Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
File: 3RiOwuSayUWFJFtLh0Whu3oc3GY.mft (raw, json)
Hash identifier: MRqZDV63SQgOr86VLhpVcQmsJomJCbkGOjIcLuqLC1w=
Subject key identifier: EA:D8:8E:44:F7:F5:37:32:40:94:B9:3D:87:05:9F:9A:F0:27:22:09
Authority key identifier: DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
Certificate issuer: /CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Certificate serial: 0194BD8593C00C5AFB6949BEFBB5D9D20C13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
Manifest number: 069D
Signing time: Fri 31 Jan 2025 18:00:35 +0000
Manifest this update: Fri 31 Jan 2025 18:00:35 +0000
Manifest next update: Sat 01 Feb 2025 18:00:35 +0000
Files and hashes: 1: 3RiOwuSayUWFJFtLh0Whu3oc3GY.crl (hash: EnV1dwfLsZwQJmLUOCpb6QyyxKnwhX8+pIr2LByXYKk=)
2: pDLly0sn53PLZlgmqVTYD5L2Et0.roa (hash: MLKk0AIXSDvV1SnhwkIbUGP+qcSM6FHopsKcU6yMV74=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:93:c0:0c:5a:fb:69:49:be:fb:b5:d9:d2:0c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Validity
Not Before: Jan 31 18:00:35 2025 GMT
Not After : Feb 1 18:00:35 2025 GMT
Subject: CN=ead88e44f7f537324094b93d87059f9af0272209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0a:01:8e:6e:27:91:65:b3:ad:51:cf:15:ed:
d2:3d:5d:4b:90:5b:55:a7:87:7b:9b:51:33:4b:e2:
da:7e:85:b4:0a:1f:0d:c4:f0:4c:eb:0d:2d:56:2f:
36:8c:ee:a6:9e:ec:8f:83:11:52:64:74:c9:d1:79:
17:d2:1e:29:b2:8d:b6:8f:72:0d:f0:19:45:a9:6f:
96:9e:7c:10:cc:ee:c0:09:97:13:84:45:2c:b9:0b:
55:e2:5e:d8:bc:e8:7a:7c:1b:cc:96:c0:cb:05:ba:
6d:04:eb:9d:2f:34:d1:50:c6:fb:d3:2f:14:44:af:
15:f8:89:ff:1b:35:82:e7:f6:5d:39:32:48:76:3c:
b2:45:9c:97:08:0f:5f:d2:36:72:a0:32:ca:f7:55:
17:74:e2:1d:c2:32:86:88:44:c9:03:11:5d:2e:6f:
d4:26:dd:aa:bd:d3:7d:e8:11:d8:c5:e9:42:2f:36:
5d:9e:34:97:84:30:75:39:6c:a2:01:33:2b:a9:24:
fb:60:5f:99:1c:38:5c:65:3f:3d:dc:e5:38:3e:65:
42:e6:83:c3:0e:86:b8:dc:1a:d2:fd:8a:ce:f5:b7:
d4:70:3c:f9:ff:25:f7:bc:13:a4:0b:09:de:22:3e:
dd:0a:fc:2f:b9:73:6e:7d:2e:1a:97:27:9e:da:ad:
73:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D8:8E:44:F7:F5:37:32:40:94:B9:3D:87:05:9F:9A:F0:27:22:09
X509v3 Authority Key Identifier:
keyid:DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:60:ce:6b:02:57:5a:6f:86:c1:fe:25:b0:52:0c:b1:d6:c4:
e3:1b:a4:e0:dd:fb:b1:db:9a:59:d3:f6:df:4f:ec:a8:af:c1:
dd:1d:a0:d1:e5:54:46:d5:d8:e0:05:8a:17:26:81:ba:fc:a1:
59:d3:cf:1b:cf:df:ca:b7:7a:86:cb:38:85:3e:14:fd:b1:12:
1f:b8:54:18:fb:0e:96:79:ce:8a:4d:60:dd:57:ec:67:05:b5:
aa:c1:1e:1e:8b:e3:59:a2:3a:98:16:e5:3e:39:09:95:b7:1a:
51:c4:c0:63:a1:85:a5:a2:7d:15:8f:06:db:44:7b:09:00:ab:
42:8b:e7:52:28:af:6a:41:ee:ca:68:66:eb:c9:7d:b5:31:b3:
37:63:b5:04:ff:ca:57:52:75:29:47:6d:86:71:0f:f1:dc:3b:
46:ca:a0:fe:d2:ad:26:88:fe:f0:72:76:36:b5:3d:2f:92:4c:
78:8a:87:38:bd:9c:f3:45:40:0d:15:bc:07:18:9c:94:b4:ee:
46:e1:c5:0b:53:a0:d7:04:a3:2c:e8:f4:14:b1:c6:1e:ff:e0:
d3:05:fe:3c:ab:72:1c:74:01:00:48:fd:d6:57:e3:7c:d3:83:
fd:ca:f1:64:fd:2f:48:a6:7a:0a:9c:86:06:9c:a9:45:09:04:
d8:42:b3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:35 2025 by rpki-client