Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
File: 3EtKGKfhUaN9peTM2qnn29iOnZM.mft (raw, json)
Hash identifier: 4IWxJ7WR5j6g3a/vcD9hsbJsjanQKV2qGALilHwRF8U=
Subject key identifier: AF:47:FB:2A:B5:13:24:E8:DB:1A:F3:CA:F0:5B:D9:F3:27:C4:18:2B
Authority key identifier: DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
Certificate issuer: /CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Certificate serial: 0194BCAA142D7FDDCEB5D33317E0C68D223E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
Manifest number: 03D3
Signing time: Fri 31 Jan 2025 14:00:50 +0000
Manifest this update: Fri 31 Jan 2025 14:00:50 +0000
Manifest next update: Sat 01 Feb 2025 14:00:50 +0000
Files and hashes: 1: 3EtKGKfhUaN9peTM2qnn29iOnZM.crl (hash: Mbvpgq7kMkSYymkOzEQh5xyrK5O2DLOpXCmq2TBB37M=)
2: Q6We2_Kzknmf_FU65X_ThS9Li9U.roa (hash: T5kdvis2FcaJDZX7ZiymCfqr46qyRqmHtR1xf7wekhE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:14:2d:7f:dd:ce:b5:d3:33:17:e0:c6:8d:22:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Validity
Not Before: Jan 31 14:00:50 2025 GMT
Not After : Feb 1 14:00:50 2025 GMT
Subject: CN=af47fb2ab51324e8db1af3caf05bd9f327c4182b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8b:13:8d:75:de:ec:48:a9:ee:98:83:36:f5:
33:bb:03:73:60:12:98:5c:32:31:08:fc:01:a6:2b:
01:e6:ee:8a:6c:c9:fa:7a:11:2b:ab:b0:4d:3f:53:
88:be:b5:9f:86:de:5a:8e:91:15:a6:bb:49:f8:56:
f5:ba:91:b9:3b:73:74:38:ab:9c:70:d8:7c:a9:1a:
cf:50:b1:b6:47:2b:59:47:60:09:d3:a4:56:6c:4b:
5c:f6:fb:33:35:80:63:c2:0c:1b:4e:aa:7a:40:fd:
87:ca:e8:0d:6c:e0:b7:5a:cb:9b:c7:db:c2:86:99:
8d:b0:f6:1a:67:a8:7d:6d:22:b8:e8:14:b5:1f:96:
1d:0a:15:3d:fa:d5:ae:e1:87:f4:7a:3c:4b:a1:7f:
41:39:b5:0c:63:ab:0f:9c:9e:a9:b7:99:b5:66:5b:
a5:f7:38:f7:ea:ed:f6:b4:f8:13:9c:4c:84:b3:a9:
80:88:8e:7e:34:c3:aa:4c:a2:4c:b7:a4:e5:3e:2f:
2f:d7:48:03:a7:6b:65:16:2d:02:b4:79:8b:43:db:
d6:38:d6:33:e8:0a:af:e6:ff:da:be:b3:e4:22:1f:
f7:93:b6:82:6e:03:ab:75:a1:61:52:77:75:e1:ac:
8b:e7:dc:6c:ae:46:5b:a8:45:36:0e:d4:19:7c:27:
40:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:47:FB:2A:B5:13:24:E8:DB:1A:F3:CA:F0:5B:D9:F3:27:C4:18:2B
X509v3 Authority Key Identifier:
keyid:DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:87:19:1a:27:fd:68:1d:c8:57:77:69:57:86:66:74:67:7a:
8c:2c:72:76:28:78:34:5a:5d:08:f4:c1:76:86:e2:72:6b:66:
b4:06:cd:ea:4e:14:6b:33:e8:97:13:73:c4:89:72:ae:a3:0e:
25:8f:82:91:24:ac:b7:6e:a3:fb:c1:78:68:4d:4c:62:83:ff:
fd:f9:51:ee:4e:90:9a:35:0e:4c:c1:55:14:e3:ed:ec:29:4f:
ee:65:73:e9:37:c8:a1:63:36:41:ea:42:b2:5a:71:14:a1:c1:
29:e7:23:22:66:7a:42:48:b5:c5:00:70:28:c3:5f:7a:76:33:
0e:c8:fe:cd:fe:f3:d8:14:b0:13:c8:c6:b7:9a:d9:01:62:ea:
88:67:53:aa:2e:e5:b7:e4:2a:13:48:d3:68:3b:61:f3:48:53:
43:36:bd:98:ed:c8:90:b7:28:f1:17:7c:0d:07:be:b9:b2:ec:
e5:f8:ff:f2:e6:4e:bb:dd:e7:7c:cf:f9:e3:8e:93:cb:45:1f:
4c:a5:49:e9:71:37:5b:26:bd:20:ac:7d:32:28:f4:ce:12:98:
c7:05:02:c4:aa:6f:8f:b2:c2:80:0d:4d:a6:47:c9:5a:65:7b:
03:2c:37:e5:ff:ce:68:e9:e3:52:f7:44:79:b3:06:55:bb:50:
14:c3:a1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:45 2025 by rpki-client