3:92:f6:88:73:62:1a:48:a0:0e:59:78:9a:24:
65:1d:8c:b6:8d:ed:e8:6b:6d:44:65:87:90:51:da:eb:df:60:
53:31:1f:66:08:d2:9f:eb:f8:e5:97:7c:96:2d:8e:55:4c:31:
b8:d2:2e:93:76:17:cf:c7:92:84:5b:a7:6d:b5:db:16:cf:62:
f6:b3:8f:c0:25:92:e1:9e:59:5c:96:ce:55:01:75:49:a8:e5:
48:c6:23:90:e6:a5:ab:90:fa:d3:d6:59:72:80:97:78:83:69:
d5:2c:34:c2:0c:41:48:1e:d6:8b:9a:4e:c5:3b:35:e9:f5:99:
d2:88:b9:23:d0:4f:9f:2f:55:85:62:1e:5b:e9:54:5e:55:16:
09:b8:56:d5:bb:9d:91:b6:e2:99:95:f2:80:e7:28:e3:af:b9:
69:f1:41:91:e0:5f:bc:7b:c6:fc:d1:a7:5c:d1:48:70:57:bf:
bb:f4:aa:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:14 2025 by rpki-client