Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
File: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft (raw, json)
Hash identifier: 8mkm6ANQUiPrtjHuzA2CWkSeeqAAN1KTfxUri6vHXbY=
Subject key identifier: 42:42:8C:B8:63:7D:22:3E:08:99:18:F6:52:F2:35:CC:D4:32:14:29
Authority key identifier: DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
Certificate issuer: /CN=dd52ad090b54678e0968e69955c25049434d96c8
Certificate serial: 0194BC3C11F67D197897A34246E6D3586505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
Manifest number: 0A2A
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl (hash: Jam3AfgJJKpwCcyX+CsOAiZaq7+U2jOuBKy/KzfxITk=)
2: hfSj4Acr0ZdBdVZF-bmfhSWxDR0.roa (hash: qMvzKdtsac1CrAS5/GB10mnE0HZEb+d2b/OglfbpJc0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:11:f6:7d:19:78:97:a3:42:46:e6:d3:58:65:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd52ad090b54678e0968e69955c25049434d96c8
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=42428cb8637d223e089918f652f235ccd4321429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:69:10:48:be:f1:6d:ae:15:77:e5:d1:15:bf:
ea:d8:a5:85:85:d1:3d:cb:2b:87:15:ed:9f:05:15:
72:2d:ac:36:ad:ce:73:18:53:e4:4a:26:e1:40:91:
4e:be:0f:3a:a3:fb:06:a6:b4:ed:04:7b:92:05:73:
d2:7e:b7:d9:3b:d2:16:08:93:a9:b9:c9:49:84:01:
b3:de:46:c1:ba:04:9d:03:fe:13:f3:e2:db:c1:5f:
93:28:e4:ee:e8:8b:0e:db:04:ad:a9:05:83:4d:36:
56:49:41:dd:33:b0:20:ab:2c:6f:99:01:5e:90:59:
d3:99:20:42:b7:85:25:df:1f:08:ea:10:69:7d:64:
dd:fa:32:e5:f4:14:0c:bd:44:ca:8a:46:e5:84:96:
76:7b:1d:31:b3:4a:5d:cc:82:54:15:78:a8:bb:2c:
8e:9e:73:72:4b:31:a7:e4:6a:76:ba:cb:3f:6b:59:
a0:d1:7d:f9:05:10:2b:c8:7e:0c:47:e5:ce:56:e5:
2d:a7:a6:7a:bb:4c:18:a3:06:b7:23:60:fa:ba:f0:
04:c2:08:23:ee:3e:fd:7c:60:ca:da:74:b4:23:58:
dd:c4:70:f1:f1:f8:24:22:e3:d9:a4:a5:77:c7:3e:
99:f6:4b:38:22:e8:95:77:90:6a:1e:26:5a:24:5d:
d3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:42:8C:B8:63:7D:22:3E:08:99:18:F6:52:F2:35:CC:D4:32:14:29
X509v3 Authority Key Identifier:
keyid:DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:72:88:de:b4:a0:d4:18:ad:ac:2d:fc:ea:1e:f5:a3:25:ca:
14:cc:05:74:90:e3:3d:0e:65:6c:2c:0c:f2:ae:94:22:2e:46:
77:21:9b:4f:8b:99:20:3f:82:81:33:66:0e:01:dc:60:51:ac:
7b:d3:ab:ec:a7:bc:e3:9e:c9:63:00:43:45:8f:e3:fb:bc:00:
89:bb:5c:78:ab:4b:9c:0c:b8:f5:da:e4:f0:78:89:69:da:67:
10:72:33:2b:50:c5:5f:80:a9:ff:a4:7b:d8:e6:bf:e0:93:7d:
d5:16:07:22:5d:56:41:37:e7:d5:b9:21:70:e1:67:71:0f:b8:
87:34:64:5f:28:1b:1d:f8:7b:e3:eb:85:41:59:b0:51:5c:83:
33:5f:c8:25:26:e0:52:6b:43:6c:21:56:60:e7:a7:18:b2:ae:
b9:51:85:be:dc:8f:09:6b:4f:29:10:03:5c:67:13:57:95:7d:
2f:b4:f8:06:f3:2d:7c:c1:b6:b6:bb:59:cd:9f:71:18:6d:a1:
b3:24:02:cb:fd:f6:ec:9a:fc:74:22:7e:a6:29:22:79:33:03:
b4:e3:ad:1a:aa:f2:75:56:e5:04:1b:11:98:df:33:76:4d:97:
05:18:9d:23:a4:c7:f9:bf:48:50:41:88:85:58:a8:0c:5c:56:
fb:48:59:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:37 2025 by rpki-client