Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
File: 3V7mW6NorXTZoD_ygkQMhXeiFZY.mft (raw, json)
Hash identifier: m51HD1qDXEnHDXoGAxIl/CQRLxZO7BAbrR3UUkNl/7g=
Subject key identifier: B6:73:8D:D1:E3:51:FD:E7:42:3B:C5:AF:55:7A:74:66:E0:03:16:2F
Authority key identifier: DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
Certificate issuer: /CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Certificate serial: 0194BD17D4AFB1D52D6099C75486FE736F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
Manifest number: 0A85
Signing time: Fri 31 Jan 2025 16:00:43 +0000
Manifest this update: Fri 31 Jan 2025 16:00:43 +0000
Manifest next update: Sat 01 Feb 2025 16:00:43 +0000
Files and hashes: 1: 3V7mW6NorXTZoD_ygkQMhXeiFZY.crl (hash: bCdenlipxg37hc0Wx+MXOUMkoo69KJPzxBfp+yGRaw4=)
2: Fu2SG4loZ2malz9WaofXCDUPGUQ.roa (hash: v34bq7itFiS09euDmLvsea1XPjuasihGiJjC++WIBUA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d4:af:b1:d5:2d:60:99:c7:54:86:fe:73:6f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Validity
Not Before: Jan 31 16:00:43 2025 GMT
Not After : Feb 1 16:00:43 2025 GMT
Subject: CN=b6738dd1e351fde7423bc5af557a7466e003162f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:e7:30:79:ef:5c:d5:70:a0:af:b5:e0:02:
e9:90:8f:1f:c7:37:62:74:97:64:d0:20:7e:f4:99:
53:71:28:39:89:77:de:b7:58:8c:db:46:77:fa:7b:
39:4d:8e:57:eb:b7:d6:81:32:b2:fb:87:b1:81:d1:
19:9b:69:8e:17:3c:03:30:d1:7a:6b:ae:7d:d9:5a:
1a:bd:ee:80:3c:7d:59:5b:83:96:1b:bd:e8:0a:cd:
24:a9:1f:3c:3c:53:d8:23:07:7a:b6:2d:62:4d:39:
a8:b1:04:65:2c:a0:80:7d:0b:b3:8b:27:8d:1b:cc:
5c:38:16:1d:bd:08:12:1e:8e:15:96:15:5c:fb:ab:
8b:40:2d:74:d3:dc:60:a7:2d:15:67:9c:45:94:1c:
d5:6b:4d:bc:0d:fb:cc:fe:15:6f:3e:f4:d0:2b:ea:
ad:d3:4d:3b:65:46:d8:e0:20:17:5a:fe:e2:4b:12:
49:d9:cd:6e:e4:e5:bc:04:32:40:a8:7e:6f:d6:e9:
4b:75:17:4b:e1:2b:81:17:c9:03:4e:17:86:c1:ec:
e6:c0:2e:a6:51:f0:ca:02:b3:9d:bd:16:24:48:62:
a1:4d:32:26:b5:4c:62:53:e5:6f:24:30:31:97:00:
50:f5:4d:b7:ce:d1:af:20:a9:4b:64:dc:aa:15:a1:
54:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:73:8D:D1:E3:51:FD:E7:42:3B:C5:AF:55:7A:74:66:E0:03:16:2F
X509v3 Authority Key Identifier:
keyid:DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:3e:13:8f:10:48:1c:6e:c8:cf:c7:4e:35:42:16:25:bc:f7:
5b:92:3a:33:0d:f5:9d:ce:96:d7:f0:01:d3:f7:5c:88:d7:a7:
aa:bf:f0:b8:bf:c6:2d:6c:9b:85:08:a0:51:42:ce:b7:b5:1f:
2f:31:d4:22:06:54:b9:6e:9d:57:e4:c7:cb:33:8a:61:24:3c:
42:fa:13:10:17:00:76:3e:de:8a:db:6a:5b:fd:ca:04:bc:63:
31:e9:2e:d9:12:99:7d:f8:75:4a:2d:42:ad:73:ca:44:4b:fa:
cc:d7:25:3d:60:0d:a4:22:ad:0f:08:5d:2f:9c:54:13:31:b8:
ec:f7:ab:fb:1f:5d:a8:84:93:81:e2:6e:a4:33:bd:f7:01:0b:
d2:53:e3:5c:30:5c:1a:20:ca:a4:21:9c:e3:b2:cd:de:67:a4:
ca:19:6b:3a:92:38:2f:f2:5a:3b:9c:f0:42:fc:05:6e:01:90:
20:4f:77:a7:d4:af:28:7f:3e:ca:1b:db:55:87:b5:34:58:b3:
ac:98:91:cf:3d:a2:26:0d:67:dc:fa:c4:fd:66:56:a0:23:d7:
93:5e:82:8a:66:cc:a3:bc:e4:64:6a:08:d0:05:11:83:83:82:
39:ee:ca:66:f1:19:98:4f:95:b3:02:2c:b5:65:41:ac:4b:83:
46:bd:69:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:32:23 2025 by rpki-client