Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
File: 3YqroPRrqhRP2wk46RwU-UxhZQw.mft (raw, json)
Hash identifier: ujGyiUhsnSpxtCQT4n6aaI2Eg16Y18lXo1k7JuM5Wn4=
Subject key identifier: C6:70:46:94:ED:17:D2:E4:4E:CA:80:78:83:B3:20:EE:1B:FF:3B:E6
Authority key identifier: DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
Certificate issuer: /CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
Certificate serial: 0194BD176F651349C3542DB7AFE5438C5694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
Manifest number: 0B8B
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: 3YqroPRrqhRP2wk46RwU-UxhZQw.crl (hash: /TPd2PxxIuN3bsOfll0/YRLQCLbIXjrUGg4qlRFTEgA=)
2: jyRFM9_T_syhJNdrBbZtEXQjBxY.roa (hash: 3sN/6EgdGuf6mYlFqORSiJaf85S1hh85EE3f4pncjgo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6f:65:13:49:c3:54:2d:b7:af:e5:43:8c:56:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=c6704694ed17d2e44eca807883b320ee1bff3be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:30:23:a6:2b:5e:ce:fe:8e:71:cc:e8:e7:
79:c8:33:f3:fb:7b:67:36:a3:74:7c:a3:49:fb:dc:
13:46:da:81:2e:61:5b:4c:01:07:1c:19:83:1e:6a:
81:a4:bf:32:80:8f:01:0b:32:c6:55:c3:b9:ff:76:
b5:5e:f2:73:82:5d:54:3c:e4:76:17:a3:39:25:52:
7f:e9:37:5f:61:47:d3:d4:1b:f0:5c:0c:a9:da:3a:
bf:5a:38:ed:6a:a9:db:fd:04:f5:be:a1:f4:11:b8:
c4:ff:36:1d:0b:75:de:92:bb:a7:9c:13:8a:ad:5c:
b5:7f:6e:5e:0d:f9:cd:e7:5c:7a:6e:78:83:d3:1a:
0d:c4:dd:71:c8:d5:1e:42:09:b3:a3:b1:49:f9:98:
b5:f6:54:2b:ef:a4:e3:30:33:ea:65:19:2c:ad:2f:
52:08:06:2d:ab:f8:cd:9d:a0:2a:58:11:53:55:ee:
2d:36:5f:7f:fa:6e:ae:d5:00:db:c7:24:d9:5e:40:
f2:aa:ca:32:f1:d9:6e:1b:95:1d:32:fd:f0:78:4b:
d7:de:dc:49:81:71:73:c6:29:84:cb:9a:e7:9e:39:
38:23:b0:4d:9f:fa:0a:01:68:7e:13:5c:13:66:be:
77:2c:1b:e9:2e:df:d8:f1:cd:b9:fa:cf:81:a1:7d:
2e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:70:46:94:ED:17:D2:E4:4E:CA:80:78:83:B3:20:EE:1B:FF:3B:E6
X509v3 Authority Key Identifier:
keyid:DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:dc:d5:aa:a0:95:a5:85:e9:4f:90:42:63:49:1e:a6:8a:50:
b4:4f:ee:e4:29:02:5f:24:67:ae:11:64:63:81:1d:5f:22:aa:
3b:54:eb:34:b5:f0:ef:17:9f:da:fd:70:c2:52:7c:73:a0:02:
4e:5a:71:30:6e:6d:e8:44:6b:07:0b:0e:d7:5a:18:01:37:ed:
2f:a3:1e:d0:8d:e3:42:31:49:ec:e7:cd:12:82:00:82:04:07:
27:7e:5e:ec:d7:40:cf:c5:fc:cd:55:37:3e:fc:41:64:4c:c8:
25:63:c3:68:f2:76:cc:52:96:0b:a2:f8:50:f7:44:e3:ee:e6:
93:08:5c:f9:7a:be:f5:9b:e8:94:76:60:8b:7e:b9:16:33:1a:
69:7b:5e:37:d1:61:8d:96:e3:b7:c1:6e:1b:9c:ab:0e:44:ba:
cb:81:76:ed:c4:c7:46:3a:ad:f5:1e:0e:1c:97:8d:2c:89:c9:
45:9d:df:7e:8e:76:39:73:73:9c:bb:09:4e:90:cc:c7:67:c1:
30:d1:75:bd:87:ee:d2:ed:42:77:fe:be:fd:87:7e:8d:e2:b4:
7d:10:15:d7:a4:54:02:bd:2c:9b:75:c4:1f:de:49:02:7d:2e:
f6:96:20:f4:80:6e:21:da:f2:d4:b8:18:b1:ea:45:2f:b5:d7:
6b:2c:e6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:27:36 2025 by rpki-client