Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
File: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft (raw, json)
Hash identifier: F1oG8ctXRPQWVIfaOZt/rd5ZW25VxsH0ApQ7cmmUUDM=
Subject key identifier: 4D:87:FA:C2:57:1C:71:0E:C6:4D:4B:8F:0F:84:B0:31:F4:22:1C:B5
Authority key identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
Certificate issuer: /CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Certificate serial: 0194BCA9A3CF71003F009749573EA737A88F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
Manifest number: 025F
Signing time: Fri 31 Jan 2025 14:00:21 +0000
Manifest this update: Fri 31 Jan 2025 14:00:21 +0000
Manifest next update: Sat 01 Feb 2025 14:00:21 +0000
Files and hashes: 1: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl (hash: hLQjJJPRnoX6KaGsvtCUjdZDMxCEsES3au8zyVW2KeE=)
2: R82wyiQ6WGXDZ2qmyfic2Rx16EQ.roa (hash: q3ADHp8TbEdc9vO2jFfoJST4ALm7hMCr9dPnLoGdV9o=)
3: msFkodHiiLA7yYTUvQfg1svzo58.roa (hash: 8maRWfYNuUoSqjA1l1zPbJ9FPRTfD/7OAF7wZnEEN9A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a3:cf:71:00:3f:00:97:49:57:3e:a7:37:a8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Validity
Not Before: Jan 31 14:00:21 2025 GMT
Not After : Feb 1 14:00:21 2025 GMT
Subject: CN=4d87fac2571c710ec64d4b8f0f84b031f4221cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c0:64:4b:4f:ff:80:53:4b:a6:ca:47:67:2b:
2b:3f:55:79:11:47:36:27:6f:de:4a:40:53:b8:38:
6f:89:99:38:19:a0:16:5d:37:75:9f:81:94:c9:55:
f7:e5:1e:97:2c:57:9e:15:07:05:fd:4a:0f:e7:1c:
d5:0c:84:f7:28:08:fa:61:38:c6:15:8b:97:69:c6:
08:ef:7a:3f:78:91:be:41:24:5e:52:a5:36:69:8e:
7f:8e:b5:09:6a:04:4f:74:17:14:db:4c:d2:ff:5f:
4e:d1:80:13:65:61:37:5b:ac:29:28:2b:fb:41:21:
1e:26:52:6e:49:55:80:24:d4:c0:72:24:ba:4c:ce:
54:90:b8:1d:08:25:b5:43:7f:82:53:4b:60:76:df:
f3:a2:e8:d0:db:60:e6:9c:df:ca:46:a8:65:6f:89:
90:1b:76:bd:61:4d:93:08:d9:78:cf:5d:69:ce:c1:
df:11:40:bc:36:37:7f:22:63:37:4e:bb:1e:2d:00:
66:2d:c3:29:1f:25:e7:c4:4e:8f:34:63:e9:13:e2:
8e:74:f4:85:03:41:cb:e0:ca:df:30:24:e1:f5:fa:
51:ad:7d:5f:e4:92:64:da:bf:8d:5a:93:79:c9:64:
8b:48:7b:bf:eb:66:ed:ac:a6:39:ab:18:9d:be:b4:
b5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:87:FA:C2:57:1C:71:0E:C6:4D:4B:8F:0F:84:B0:31:F4:22:1C:B5
X509v3 Authority Key Identifier:
keyid:DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:55:d2:31:5f:88:20:d0:57:56:72:be:84:03:73:bb:31:eb:
40:ff:99:ee:38:d1:85:98:a2:52:9e:bc:17:e8:16:52:8b:0b:
39:83:b9:e5:d0:2f:d7:c2:e6:77:21:f4:57:13:19:68:0a:34:
bd:31:41:1a:7e:32:36:53:ab:0c:69:ad:bf:55:f6:a6:83:73:
08:43:37:04:27:5b:b7:0d:73:68:36:df:0a:c7:c6:c4:9d:42:
15:c4:80:b0:8c:f3:fb:6f:e4:ce:b7:25:5a:a4:44:b8:c6:71:
01:9d:d3:dd:6a:2b:c7:c2:78:63:6a:86:32:24:ba:d8:00:e0:
b3:e7:2a:7d:55:9b:80:ea:a0:cd:c1:62:7a:90:6d:9c:a5:fe:
52:4b:02:f2:e0:df:fe:62:88:98:30:35:f2:13:13:f5:7a:55:
88:f6:36:be:8b:67:aa:f7:82:50:06:29:6b:76:38:a2:c9:6d:
39:36:bb:f6:74:8c:a0:c0:60:31:17:09:69:11:97:fc:d3:6e:
92:2a:ac:33:0c:14:20:d3:f9:ef:31:34:af:79:b6:71:17:bf:
62:39:7d:c8:7d:0d:3a:b8:8b:24:ba:dd:ff:69:67:2a:62:14:
46:a5:20:03:78:71:6a:29:f2:cf:35:07:c8:71:08:56:41:7e:
09:90:34:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:55 2025 by rpki-client