Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
File: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft (raw, json)
Hash identifier: +EjaWj/S06KsO1/xNHMRBNU87ih7whPGYux7pGtg9Jg=
Subject key identifier: D1:5C:F1:AE:6B:93:CD:80:22:C0:2E:86:B3:86:C9:C3:9F:59:16:4D
Authority key identifier: DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
Certificate issuer: /CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Certificate serial: 0194BCA9D50BD91F8E0A12C1A6573128006D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
Manifest number: 10CF
Signing time: Fri 31 Jan 2025 14:00:34 +0000
Manifest this update: Fri 31 Jan 2025 14:00:34 +0000
Manifest next update: Sat 01 Feb 2025 14:00:34 +0000
Files and hashes: 1: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl (hash: GIRP+SGJ5/2dWql9Qgu3Q/4oZx7Liwzg0qUoR2H/fjY=)
2: yrS5JvCeQkL61hQzQKYDkOhEOTg.roa (hash: goLq7UsC9/y1qbTkOPG/FDEBz20Pk1byDqCOGCbWKi0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d5:0b:d9:1f:8e:0a:12:c1:a6:57:31:28:00:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Validity
Not Before: Jan 31 14:00:34 2025 GMT
Not After : Feb 1 14:00:34 2025 GMT
Subject: CN=d15cf1ae6b93cd8022c02e86b386c9c39f59164d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a4:71:19:a6:7c:b8:4e:db:18:c7:dd:76:98:
74:53:a3:70:e1:fa:92:79:3e:12:98:8f:0b:e6:4e:
b2:07:81:9c:fd:87:71:c0:73:37:49:9b:26:33:23:
dd:83:04:49:9c:95:3c:fb:5c:bf:d2:2f:c0:36:b1:
f3:d5:e2:19:fa:5e:e3:cb:95:e5:c9:c1:3f:e8:e6:
16:cd:b3:73:04:93:91:e5:e4:e3:6f:0b:00:3c:ba:
dc:1e:26:5f:70:37:fb:c5:9f:10:7e:c5:e1:cd:94:
62:59:a1:b4:fd:33:46:7d:1b:27:eb:c2:fb:76:29:
5a:02:9e:f5:12:2e:3d:04:4c:c0:5b:ad:97:8d:9d:
22:36:c3:14:f2:f1:e1:5b:71:93:a4:44:e6:b5:b9:
6f:00:90:47:d3:63:97:29:c2:70:87:e0:93:21:8c:
cb:b1:b4:f4:c3:07:8e:e0:08:b5:0f:48:70:d4:df:
09:c9:4a:01:29:14:16:cb:62:d2:61:10:df:e5:5a:
75:d3:6d:a8:13:97:68:e9:ab:33:ba:8c:52:d3:2f:
85:f6:a5:26:9a:f7:f2:de:97:64:ac:9f:c6:6d:99:
0d:33:58:06:31:42:2a:84:09:c9:db:09:a8:2e:e0:
2a:2f:e7:aa:17:86:64:47:b1:cc:fa:dd:6d:ca:29:
27:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5C:F1:AE:6B:93:CD:80:22:C0:2E:86:B3:86:C9:C3:9F:59:16:4D
X509v3 Authority Key Identifier:
keyid:DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:9d:d2:2b:0d:2e:6b:1f:3e:25:16:79:c4:dc:42:ac:b3:2f:
58:9d:4a:f5:41:67:e6:fc:5d:19:8e:d7:ca:20:18:9b:01:73:
25:57:7c:8f:1c:9a:8f:97:fa:77:34:f1:3c:ca:ac:10:cf:f3:
92:b1:b3:61:7e:51:c0:07:d8:90:7c:ed:e8:18:fd:ab:21:bf:
4c:9a:dc:e0:61:9b:bf:95:3d:33:b5:46:e3:25:97:90:b3:46:
ae:43:76:5c:a3:43:bf:6c:aa:19:bc:b3:61:3f:c3:f0:1f:24:
f0:8d:8c:c1:e8:be:f8:9c:f4:61:78:b5:35:ca:1b:ad:41:b8:
71:3f:4c:48:a5:8e:b1:e6:56:1b:1f:02:8e:15:1f:d5:bd:32:
05:24:37:77:26:c6:21:5c:df:c7:98:5e:93:a9:d8:bb:da:57:
b5:6a:ec:77:ba:b1:1c:e7:76:30:fa:1d:5e:b1:a6:e2:98:33:
b3:eb:96:40:4b:d8:19:69:17:80:0a:9b:6d:e7:88:fa:00:63:
6d:63:81:3c:c7:4b:aa:fb:c3:4a:0f:69:4a:36:85:36:12:08:
bd:01:be:23:2a:03:22:fc:6c:92:2d:bf:f4:7d:db:60:fb:93:
1a:3d:a2:df:1e:c4:95:ba:db:48:22:fd:c3:6a:c4:f5:71:c6:
6e:7a:35:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:13 2025 by rpki-client