Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
File: 3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft (raw, json)
Hash identifier: VittJ1jWkdT8wXYFcKzopM0NT6E8TkJAWBHE+S0Oa3w=
Subject key identifier: 04:38:12:C4:D1:58:11:29:16:AE:29:29:18:F4:87:16:75:25:18:27
Authority key identifier: DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E
Certificate issuer: /CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e
Certificate serial: 0194BD8526ABE20F951163FEA4BDB2D4A3BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:07 +0000
Manifest this update: Fri 31 Jan 2025 18:00:07 +0000
Manifest next update: Sat 01 Feb 2025 18:00:07 +0000
Files and hashes: 1: 3R3CMh1y4wsFDSZM0M3C1xZygbQ.roa (hash: XMT6KzECLufc9ZTbE5ZuXejsU3/rr0tksv09pEK0Cjw=)
2: 3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl (hash: 4vEk48IJssWepv4IZZ2r/geZ5DqSjst0jwn45QrqQbY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:26:ab:e2:0f:95:11:63:fe:a4:bd:b2:d4:a3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e
Validity
Not Before: Jan 31 18:00:07 2025 GMT
Not After : Feb 1 18:00:07 2025 GMT
Subject: CN=043812c4d158112916ae292918f4871675251827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cb:0c:78:a3:da:9b:dc:a9:33:d5:56:83:bb:
d8:39:88:35:aa:94:11:8a:6c:5c:ae:ec:77:14:a3:
15:97:ef:f9:a7:b6:4c:26:70:39:43:d4:b3:f0:1c:
03:22:db:bf:b9:ab:23:78:39:f1:3f:aa:49:f6:ad:
f2:d6:4b:ca:f4:f6:75:8b:2c:db:ef:c9:17:f6:ed:
11:6d:ec:d5:e1:ab:a5:af:cf:dc:f7:61:aa:f7:40:
bb:c3:dc:34:5d:29:a6:2a:59:21:26:7a:58:6f:d0:
c1:84:14:12:87:37:d0:df:4f:95:8e:86:b9:39:a7:
9e:19:b2:e3:0a:62:d6:45:e4:c4:78:b2:9e:5f:89:
62:c5:be:e4:f4:b4:7a:3e:c1:94:d1:41:c8:06:28:
77:96:4e:4f:fc:47:ae:cc:c6:f8:de:71:6c:5c:62:
53:a5:04:8a:0a:82:80:cf:64:6d:90:6d:4a:4e:88:
ce:56:14:e6:0b:70:0b:f5:7c:f8:ed:ab:7c:94:36:
3c:6d:3e:59:f6:96:ba:d5:a7:1b:5c:4c:a4:d1:2d:
89:be:06:9b:05:31:6e:74:74:e6:ae:bb:2b:8a:4e:
9f:84:59:ca:be:3c:8a:df:4d:83:bc:98:98:86:59:
20:7c:7d:40:bd:c1:f3:07:7e:1b:90:83:30:23:36:
7b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:38:12:C4:D1:58:11:29:16:AE:29:29:18:F4:87:16:75:25:18:27
X509v3 Authority Key Identifier:
keyid:DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:06:00:2b:6e:7c:ce:07:07:0e:a5:c8:69:33:5b:24:94:56:
53:b7:03:7c:dd:c5:90:4e:79:fd:ae:9b:ef:ea:f4:bc:53:86:
c4:e9:af:a1:01:94:25:55:d7:89:37:82:ab:48:5c:c8:7e:38:
6a:7f:d6:1b:1d:27:a0:21:3a:cb:1b:d5:d4:8b:d0:3d:1e:6a:
17:71:bf:94:5f:a4:83:e9:e0:2f:9b:ce:ae:76:bc:e7:85:af:
c9:be:98:00:a9:3b:37:47:f2:83:15:4a:7c:17:28:95:47:f7:
88:fe:3f:15:41:1e:5b:15:85:39:4c:63:9e:c9:3b:77:07:62:
26:63:17:03:79:79:60:c1:de:22:d1:b4:f7:93:ca:1c:a8:a3:
06:38:6a:4b:0f:17:7e:39:b1:14:37:3b:c5:d8:40:ce:8f:49:
e4:59:18:61:0d:72:10:40:bb:64:e7:ac:16:17:8c:c8:65:de:
7b:02:04:a2:67:dc:ea:9d:6e:80:1b:dd:b5:63:8d:aa:fd:2e:
04:03:52:49:d7:d5:72:1e:e5:e5:07:7f:19:4a:3a:7b:f4:4e:
7b:6c:93:ab:98:50:72:83:4e:03:20:52:06:af:b0:17:f3:79:
a0:97:be:c9:0b:e3:98:b6:79:dc:ac:45:59:30:f5:ef:0a:2a:
48:e2:c1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:34 2025 by rpki-client