Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
File: 3N7T6jumc6gIz15q3LUep_M_QgM.mft (raw, json)
Hash identifier: 1LTPSqpJDHklgHsGdzvEWAD9ykQ6gcXfflLPPQqFXIo=
Subject key identifier: F9:05:5D:53:AF:D8:1B:1F:04:EC:B7:08:9B:D2:46:E8:1F:53:71:ED
Authority key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
Certificate issuer: /CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Certificate serial: 0194BD1775B7867AA29FB4A0121838D3DD28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
Manifest number: 01FB
Signing time: Fri 31 Jan 2025 16:00:18 +0000
Manifest this update: Fri 31 Jan 2025 16:00:18 +0000
Manifest next update: Sat 01 Feb 2025 16:00:18 +0000
Files and hashes: 1: 3N7T6jumc6gIz15q3LUep_M_QgM.crl (hash: f2p4A1eM4CgG+Cs2BJQhQcrpt5y113qpPGqCP0s/5eg=)
2: Opp8U8aeHzNwIE0mPBiUqooeCJQ.roa (hash: V/D3sQNgSw6lGL7igciFA6sJiWbs7FF9hEBFUMCcvFI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:75:b7:86:7a:a2:9f:b4:a0:12:18:38:d3:dd:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Validity
Not Before: Jan 31 16:00:18 2025 GMT
Not After : Feb 1 16:00:18 2025 GMT
Subject: CN=f9055d53afd81b1f04ecb7089bd246e81f5371ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:08:02:7d:d9:a1:f4:2c:52:40:f7:d1:d1:b9:
eb:94:64:df:61:27:59:02:a5:2c:bd:a4:0c:aa:8f:
b1:08:56:54:7e:57:50:10:b7:96:7d:2d:c6:fc:18:
2e:07:14:58:3b:9a:a0:cd:17:96:c9:23:2c:3d:2a:
40:12:06:75:3a:28:59:60:fa:48:f5:5d:e9:0e:4b:
1e:86:27:b7:4b:f9:76:c1:9f:6f:2a:a1:26:7f:06:
84:a7:28:29:04:0d:70:4b:8b:de:81:1c:2f:53:8e:
83:5f:2f:e8:34:db:d3:ee:70:e0:74:a1:14:e1:18:
de:57:d4:79:17:ec:05:49:10:15:d7:53:c1:b5:50:
78:bc:52:0f:4c:c1:04:2d:1e:24:da:5f:44:64:df:
ee:c0:a5:b7:67:19:60:fe:02:82:69:1e:a3:04:0b:
01:70:bc:05:43:c5:ee:af:e7:77:0f:aa:75:18:c1:
7a:eb:c5:c6:35:e6:45:c1:e1:7a:22:34:c9:c0:eb:
20:5f:71:94:b2:a4:2c:7b:2d:40:a8:24:1e:08:9e:
69:a2:da:5b:80:9a:8b:b4:09:2a:57:d2:d5:d9:1c:
f2:0d:fd:b7:c3:87:6d:d2:94:18:03:65:29:85:65:
77:00:50:6c:41:d7:e4:0a:27:16:70:42:bb:bb:b5:
b2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:05:5D:53:AF:D8:1B:1F:04:EC:B7:08:9B:D2:46:E8:1F:53:71:ED
X509v3 Authority Key Identifier:
keyid:DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:02:59:a6:13:f0:f4:be:83:79:a3:f4:d4:19:7f:5c:be:99:
93:c3:fd:20:8b:fb:82:05:d3:1c:57:12:1a:ce:ed:0f:e7:42:
f9:2a:d4:03:95:db:be:9b:ea:7d:dd:46:e6:75:f6:46:00:7a:
3a:57:15:de:9b:55:e3:da:53:d3:31:5d:64:41:e1:7a:c9:fc:
67:be:07:65:6b:a2:a0:99:fe:2b:17:cb:15:e6:35:5d:5a:09:
66:64:73:2e:42:72:1a:6b:e5:88:d3:dd:95:41:4e:93:6f:39:
1a:02:d1:33:6f:6c:13:8a:52:cc:07:3c:af:36:b9:9a:75:e2:
df:e8:52:42:c6:40:7b:86:b9:fb:23:1b:d4:a0:5d:32:07:d5:
d4:6a:60:ad:7b:75:62:f3:d1:cd:1e:3f:a8:02:83:e3:cb:c6:
d2:3f:b7:6b:66:44:73:29:b7:c9:80:96:0c:3b:f0:aa:ee:b1:
00:42:88:28:3d:1e:40:a1:e3:1e:95:a1:9a:f8:4c:47:68:de:
29:b9:ed:44:72:c4:48:cf:2f:2d:cb:d7:69:9d:a3:fc:5d:b8:
5a:1f:ac:bc:70:26:e7:fc:46:c4:af:e3:86:c8:76:93:5a:ec:
b0:0c:5c:8d:c6:47:17:29:a2:4b:ba:e0:ed:a2:12:07:3e:db:
ee:4c:31:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:17 2025 by rpki-client