Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
File: 3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json)
Hash identifier: r++qdE0NDFqgMqyNS9yywTgATT8Togz8RFKRuD23uXk=
Subject key identifier: 3E:15:CA:D1:65:E9:8B:C7:10:48:70:D6:1D:4F:BA:B4:54:2B:6A:2A
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 0194BD17AA2242D9BAD1061591766C44486D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: 3PAnR92WoS2kCNnhqp51t4uc716peUtnq4M4Q2yn5+M=)
2: 9euEZiQBZa0KQy87mhddaAGMyJs.roa (hash: SlkEYhw31htGhY3rwyORB+KNW056wx1mf03bV0slrXo=)
3: PbQAq4tBfBzJf67NNR29Pj0FkmA.roa (hash: 68zQoRFiAUVZyRagTzVHGcIdd/jEkcY9EEgWfXz5qFk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:aa:22:42:d9:ba:d1:06:15:91:76:6c:44:48:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=3e15cad165e98bc7104870d61d4fbab4542b6a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9a:b9:b6:af:1e:fc:70:40:43:c1:ba:8a:4a:
77:3b:e5:c0:a5:6c:16:19:6f:a4:3c:9c:ee:99:e2:
31:1c:6b:49:05:20:20:c7:0d:37:a9:9d:3c:31:6c:
67:e4:98:0a:fc:76:73:de:d6:51:db:31:af:be:35:
25:df:e9:d5:d4:0c:6c:dd:08:d5:79:a3:8c:df:bf:
72:56:59:e9:28:a0:9b:0d:91:6b:9f:ac:7a:88:b1:
c2:94:cb:be:2d:3b:45:3b:a6:43:41:51:41:12:6d:
0c:a2:dc:13:ae:b7:2f:76:23:94:32:dd:83:f5:04:
15:30:60:b0:6f:af:b1:10:f4:8a:79:a8:de:b5:90:
11:d9:e4:0f:3f:c6:5d:65:4d:32:a1:3f:66:0d:a1:
ac:05:13:1b:7d:1e:ba:24:46:b2:9c:b2:d8:dd:d6:
5c:1d:7a:a1:36:b6:20:34:f2:1b:c1:43:a1:a5:72:
53:ac:d2:1b:86:3a:1c:40:d4:24:1a:a0:c0:f9:1b:
11:a2:f0:21:d9:fd:17:db:4e:7d:42:4f:20:b4:d1:
f5:42:bd:53:c5:46:56:e1:41:44:ca:0a:9e:01:72:
2b:bf:00:f4:46:78:8d:0b:36:a4:ba:71:ae:a1:b9:
bc:d4:8d:f5:86:50:90:11:bf:87:73:12:fa:5f:f7:
6b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:15:CA:D1:65:E9:8B:C7:10:48:70:D6:1D:4F:BA:B4:54:2B:6A:2A
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:de:e1:ba:02:d4:1d:45:84:41:4b:c9:01:3a:35:19:ed:5f:
b6:d8:44:f8:b6:20:70:4e:bb:3c:6f:a5:52:a9:d0:93:6d:48:
7f:b0:7a:9e:41:e6:31:6e:ea:b8:a3:11:2e:14:b3:c2:36:b6:
bd:96:2c:ad:78:42:87:02:08:dc:44:df:ba:36:e6:a1:51:a0:
b4:ce:fd:e0:49:6e:39:99:11:bd:01:c0:36:04:a7:8d:98:74:
ac:37:37:cf:65:3e:30:8a:98:e3:4f:6b:22:30:f0:cd:48:eb:
48:6b:c1:65:3e:92:f8:78:38:77:16:f0:32:c4:71:89:f9:74:
c9:38:dc:62:ef:ca:3c:a9:0b:1e:3f:ad:ad:a4:8b:69:0b:d9:
c9:a1:34:fe:c5:e3:8e:c1:6d:67:bc:d3:db:b1:82:b2:00:2f:
8c:a3:5a:98:22:fb:44:6f:19:5e:03:76:f5:4e:5c:12:e5:97:
ad:f6:dd:18:f8:30:5c:ab:9d:f2:cc:05:52:7b:90:a7:4f:fa:
39:01:5c:36:12:13:a9:b7:f1:d4:d3:9f:1e:91:51:e5:61:93:
9e:ac:f4:f4:46:ec:19:c7:db:89:64:57:22:72:3a:70:1b:2e:
13:cc:fa:b5:7a:ca:3b:25:ff:74:50:7f:81:d1:dd:0c:e3:c5:
64:16:2b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:36:30 2025 by rpki-client