Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
File: 3ghbDRu_nngbFUsG97kUESnbd18.mft (raw, json)
Hash identifier: 8KJLMEIqw+FjqT1JkNIRpTA3gh5Zt+vKZ0hEirzYxrE=
Subject key identifier: 60:9A:2C:56:EF:D1:00:00:37:A7:5E:60:19:8D:D6:56:E1:50:00:64
Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Certificate serial: 0194BCA9AD0A2557C9F7EDFC498D8C4F84DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: 3ghbDRu_nngbFUsG97kUESnbd18.crl (hash: uVbyuEEUiPR4q5q5ldEOczZCL5K0Lem0tzNevltDbjE=)
2: sHHovkPcLVWIMQ_tboQIdcTBHy0.roa (hash: fYwK2GNfLuzV598M+4d1qnmBbMriSVB83QSoeu+hALg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ad:0a:25:57:c9:f7:ed:fc:49:8d:8c:4f:84:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=609a2c56efd1000037a75e60198dd656e1500064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:78:7b:2b:cd:ed:cd:c5:c8:9e:df:00:4d:
cb:c7:35:75:c0:8c:45:d1:e9:5c:37:1c:60:d3:93:
e5:06:e9:3c:e7:43:90:e3:e3:2b:f0:8f:96:1b:41:
25:32:6a:ab:5c:9a:6e:5a:a4:27:f0:9b:69:5e:36:
d8:7b:17:83:02:10:14:cc:3b:b7:b2:00:4f:4f:ea:
ec:d5:85:ad:e8:c9:37:9b:87:d6:25:34:e5:58:f7:
95:51:fb:5e:1d:4a:a4:74:21:21:fe:ae:ca:fb:3d:
02:00:a0:63:21:bd:4c:f4:c5:61:77:54:4b:d5:4f:
4e:bc:95:8b:26:30:d7:53:62:72:28:0d:68:56:b1:
4d:d4:4b:12:f2:6f:49:1f:d5:20:6a:30:96:60:d2:
bc:af:22:4a:11:44:3b:54:ef:b5:25:65:c0:5f:c8:
69:c5:bd:25:9b:cd:84:07:2f:6b:60:1e:ac:e6:18:
53:99:f6:47:6e:74:ea:f8:07:66:eb:60:3b:bb:36:
43:57:13:ec:9b:90:45:86:d3:c4:4e:d8:5f:64:87:
ee:5f:7c:a7:85:f8:a4:c3:07:9f:b8:a5:fe:f5:9a:
56:dd:1c:b3:4e:3f:3b:71:5c:d7:a3:f7:cd:86:6d:
f8:d3:26:21:28:34:85:0e:b4:40:e4:ab:d1:e0:fe:
70:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9A:2C:56:EF:D1:00:00:37:A7:5E:60:19:8D:D6:56:E1:50:00:64
X509v3 Authority Key Identifier:
keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:20:1e:12:60:f3:47:2e:f1:18:5e:04:2e:c4:5e:e0:31:31:
a0:79:67:d8:fd:1d:b9:22:66:23:a3:23:a8:59:c1:5a:8c:1b:
3a:b3:1e:1b:41:77:a1:2a:ae:ec:12:89:82:95:87:66:f5:db:
45:a0:27:fb:54:4c:94:f1:d8:b4:db:a4:53:b0:e7:a4:95:0a:
45:c0:58:93:94:47:b5:2c:42:f7:80:2e:d8:55:e9:43:31:ad:
31:47:84:db:54:76:67:b3:9b:e5:b3:36:fc:fc:70:32:63:00:
89:df:91:7c:c4:13:f5:36:51:a5:e3:84:5a:11:45:b7:76:36:
af:88:e8:88:5d:22:d9:b0:fe:55:31:4e:5c:84:98:85:d0:f3:
07:a7:b5:b8:aa:1c:2b:c3:f3:cc:c4:23:66:38:ac:fb:2d:f8:
ee:e5:13:85:12:07:9a:e9:53:21:f7:eb:f8:21:89:85:3a:27:
06:e9:16:dd:81:56:b2:76:d9:cb:9d:55:2e:7a:cd:cf:80:48:
81:5b:e4:16:0b:bc:5b:0a:10:35:5c:25:6a:d3:6d:d2:c0:c7:
98:37:54:75:91:90:c4:5f:e5:0c:32:f7:ef:78:c8:0f:df:6f:
47:c4:ec:f8:d3:bc:05:78:b2:f8:92:62:d8:f5:5e:b8:2e:95:
3c:c0:ff:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:10:14 2025 by rpki-client