Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
File: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft (raw, json)
Hash identifier: C/uTA5pHa5WqX/nGOUJuWDYr29dAvkSLjAFmjOHiNIQ=
Subject key identifier: B9:02:B7:F8:EF:F4:CE:B9:0E:38:88:E1:55:6C:32:D4:7E:93:79:29
Authority key identifier: DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
Certificate issuer: /CN=dda5a222acb99ab2398439eded7770a65ee66de6
Certificate serial: 0194BBCE50968BDE40590F180C0476B9EF6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
Manifest number: 0A26
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl (hash: JRTzSOVG7HBLomnVJ+NKWnR4vH0Yfs1dHqgugD7g/xQ=)
2: XaWBl1pdgCEAOtWYlDnABozWGpY.roa (hash: NkTYxkGxoFs3l9oUz9ZXBu6um1xVsgaeI44+mBnF24s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:50:96:8b:de:40:59:0f:18:0c:04:76:b9:ef:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dda5a222acb99ab2398439eded7770a65ee66de6
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=b902b7f8eff4ceb90e3888e1556c32d47e937929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:2b:ee:6b:31:c6:f0:dc:b4:a1:c1:9e:3d:
a0:bd:53:97:ed:da:21:54:8c:93:0f:4d:2c:b2:af:
9e:c2:ed:c7:e2:48:58:88:4f:d0:37:fc:73:c1:73:
91:be:5b:64:a1:93:87:f2:88:96:3b:4b:95:88:3b:
7d:ae:23:6f:bd:82:b4:ed:56:98:a4:3d:d8:05:64:
f3:49:8b:32:66:52:80:58:c1:46:cd:4f:f6:07:9a:
ae:95:33:6a:1e:c6:01:1f:03:98:2c:1f:9e:3d:07:
61:4b:d1:0a:c7:40:59:37:74:81:8d:01:3b:46:d2:
0f:72:b3:94:db:4a:a0:1e:2e:35:0e:4f:a5:61:3c:
4e:8a:3b:9f:e4:fe:08:ac:6b:bf:c0:e8:95:cd:e7:
b5:00:bb:a5:14:e4:6f:d8:ba:c5:36:ec:c8:1f:1c:
a8:b6:60:a6:3d:fa:eb:1b:33:ea:6c:c9:f1:e9:2c:
29:8a:6d:f0:3a:b8:70:03:e9:b4:00:19:9a:80:d2:
c4:40:ea:4e:d2:ca:e5:5d:a7:87:d0:1f:c7:f9:44:
d8:ad:45:56:e0:6a:50:d4:61:cd:f0:15:9c:27:e3:
06:df:ce:75:bc:f0:97:2f:3b:0a:4b:5c:1b:5f:b0:
4b:73:d3:b3:61:5b:5b:dc:7f:80:2d:a8:29:3c:42:
ff:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:02:B7:F8:EF:F4:CE:B9:0E:38:88:E1:55:6C:32:D4:7E:93:79:29
X509v3 Authority Key Identifier:
keyid:DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:de:ff:1d:b1:a0:2e:0a:8f:90:ab:e1:19:b7:f6:64:c5:82:
dc:76:59:5c:63:9a:91:90:b0:83:33:ef:c2:dd:14:05:ff:c4:
5e:42:b1:be:9f:d9:44:15:21:d1:98:0a:b6:0b:07:0c:a9:f9:
32:22:17:6d:0a:3f:e9:f3:7b:f4:34:27:41:b8:ac:99:89:7f:
43:56:e5:ac:f4:86:84:93:f6:ac:e5:fe:67:c7:58:6e:b7:92:
25:30:81:46:64:c5:f9:96:05:18:f7:77:9f:f6:98:64:6e:19:
09:07:b3:97:93:f6:75:26:19:a7:ae:3b:14:0c:d2:dc:4b:b6:
81:93:20:7f:2d:39:d3:f9:d1:5f:0b:eb:ce:33:05:a3:bc:1c:
dc:2d:53:b6:00:38:19:be:2b:61:98:b6:bb:fe:92:ae:23:05:
ab:55:dc:66:01:63:1d:f6:f2:29:c0:12:fa:2d:86:ec:e8:b5:
3f:aa:44:d5:f3:b7:e8:53:20:c3:f1:e0:17:fa:f9:1c:8c:d3:
0d:a1:e1:d6:5a:b0:b5:31:25:e7:26:47:90:05:ac:1f:bc:d2:
2a:d8:d0:8c:a2:0a:88:1d:34:6f:4d:a1:f4:51:76:03:8b:fe:
3d:5e:30:07:34:77:77:bc:94:13:db:1b:e6:0e:c9:04:1e:bd:
2c:bf:6d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:21 2025 by rpki-client