Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
File: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft (raw, json)
Hash identifier: jRgGhYEaq0OA7gtF0zjjWc8UM2VopDorPIhAFMEDI6E=
Subject key identifier: F3:8B:86:0B:36:82:F4:2C:81:C0:77:B8:01:36:36:6E:99:CB:C4:66
Authority key identifier: DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
Certificate issuer: /CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Certificate serial: 0194BD8530B7EAE3808C8E7D15FFA0385EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
Manifest number: 0938
Signing time: Fri 31 Jan 2025 18:00:09 +0000
Manifest this update: Fri 31 Jan 2025 18:00:09 +0000
Manifest next update: Sat 01 Feb 2025 18:00:09 +0000
Files and hashes: 1: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl (hash: Lo4I+fGpn//7MHsssIAxhIueC93OpOy92RsKwUFzZkw=)
2: 4NcSUJ4Kg8dewIwP8RGgWPLVsGw.roa (hash: NfguGRutDpTl33g3TT2hnx9Rfi2f9fnIaQJYs24UAYQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:30:b7:ea:e3:80:8c:8e:7d:15:ff:a0:38:5e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Validity
Not Before: Jan 31 18:00:09 2025 GMT
Not After : Feb 1 18:00:09 2025 GMT
Subject: CN=f38b860b3682f42c81c077b80136366e99cbc466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:69:0a:54:61:7b:2f:f5:bf:b6:a4:95:ef:ed:
12:86:9b:82:74:07:3d:9e:8f:05:3f:bf:ef:b5:06:
eb:2b:24:9f:e6:31:89:4b:75:81:86:6a:cb:80:ab:
64:5d:1a:2d:ca:f4:ec:fc:f1:6c:3d:8c:65:0e:e7:
40:d5:e3:8b:c3:7c:34:25:b6:49:19:df:51:e0:90:
ab:78:db:a7:71:ef:4e:b4:76:a4:af:d8:7b:de:a8:
5a:37:d8:c0:de:c1:0d:0b:64:52:a4:3d:e2:ff:57:
ba:b4:ce:e5:ed:8f:00:5b:21:f5:84:28:fd:58:08:
9f:5f:0b:ba:9e:0e:78:80:f9:04:d2:e9:af:f6:81:
1a:ff:ff:a9:c4:49:5c:c0:bf:0d:3a:4e:8c:ca:0d:
d4:6c:a7:45:7e:f2:99:9c:87:9e:b1:24:b1:ff:2d:
bb:54:46:20:72:25:2d:96:1a:69:b2:fe:cf:e6:0a:
6f:49:8a:66:8d:9f:5a:65:db:ba:51:65:77:4b:f2:
98:82:b0:08:42:db:d0:98:a5:22:c3:9c:89:a2:dc:
97:61:85:30:fb:85:b8:c3:35:33:30:98:41:c7:73:
94:ac:6c:97:15:5f:63:cd:2d:79:a7:df:47:ab:56:
57:0f:81:c8:6d:a5:f3:47:b7:0a:ef:ad:00:d9:cb:
5f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8B:86:0B:36:82:F4:2C:81:C0:77:B8:01:36:36:6E:99:CB:C4:66
X509v3 Authority Key Identifier:
keyid:DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:8e:9b:d5:6a:d3:59:79:09:a0:e8:78:65:d9:37:8f:99:03:
be:9c:a3:15:21:05:78:2a:14:e9:cf:e4:da:87:66:1d:3d:a3:
e1:84:da:ea:a1:ca:66:89:bb:bf:18:ff:6c:be:2b:14:12:60:
2b:06:63:ef:e6:69:08:d0:04:4d:89:d5:c8:71:82:00:a1:62:
76:23:a4:26:94:3c:2a:9f:56:04:10:20:29:1b:37:7a:35:3b:
e7:b5:55:1a:1a:99:9e:5a:02:77:ed:b5:34:dd:b4:62:f5:86:
4c:09:f4:dc:ea:33:b9:c9:f1:6c:0c:95:10:22:89:15:43:61:
d9:99:71:24:a1:93:e3:24:3d:8b:04:47:3b:fe:60:73:13:d0:
90:e9:7f:77:9b:ce:5a:6b:bb:ff:72:73:58:8e:13:77:5e:6d:
78:2e:82:9a:1c:86:d8:59:87:f2:e6:11:cb:96:fb:a7:f4:f8:
f9:4f:cc:cc:94:cb:65:1a:5b:43:ab:82:c0:8a:31:32:27:03:
a5:6a:24:e1:a9:a8:f6:28:4e:aa:2c:c5:fe:c5:12:1c:ea:a8:
55:54:bd:c8:6f:9e:57:1d:0d:1d:3e:05:b2:b1:e0:f3:95:11:
a9:3e:e0:49:10:9c:fb:bf:b4:50:ba:39:15:29:1c:52:b2:1e:
50:90:61:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:30 2025 by rpki-client