Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
File: 3V8ufMLGh_WMDR9hMrstz984y2Q.mft (raw, json)
Hash identifier: RsLPfQlfmpNKR86PrZ28Q3InMJxl/AImSxWRM6f07sc=
Subject key identifier: 42:15:0F:43:86:3F:43:DA:82:73:F3:9A:FA:60:2D:72:C1:1F:4E:A4
Authority key identifier: DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
Certificate issuer: /CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Certificate serial: 0194BBCE692AB57AA5A645278684FD7A0859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
Manifest number: 143B
Signing time: Fri 31 Jan 2025 10:00:54 +0000
Manifest this update: Fri 31 Jan 2025 10:00:54 +0000
Manifest next update: Sat 01 Feb 2025 10:00:54 +0000
Files and hashes: 1: 3V8ufMLGh_WMDR9hMrstz984y2Q.crl (hash: G2nr0Inh9KPDrgSuzGeHmdNtRXOr6LkeTimZARhg1rc=)
2: I3GFCz8gt6Rki8DJxRT45IEltuo.roa (hash: uBBouPhKhyaXIv9GSGFn2zrE6uv7a/jKMDEUQeG9Dfo=)
3: RoNUSsRbSgnW76cSNeAr425YYHY.roa (hash: ty/WAAmbUm3G9276dnnVRYAsJCuw7HHC84siWPb6a6o=)
4: j06EmkksF4YrV0BvXtZ5BQd7X_0.roa (hash: W1w1cQpGhDndwAuyI1OFa9FFiGMVh7oMpQVYkrYTonk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:69:2a:b5:7a:a5:a6:45:27:86:84:fd:7a:08:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Validity
Not Before: Jan 31 10:00:54 2025 GMT
Not After : Feb 1 10:00:54 2025 GMT
Subject: CN=42150f43863f43da8273f39afa602d72c11f4ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:af:83:b5:7f:62:8e:0f:50:2b:a9:ba:ef:71:
c3:5d:23:21:d3:60:4b:00:8c:21:4d:41:5a:70:c5:
0f:dc:f5:5a:04:98:96:fa:d2:4a:92:c7:7a:73:e7:
42:bc:90:bb:51:ca:a1:23:77:b8:17:23:4d:d5:ad:
d9:b4:75:95:3f:cd:14:b5:66:de:21:e4:f0:02:9e:
14:38:3c:43:89:65:fd:93:71:e8:4e:c2:ed:8b:95:
64:7f:d6:80:cf:ae:ad:2d:88:5d:99:5e:74:4f:35:
9f:9c:73:48:83:62:da:8b:97:ec:04:09:ad:bf:07:
9c:e5:ca:c3:32:1f:5a:89:28:8b:ff:7b:33:06:9b:
14:3a:2a:42:36:41:fa:f4:f0:6d:99:24:26:99:0e:
d2:76:f8:bf:fc:82:bd:39:ba:8e:35:9f:8e:47:13:
9c:2d:c5:51:52:56:b2:5d:a1:c9:28:6f:be:22:4a:
bf:fc:f5:94:3c:e2:89:d2:ce:10:d6:3e:2a:89:2b:
75:56:8a:02:37:c8:e9:29:14:97:f6:65:e5:00:fb:
4b:1c:98:10:c0:99:0a:77:e9:b2:d5:d4:a5:d2:65:
ed:f1:bc:80:19:1f:7b:ff:ad:d0:6a:ad:e8:0d:d9:
59:31:40:21:d8:50:36:f8:d2:20:01:7a:86:21:64:
fe:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:15:0F:43:86:3F:43:DA:82:73:F3:9A:FA:60:2D:72:C1:1F:4E:A4
X509v3 Authority Key Identifier:
keyid:DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:1c:b0:c9:5b:a0:7c:f8:06:ce:27:2b:9f:e7:26:6e:84:87:
97:e9:45:be:93:87:59:9c:29:79:54:28:d0:46:eb:89:b7:e2:
e5:ac:e0:f2:32:da:e9:07:78:2a:4e:aa:49:70:f9:54:1e:70:
62:89:37:da:ae:cd:ca:b3:f9:b7:40:51:2f:54:f8:20:0e:78:
db:3a:8f:f4:6a:29:66:c4:fc:88:2c:50:7c:b1:42:26:d9:da:
19:a2:e6:36:9e:ad:2a:b5:43:de:be:01:61:ff:64:5a:75:ad:
5a:41:db:47:a1:61:07:d7:67:09:22:94:7e:fb:2b:1a:78:09:
b1:ea:8b:f0:a8:7d:64:09:72:84:2d:04:3b:21:b7:ad:6c:b1:
77:c3:bd:26:dc:26:ea:fb:d1:75:8b:39:3f:2a:2f:39:0c:67:
4b:eb:57:13:9e:05:c3:ef:0f:6c:22:41:f7:09:3c:f5:86:b0:
be:0a:10:f4:f9:7e:f5:a9:65:b5:5f:ea:6a:c6:f1:a1:a7:aa:
70:3c:28:2c:d0:a6:4b:62:55:30:ce:d9:7e:4b:63:98:70:1c:
3d:2b:3f:5e:5e:aa:30:bb:3d:c5:cb:c9:3c:88:9c:7c:20:13:
3c:4f:74:2c:68:6a:b6:34:e3:a7:da:1f:01:04:70:51:d4:85:
e8:c8:e1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:46 2025 by rpki-client