Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
File: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft (raw, json)
Hash identifier: YgD0Fstea1DN8j5VN4orJvPV9loBLfAJZXQlBETmR8A=
Subject key identifier: 52:C5:BF:81:B2:D1:09:9A:1E:BF:B5:6E:B0:FF:C4:02:2B:E0:04:64
Authority key identifier: DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
Certificate issuer: /CN=ded55569177a889d337f03f2e698acabcccbb589
Certificate serial: 0194BCE0B87F0FD84D6E7201B25A185EEB81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
Manifest number: 10B3
Signing time: Fri 31 Jan 2025 15:00:31 +0000
Manifest this update: Fri 31 Jan 2025 15:00:31 +0000
Manifest next update: Sat 01 Feb 2025 15:00:31 +0000
Files and hashes: 1: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl (hash: +KzfjGf1xkI+714/rbOQ6scdL8t9F4QXPH+raaNuPKw=)
2: _iwCmsjTAlw634BVcFH9x4y6od0.roa (hash: sGzYd7+zk4VbbBPH9QI8yNwz1RatcjDRVrzAv9yiEMA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b8:7f:0f:d8:4d:6e:72:01:b2:5a:18:5e:eb:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded55569177a889d337f03f2e698acabcccbb589
Validity
Not Before: Jan 31 15:00:31 2025 GMT
Not After : Feb 1 15:00:31 2025 GMT
Subject: CN=52c5bf81b2d1099a1ebfb56eb0ffc4022be00464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:01:ad:86:d1:7b:7c:6d:b0:4c:3f:75:5d:ae:
34:56:5f:b9:0f:94:e5:d4:95:e8:7e:9f:a9:d7:b3:
05:4c:73:86:2f:1e:fe:89:de:52:0e:b1:b2:57:82:
8b:45:e0:dc:81:10:86:5c:09:0f:7a:bf:31:64:a8:
de:44:0d:3a:72:d0:1a:0c:76:6d:93:91:7e:e7:86:
8a:09:a8:e0:14:e5:39:3e:8e:b1:ff:18:91:b7:08:
c8:bf:80:a3:c0:99:a9:90:9e:e4:81:f1:81:4e:dd:
ff:1a:d7:ca:74:19:16:c2:89:d0:e8:4a:2f:7f:f2:
eb:bb:aa:33:89:48:72:61:1f:fe:d8:c1:0a:51:e4:
09:76:86:70:36:e9:32:11:e0:e5:0d:2c:fc:f6:bd:
3c:93:84:cd:cd:fc:2e:82:df:52:12:42:b5:7b:55:
6f:03:72:77:09:63:68:ef:5e:e2:61:77:22:90:bd:
02:b4:34:cb:13:bb:09:08:0c:20:eb:36:13:c7:35:
85:0e:b9:05:31:31:c5:dc:cc:29:ff:3e:77:28:09:
94:9b:f2:61:64:cd:f0:90:6b:13:95:10:db:ec:f1:
55:f3:b8:e2:86:26:db:3e:fe:fd:40:90:54:11:05:
6b:c6:61:04:1e:b1:51:b5:ea:44:95:ed:1a:41:f8:
d3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C5:BF:81:B2:D1:09:9A:1E:BF:B5:6E:B0:FF:C4:02:2B:E0:04:64
X509v3 Authority Key Identifier:
keyid:DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:58:ae:8a:12:0c:9b:ec:5e:57:68:c3:42:6a:55:db:0d:3c:
84:dd:c0:56:d7:dc:ca:45:2a:bb:b6:91:41:c5:87:27:fd:c3:
7a:49:50:ce:4e:df:13:ee:02:af:cf:14:9f:62:10:9e:19:49:
dc:f4:4d:46:9f:97:73:ec:6f:50:ed:5f:d9:3c:0c:c8:46:1d:
87:03:c3:07:e4:f5:71:4a:71:c2:7b:e4:65:28:1c:1e:33:32:
64:3c:dc:57:50:a3:62:78:61:38:74:19:86:b2:41:54:20:22:
c8:03:84:9f:68:07:36:c3:4c:0f:fa:9f:c8:ea:5a:ef:af:af:
c9:66:4f:5f:a1:f7:51:4e:dc:67:de:c5:28:24:d2:31:11:d3:
0b:6a:8e:2e:9a:de:25:b7:cd:5b:8b:60:ba:93:3b:23:5b:75:
c9:a3:44:04:d8:83:02:02:00:73:36:9d:1b:0c:fe:98:82:e7:
37:ce:8e:45:e5:7a:00:91:c3:23:89:ec:54:44:4d:6c:24:2f:
0b:f6:14:e6:4f:bb:ef:7b:70:b7:1a:62:bc:a2:55:ce:7d:ed:
25:9c:79:27:6b:52:91:69:c7:ea:15:22:40:d2:21:8e:7c:43:
fb:ad:f4:7f:8f:1b:03:49:9d:a7:b5:84:b3:15:b9:d8:61:f3:
60:07:27:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:52:29 2025 by rpki-client