Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
File: 3_xJGVpDnVudcRKzNgFe7iyUTYk.mft (raw, json)
Hash identifier: v821gi8z0rGiDbPmiL2lKv/+gvnPeusY9+ca0+rUR0g=
Subject key identifier: 02:FE:40:4E:48:6F:D9:27:CA:F3:52:80:C6:E1:BD:D2:20:C4:7E:CB
Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89
Certificate serial: 0194BC04DA216853D68D79AA653BAC58852E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: 3_xJGVpDnVudcRKzNgFe7iyUTYk.crl (hash: hUSOTiG/DtiJ7O4JC6u68DrPu9zyz7JHTna+eBz2s/4=)
2: 3o2OhEX8D-C9sW1xo7_jlOmD_j0.roa (hash: k3QEknU5rjZnXpONxqfvLO581xpn3+pyaYB6EDwI7ck=)
3: 7vdY6fKyJL6xOTEWHPQznWg1cuQ.roa (hash: LAvqsJ06fMyPoV983D+eGZunyZuIfO7UCXuYbTjEljc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:da:21:68:53:d6:8d:79:aa:65:3b:ac:58:85:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=02fe404e486fd927caf35280c6e1bdd220c47ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1e:a6:cf:b2:26:35:24:72:db:dc:57:c7:4f:
d7:4d:66:a1:e0:62:ba:4d:9b:4f:b1:9d:a6:17:7b:
78:68:e2:38:1e:2c:4b:cc:53:5e:5d:8e:07:f2:8a:
e6:2b:0e:51:ec:c4:34:9f:91:69:42:94:81:49:28:
14:47:f5:4b:ac:7e:07:38:1a:2d:a6:49:49:8d:1a:
79:64:94:59:4b:c6:7b:1e:27:fc:56:16:22:2a:9b:
f0:d3:04:80:ba:71:fc:33:45:8e:b7:a9:28:a3:35:
96:e4:34:fe:0f:5f:68:07:13:c3:62:5e:bc:0d:1c:
63:20:a1:14:14:3d:0c:b6:a3:53:26:5a:a4:03:16:
3c:3a:0f:df:62:13:83:9a:8a:80:70:21:35:54:b6:
4a:8f:18:4f:32:da:ce:aa:fa:dc:aa:8d:a5:9a:39:
16:f7:bf:94:d9:6f:fb:7d:ca:fa:f9:34:41:43:bd:
82:0f:1c:da:7d:c3:f0:8b:23:9a:0a:89:7c:12:fd:
13:d7:db:5d:81:d7:3e:2b:4c:e0:34:40:3d:05:51:
27:5a:7e:af:b4:e8:6c:62:2f:8d:91:cc:ea:21:40:
8c:a4:b3:84:15:b3:3b:bd:38:19:d7:27:d7:72:bb:
d0:1d:be:27:5e:1c:00:76:2e:28:d1:e9:89:5f:c1:
fe:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FE:40:4E:48:6F:D9:27:CA:F3:52:80:C6:E1:BD:D2:20:C4:7E:CB
X509v3 Authority Key Identifier:
keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e9:e9:e2:25:dd:0d:26:e5:ad:f7:1e:63:36:b5:e8:de:11:
a8:fd:2d:4d:56:0b:88:1b:37:6d:a5:aa:d9:e7:a8:49:cf:34:
42:9e:51:23:ca:a4:2b:42:2b:d5:96:38:7f:17:fd:dd:d8:dd:
56:fc:ca:1e:c7:ba:16:f1:74:74:3b:a6:7f:df:78:09:88:c3:
3c:7a:18:cc:82:a9:e4:5f:16:1f:c2:6f:5c:1f:2e:e1:a5:79:
69:76:a1:27:fa:2f:a6:e7:59:8a:92:35:64:6e:11:3d:ec:28:
09:d8:58:ae:d3:20:67:43:e7:59:af:2d:fa:05:c5:65:61:a2:
29:65:60:55:32:5f:9e:2d:fd:af:f8:90:ff:f0:83:74:e9:64:
ec:bf:41:d9:63:db:e7:f1:8b:83:0a:77:bf:42:48:6f:32:4d:
31:5d:9c:42:02:b4:0d:e5:5e:5d:b9:ae:bc:61:c5:26:46:9a:
7f:4b:ee:a8:2c:52:da:1f:25:fe:93:67:53:12:dc:d4:d9:7b:
9e:e7:a6:94:ba:d3:bd:96:6e:97:f3:03:ed:6b:68:04:b7:9a:
40:fb:3b:f8:e2:d5:45:5d:92:d4:8f:d4:93:11:b5:c2:10:df:
bc:27:0b:ef:90:5d:d9:f0:b6:43:27:bb:3a:14:d7:1d:f9:47:
35:e2:3d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:11:19 2025 by rpki-client