Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
File: 3YpOHe5bseZXmxFhypEsqcA7Ru0.mft (raw, json)
Hash identifier: OADY04KMDrpeGDNxBbpNTcXKrfyZ1lL7Vxs32d9nwus=
Subject key identifier: 6E:DD:B4:65:DE:A7:EA:8D:7B:A6:8D:E1:30:FA:29:47:B4:9B:DF:23
Authority key identifier: DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
Certificate issuer: /CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Certificate serial: 0194BBCEEF7D743B5078D3845FB119BF4191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
Manifest number: 0D7D
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: 1-hdiWMY5l0xAZuqxRKYMnls1-tQ.roa (hash: T86Jb9a9Ub4X+hYRFQtCytnDevJ3Vo4p0E2BCYldVL4=)
2: 3YpOHe5bseZXmxFhypEsqcA7Ru0.crl (hash: e2uL8QLqNKSjJHNywk19av7p2Y5lVTueGMnj1H5JCZw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ef:7d:74:3b:50:78:d3:84:5f:b1:19:bf:41:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=6eddb465dea7ea8d7ba68de130fa2947b49bdf23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:71:9d:e7:1a:a3:93:a3:e7:29:42:f3:06:49:
e4:cb:77:e7:49:c7:f5:a6:a5:44:fa:09:c6:5a:5b:
62:c3:2f:12:81:85:bb:6b:c7:ed:5b:61:2f:25:50:
75:86:23:8d:a2:e2:2a:3a:8d:d1:d2:28:f2:09:22:
85:49:7e:f0:bc:2c:fb:d9:0a:28:bb:29:fb:cc:36:
de:67:59:3b:d9:d2:34:60:3c:aa:df:73:b8:78:32:
7c:ca:45:b5:46:34:2e:3d:d3:91:1e:51:fc:49:18:
46:81:c5:34:54:0d:08:cb:5b:2a:b0:af:43:ea:22:
05:7e:f9:0c:ef:c7:af:63:4b:67:9f:9f:fa:1a:c2:
43:2c:50:b2:f1:93:fc:d0:c1:36:07:d6:40:69:6c:
b8:c0:61:d9:8e:71:bf:b1:06:fb:b3:81:b8:a4:41:
c6:70:a8:3c:b3:5e:34:7b:71:1b:76:c4:23:30:7e:
64:21:20:e7:8c:aa:5f:20:2e:fa:bd:3a:27:24:04:
1e:3a:57:67:78:d0:b0:27:12:36:d2:86:1c:c2:01:
10:5e:ee:0f:c6:aa:5c:3a:82:e7:db:a9:4c:c1:a8:
21:9d:87:a5:ed:0b:b6:3b:89:a7:a0:a1:97:04:69:
ba:66:a5:c2:e9:c5:c0:0f:c2:ae:e0:58:5c:12:6b:
b8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DD:B4:65:DE:A7:EA:8D:7B:A6:8D:E1:30:FA:29:47:B4:9B:DF:23
X509v3 Authority Key Identifier:
keyid:DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b0:9a:8d:c0:a4:b4:58:a1:d4:6a:ad:79:20:0e:4a:82:cb:
70:f5:79:c9:e5:be:18:18:e3:cb:25:d7:e5:f3:a0:c0:e4:5b:
4d:03:14:bf:f6:cc:95:ed:20:57:4e:89:78:05:5b:e5:2d:af:
ff:f2:17:36:1e:6b:bc:66:39:76:ce:61:91:ac:41:4e:79:e1:
29:cb:24:c3:36:0e:89:ae:53:1b:e5:71:06:85:e6:d6:62:d7:
a5:b5:72:dc:e5:26:86:23:e7:9e:4a:9f:5a:91:d2:a5:e4:a2:
47:06:6c:32:8f:93:7e:53:e9:8d:ed:07:64:48:bf:30:52:71:
f0:06:34:4f:e5:27:f0:c5:2c:35:72:1f:00:0d:bc:a1:32:eb:
01:bd:61:b1:a6:3c:5e:7e:90:3d:ab:94:c3:41:0d:51:08:a8:
3e:0c:83:25:34:4c:c1:25:65:6c:b3:46:07:85:48:3e:cd:7f:
d7:cf:9e:54:97:aa:9e:62:a1:30:c1:2e:6c:1d:9c:9e:24:05:
03:47:a2:48:0c:8c:38:ad:58:08:b9:25:71:df:70:e9:2b:d9:
24:9c:70:ff:43:67:de:b2:4d:c3:49:8f:d4:8c:92:d3:da:df:
8b:3b:95:81:48:2b:53:dd:e9:5c:0c:0d:8c:b0:36:fa:5f:3f:
a0:89:d9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:06:01 2025 by rpki-client