Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
File: 3MstX7JThS8YI8ZUNOjydtBOTgw.mft (raw, json)
Hash identifier: yBrzJDKDVwrtFGwhe2CvImGuHFl6h9XlOYhHN8PrSZQ=
Subject key identifier: 31:88:A7:2F:F2:A5:C9:99:98:27:D7:BF:1D:F6:57:B5:EC:42:12:66
Authority key identifier: DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
Certificate issuer: /CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Certificate serial: 0194BD17AC6E542FE6C18BB2CB8F9273E4BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
Manifest number: 1434
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: 3MstX7JThS8YI8ZUNOjydtBOTgw.crl (hash: eUnsMhTolHOOQ9wI5EmMXU9eFaCZTnWHnBlhJ2D9FrA=)
2: 4iSMhBF2xZj26lycKx2j1fhAtX8.roa (hash: 5NzSosDSsdztn+kQLtfES98hJSpuF/nYSnJEW3vMqlE=)
3: MCaozM05EgQpOj9KWtfk_EMYWf0.roa (hash: I6Y0DISsiTz+oGPxMCPt4OQoH1zQxzx22/aiFTgMNtU=)
4: qMfArzwkX8G0WDNHJN4uX2h7ong.roa (hash: J4HIUTvl0CZ/07KSIMq+Jwo8Hxn+rCK5OIiJhW9OzqI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ac:6e:54:2f:e6:c1:8b:b2:cb:8f:92:73:e4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=3188a72ff2a5c9999827d7bf1df657b5ec421266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:74:52:1f:8f:1a:33:e4:d7:04:a9:14:e6:56:
c5:a2:88:06:7d:ff:d7:a7:d5:6b:ca:d9:dc:f6:7b:
bd:f9:3d:96:90:25:ac:b9:ad:42:2b:22:ec:a3:cc:
f5:6b:2f:0f:58:f8:62:b9:0e:f4:cf:61:23:bd:2a:
60:a7:57:58:41:1b:ff:b6:90:e9:2a:d1:0b:56:9c:
c2:13:2e:6d:c6:8d:fc:1b:c2:52:cb:38:49:c8:7e:
63:f3:14:60:c1:33:4f:b5:a4:d6:f6:46:f8:d9:4c:
29:83:4f:b1:f4:36:59:cb:e5:09:54:20:ac:63:70:
22:5b:cf:5f:9a:8b:3d:9e:1a:90:83:bc:9b:14:94:
d2:27:3d:95:79:f4:6b:79:38:7d:68:5c:6d:44:31:
59:59:13:d6:b4:c0:9a:83:cf:0d:86:2c:f7:18:f4:
4c:9d:bf:5f:60:db:77:93:32:ef:b8:d8:b5:11:e3:
22:25:da:98:b5:ec:ce:3f:2c:31:0b:db:4e:cb:20:
c3:63:b4:b9:92:cd:6c:00:2d:23:8c:d6:e9:2d:e5:
85:bb:db:a6:f4:11:a4:56:27:17:4e:d3:57:bf:4e:
f6:6f:44:f9:97:03:e9:84:5d:5f:ce:9e:ec:27:b4:
30:22:6f:b4:da:63:50:6b:3e:da:ba:5e:a9:39:90:
3f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:88:A7:2F:F2:A5:C9:99:98:27:D7:BF:1D:F6:57:B5:EC:42:12:66
X509v3 Authority Key Identifier:
keyid:DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:05:c6:9b:56:03:83:39:b6:29:34:39:81:1e:44:b0:bf:96:
90:35:7b:e4:0e:3a:99:ab:93:e7:49:8c:c1:2d:e7:33:89:f8:
ef:36:ab:8b:e4:6e:fb:27:03:27:6a:7e:ed:42:d4:a3:bc:bf:
79:ef:dc:84:5f:d4:66:a1:d3:05:7b:ec:45:c6:ad:c9:66:09:
7d:b5:bb:c7:e0:1c:f2:e1:c5:2e:2e:c1:ec:af:d3:b4:e4:3e:
e3:26:93:c8:e4:17:e6:a8:58:71:03:88:99:e5:de:5c:60:84:
34:68:56:03:56:3e:e0:be:bc:a5:b4:ef:32:1b:cf:81:1d:cf:
9a:e5:8b:5b:0c:51:fe:42:b6:c5:1a:a3:8c:90:08:03:2f:75:
5c:19:1b:e6:67:0a:10:cd:9a:4f:98:42:a3:8e:45:1c:70:b5:
cd:91:ee:b5:b8:4d:67:93:f4:a2:c6:bf:fa:32:91:c9:e6:2e:
5c:bd:06:32:95:72:ae:40:51:46:04:3c:d6:54:9b:ed:2e:94:
54:8d:98:bf:76:05:00:ff:5f:bb:ea:73:e0:61:11:d4:ba:06:
f1:82:55:c4:09:d4:7f:c2:fa:c1:fc:04:e4:93:b4:6d:d9:09:
67:14:40:69:0b:61:75:70:c1:02:53:c1:ca:a7:b9:06:53:b4:
5b:2f:01:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:55:13 2025 by rpki-client