Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
File: 3K-toQ4s4g4clviVu47DKlgI9j8.mft (raw, json)
Hash identifier: 2toiMlzu29i5q9wbs2kfF3ZFnX0+RVI18D86cLRAB7w=
Subject key identifier: C9:A5:F1:EE:C4:D0:84:8B:0C:66:88:F7:68:0D:05:14:EB:20:5D:D8
Authority key identifier: DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
Certificate issuer: /CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Certificate serial: 0194BD17AA2154A42CD46566D4CDAF38E4B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
Manifest number: 0319
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: 3K-toQ4s4g4clviVu47DKlgI9j8.crl (hash: mMkJZZXhiFrCSCL7OCW3f4+cGkfZQMS7nul4p2xwCww=)
2: wLvB8cGiUEUZNSS38jCt0kGtb0w.roa (hash: m3dcBbH2bIeKi8Ap8eHL2CuPz3vf7Stl96ekMV6tjIA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:aa:21:54:a4:2c:d4:65:66:d4:cd:af:38:e4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=c9a5f1eec4d0848b0c6688f7680d0514eb205dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d0:e9:7f:5b:bf:ae:72:be:bd:01:2c:3e:92:
0f:f6:16:cd:36:93:f0:ed:dc:c9:10:83:f6:d5:e7:
77:be:f7:9d:ff:8e:96:07:2d:a8:24:02:f1:ef:3e:
c6:c2:a1:28:c5:48:dc:42:60:d9:c3:8c:3a:3d:c6:
71:50:74:26:e5:0f:74:a7:4a:13:05:24:5b:92:de:
eb:18:15:8f:cc:35:c3:66:41:41:14:f0:5e:c6:67:
34:1b:6a:1f:2e:7f:88:87:0a:56:66:75:67:6f:3a:
7b:0d:7a:45:b6:f0:52:69:83:c4:63:b8:c2:cc:0a:
fc:fe:f2:8f:98:98:7a:ba:44:ea:b9:be:2b:ac:fd:
88:c6:aa:07:ef:ff:55:6a:a3:a1:4b:ae:6c:83:45:
ed:c3:c1:e2:64:6a:f4:ea:de:11:8f:b0:e9:bf:0c:
b4:51:ca:e4:e2:33:36:5b:df:c8:18:4d:75:79:3a:
5e:80:7e:d7:9d:de:34:94:a9:11:33:5f:0d:67:06:
e6:09:fd:23:a7:46:82:74:b0:ba:2d:52:a3:bf:17:
8d:33:e9:5f:ad:72:a9:f1:32:7c:f1:a7:10:fe:10:
b6:b8:ab:37:60:b3:0a:36:f4:b3:0c:81:75:a8:e6:
0f:d6:7a:e4:dd:72:54:3d:6a:a0:18:68:96:7d:fc:
e1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A5:F1:EE:C4:D0:84:8B:0C:66:88:F7:68:0D:05:14:EB:20:5D:D8
X509v3 Authority Key Identifier:
keyid:DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:da:1b:cc:5a:fa:9a:9a:31:37:b6:65:87:18:53:78:0e:53:
6a:bb:55:8d:02:28:c6:3f:fa:1f:76:92:dc:c8:5f:1b:9e:06:
8a:30:a0:5d:55:2d:a9:4c:fc:2a:da:81:bd:c3:ac:f9:0d:67:
a9:2e:3c:0c:39:b8:5d:84:56:87:36:56:d1:95:a1:05:a4:e0:
62:66:b9:24:59:50:c3:d5:d2:6b:61:a9:28:4b:8a:de:4f:bf:
40:b2:80:98:44:23:6b:e5:d6:f3:a9:a8:97:41:27:9d:de:7e:
a3:ca:94:8a:0e:fe:a9:98:8a:4f:bd:d3:51:b9:32:b6:6d:64:
67:e0:e7:c6:0c:68:ca:9b:4b:f5:f7:3b:8a:1c:d4:98:d3:b5:
7a:66:49:23:c2:a4:a0:e2:c3:7b:93:82:9b:b0:fa:d4:fb:3c:
48:cc:ae:18:fd:bd:8b:50:78:de:02:7a:20:1f:b9:29:7c:a4:
ac:f4:fe:ed:56:c0:d1:d4:c7:c2:34:4a:30:b1:18:fa:a9:65:
ba:b4:1f:7c:7e:2e:05:e3:7a:74:64:06:c1:63:d8:87:d3:3a:
f6:57:16:33:b3:37:b4:f1:8d:0d:8e:94:2e:9f:ef:8c:6a:2c:
f6:98:74:d2:67:f3:fb:a7:17:9c:e6:cf:c3:85:d9:a2:1c:5a:
8a:0e:76:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:00:17 2025 by rpki-client