Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
File: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft (raw, json)
Hash identifier: 5ICzrI7gis4SqWMHZgC9h3qQnEy6FITqLybOSJ0eUOQ=
Subject key identifier: BE:BC:BC:15:42:EE:C7:87:DA:DE:FA:FD:0A:D8:E3:0A:B4:AE:9D:07
Authority key identifier: DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
Certificate issuer: /CN=dd6daef6664a7529b629f3fd65004915230f1be9
Certificate serial: 0194BD17609E995BB0C94EA2712C24B1129D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
Manifest number: 0539
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl (hash: y9SQ5z2sQKDFm//vquCo8oW4bs6RhnM1CyXYdGPumy4=)
2: MpZzldQi5IW1vH72zsN86ALdCYo.roa (hash: hGLTyfZCRDqAerkM2L4I96QJCTHMEKoFxuiSvfkJH1Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:60:9e:99:5b:b0:c9:4e:a2:71:2c:24:b1:12:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6daef6664a7529b629f3fd65004915230f1be9
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=bebcbc1542eec787dadefafd0ad8e30ab4ae9d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:66:25:fb:66:e7:0a:2d:51:66:12:7a:c5:e7:
e5:51:fc:84:23:c2:1c:63:8c:70:5e:d7:13:46:0b:
27:a2:a3:51:05:48:a5:64:ca:5a:6a:6b:ed:bb:35:
dc:94:69:95:7c:3f:ae:0d:c4:16:b8:5f:72:08:98:
26:d9:81:36:fa:26:de:2c:64:96:51:5a:62:6a:3b:
50:13:c2:ca:3f:78:92:37:f9:f2:6d:25:01:58:53:
b6:73:fe:9d:e6:9e:9f:fb:93:93:53:a2:47:90:b7:
df:ca:18:69:15:1c:9c:80:d2:54:ea:a1:3d:e2:70:
3b:30:22:c2:53:b1:06:c4:48:99:fc:54:95:62:95:
26:34:2c:6e:82:28:20:ba:f6:7b:cb:72:07:8f:a4:
1d:ca:f5:a2:13:0f:d4:02:56:01:23:63:0a:e9:85:
b1:4b:59:5f:f7:e9:3e:fa:00:00:2e:cc:f4:db:4a:
a5:83:d1:42:3f:49:00:7b:5e:6a:9b:49:df:aa:a7:
1d:21:8b:a3:b2:57:b7:0a:34:82:fc:a8:ad:e4:d7:
7d:d7:b8:ad:87:c6:89:43:73:cd:8f:17:49:c4:d4:
0a:10:b0:c4:df:09:a8:39:80:91:37:cc:9f:39:a4:
95:57:e8:31:25:c8:8c:88:81:b5:31:dc:9d:44:81:
a4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BC:BC:15:42:EE:C7:87:DA:DE:FA:FD:0A:D8:E3:0A:B4:AE:9D:07
X509v3 Authority Key Identifier:
keyid:DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:2a:8d:25:35:c7:b7:36:ca:60:13:a8:b6:b2:91:de:69:4a:
f8:a1:18:eb:76:bf:04:b4:f1:cc:e6:17:87:d3:60:40:3e:d1:
13:09:93:b0:a8:ea:da:cb:44:47:b9:d5:64:99:19:b3:5e:6e:
39:8a:36:e4:fe:2c:6f:91:2c:40:5f:d9:4f:36:3b:e6:8c:af:
03:f7:da:97:d0:78:04:e7:ab:d8:d0:7a:1a:84:4a:1a:97:d5:
d1:38:15:65:1a:27:dd:b0:5c:a1:1b:73:0f:36:05:43:1c:a5:
c6:5b:02:03:6c:8c:0f:e7:f7:59:86:27:54:c6:18:d5:08:1d:
59:60:2b:69:92:f5:d0:fe:80:61:73:84:6b:37:82:65:a1:69:
34:55:ba:2e:ca:ba:f5:72:0d:1e:de:bc:14:d4:9f:be:7a:7d:
83:7b:6b:4f:ec:f7:bf:e9:a7:07:75:ff:d0:98:a1:da:7a:2b:
28:65:bb:94:3c:00:4a:8d:b4:0f:ce:ce:fe:f2:b2:26:d2:7e:
39:73:6b:3a:b9:43:be:a6:12:b8:97:4c:0e:77:68:79:68:57:
64:c6:17:93:e1:04:17:8f:3a:1f:0d:ef:79:21:30:00:00:e4:
77:9b:9e:ea:2c:0d:fc:00:f7:dc:03:6d:e2:93:dd:f5:4a:cf:
6d:3f:a5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:51:42 2025 by rpki-client