Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
File: 3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft (raw, json)
Hash identifier: ecBaSPbmWJsZT+oAwudkJza58eQte7MI/DNVXj0XBRU=
Subject key identifier: 6D:67:C8:C2:DD:BD:06:1E:FA:E7:7D:D1:E2:48:7C:B5:BB:D1:AB:5A
Authority key identifier: DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89
Certificate issuer: /CN=dead4c89f7aed8681d0202d22479d86e1462f889
Certificate serial: 0194BC72F37749BF810EBFF2B27CBC2A34E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 13:00:37 +0000
Manifest this update: Fri 31 Jan 2025 13:00:37 +0000
Manifest next update: Sat 01 Feb 2025 13:00:37 +0000
Files and hashes: 1: 3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl (hash: aixWR73wFHZbFaxBFlaIIeYhbr/qdeQLFf4Pu4EC+Jo=)
2: hs44kTsCSKJHF4M4m6a7yybk2BU.roa (hash: sJmLUUiHtQ2muOzZ9TuqLt9boiXoy5M0LFt8+5jZEwc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f3:77:49:bf:81:0e:bf:f2:b2:7c:bc:2a:34:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dead4c89f7aed8681d0202d22479d86e1462f889
Validity
Not Before: Jan 31 13:00:37 2025 GMT
Not After : Feb 1 13:00:37 2025 GMT
Subject: CN=6d67c8c2ddbd061efae77dd1e2487cb5bbd1ab5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f0:2d:c5:5e:1a:28:41:a9:26:12:1c:63:cb:
b3:ea:f0:4b:4c:92:a4:57:4e:db:8a:d8:5c:e5:2a:
19:e2:84:b0:e6:7d:8d:45:d2:10:d3:f4:50:e3:34:
35:a8:b0:f9:5d:d6:4c:95:22:91:44:71:ad:b1:b1:
dd:39:ef:b7:53:67:7c:b7:d5:c2:28:59:fc:5b:10:
9e:61:1a:8d:5f:fa:c2:84:cf:73:c7:44:98:7d:1e:
ed:43:16:63:97:4c:f4:e0:c7:8c:b5:86:6f:cb:7c:
62:aa:28:cf:89:8a:df:bf:ea:35:66:59:af:53:2f:
5f:da:2a:a0:4d:80:ee:8f:e2:6e:55:ba:7a:a4:b3:
8d:58:a5:d9:27:3b:a9:3c:c1:7b:d0:d2:3b:04:eb:
b4:f9:28:55:ac:f2:dd:54:c3:22:2c:bd:e0:ee:c0:
67:83:26:68:9c:f8:a8:ca:07:3c:50:91:50:ae:64:
0b:8d:68:48:97:ec:fd:67:a9:dd:1e:9b:4c:b0:be:
eb:61:d0:9e:a3:bd:69:25:65:57:68:53:29:20:2b:
9e:7b:96:b1:e4:40:b0:5d:99:33:98:57:61:ea:0c:
15:d8:bd:e7:2d:5f:bf:18:08:51:c7:24:39:1c:e7:
15:be:26:f3:05:63:c1:ab:77:f9:86:c6:fa:a5:3b:
1c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:67:C8:C2:DD:BD:06:1E:FA:E7:7D:D1:E2:48:7C:B5:BB:D1:AB:5A
X509v3 Authority Key Identifier:
keyid:DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:47:de:f5:8a:fa:92:6d:06:9f:da:f6:da:91:53:b9:16:3c:
92:b1:d1:90:38:ee:e0:9f:5a:e6:7f:fc:03:f4:53:15:7b:e0:
d1:23:31:a8:29:87:c8:42:f7:ac:c7:98:6c:22:11:b8:95:8a:
6a:b2:a0:29:8d:1a:95:2a:5d:b9:34:a8:19:61:e2:24:ca:1d:
46:36:21:60:af:0e:fe:2e:1b:2f:68:d5:d5:57:26:8d:87:f4:
5c:cc:23:e0:7b:64:40:6d:a2:0c:96:5f:90:ef:35:78:86:40:
f5:15:22:1e:2e:58:95:27:50:de:73:b4:d4:22:cf:d2:1d:87:
0d:9c:28:f6:38:45:18:79:8a:d0:d2:51:7d:fc:04:d6:0d:d1:
f3:08:37:fd:fc:4c:dc:a0:a6:4f:16:0c:ab:72:ed:80:54:49:
ee:5b:1a:95:4e:fd:fb:75:a9:1c:4d:7b:23:06:c0:f8:74:ba:
a1:00:b6:31:0d:75:96:be:32:72:eb:52:e8:b8:33:9b:13:31:
65:f6:55:b6:09:2e:42:8a:33:de:4f:a1:07:8f:4e:21:e7:3d:
6e:9c:bc:d8:c7:13:98:eb:9f:ab:79:eb:40:c7:e1:bc:01:c3:
35:7c:34:6d:fb:b2:08:5c:19:8f:8e:0f:ba:a8:a0:70:88:c1:
c9:1a:c8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:37 2025 by rpki-client