Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
File: 3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json)
Hash identifier: vxhH93HtP3AT5BgfjHuMdSGmmutkmha4GwuYI23fGh8=
Subject key identifier: 28:CC:AF:42:90:5D:8B:70:68:01:4A:D4:45:F0:20:EC:20:28:D7:E1
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial: 0194BCA99B7A54A026006A3B1B1B388F575F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 14:00:19 +0000
Manifest this update: Fri 31 Jan 2025 14:00:19 +0000
Manifest next update: Sat 01 Feb 2025 14:00:19 +0000
Files and hashes: 1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: 8a0Jz72wpWAsvNbIcdR3evw0Ov/4paNpCUjDh6bg1zk=)
2: cTvIsND0rcbhO2LRnW_ioplG7i0.roa (hash: cEDaT4nTfiZsrwarP2rDKx77YlDRn3t6MrTdDfbMfn0=)
3: ejCuuXb3IPaAQbLGykjSnhsrUI0.roa (hash: 2O/6jwQ1UqJYAgAcDjt8a/MDPHZ138YPWORfwXR/3iQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9b:7a:54:a0:26:00:6a:3b:1b:1b:38:8f:57:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Validity
Not Before: Jan 31 14:00:19 2025 GMT
Not After : Feb 1 14:00:19 2025 GMT
Subject: CN=28ccaf42905d8b7068014ad445f020ec2028d7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:44:79:e8:a2:62:b1:cb:60:d8:fe:b7:a0:66:
4e:34:4b:2c:61:c6:11:e5:54:02:b7:a9:bd:7b:bc:
98:f2:bc:d7:95:7e:b4:b6:ce:44:ee:67:71:e6:4f:
b2:d8:cf:0b:d1:fc:34:4c:06:28:19:e8:e9:c3:de:
55:6f:68:6d:4f:74:06:82:33:22:ac:10:9c:a3:9e:
d5:42:d7:b1:e1:89:d0:ed:80:6b:20:2a:79:9b:3f:
d1:32:96:ca:d3:35:6b:3c:f6:e0:7f:52:53:68:3a:
85:3b:68:49:79:67:89:b4:6e:e8:87:02:d9:a4:6b:
9c:de:ee:85:86:6b:b5:97:3c:bc:9c:2e:de:6c:c7:
d4:c3:ca:7c:b6:f5:29:84:21:38:7f:2a:b5:3a:68:
cd:25:a0:5e:20:57:70:3a:c7:72:11:6f:3f:08:a8:
02:37:8d:30:81:0c:f4:f4:58:6b:4c:e9:ac:f4:16:
d8:cb:5f:4f:a6:7e:9f:d3:58:f6:c2:ba:03:62:6f:
83:bd:e6:80:12:6b:58:34:79:6c:13:94:12:66:76:
bb:51:9e:7d:cc:ff:81:d6:b4:0f:b0:7e:ef:29:26:
f6:fa:3e:d1:a6:d4:24:be:e4:5f:ef:73:20:5c:36:
3a:23:e9:5b:0c:15:21:98:7e:88:5c:52:bc:0b:bf:
fe:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CC:AF:42:90:5D:8B:70:68:01:4A:D4:45:F0:20:EC:20:28:D7:E1
X509v3 Authority Key Identifier:
keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:19:68:7a:7d:4d:e3:b3:f0:f8:c0:a5:8e:23:4c:65:d7:2f:
90:8b:b7:f2:84:6e:cc:03:d3:93:a6:bb:bb:90:16:2c:e9:71:
77:e9:8b:ba:86:6e:8e:ed:3c:16:0f:49:96:67:92:dd:6a:9d:
7d:31:37:d4:dc:6b:cd:17:11:b0:38:9b:e7:9a:d3:91:97:af:
a3:84:2b:7b:4a:04:e6:25:75:02:c9:48:82:e2:a8:c0:66:2a:
05:d5:57:29:f5:c8:a5:f3:63:c1:f6:5b:80:99:ac:81:66:23:
5d:35:ae:d2:70:62:ad:2f:52:84:1d:66:ed:17:52:86:16:aa:
a6:2a:fe:95:28:84:0e:2c:2d:05:97:61:f3:cf:4a:cd:ee:49:
1a:94:e9:5a:eb:cf:4d:d1:a3:05:5f:40:49:12:89:94:61:db:
28:00:05:4b:cc:e9:e2:d4:e1:fc:0a:22:d0:0f:ea:ed:bb:e6:
93:64:d4:66:fa:70:9e:d4:07:38:10:53:d7:f1:a9:1d:70:f5:
82:21:00:08:b9:14:fb:3b:ed:91:80:7f:34:ed:f2:cf:58:bf:
b6:c1:b5:f5:14:02:f8:91:6b:fd:6e:07:6e:5f:9f:a2:96:db:
6c:f1:30:16:82:29:ac:f6:1c:2d:5e:27:56:60:d1:5f:00:de:
91:13:eb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:49 2025 by rpki-client