Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
File: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft (raw, json)
Hash identifier: Q66Mk9L4QhslveFU4crh9/CMatoE52KBHunhN3mTLZw=
Subject key identifier: D2:1C:B1:8B:E6:A2:CD:56:BF:1C:17:AD:EC:11:28:1E:11:E5:CD:A1
Authority key identifier: DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
Certificate issuer: /CN=dec756af77dafebca10684d68556baacd7173617
Certificate serial: 0194BC050C27B75658BF72795B0754047550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
Manifest number: 0950
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl (hash: arD60OSs5sHX4P4R1zDah04zQBofQR4V2IXYxKikopE=)
2: GTryjErQ-QvKOHELwraRwqDQoQ4.roa (hash: GN3kBbzA5jk8ZVZGy0p/hEuJ6JzyB6iMj6OE8Sf6qCo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0c:27:b7:56:58:bf:72:79:5b:07:54:04:75:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec756af77dafebca10684d68556baacd7173617
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=d21cb18be6a2cd56bf1c17adec11281e11e5cda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6c:da:b6:db:ff:f8:3f:6a:db:7a:1e:29:89:
10:a1:14:98:de:a4:8d:a5:7c:d1:7e:50:70:ae:73:
68:ea:d6:63:6a:d1:88:bb:a9:09:38:8a:51:99:51:
1e:a5:97:3e:7f:34:f3:76:15:d0:12:d5:67:e9:f8:
d2:68:df:07:f3:cc:a7:04:ba:0a:71:9a:b7:15:dc:
16:6a:e7:fb:4b:35:2c:6d:4b:7f:1b:47:21:11:41:
d7:83:65:ea:70:73:a6:80:bc:3a:4e:68:67:d0:ff:
48:d7:1e:c2:3a:46:f8:df:4c:94:54:2c:0e:28:8e:
f6:1b:75:fd:3e:70:10:b8:7c:78:39:bf:61:90:d8:
4a:4a:a3:11:78:4d:c4:f8:a0:a5:20:3a:47:7c:e4:
ca:bb:0e:e6:09:4e:c0:10:af:b2:fd:da:c6:4b:51:
50:44:a9:2d:0e:ee:ea:e4:b3:b1:c3:bd:3e:59:55:
1c:f8:97:71:66:7a:c4:52:a1:77:b8:02:57:b6:35:
85:53:ed:ed:bb:ed:51:18:fe:b8:fa:15:93:ae:7c:
16:8a:15:32:f6:c9:6f:46:40:ed:8e:e3:92:23:97:
19:b0:88:bb:5a:04:f7:7b:72:cb:83:3e:5e:f0:55:
df:17:a9:37:10:64:38:73:b0:98:66:be:0a:f5:71:
6f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1C:B1:8B:E6:A2:CD:56:BF:1C:17:AD:EC:11:28:1E:11:E5:CD:A1
X509v3 Authority Key Identifier:
keyid:DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:65:fa:13:1e:33:aa:19:5d:94:21:99:85:4b:3d:2c:08:65:
b1:49:35:31:a6:5c:0c:54:60:c4:04:82:19:69:52:d5:bd:a8:
99:3d:a2:4d:67:4f:fc:94:9b:0d:8c:fe:fb:6d:44:c6:fe:e6:
f5:0a:2c:fc:89:9c:63:5a:fc:8d:43:5a:0b:62:f8:d2:c8:b5:
22:4d:42:91:8c:69:ea:0e:62:02:73:2c:b3:8b:34:75:ba:2a:
d6:40:e5:bb:0c:86:2a:44:a6:a2:bb:75:22:26:e1:b2:da:8f:
c4:55:fe:0e:d0:9b:9f:81:1c:69:ee:02:ee:c7:01:b5:db:98:
36:4a:29:2e:3e:3b:dd:e9:3d:2e:91:32:58:55:e9:f8:36:10:
3b:ee:4e:e1:d4:fd:60:65:9f:9d:2f:83:ff:68:a0:25:ae:20:
a1:37:7a:cf:6b:fd:7d:56:16:56:73:b7:09:a4:57:e3:80:3f:
90:a1:fd:14:f5:86:3d:00:b7:08:3f:e3:c2:9e:b3:69:24:3d:
47:30:d0:35:21:7f:91:c1:31:6b:f2:92:4a:86:1b:b1:84:9c:
3c:1e:94:0d:28:a0:f4:f6:44:2e:11:c0:18:bd:be:35:c1:74:
6b:3c:25:aa:a7:dd:99:08:be:33:04:77:1f:d6:24:84:11:a1:
7a:4b:1e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:41 2025 by rpki-client