Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft
File: t3gT9sVnClhoatw9SVV0QpXdFBk.mft (raw, json)
Hash identifier: Fl6gJuJH2OORms+q3eFoa+PWNEZcfdkKLA9h5OYmp0w=
Subject key identifier: 53:46:0D:B4:E0:99:CF:9E:90:12:8D:54:D5:D1:FC:48:FD:4D:B2:44
Authority key identifier: B7:78:13:F6:C5:67:0A:58:68:6A:DC:3D:49:55:74:42:95:DD:14:19
Certificate issuer: /CN=b77813f6c5670a58686adc3d4955744295dd1419
Certificate serial: 0194BC3C05F25B427C7F6301838AA02D5018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3gT9sVnClhoatw9SVV0QpXdFBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft
Manifest number: 0D02
Signing time: Fri 31 Jan 2025 12:00:37 +0000
Manifest this update: Fri 31 Jan 2025 12:00:37 +0000
Manifest next update: Sat 01 Feb 2025 12:00:37 +0000
Files and hashes: 1: t3gT9sVnClhoatw9SVV0QpXdFBk.crl (hash: RzPRVQhKD+cOU09DvjbcV9m+7lH9AlRwkAAJlF8VIB0=)
2: xy0ayvCMPxVGUij5mpyeTNFKRNw.roa (hash: tXbOwwPUAQhZJRCjintnYpclKOHIFWoxy2lUX1RBhtc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:05:f2:5b:42:7c:7f:63:01:83:8a:a0:2d:50:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77813f6c5670a58686adc3d4955744295dd1419
Validity
Not Before: Jan 31 12:00:37 2025 GMT
Not After : Feb 1 12:00:37 2025 GMT
Subject: CN=53460db4e099cf9e90128d54d5d1fc48fd4db244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:88:08:a2:92:4b:aa:14:49:5a:9e:a3:38:99:
d4:c5:b7:82:aa:da:dc:17:e8:5a:16:01:6b:dc:3e:
c9:dc:11:5d:ec:be:d3:df:b8:da:f5:9b:27:61:dc:
5b:4a:d3:00:28:e6:60:bf:34:92:d5:86:de:c8:4c:
09:c7:9b:aa:84:91:1b:9c:53:94:cc:c5:74:ed:5d:
3e:78:36:19:79:03:4a:31:77:eb:fc:24:88:ca:00:
b1:95:fc:97:bb:60:d7:2c:31:5c:39:c2:25:c2:f5:
63:85:f5:91:12:ed:d8:a2:7f:c1:f1:47:30:71:0a:
38:e8:7a:5d:ac:85:a3:7a:53:93:cb:ab:c3:02:10:
cb:64:27:02:70:d5:15:b0:f3:c3:ed:39:62:80:67:
74:cf:45:d1:5b:b7:c1:e3:68:38:6c:4c:35:3c:e0:
ce:61:fa:9f:60:25:06:aa:41:b8:cb:87:89:1c:be:
47:08:f7:72:ea:52:d8:77:f0:c5:65:19:4e:6c:e4:
f3:df:64:49:53:3b:71:6d:1c:87:74:3b:5e:d7:d0:
02:4a:fb:42:79:c3:f5:fa:4d:3c:89:ad:98:68:31:
b6:61:83:7a:75:10:e1:30:27:68:8a:d6:db:b5:e2:
42:a0:5f:95:a6:88:d5:77:cf:31:08:d1:a7:ef:87:
bf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:46:0D:B4:E0:99:CF:9E:90:12:8D:54:D5:D1:FC:48:FD:4D:B2:44
X509v3 Authority Key Identifier:
keyid:B7:78:13:F6:C5:67:0A:58:68:6A:DC:3D:49:55:74:42:95:DD:14:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3gT9sVnClhoatw9SVV0QpXdFBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a4:25:2a:5f:33:83:d3:00:e6:be:82:8b:85:ac:e0:64:27:
de:9a:54:1b:fe:e2:e2:e2:e3:a7:56:44:a1:43:ee:cc:33:ee:
61:cf:8f:37:24:01:66:4f:21:63:5d:77:08:c7:a9:60:87:45:
e6:8f:3b:7f:c5:e2:57:ad:8e:f9:74:29:c0:37:4b:db:a7:7b:
b8:7d:0c:26:83:13:35:ee:f0:5a:4d:0f:b9:8d:98:b0:03:69:
d4:2b:5f:b3:2d:0f:40:67:de:44:e7:71:c5:2c:59:a0:52:45:
4c:50:21:c1:42:0e:3d:71:81:6c:a5:a3:25:ca:a4:4b:fc:7f:
68:25:c1:97:af:4b:c7:94:b2:7c:a3:96:75:ef:83:c8:8b:68:
c4:a0:d1:6f:3e:2a:33:ac:71:24:66:16:d9:8b:64:8b:76:3b:
2b:a7:91:dc:23:c1:ad:7f:26:15:45:8f:fd:ef:14:1b:83:47:
83:65:1a:08:a5:ff:ae:29:eb:3e:71:82:e3:51:93:f3:bd:e6:
81:95:5f:38:e9:ef:a0:e1:db:6e:df:93:51:75:7b:a3:36:4e:
f5:0c:7e:cd:08:45:e4:a3:ae:a1:19:10:de:9d:9f:f2:93:c0:
a2:0e:38:17:59:36:64:51:90:3d:19:72:89:18:10:9b:e3:32:
04:14:d7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:13:20 2025 by rpki-client