Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
File: 3A3qTqJUbXoBmk74JDtetjVlyEc.mft (raw, json)
Hash identifier: flUu25AwVtpoajTRJNDpdJGHSHPbSVguK0aCHCkrxaM=
Subject key identifier: C2:17:29:DC:AE:C6:38:3B:09:10:D6:DD:C5:55:29:B0:CA:AF:5B:86
Authority key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
Certificate issuer: /CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Certificate serial: 0194BC3C82E826AB1FC387A634D505D7BAF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 12:01:09 +0000
Manifest this update: Fri 31 Jan 2025 12:01:09 +0000
Manifest next update: Sat 01 Feb 2025 12:01:09 +0000
Files and hashes: 1: 3A3qTqJUbXoBmk74JDtetjVlyEc.crl (hash: jDxg5k27D+WZrlJ9dve7vDqzHHBRsj144kV+6zmiKt0=)
2: KC65iLduV38Y-_4YeZcOkvub1x0.roa (hash: 59wDbBZd77QyRnr9wiaIVyjbp4l+GRhLfxwyuRW0y1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:82:e8:26:ab:1f:c3:87:a6:34:d5:05:d7:ba:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Validity
Not Before: Jan 31 12:01:09 2025 GMT
Not After : Feb 1 12:01:09 2025 GMT
Subject: CN=c21729dcaec6383b0910d6ddc55529b0caaf5b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:20:86:a3:12:c2:78:2a:aa:8f:23:b8:66:
1a:5d:67:0b:aa:b3:c5:88:46:65:76:c3:4a:db:c7:
b5:57:54:61:8f:7a:cc:81:fb:28:c5:9e:62:a4:7d:
f2:cc:67:13:a6:28:92:1c:8e:80:d4:b4:e0:ae:9e:
f7:d3:cb:19:59:15:42:85:d2:5f:45:0d:30:fb:f8:
1e:c4:b3:63:e8:17:1a:82:b7:7f:52:5b:82:ba:e3:
bd:8e:5e:93:e9:04:ef:a6:c2:fa:3a:cf:75:f8:c2:
88:9d:bb:af:c6:02:22:59:b8:e6:cc:45:fe:8a:a0:
85:c6:b9:89:9b:41:8b:69:50:18:1d:01:ca:80:20:
39:9c:76:4d:6a:63:b8:82:17:d1:9f:a0:a3:74:94:
68:e7:a4:49:ad:e3:83:9c:9e:bf:fc:02:61:91:51:
ce:ea:04:34:ea:02:8e:45:11:ee:a8:50:64:d4:d8:
d4:32:ba:e6:0e:b5:93:17:5c:98:38:d1:fb:16:20:
3d:61:24:1f:ec:21:2d:d6:fa:23:80:a4:78:9a:1c:
2e:be:fa:72:9c:c1:e7:71:da:ca:12:93:4c:46:77:
7c:80:bc:23:fb:33:ef:dd:11:a8:2f:ec:4d:e9:bc:
8c:00:cf:4e:0f:d4:30:78:5c:e1:0a:46:d2:6b:2b:
14:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:17:29:DC:AE:C6:38:3B:09:10:D6:DD:C5:55:29:B0:CA:AF:5B:86
X509v3 Authority Key Identifier:
keyid:DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:9a:4f:dd:84:75:66:ad:74:2b:9a:68:2e:33:1a:6d:b5:2b:
32:8c:f2:43:7f:d9:6b:d4:7a:f5:74:8b:b3:5f:df:b1:9f:76:
0f:a9:e5:af:17:77:b2:83:3b:24:ee:86:07:38:08:9b:ef:30:
26:33:ca:7c:ba:0d:71:85:73:bc:51:b3:b5:c1:b8:ed:62:1c:
33:65:66:3b:49:3a:2b:58:5a:70:fa:c7:f6:a6:4a:1c:bd:c8:
92:ef:ec:82:f6:d1:54:d1:be:ac:af:19:02:45:46:40:87:f6:
94:b2:46:fd:a1:dd:2a:7c:f7:e2:c1:4b:36:e2:5b:e8:41:53:
cf:b7:2d:2e:00:86:9f:f0:32:f5:45:d8:ae:e1:16:da:63:7d:
a5:2f:d1:fa:8f:1a:7c:c8:9d:97:c6:6c:af:da:02:43:8f:ff:
6d:fe:fd:1d:e9:64:80:2e:85:79:82:26:a3:1e:cd:6e:41:b5:
24:28:1d:f2:f6:d8:9a:50:3d:8b:c8:67:b6:49:c5:5f:15:a5:
d3:e1:19:75:43:c5:97:93:ed:c9:84:4c:f8:ca:62:4f:42:9e:
74:25:6e:c7:40:95:4b:a7:f3:74:af:f5:6f:15:d1:38:2b:b7:
1f:e9:64:18:5d:81:5f:d9:29:86:ad:7b:49:b1:a3:58:48:8e:
1c:f0:12:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:09:57 2025 by rpki-client