Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
File: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft (raw, json)
Hash identifier: QlESJ2S8lu2yNkzBWAC3lseq/Fzl+oU8wHmFJAQjLL0=
Subject key identifier: 4F:AA:F7:87:AB:CA:DB:B2:1C:6E:F5:B2:EF:18:0F:78:FA:C7:E2:2E
Authority key identifier: DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
Certificate issuer: /CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Certificate serial: 0194BC3BD104C93CBC5F7B7F024F26C3D0F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
Manifest number: 0C0B
Signing time: Fri 31 Jan 2025 12:00:24 +0000
Manifest this update: Fri 31 Jan 2025 12:00:24 +0000
Manifest next update: Sat 01 Feb 2025 12:00:24 +0000
Files and hashes: 1: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl (hash: qwNvnLSxZ9HSQ8xDvpi1zXthu/AzQEa5CtNILQ5dkhM=)
2: C9mugrtzW_-CpWlbrAzn7HLndJs.roa (hash: us/IF6tfe4s5IdJAAyc5z0B0e23waKBVaik+zvz/TyQ=)
3: yll503ISaq2wNzfEAk_Qb_MtGbg.roa (hash: LYtS+Gvc0u0aK5E+MP2oP4ZNnIbSc6rSwiTMseFfpYs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d1:04:c9:3c:bc:5f:7b:7f:02:4f:26:c3:d0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Validity
Not Before: Jan 31 12:00:24 2025 GMT
Not After : Feb 1 12:00:24 2025 GMT
Subject: CN=4faaf787abcadbb21c6ef5b2ef180f78fac7e22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c2:13:7f:01:fd:8c:84:c5:7c:91:a0:19:70:
f4:dc:50:a6:59:06:56:4f:98:c2:96:56:e0:de:d6:
28:1e:54:4a:cd:ce:43:8b:95:b4:73:62:b8:50:4b:
6f:a6:39:41:c0:08:e8:d3:5d:76:b7:b6:cc:90:7e:
97:9f:d3:e1:6f:3a:df:98:29:d1:88:78:42:e4:a1:
1f:4f:c7:b7:c5:ab:27:19:50:53:f5:f4:47:4c:c4:
c7:fa:f3:62:3a:35:94:dd:b9:86:85:4b:e9:78:b5:
03:20:52:38:6e:e3:0f:c5:50:44:f1:5b:fa:10:08:
e8:21:95:11:4a:7f:1d:cc:22:f1:a9:3f:2e:d9:67:
62:45:ea:c9:5d:ea:df:31:bf:69:78:ad:19:fa:a3:
c7:fa:8c:70:1b:63:cc:11:99:1f:a6:00:26:9e:0c:
8b:c2:ce:f3:02:59:16:4a:79:68:7d:bc:1b:63:5b:
f2:02:fe:9f:3c:f8:af:35:2e:a4:a6:fe:6f:b0:22:
20:6d:5e:c7:76:2f:f1:a5:e0:eb:0d:6b:9d:c7:c9:
1a:26:a9:0b:60:65:a9:78:cc:0d:89:6d:fe:fa:0b:
1a:16:aa:21:63:a5:19:05:6b:4c:88:20:e0:7a:12:
b1:f2:e1:a8:24:83:2d:9c:83:52:0c:6f:ae:e6:04:
4c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AA:F7:87:AB:CA:DB:B2:1C:6E:F5:B2:EF:18:0F:78:FA:C7:E2:2E
X509v3 Authority Key Identifier:
keyid:DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:71:09:43:84:d8:ed:d2:15:06:2c:13:fa:9a:b5:40:1d:1f:
31:74:7c:d7:a8:14:0b:d5:22:95:3d:e1:b7:7f:da:64:95:e4:
fd:2e:8a:1d:d1:bc:c5:57:7a:3d:52:32:5c:ea:bc:26:67:bb:
91:0a:cf:64:2f:b5:55:1a:fc:bc:e4:b1:19:6c:b7:f3:81:0d:
e4:99:67:34:56:c1:8d:22:f3:7c:99:46:b2:e9:1d:a7:82:22:
2c:c1:73:bf:fd:8d:e4:cd:65:8a:4f:82:aa:96:9f:7f:43:f9:
9e:db:a0:84:9e:05:e0:33:d0:39:6e:27:2d:96:d9:53:2a:b7:
9c:78:ab:56:a9:c3:e9:ea:6c:88:a3:0b:cf:7d:a3:52:68:15:
32:cd:37:e4:b8:6d:f6:bf:9d:f1:8f:d7:f1:91:60:59:c1:88:
bd:8d:61:b1:1c:fd:03:94:88:e0:c9:9a:e5:ad:4c:07:d1:be:
13:3f:e9:d7:40:07:05:43:ba:0b:d1:51:6f:87:a7:ec:b3:cf:
d4:71:72:42:e5:aa:42:c7:f3:62:fc:b1:a0:fb:e2:9b:9b:db:
24:f4:bc:a1:e2:dc:20:6c:71:bd:1d:60:81:6e:4c:89:b6:3b:
dd:39:7a:34:a6:a2:8f:7c:86:99:80:4e:92:a4:34:3c:43:da:
5b:28:c2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:00 2025 by rpki-client