Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
File: 3KRrH82StH9PVfrQOMlYE0Cp03A.mft (raw, json)
Hash identifier: NM9+dWEgcHK9ZMtG0qA4Unj9gKxHatm7Vb8em71RiiQ=
Subject key identifier: 46:CC:2F:24:BD:62:E0:49:D4:6B:14:37:A0:41:AB:7B:36:B2:C9:B2
Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Certificate serial: 0194BC3CA343EC49AB81A111F987064747ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
Manifest number: 1435
Signing time: Fri 31 Jan 2025 12:01:17 +0000
Manifest this update: Fri 31 Jan 2025 12:01:17 +0000
Manifest next update: Sat 01 Feb 2025 12:01:17 +0000
Files and hashes: 1: 3KRrH82StH9PVfrQOMlYE0Cp03A.crl (hash: kc8JrAKINRoIb3ge7u++E+tE8hed6wnQeW6EYfxvHdw=)
2: XeTdM9cnm-nj4Gui4gyEqLrQLaw.roa (hash: byMWJNOsSPMVajbPUM5liOZkm9+BQbQeZEZJwK73A2Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a3:43:ec:49:ab:81:a1:11:f9:87:06:47:47:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Validity
Not Before: Jan 31 12:01:17 2025 GMT
Not After : Feb 1 12:01:17 2025 GMT
Subject: CN=46cc2f24bd62e049d46b1437a041ab7b36b2c9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b9:2e:db:28:8b:80:4d:aa:ac:64:0e:74:69:
2d:da:6f:70:c5:f0:fc:5c:68:cb:ae:84:68:0a:7c:
b4:1c:50:f5:a8:ed:ea:11:6c:8d:dd:8c:17:42:4e:
92:0b:72:d4:b3:87:6d:11:c0:46:d1:27:6f:68:a7:
66:dc:e0:e5:36:2b:b9:77:c6:12:47:29:d3:53:f4:
32:8e:a7:38:75:ca:65:22:26:9a:a8:4c:e3:34:8d:
90:aa:0a:09:95:bf:7a:01:c6:28:fa:10:92:f1:f2:
b9:d4:6f:0e:ed:9b:7a:6f:f0:8b:bd:2e:43:6d:c7:
3c:3f:c8:91:7e:cd:7b:91:22:e5:83:9d:1e:72:2c:
6b:6c:9a:a8:50:43:b1:32:0f:d5:b6:9d:42:2b:01:
45:8f:c0:f1:a7:9f:53:6b:b6:0d:92:bc:e9:66:81:
61:49:31:a5:a5:13:b4:c1:e1:91:74:c9:e9:ee:c7:
2f:9e:67:76:39:c7:b8:e6:54:b2:62:43:c5:fd:61:
38:bb:b2:d9:6a:27:b0:95:ea:0b:23:a8:b2:df:23:
06:36:23:2d:ef:d6:28:14:a1:23:35:30:ec:37:8a:
8e:ec:d5:3f:1a:00:3e:dc:bb:d1:92:85:7d:1d:e9:
c5:32:b8:b8:e8:54:ea:1e:77:1f:eb:43:e3:08:47:
02:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CC:2F:24:BD:62:E0:49:D4:6B:14:37:A0:41:AB:7B:36:B2:C9:B2
X509v3 Authority Key Identifier:
keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2d:8e:cb:8b:46:c6:0d:ca:2f:78:ad:f8:09:83:62:59:bc:
59:08:63:a2:f1:91:44:01:7b:ca:5e:b2:04:89:dc:76:b4:f5:
7c:db:d9:b8:c6:35:68:10:e1:c6:3c:f2:7d:b9:7c:00:28:0e:
97:43:82:b3:66:3e:ab:60:a7:fe:92:d7:32:bf:e4:ec:68:09:
db:0e:56:01:5b:ec:88:68:74:37:61:3b:e9:fa:b3:0e:58:60:
43:7f:fd:8e:74:6e:f0:8f:12:9d:d0:f4:14:24:dd:39:15:67:
37:08:2b:80:22:66:d8:ce:13:7b:b5:8b:bb:16:7b:d1:17:82:
f1:c9:42:45:ec:95:a6:a4:80:3c:79:b0:4f:fa:20:c8:67:35:
05:7c:87:be:91:3f:3e:bb:3c:00:dd:74:d6:8f:61:5c:26:ba:
2d:82:7f:e5:d4:78:e4:af:e0:55:5b:81:08:71:b2:b8:28:a2:
c9:5c:37:8f:fd:1a:6f:4b:05:c0:34:20:60:1c:24:f8:a4:3c:
f4:35:2f:b4:24:da:54:7f:74:6e:97:88:f9:22:e9:c8:47:53:
f3:2b:27:98:61:a0:ce:ff:3e:35:bc:9b:81:e4:a3:47:7f:3d:
fd:f2:d0:b1:4c:0c:cb:04:54:d6:0b:e5:26:71:59:0f:13:8e:
39:ec:de:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:28 2025 by rpki-client