Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
File: 3fCc-W5fyHTuk5CXxWUci9hC5q0.mft (raw, json)
Hash identifier: IMB2Sr+uURjPSc7N92lEWjqi7zSNDbcdydOHY55A0FQ=
Subject key identifier: 13:23:B3:96:87:A3:E0:48:DF:31:B4:D0:A9:1F:DC:5C:7B:4B:D0:8D
Authority key identifier: DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
Certificate issuer: /CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Certificate serial: 0194BC3C12AADBCEEF3D3F939261A9920E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
Manifest number: 015D
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: 3fCc-W5fyHTuk5CXxWUci9hC5q0.crl (hash: aWt/itdFKcmulVomNPfyurArPM/6iG9jAwzisw822lY=)
2: 4QrqTeH17AXNTy8pbTdrujVUbQI.roa (hash: FZeq9SJr8r+vs6lCOy39Gvb+wDR+3HmqIg9DlvmdZfk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:12:aa:db:ce:ef:3d:3f:93:92:61:a9:92:0e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=1323b39687a3e048df31b4d0a91fdc5c7b4bd08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:da:35:c4:33:f6:9a:39:3e:ff:fd:68:c4:9e:
0e:30:c8:d3:f2:16:be:f5:63:70:4d:d7:bb:c2:d2:
83:60:4a:2d:3c:41:d4:69:4d:46:4c:21:03:13:4e:
f6:47:2b:38:22:66:8d:04:d6:90:45:44:f0:d9:d5:
03:f6:63:ad:81:54:ff:20:e7:ea:67:a8:44:a4:9f:
f4:f8:fb:1e:ab:66:8a:b8:9c:dd:ac:9f:ad:57:1a:
a5:af:81:96:41:86:98:77:c1:00:f4:b8:e3:4e:e8:
80:38:f0:35:86:8a:57:80:71:c9:52:b0:87:ec:ca:
86:99:66:01:0e:b1:4c:a5:11:64:75:2c:05:d7:7a:
3f:70:e8:1c:09:b7:f4:27:d7:8b:46:cd:ba:a3:5f:
b9:7a:91:75:f6:fb:ac:5c:fa:63:d1:d5:51:9f:ce:
59:82:a5:37:b7:b8:1a:9a:f4:a1:79:fe:ec:15:cf:
23:b8:8f:e5:10:80:f2:d3:58:36:a4:b0:56:e9:d5:
e5:68:77:13:ac:0c:c5:09:41:b4:fc:3c:96:11:16:
b0:f3:5e:e6:1f:bb:f8:70:2e:d7:d1:50:5c:fa:52:
c8:d0:ca:03:65:6b:73:49:5d:3d:14:08:62:42:81:
b1:ba:50:0b:a5:41:7f:be:5a:d2:e3:92:76:a0:1d:
06:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:23:B3:96:87:A3:E0:48:DF:31:B4:D0:A9:1F:DC:5C:7B:4B:D0:8D
X509v3 Authority Key Identifier:
keyid:DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:8e:ed:7c:6b:ff:c8:77:03:0e:d0:ad:15:83:81:8c:3e:17:
74:b9:63:e7:fb:7f:32:36:8e:a1:db:1a:d0:2a:5b:94:57:35:
32:30:d3:66:27:69:02:e1:0d:9c:61:bf:93:33:71:cf:a9:f3:
59:06:5c:86:88:d1:aa:af:ec:a6:ce:ff:0d:47:5c:8f:e7:a1:
e9:3f:6e:b1:9f:c4:04:0e:e0:e4:e0:ef:5d:06:98:c5:5c:4a:
c1:20:02:0b:1e:c9:cc:0b:98:7f:d1:1e:d1:ba:db:18:9c:1a:
91:68:ea:3e:bf:af:e8:67:6c:22:ae:44:73:47:4a:25:7f:8b:
75:46:4c:81:69:64:54:8e:07:2c:83:a7:79:7e:7e:9d:31:e2:
fc:cd:e7:cb:cc:fb:fc:4a:8f:9d:09:97:cf:16:8d:96:b9:03:
b4:6b:18:fb:43:d1:0f:37:68:3d:d8:00:30:6d:95:19:ad:3d:
23:9a:14:cc:de:6c:a7:65:eb:42:0f:ad:0d:04:59:58:26:a5:
be:b5:31:66:52:20:c6:ac:6a:18:5e:d2:21:2a:08:14:b9:c8:
43:0a:05:ff:b8:d6:a8:92:28:7b:59:d0:b8:27:af:a4:eb:25:
76:b5:1f:66:5c:6d:56:5f:db:da:b5:e0:bb:36:5d:1d:91:92:
12:bd:6e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:22 2025 by rpki-client