Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
File: 3o44GHrnDLx77WlXWfDgMpn7swI.mft (raw, json)
Hash identifier: /XqETE7g9Y7SAS5QzTftep9X0w2t9hKmrhklIctRFAs=
Subject key identifier: 3B:F3:9D:98:79:EE:AC:E3:9B:2E:0F:D2:69:D3:A7:7A:67:D3:44:99
Authority key identifier: DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
Certificate issuer: /CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Certificate serial: 0194BC04EB1FB1F28C321BECC01DFA0F700C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
Manifest number: B2
Signing time: Fri 31 Jan 2025 11:00:26 +0000
Manifest this update: Fri 31 Jan 2025 11:00:26 +0000
Manifest next update: Sat 01 Feb 2025 11:00:26 +0000
Files and hashes: 1: 3o44GHrnDLx77WlXWfDgMpn7swI.crl (hash: 9beBQr9tTpMiEYriuljykJaUxuxKUu7i4iSU080vdVg=)
2: wSO8Qf5_v1p-oNDifbsTI9tUaPY.roa (hash: t8VFb4R1YuauyoB16s9G5smfDaNXuP879i5idHgDRZg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:eb:1f:b1:f2:8c:32:1b:ec:c0:1d:fa:0f:70:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Validity
Not Before: Jan 31 11:00:26 2025 GMT
Not After : Feb 1 11:00:26 2025 GMT
Subject: CN=3bf39d9879eeace39b2e0fd269d3a77a67d34499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:55:d7:5d:9a:15:5b:93:fc:8b:5c:2a:84:
b7:ef:67:29:0d:b1:13:da:0a:76:20:0b:ff:57:db:
c7:54:52:10:3e:30:cd:94:8b:0e:41:4e:0c:4c:dd:
ab:51:4e:49:39:a9:af:a9:c8:d4:db:75:ad:9b:fc:
60:34:9d:6d:f0:eb:00:c9:c2:f9:3a:4e:4f:9e:f9:
7b:be:57:cc:ba:41:36:1c:20:fa:82:30:30:04:5a:
8e:61:ee:5c:cc:ce:99:ba:ac:ca:5f:66:8d:45:f9:
f2:ab:05:9c:06:90:38:d6:da:b6:f7:d2:da:ef:13:
0b:8c:46:54:90:c2:81:dc:2a:42:b0:e5:3a:43:a9:
1a:ca:95:34:aa:09:fd:17:32:8d:36:e8:08:b8:0b:
44:74:f2:89:16:45:af:db:2f:f3:6d:31:5a:ad:b5:
af:aa:0b:1c:2b:d2:8f:d5:26:18:0c:92:be:a2:d8:
3a:34:fe:85:be:ae:3c:d3:e0:8c:70:66:96:32:0d:
66:e1:ab:76:32:41:59:05:a3:62:2d:15:0d:ae:0d:
ea:37:fd:a3:a4:8a:3f:ef:8b:65:85:cf:2d:b5:6b:
65:0c:fd:ab:2f:2e:6f:21:e0:90:1c:47:a5:12:83:
e0:c6:f8:c8:e3:34:68:9d:18:a2:8e:e9:6b:90:a0:
e6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F3:9D:98:79:EE:AC:E3:9B:2E:0F:D2:69:D3:A7:7A:67:D3:44:99
X509v3 Authority Key Identifier:
keyid:DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a4:20:1a:ee:6c:22:68:4e:5a:99:7b:7e:32:45:d1:6d:cf:
70:39:60:ae:69:68:da:36:e8:e3:22:13:fc:a2:e2:16:15:d0:
6d:94:44:c8:ed:6d:8d:42:28:5c:8f:f6:56:d6:53:01:23:1a:
60:c0:db:3a:18:c5:01:1d:c6:fb:05:43:61:0f:61:df:d5:f5:
e5:85:2f:4b:86:84:c1:e6:8d:52:77:20:d4:01:6e:3b:85:ac:
92:10:c8:8e:ae:64:08:86:7c:b9:8c:e9:dc:17:a5:b1:b7:ca:
fa:41:5d:3c:94:86:b3:77:85:c9:05:ac:6a:a5:9f:03:cb:c9:
d4:1b:7c:cd:a4:f3:d7:92:59:45:a4:b8:7a:6c:44:cd:dc:51:
bf:b0:4b:7a:52:9f:24:7b:9f:54:e6:ea:30:7f:7f:d4:50:71:
6b:29:73:7b:5b:15:39:15:56:66:8e:da:65:06:0a:a4:a7:17:
34:25:33:05:ef:57:29:88:9b:aa:b0:64:25:65:ab:6c:13:52:
5d:b9:3c:23:c8:26:98:51:3c:a6:43:2f:75:c2:3f:9c:fe:d9:
37:d8:f6:92:c0:ce:37:c1:2c:1c:69:e6:4c:ea:bc:db:8a:9b:
be:7a:90:52:d4:53:fe:a9:1e:61:88:37:db:af:b9:63:2f:5d:
b3:2c:95:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:06:19 2025 by rpki-client