Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
File: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft (raw, json)
Hash identifier: JvjzV/r9xWFdN1QPmLo+7VSkAI4lSQED+8PRNcd6Kzo=
Subject key identifier: 3C:BB:7A:48:01:C6:EE:E2:8F:03:46:6D:CF:5A:4F:23:FD:B4:2A:3D
Authority key identifier: D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
Certificate issuer: /CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Certificate serial: 0194BD8543CDACBFCF60BAB86D684F6295A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 18:00:14 +0000
Manifest this update: Fri 31 Jan 2025 18:00:14 +0000
Manifest next update: Sat 01 Feb 2025 18:00:14 +0000
Files and hashes: 1: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl (hash: Et2JgqNADsnGr7Xz8kK6im0Taij4QuwSsVTs7ajJleA=)
2: gd86nab0qf28eq3d5pPFq5e9rZo.roa (hash: OleM9BzJjHgCcSMlxVVC1tH0LyJmqbhh/CO/g3APccs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:43:cd:ac:bf:cf:60:ba:b8:6d:68:4f:62:95:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Validity
Not Before: Jan 31 18:00:14 2025 GMT
Not After : Feb 1 18:00:14 2025 GMT
Subject: CN=3cbb7a4801c6eee28f03466dcf5a4f23fdb42a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:19:72:c8:4f:7f:92:68:97:60:b0:0d:75:18:
6c:4a:ee:cb:75:33:12:14:fa:05:a3:d9:ec:10:35:
da:39:1f:0c:d6:01:a2:9d:9e:d8:37:6c:95:36:d0:
9c:6f:67:5e:80:67:de:c9:aa:65:bd:68:b5:e9:ef:
74:9d:9e:8b:3f:2d:e9:3f:8a:a2:df:b0:5e:52:ac:
b6:a0:53:16:50:e8:6a:93:58:83:cf:43:b9:aa:00:
27:2e:a9:02:e2:a1:66:1c:54:a8:ae:26:24:d3:a5:
0e:aa:9a:b7:82:75:3e:8b:1c:e0:3a:05:bd:b6:5e:
34:71:4f:b2:46:a0:08:c4:69:91:47:3f:9a:b2:da:
f2:f3:4a:42:74:45:5c:d6:09:22:da:ee:85:a4:4f:
a8:a0:49:f2:0e:d4:b6:df:28:60:20:25:fa:d1:f8:
dd:0f:f9:4e:51:34:be:ee:10:d9:08:38:39:12:62:
6c:0c:fc:3a:67:0e:16:61:33:ea:2f:3b:95:94:1d:
7f:74:9f:2d:db:0a:e4:7d:77:8a:95:20:90:4a:d2:
b6:ec:b4:e7:d9:66:c0:f0:21:67:9e:e2:cf:a4:3c:
10:13:c5:4e:81:a5:37:11:c3:d9:54:82:46:e9:07:
a7:f8:7b:35:06:e7:90:47:45:10:e8:86:36:62:1a:
db:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BB:7A:48:01:C6:EE:E2:8F:03:46:6D:CF:5A:4F:23:FD:B4:2A:3D
X509v3 Authority Key Identifier:
keyid:D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:91:ae:76:f3:d5:6f:72:d2:26:9d:ee:a4:23:3e:c3:0a:33:
ac:d0:09:7b:f1:1d:a2:a5:31:ef:ce:9d:60:51:f2:69:f1:78:
eb:63:ca:8c:df:93:c0:28:7c:73:17:df:8d:3f:08:59:f1:64:
2e:a9:58:fb:9f:96:3c:95:ac:7d:74:33:f0:54:68:5b:93:2e:
d2:c0:e8:9e:b5:40:99:f0:c0:de:ae:42:89:73:cd:99:9a:6f:
85:df:1c:0e:de:c7:42:1f:8d:b0:eb:90:e9:ed:70:b7:bf:88:
3a:72:70:ec:44:e5:97:7f:02:f5:79:02:4f:d7:71:63:7c:d4:
b9:02:40:68:3d:23:6b:bf:c1:9a:c4:78:04:64:af:7b:85:e1:
1e:eb:b5:26:c5:b5:50:fd:16:c5:ab:e9:d9:27:37:7c:e2:3a:
7e:b0:c3:66:55:c9:ef:47:4e:f7:f4:8b:20:62:e9:69:95:23:
b1:a6:35:aa:b0:1d:fd:3b:ac:71:f7:b2:b7:b8:95:46:13:1c:
3d:be:75:20:c8:02:20:55:39:0a:31:a2:14:68:3f:a6:1c:b6:
fb:6b:d9:61:d3:a9:75:f1:74:80:2c:d0:47:41:39:25:63:46:
a4:54:e4:48:9e:e1:dd:3a:6e:e7:18:9b:32:4d:40:f0:84:63:
81:30:e3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:53:21 2025 by rpki-client