Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
File: 3j02h_599Iw76DmKrXvSAQZUU4I.mft (raw, json)
Hash identifier: suryeFN+7eIHTS70Ygj1Pk1B59/kcBlO2oCaUOYzr5Y=
Subject key identifier: 93:A3:8C:47:34:9E:98:51:D4:B5:8F:41:0D:26:B5:EF:0E:59:5F:78
Authority key identifier: DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
Certificate issuer: /CN=de3d3687fe7df48c3be8398aad7bd20106545382
Certificate serial: 0194BC3BD4B34A7CB968B0F6C982E0F3BA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:25 +0000
Manifest this update: Fri 31 Jan 2025 12:00:25 +0000
Manifest next update: Sat 01 Feb 2025 12:00:25 +0000
Files and hashes: 1: 3j02h_599Iw76DmKrXvSAQZUU4I.crl (hash: xTPNL2yDX9tM3I0+PrQTkHhqVocNxy62pJ6zjmJwvRk=)
2: Pzz9-39B29Zan_AKRyiM2W7cTbI.roa (hash: 2gaPpnMFBn7PDm+0BqVVwSzuzPaAOOzR64kAX25LHLU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d4:b3:4a:7c:b9:68:b0:f6:c9:82:e0:f3:ba:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d3687fe7df48c3be8398aad7bd20106545382
Validity
Not Before: Jan 31 12:00:25 2025 GMT
Not After : Feb 1 12:00:25 2025 GMT
Subject: CN=93a38c47349e9851d4b58f410d26b5ef0e595f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:84:f2:a4:d2:c8:9f:39:f7:eb:c3:e2:33:
1a:02:bb:99:2c:c6:b7:ac:22:87:24:e5:fa:81:58:
6f:02:d5:7e:d6:42:c2:b5:9e:78:5f:ad:eb:37:06:
8f:e4:06:7c:6c:71:36:39:55:1d:95:88:3f:92:45:
c8:21:52:4a:75:50:a1:c1:d5:3d:50:b3:a1:5c:f0:
3c:0f:b2:59:ca:70:fc:38:30:7f:1f:5b:c8:d9:87:
26:36:37:e7:59:b0:7e:25:09:82:01:9b:23:91:96:
d4:46:e0:2c:7c:6e:93:6a:b9:56:8d:6b:aa:7a:56:
09:e0:d4:32:18:77:e5:f7:de:6e:cd:17:3f:f8:a9:
6e:e8:2e:fd:a5:50:14:47:07:22:03:d4:4b:15:ee:
f4:7e:72:55:61:27:fd:85:b4:37:7e:62:2f:d7:ce:
d0:b3:ac:1d:11:70:bd:a1:a9:08:fe:2b:ee:3a:fe:
43:12:b0:35:14:fb:0d:c0:8d:1b:ae:78:d9:e6:9a:
5f:db:90:75:cd:5a:58:41:a5:b5:82:bf:19:f4:4e:
d6:33:79:f6:0f:18:41:6e:11:27:85:ce:7b:c9:da:
bd:9e:29:37:25:ba:50:81:71:91:dd:4e:53:eb:f6:
b3:b5:a4:b0:e2:bd:b3:f3:2e:fe:1f:a8:08:68:21:
54:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A3:8C:47:34:9E:98:51:D4:B5:8F:41:0D:26:B5:EF:0E:59:5F:78
X509v3 Authority Key Identifier:
keyid:DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:5b:d4:47:27:00:b9:52:cc:e3:e0:b5:f7:df:52:92:ce:ca:
8b:ff:22:6d:bb:d9:c6:f6:83:42:b9:88:91:73:65:89:e6:0b:
83:47:43:c3:38:98:44:e1:aa:22:40:17:4a:3b:16:25:35:93:
53:62:0a:f8:8a:58:f1:19:05:22:d6:69:3e:e5:73:04:48:6e:
2d:e6:c8:b1:87:60:79:0c:66:81:25:0f:d6:c0:25:3d:d5:7e:
27:6d:2c:63:0f:71:14:18:01:cf:05:b4:b2:ea:f7:02:18:01:
1c:c6:c3:55:3c:c6:55:bc:9a:80:e7:25:16:13:b8:94:51:be:
6d:2f:88:cb:e7:73:f1:30:e2:2d:04:92:76:9f:09:90:3f:cb:
99:75:17:70:44:28:d7:1e:8b:3e:ae:ff:d3:06:ca:eb:f4:ad:
b6:bb:9d:fc:61:e3:00:87:22:b6:bb:f6:dd:98:2e:4c:85:9e:
ae:7a:a0:9b:03:90:e1:04:7b:8a:f9:dc:c7:02:3a:b0:ce:f5:
60:66:42:45:6a:8d:24:b4:cc:e2:59:0a:28:99:31:2c:bd:93:
4c:5f:1e:3d:5f:5e:6c:b5:5f:e5:6e:5c:65:7d:84:d0:c7:5f:
4c:de:a3:21:50:05:86:d1:99:6b:f3:48:86:93:3c:31:83:6f:
90:b6:f8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:51:56 2025 by rpki-client