Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
File: 3mxgNQQsxTJRbrwZaPQb__S4U34.mft (raw, json)
Hash identifier: FFyQHNvPQhbpShxVeOTq9882C5+gLEc5rYgO3y9f0cA=
Subject key identifier: D5:E5:CC:15:CB:3F:BD:ED:EB:7C:6E:39:77:58:1C:B7:1E:04:59:E9
Authority key identifier: DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
Certificate issuer: /CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Certificate serial: 0194BD8543D521481E58F3C11D7FEA460079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
Manifest number: 1073
Signing time: Fri 31 Jan 2025 18:00:14 +0000
Manifest this update: Fri 31 Jan 2025 18:00:14 +0000
Manifest next update: Sat 01 Feb 2025 18:00:14 +0000
Files and hashes: 1: 3mxgNQQsxTJRbrwZaPQb__S4U34.crl (hash: fDmt40CqZZXJSpYVoezqnbzWLViXOfTOgVZ3wxGWTIA=)
2: qlMHdAg_ZeG5jpZEikZxyiq5rOM.roa (hash: r9NbCVDLWns0v6U+hfflkmDI70L6VCrJW0Q5+div1jw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:43:d5:21:48:1e:58:f3:c1:1d:7f:ea:46:00:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Validity
Not Before: Jan 31 18:00:14 2025 GMT
Not After : Feb 1 18:00:14 2025 GMT
Subject: CN=d5e5cc15cb3fbdedeb7c6e3977581cb71e0459e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e8:ae:d3:f3:3b:fb:23:d6:41:63:5f:48:aa:
17:5b:fc:ef:26:7d:a5:f0:58:c2:14:08:3b:60:05:
f4:ed:63:bd:ff:d2:d2:ab:b2:3e:b0:4b:2b:e2:f6:
d3:96:7d:7d:e0:e4:9a:f5:89:17:1c:a6:1d:61:5f:
82:a3:fa:2d:a6:df:ba:df:7d:d4:54:c5:4f:5a:be:
6c:f3:9a:e8:5f:19:9f:f5:dc:37:06:63:57:05:20:
49:37:93:58:95:5a:82:36:8f:19:2f:9d:ca:99:fb:
3a:4c:7c:75:5c:ce:5b:76:dd:89:cc:4c:90:99:3e:
93:90:5a:4b:14:08:a2:48:cb:00:53:fa:a8:3c:b2:
ce:4e:c3:fd:7c:a0:d5:6d:0b:57:1e:c5:b2:dc:e8:
cb:cc:17:70:0d:1d:6f:29:81:ff:10:01:96:bb:d9:
f5:72:ed:e9:2a:78:ac:aa:47:ea:23:d2:fb:52:47:
d5:b9:83:e5:40:e5:7b:ff:bf:bb:3e:d2:33:b8:9c:
1d:81:3a:a8:9e:cd:5f:57:03:a2:67:08:e5:96:60:
89:18:ca:c7:38:d0:80:76:b0:65:b8:3a:16:68:04:
b1:4e:bd:83:3f:66:de:e8:a6:f7:ab:06:49:de:30:
27:31:fc:6d:94:ee:83:92:69:8e:c7:4a:dc:ed:61:
b4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E5:CC:15:CB:3F:BD:ED:EB:7C:6E:39:77:58:1C:B7:1E:04:59:E9
X509v3 Authority Key Identifier:
keyid:DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:77:1d:1e:70:59:94:14:f6:d0:63:e3:cf:fe:a2:0b:b7:27:
fb:6b:66:d2:64:f1:8d:9a:5a:51:39:50:70:b9:eb:0f:b7:a2:
31:4a:ad:1c:2c:11:33:4b:23:1f:c3:3f:df:de:b5:fa:2e:9b:
7a:e5:46:96:57:95:40:01:8d:82:fd:23:36:ee:41:46:9e:db:
ff:9c:e9:e0:5f:fa:03:43:6d:16:81:ca:ea:18:2a:50:72:0b:
0a:5d:b4:20:09:db:dd:4e:a4:cf:40:89:64:c5:88:92:7f:79:
41:d1:b3:ef:76:58:8c:f9:5a:3e:5d:30:de:80:33:5d:80:8f:
dd:ff:53:73:19:14:ad:19:33:fb:2d:78:7c:6a:c9:be:49:1c:
f8:3b:1e:1f:56:2a:34:11:a9:53:73:d7:0f:e6:62:62:e0:43:
e2:20:a3:45:1b:87:82:df:ca:7f:41:6d:6a:64:b0:c3:94:d3:
9c:a0:ca:00:5f:e2:dc:43:3d:e6:87:17:fe:f8:4e:71:bb:25:
e8:bd:ba:6f:11:3d:e6:5e:b2:12:e9:cd:46:30:0f:e4:10:da:
bb:40:63:97:48:4d:da:41:fe:df:9f:d3:fe:a9:29:f6:fd:19:
5c:b5:ea:44:a7:a0:6e:66:3f:53:c7:f8:c2:3e:a6:9b:aa:72:
16:91:64:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:01:22 2025 by rpki-client