Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
File: 3sDxT6yN2zSANygAdsw2YU2jBew.mft (raw, json)
Hash identifier: J01QQ1RqGjmgXDAPPGwmLng/u6ryRERJM8eA3kRfVdY=
Subject key identifier: 2E:AC:73:17:C6:70:2B:1F:EC:0E:46:3C:10:16:7E:7A:1F:46:0D:FB
Authority key identifier: DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
Certificate issuer: /CN=dec0f14fac8ddb348037280076cc36614da305ec
Certificate serial: 0194BD17C11F329A169365183CFB20CB24F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:37 +0000
Manifest this update: Fri 31 Jan 2025 16:00:37 +0000
Manifest next update: Sat 01 Feb 2025 16:00:37 +0000
Files and hashes: 1: 3sDxT6yN2zSANygAdsw2YU2jBew.crl (hash: D/sBsQVeQLLeRb8RkI/QkRCh6MugZfVE3Gab5bwUlyg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c1:1f:32:9a:16:93:65:18:3c:fb:20:cb:24:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec0f14fac8ddb348037280076cc36614da305ec
Validity
Not Before: Jan 31 16:00:37 2025 GMT
Not After : Feb 1 16:00:37 2025 GMT
Subject: CN=2eac7317c6702b1fec0e463c10167e7a1f460dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2f:eb:8f:21:6a:b6:90:01:fb:fa:bd:02:07:
f8:dc:1b:2b:76:cb:83:93:2e:06:49:3f:2b:82:aa:
20:02:8d:64:07:5d:d4:c5:55:5c:1b:3e:c1:44:8c:
b2:b5:a5:9f:e5:54:39:28:6c:8b:00:50:dc:40:b6:
c6:a4:c8:d3:a6:56:f7:b9:2c:c3:13:cf:33:a7:dd:
0e:21:60:57:4e:60:b7:d9:86:d6:cd:58:8b:bd:62:
76:9f:39:06:c7:d2:b6:71:04:9d:6e:f1:64:c9:6f:
86:35:2b:20:3c:27:cf:8d:b0:98:30:7a:30:9f:6d:
76:f6:05:a4:8e:b9:74:2b:99:ae:8f:38:c3:1d:61:
15:46:e2:a2:62:2e:80:cd:a0:20:05:be:5b:fa:58:
2f:cb:7b:74:18:6e:aa:a3:ae:de:7c:7e:7d:d0:c4:
09:29:01:18:c5:66:34:be:d8:ce:9d:2b:83:89:7e:
47:81:fa:bc:07:42:27:ef:04:e3:52:62:8f:db:38:
92:a1:ab:76:e2:ea:3e:3c:d7:e4:96:28:d0:71:b3:
22:c6:1f:10:c1:28:db:06:d8:93:fa:84:47:0f:8c:
a3:79:ed:ee:98:1f:e8:20:ea:6b:31:06:20:89:d1:
ce:3c:75:f3:2c:1a:ff:2a:e7:21:4f:e7:c5:77:f4:
bc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AC:73:17:C6:70:2B:1F:EC:0E:46:3C:10:16:7E:7A:1F:46:0D:FB
X509v3 Authority Key Identifier:
keyid:DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:49:45:3d:ca:1d:fb:54:d1:c5:d3:be:71:71:29:8a:34:f1:
ee:ec:18:e4:93:41:9e:5b:a7:81:25:30:e7:ff:96:7e:11:c9:
ce:a2:4c:ff:0d:f1:a0:a5:77:4a:ff:be:a2:18:a0:5c:ba:cf:
73:09:43:c7:8c:32:56:c3:2b:af:9e:ff:2d:43:a8:00:b7:02:
01:cc:25:3c:51:7c:21:92:fe:3e:e5:98:9f:4b:dc:c8:d9:16:
6b:ed:3d:fb:08:11:f0:35:ad:3a:47:8e:8b:1b:bd:0f:99:70:
dc:d5:22:4e:22:3d:96:e8:d5:e7:f7:fb:a1:18:23:ef:fe:ab:
24:85:fc:d2:a8:f5:ad:1b:d8:14:b5:50:ff:f8:54:b9:a6:84:
5e:2d:f3:72:88:6c:7b:e5:06:2a:6a:6f:23:4c:e2:c1:3f:45:
08:5d:86:d1:9f:3e:24:fa:94:07:44:0b:37:10:e4:da:f9:ee:
95:00:e9:ed:76:0d:72:27:dd:8a:fa:00:84:0c:62:cb:2d:63:
4a:03:06:4e:96:6b:38:a6:04:c4:73:60:94:90:fc:20:5f:95:
69:1f:33:8f:17:54:00:37:19:da:60:59:1c:6a:e4:6e:97:dd:
2f:08:01:d0:10:f5:b5:89:84:11:2f:d1:8f:fc:16:2d:f2:98:
20:94:94:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:49 2025 by rpki-client