Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
File: 3itcv5Z6A0nYiXBLtNYfpSajHW8.mft (raw, json)
Hash identifier: M2+1ZmyWXbMNwd/kk7CcC/uFwLWO/ar+hG0bUbWpCOc=
Subject key identifier: 70:84:3B:91:F3:EE:0A:6F:70:7B:35:6B:A6:3E:8A:EC:3C:5E:20:8F
Authority key identifier: DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
Certificate issuer: /CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Certificate serial: 0194BCE08BBF48CB4FBC0777D9B127DF0C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
Manifest number: 136A
Signing time: Fri 31 Jan 2025 15:00:19 +0000
Manifest this update: Fri 31 Jan 2025 15:00:19 +0000
Manifest next update: Sat 01 Feb 2025 15:00:19 +0000
Files and hashes: 1: 3itcv5Z6A0nYiXBLtNYfpSajHW8.crl (hash: L/sEMRVTygXZZXQjW8F4MSstKwkkEP1ULaLkKmttMZM=)
2: RmRTHkNLraqOOzazgFQdU_YCKkM.roa (hash: 5SoXabo2aLivwm4lm+kA69S7S7+v67Nc52d80muCgcE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8b:bf:48:cb:4f:bc:07:77:d9:b1:27:df:0c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Validity
Not Before: Jan 31 15:00:19 2025 GMT
Not After : Feb 1 15:00:19 2025 GMT
Subject: CN=70843b91f3ee0a6f707b356ba63e8aec3c5e208f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:e4:42:f7:83:ac:82:21:69:30:42:cb:d5:
8a:95:12:2d:de:aa:1f:f7:ab:0e:c5:36:45:e3:98:
10:f8:af:db:ac:0d:7f:1a:26:c7:9e:28:22:0a:d3:
19:67:0c:e0:aa:4b:63:e8:70:25:7c:dd:b0:e5:25:
71:38:fc:d9:d8:ab:ce:d3:72:08:cd:68:28:ff:74:
8d:21:c6:c0:1f:9c:c3:64:3b:9b:40:49:f0:40:79:
f7:b8:79:35:c0:99:1c:ee:8a:32:b7:e9:d4:d3:09:
dc:36:19:4a:e8:63:72:99:e1:e8:ec:b1:f3:6d:7b:
5b:ff:27:44:af:ef:b6:d2:b5:75:1b:b3:3d:1a:e4:
29:d4:e8:4c:63:e6:cb:68:1b:cd:50:ae:b5:96:0a:
25:ec:c8:3d:1e:e1:8d:7c:65:4a:a6:0e:c1:d1:d2:
37:af:0d:54:a0:1c:c4:02:3c:b1:a6:fc:d4:de:20:
3d:6e:e4:83:03:b9:d2:b3:97:97:76:5b:c3:d4:68:
db:05:34:56:45:0e:cc:75:fe:fb:7d:4f:a0:85:9d:
74:ae:b5:3b:7e:1f:16:61:9f:8c:1b:85:f1:e4:3d:
01:d4:2f:9d:4c:ae:6c:8d:33:3e:05:2f:8d:36:a0:
43:e3:18:1f:c6:0f:0f:59:0f:98:40:1f:c5:ef:4f:
74:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:84:3B:91:F3:EE:0A:6F:70:7B:35:6B:A6:3E:8A:EC:3C:5E:20:8F
X509v3 Authority Key Identifier:
keyid:DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:c2:1b:c9:a7:59:bf:28:9e:64:3b:b3:6b:24:f5:5f:c8:13:
3a:ca:19:7e:ef:b6:3b:c8:a1:89:c6:18:ed:c8:30:41:8e:77:
e1:d8:73:73:ac:4e:ee:5e:7e:83:c5:96:b7:4c:e7:b2:74:de:
6b:d5:da:3a:12:d2:6c:09:f6:06:9e:a8:5a:2e:3c:e1:f3:07:
80:45:2e:5f:ed:f2:9b:ee:4a:29:d4:75:a1:39:be:b8:d4:91:
70:6e:b5:8f:de:66:98:ad:21:2b:27:9c:97:12:5e:fb:5a:01:
f9:be:9e:e8:11:a8:94:4b:32:6a:0d:f0:ad:24:17:31:94:26:
9e:a2:11:c2:16:45:03:c2:e3:09:b2:2a:d4:02:75:8d:82:90:
fa:46:50:a9:1d:d8:1d:f7:1e:d1:89:37:fd:26:75:ae:f8:23:
68:13:49:73:56:f8:d8:ca:8b:e4:24:e4:4e:96:4d:1e:78:3a:
a5:28:80:a7:bb:9a:63:35:93:dc:dd:a6:1b:7e:9b:1d:1e:00:
00:6d:94:d2:0a:59:9b:f5:eb:cd:04:46:b7:a7:cd:6b:d4:ea:
1e:12:d0:71:1e:0b:87:db:e3:23:42:ea:17:88:7e:f5:76:94:
de:34:16:5f:80:98:1f:d2:92:a1:b7:0b:b5:45:ac:c3:34:43:
0a:c7:36:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 03:33:54 2025 by rpki-client