Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
File: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft (raw, json)
Hash identifier: h8lXYRdFx/Rb3F6UxpWjS4t6MImWRwecD0ccHg9bB8s=
Subject key identifier: F4:F3:14:86:3B:CE:EF:F0:A8:BC:B3:82:EC:CC:6C:65:70:D3:6A:19
Authority key identifier: FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
Certificate issuer: /CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Certificate serial: 0194BD4E676376C8D1CD4C93A1D080BBE573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:19 +0000
Manifest this update: Fri 31 Jan 2025 17:00:19 +0000
Manifest next update: Sat 01 Feb 2025 17:00:19 +0000
Files and hashes: 1: 6D6NbO4mpX3571YePb7wBqCbgBc.roa (hash: 360JpGFWi4fwKRE3FPgMGW/rJz0k3wsKNSQFnzGnVZI=)
2: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl (hash: FUl0rogaznUQdywUYMc2vP7hUCRpigHw1m8hs848RIg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:67:63:76:c8:d1:cd:4c:93:a1:d0:80:bb:e5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Validity
Not Before: Jan 31 17:00:19 2025 GMT
Not After : Feb 1 17:00:19 2025 GMT
Subject: CN=f4f314863bceeff0a8bcb382eccc6c6570d36a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5a:a1:1f:f6:bf:b1:1a:f3:bf:79:28:e8:0d:
58:8d:2b:9a:0b:38:a2:15:8a:a2:1e:e1:64:c4:1e:
d6:f4:22:f8:51:0b:d1:87:c7:ad:dd:76:a4:c4:2c:
f4:39:0b:3f:55:6c:e5:3b:f1:c5:a7:c9:c9:a9:55:
a3:39:ea:e9:b4:cf:36:94:8d:50:7b:f1:1e:b8:3b:
81:c8:30:d3:a8:98:90:e1:bf:bf:45:56:e9:26:25:
df:d9:d5:b1:bc:6c:9d:b7:d9:02:09:5e:00:9a:3f:
29:e5:96:b6:9e:87:34:27:5b:d7:46:bd:12:77:61:
d0:54:de:eb:4a:ab:61:bf:7b:ce:32:8c:0a:5f:b3:
ad:a8:68:e2:fc:f0:02:e0:7c:03:10:f1:ef:a1:0d:
19:8f:d9:0b:30:e9:02:f2:dd:0b:ba:e7:aa:b4:19:
6b:9a:68:02:97:21:fe:b7:a6:b7:00:62:17:d7:6e:
a3:b9:c7:19:3c:75:33:09:5e:bb:3c:54:31:cd:d2:
31:8f:db:13:7c:16:bd:46:d0:f7:85:ae:be:57:58:
b7:d1:31:e9:9a:b3:c0:3d:a3:c1:f0:eb:61:73:84:
b2:81:e2:53:b7:8f:fa:ba:9e:4d:90:fb:7b:60:d2:
f8:4b:de:24:a8:9d:c9:a4:14:c4:8d:2c:ab:37:c1:
d1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F3:14:86:3B:CE:EF:F0:A8:BC:B3:82:EC:CC:6C:65:70:D3:6A:19
X509v3 Authority Key Identifier:
keyid:FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:8c:85:de:6c:8d:96:63:72:e7:73:9a:21:f2:50:4e:a9:a8:
c9:a1:75:5a:15:ae:07:f1:cc:08:25:be:58:0c:cf:1a:49:f0:
60:1d:a1:c8:05:e9:c8:5d:2d:75:b4:14:ab:ca:f3:a3:f4:c3:
14:e4:b1:91:1c:6f:00:4d:cc:7b:83:ad:fd:c1:94:82:40:ac:
e2:85:ca:1f:33:7a:c4:9d:8f:2c:b9:4c:6d:14:81:43:ac:c3:
6f:cb:93:1d:be:09:f1:bd:9f:70:2c:95:8a:01:41:c9:2c:1f:
92:5d:83:ac:10:47:9e:c9:da:87:07:83:76:69:cc:70:26:8e:
ba:c3:83:c1:25:df:70:41:6b:b4:a4:6a:7a:be:94:16:e2:b8:
80:cb:3c:c7:f1:2b:24:98:56:1b:08:f9:f1:96:da:24:ba:ad:
d3:8c:8d:a2:89:6b:f6:f2:2a:b7:ea:52:cb:ee:07:2f:e1:42:
91:d9:18:3a:fe:91:43:f9:6d:31:fa:a6:74:d0:1a:7c:79:13:
2a:6b:2f:82:88:80:0d:e6:44:8e:0c:b8:98:2a:ee:ba:64:c9:
38:0d:95:ab:d8:e2:0b:73:26:4c:45:48:ac:a9:be:67:c2:97:
2b:ad:ed:e8:7e:b2:4f:3e:d3:f1:89:2c:3f:76:c2:3d:a8:23:
46:30:8a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:06 2025 by rpki-client