Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
File: 3rGA3ccUMQPwLmnLnNoZwjleV6E.mft (raw, json)
Hash identifier: lcEBBAPsCtvDgAjh0vYtcJXkrVTaPHIxTgpY7XycQqk=
Subject key identifier: E2:6D:D5:64:E1:CC:93:EC:F7:16:07:F7:53:97:84:9A:B8:B9:BE:5C
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial: 0194BCA9D9909D564161E294885C9E471FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 14:00:35 +0000
Manifest this update: Fri 31 Jan 2025 14:00:35 +0000
Manifest next update: Sat 01 Feb 2025 14:00:35 +0000
Files and hashes: 1: 3rGA3ccUMQPwLmnLnNoZwjleV6E.crl (hash: WjqsmBrePXsnp3mbdSYSDhymKOSdrRqn39nx0imzwQY=)
2: ddyzrC5BC4wxEQNwmkjcZcFPmY4.roa (hash: 0XE307HFpJ7wb9YEVzh633mz+Wdn4W7KWCgB9kPDSrg=)
3: nB_zoF-5vRmGl3d9TG824Zcc-nw.roa (hash: m3z2itiLoAbrDtSbjfB2c49btcR+jFaVv3ZdkaLWcmg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d9:90:9d:56:41:61:e2:94:88:5c:9e:47:1f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Validity
Not Before: Jan 31 14:00:35 2025 GMT
Not After : Feb 1 14:00:35 2025 GMT
Subject: CN=e26dd564e1cc93ecf71607f75397849ab8b9be5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9c:10:ed:b5:87:43:e8:bd:d4:a5:43:61:83:
0f:64:de:a2:96:c6:34:50:09:92:a4:41:64:97:ae:
70:19:49:8e:06:fa:a8:74:f4:6e:c0:74:46:44:2c:
59:41:8d:e7:8e:b4:cd:72:f5:59:32:47:94:d8:1b:
b1:fc:aa:41:c9:fe:ce:2e:b3:1d:36:0f:77:cd:34:
c3:fc:45:b3:eb:90:ee:32:18:22:e9:2e:d2:f0:7e:
07:75:94:ab:28:e6:ed:86:f2:f9:30:c4:ff:0a:9b:
c6:13:fc:dd:29:2f:3d:d0:af:b9:5d:7f:5e:da:d8:
66:40:2f:82:ab:2f:b1:12:62:0e:0a:a2:14:8f:e6:
d4:d9:91:43:96:2c:90:a1:a8:bb:1d:06:6a:6b:c7:
f2:19:07:cf:9d:1a:5d:14:3d:d3:b3:fd:de:55:0f:
0c:58:70:cc:fa:82:1d:10:2f:e6:e9:5e:26:70:bb:
c4:e1:4f:8f:6c:41:b5:a7:9a:be:1b:b4:7f:2b:32:
0b:fb:c9:d8:63:5a:04:7c:04:d3:f9:6a:85:6b:d0:
9f:7f:a7:83:dc:c1:8a:db:79:f8:ef:47:60:77:ab:
94:c1:02:0b:d9:c5:6d:dc:b5:51:05:12:5f:5a:01:
f6:5b:80:ad:25:8e:9b:25:c7:13:88:26:82:65:10:
d7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6D:D5:64:E1:CC:93:EC:F7:16:07:F7:53:97:84:9A:B8:B9:BE:5C
X509v3 Authority Key Identifier:
keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:8c:1b:99:de:3e:07:1e:f4:3c:bd:e6:79:d5:e0:9f:2c:f7:
b7:00:1a:8c:24:9d:59:fe:fb:7f:0e:6e:a8:c1:ba:46:d9:ba:
3c:ed:0f:78:7d:31:1f:ce:c5:74:48:a8:2e:bf:59:95:4f:09:
e0:98:33:70:b1:61:5c:11:9a:35:48:a4:77:6f:55:22:2a:7e:
fa:dc:d0:c0:9c:2d:52:e4:42:92:5a:0e:af:2e:cc:e5:a6:0f:
3b:45:e6:ac:ed:9c:d4:42:77:b5:e2:f1:ce:4a:4d:16:e6:3f:
ed:55:43:a1:db:be:b1:97:a1:35:5a:40:b9:5f:e6:78:70:a7:
5f:2b:7d:9b:ce:15:99:9c:3a:0c:4b:e5:d7:5d:d2:55:6f:6a:
f5:1f:6b:e5:3d:52:b9:42:7a:a8:49:70:1a:a0:70:4d:43:6c:
16:0b:0f:a4:87:ce:66:97:a1:27:62:43:58:d5:b1:1a:97:ce:
27:ff:28:f5:fd:df:5a:af:d5:8f:6f:18:70:60:56:59:f1:ea:
76:b2:3e:4a:d7:3e:ac:56:cb:a3:46:4a:cd:5e:dd:f9:ee:23:
02:b1:20:fc:c5:fb:f1:e1:83:f6:16:77:4f:a6:ce:1e:da:d0:
ab:f7:0f:b6:17:0f:af:9d:a8:0d:e2:df:4d:46:73:74:b4:c0:
43:0d:c6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:43 2025 by rpki-client