Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
File: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft (raw, json)
Hash identifier: KBsoub14XHC6jm7r2ookM3tg2+oIrj/vmcBJrOoCRLY=
Subject key identifier: 9C:F4:0A:96:32:4F:D9:81:E7:86:E3:8C:31:45:0D:42:8A:3D:58:69
Authority key identifier: DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
Certificate issuer: /CN=dc6baa601236ab9bea29f807a66920ed5656a196
Certificate serial: 0194BCE0BBF649DD04EC6A405B6B20FAD205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 15:00:32 +0000
Manifest this update: Fri 31 Jan 2025 15:00:32 +0000
Manifest next update: Sat 01 Feb 2025 15:00:32 +0000
Files and hashes: 1: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl (hash: Fj+bBqAIBjsdqpB+EBa7eDBzJPly4ZTls/LqRk9V6rQ=)
2: h-YJMMunIS0_gIZ5p26lgKRQyKc.roa (hash: bR5opkzZodiPK85GQ+pJiSPCVteQ0JuW261tZcQfTgc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:bb:f6:49:dd:04:ec:6a:40:5b:6b:20:fa:d2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6baa601236ab9bea29f807a66920ed5656a196
Validity
Not Before: Jan 31 15:00:32 2025 GMT
Not After : Feb 1 15:00:32 2025 GMT
Subject: CN=9cf40a96324fd981e786e38c31450d428a3d5869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:05:a0:70:53:83:79:a1:fd:1c:2d:db:b9:65:
73:94:8a:9c:d1:c7:85:8e:6e:22:45:ec:44:27:58:
bc:3e:88:e4:87:01:98:70:ac:87:f8:98:d4:85:8f:
9b:e5:e2:31:dc:3c:f6:66:ec:d1:33:0a:cc:57:08:
84:c6:70:56:58:47:02:c5:2b:fd:d4:7a:01:03:6d:
01:1d:15:49:ee:7a:cb:f2:0f:14:d6:ab:73:8c:70:
a3:a7:8a:90:5e:d4:cc:ec:fa:f0:c7:1b:46:71:23:
52:a2:d9:1f:89:ac:60:73:80:f1:2c:05:6c:b2:63:
3f:17:ab:6e:9d:8c:66:72:eb:a7:f6:99:c0:8e:49:
9a:50:e3:a2:6e:88:38:ef:01:f7:78:ac:1a:14:96:
57:49:42:08:9c:31:ee:25:6d:ea:fe:f6:f8:a4:08:
55:ec:5b:c8:c3:c4:15:32:54:08:79:7d:ba:58:51:
71:cf:93:09:41:73:bd:21:d9:eb:e5:3a:46:f0:7f:
d0:32:1e:1f:68:0d:3e:2d:b2:64:f4:91:7b:20:c5:
43:a9:2f:b8:a8:ee:39:17:31:55:5a:c7:87:5a:a9:
6f:b9:f7:cc:2b:85:9f:56:77:f6:fb:df:56:ec:07:
b7:fe:86:38:00:09:11:d3:29:40:ea:f3:e3:7f:36:
dd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F4:0A:96:32:4F:D9:81:E7:86:E3:8C:31:45:0D:42:8A:3D:58:69
X509v3 Authority Key Identifier:
keyid:DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ca:95:65:36:e4:a1:4d:c4:59:ed:d7:ea:d3:19:a5:b1:7f:
3a:6f:f4:53:f4:22:08:85:20:f6:bd:a8:fa:1b:8e:b8:b9:14:
92:80:60:8e:17:cb:8a:bf:a9:b1:d1:a6:b9:e8:f6:05:79:1f:
00:8a:17:a3:a1:28:f9:67:66:79:bf:e4:5a:df:1f:ed:06:2b:
92:54:c9:ed:c7:60:6b:f8:ff:69:f2:b0:a1:ad:1e:a7:e0:ea:
54:2b:d0:65:5c:03:27:31:d7:9a:7b:20:4d:f0:82:05:46:bd:
86:09:20:f9:16:05:92:92:39:c2:83:12:c5:97:9e:c6:95:18:
ee:73:7d:e4:a8:e1:ef:83:11:3a:9b:a1:b3:7d:f9:31:86:38:
fa:7b:52:4f:88:03:a3:d8:76:04:dd:e8:64:02:75:00:1d:8f:
78:64:51:cf:53:eb:94:be:03:21:18:20:1f:6f:32:e6:e6:50:
63:55:9e:19:f0:19:1d:8c:45:3c:b5:c1:85:2e:e7:8b:76:b7:
66:d0:78:b9:da:00:b8:a1:45:09:a0:00:5d:04:19:bd:6b:c6:
12:9f:c0:e3:7a:ac:c3:7f:a6:45:de:ed:af:6c:0f:ea:13:6f:
a6:54:d4:a8:48:d5:38:5c:32:86:ca:2c:29:20:2b:23:f7:e2:
60:43:08:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:57 2025 by rpki-client