Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
File: 3hL5ZansM-LC6HthYb7vuL4obKM.mft (raw, json)
Hash identifier: vbRrPsNRplOzdqnCATy29ech4x8zHVcu+GKNJaDoaUE=
Subject key identifier: E4:48:16:7F:AF:B1:D2:52:9F:36:1E:45:EA:AE:D1:79:7E:23:BE:4F
Authority key identifier: DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
Certificate issuer: /CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Certificate serial: 0194BD17E140657E809B34D3BCEF6C8B3523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
Manifest number: 124E
Signing time: Fri 31 Jan 2025 16:00:46 +0000
Manifest this update: Fri 31 Jan 2025 16:00:46 +0000
Manifest next update: Sat 01 Feb 2025 16:00:46 +0000
Files and hashes: 1: 3hL5ZansM-LC6HthYb7vuL4obKM.crl (hash: KqkcJEJwNB04BWEPrCZQ5AxRfTSE+OrxsNkOoz6bniE=)
2: WwmcE7wGl7pyI1JEZUrcMqc8ydE.roa (hash: eYdzJRuLYCeHIGBMM52itYWmfWw58ujov0m3EgFoPMo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e1:40:65:7e:80:9b:34:d3:bc:ef:6c:8b:35:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Validity
Not Before: Jan 31 16:00:46 2025 GMT
Not After : Feb 1 16:00:46 2025 GMT
Subject: CN=e448167fafb1d2529f361e45eaaed1797e23be4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:a1:91:de:b6:6b:07:78:a0:37:79:17:dd:
0a:5e:91:6b:1b:25:e5:1b:24:e3:b2:06:28:fe:4f:
8c:1f:45:38:76:a6:6f:47:7e:13:6e:60:58:ae:23:
52:e5:32:3d:9e:29:ba:ec:29:84:d1:3e:24:58:37:
f0:42:94:5c:2c:0a:e8:1a:f6:79:97:d8:21:da:91:
db:b6:05:6b:e5:47:ab:6c:4e:2f:0d:ea:28:85:d3:
83:dd:b1:66:fd:5a:49:0e:33:b1:ed:60:a3:c1:96:
d1:96:10:b2:2c:07:bf:06:4c:a6:96:3e:0c:bc:5d:
e0:8b:1a:7d:09:d6:08:b4:65:32:03:2a:f2:60:db:
6e:a2:09:be:bf:aa:cb:a5:cc:ec:25:69:03:2e:16:
4d:05:50:91:16:87:c5:ac:be:41:f5:20:94:3f:6d:
47:7a:3b:8c:80:69:67:f1:79:59:fd:32:91:86:4b:
b4:fd:d2:5e:94:83:84:9e:63:0e:d6:6f:8c:4a:82:
e7:4a:9b:59:73:60:4a:59:b1:57:3f:c8:36:52:72:
ab:26:ee:c1:7f:15:67:02:1a:e4:1b:e6:6f:89:c2:
cf:2d:3b:78:91:d1:63:27:be:a6:e8:53:fc:8a:b4:
c2:01:d8:67:9c:8e:37:a7:43:22:9e:82:06:aa:e7:
4c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:48:16:7F:AF:B1:D2:52:9F:36:1E:45:EA:AE:D1:79:7E:23:BE:4F
X509v3 Authority Key Identifier:
keyid:DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f8:cb:9b:4c:5e:ae:d6:fe:0c:58:63:d7:a4:ee:4c:11:d1:
c7:ec:97:e1:14:1e:c9:b0:65:52:5a:ad:f8:4c:d8:e2:52:0b:
c7:95:15:0f:48:9c:ef:d1:55:81:24:61:0a:54:0d:c4:b8:b0:
3e:d3:ee:53:b6:6f:62:e3:9c:46:5e:1a:e4:23:f4:6b:dc:0d:
0d:75:76:58:c6:6c:cf:b9:90:48:11:8b:64:c4:cc:38:a1:16:
4f:ac:c1:9f:76:0c:af:6d:f3:8e:34:2d:b7:69:2f:da:90:01:
40:52:89:6c:f7:a5:4d:46:53:dc:65:69:ba:bc:4e:7b:e7:39:
c4:6a:a4:02:96:e0:3e:e3:e1:c4:e6:09:db:00:73:8e:8e:cc:
e2:1e:e6:37:ba:8e:4a:ac:42:d3:73:07:e5:79:a0:d8:48:4c:
20:28:93:13:30:4c:17:18:bc:30:a4:4f:a1:ba:90:f0:3a:7e:
41:f9:b7:a5:6d:83:21:e1:39:04:bd:44:7c:9e:c6:2b:5b:e5:
e3:9b:6e:04:42:63:b0:a4:fa:43:52:88:d2:a0:aa:2c:c7:9e:
76:88:c6:02:be:27:7e:0f:22:3d:d3:b7:fd:ca:62:e8:b8:ab:
71:3c:76:ca:eb:35:a3:45:c1:34:8c:27:59:9b:42:6a:f6:d9:
03:04:2b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:43:19 2025 by rpki-client