Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
File: 3MIAShrwMLqZ_PRR872I78U4Rqk.mft (raw, json)
Hash identifier: FR+j6l9ONbLE2uhSmAXVzu7bqCsqV3Vt6AK6K+eqf9g=
Subject key identifier: BD:CD:EB:D8:B6:EF:37:95:A3:DF:A5:E8:00:D3:EB:F7:2D:BF:09:E4
Authority key identifier: DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9
Certificate issuer: /CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9
Certificate serial: 0194BBCE89FC5DCB1F7B97DD3D42B9A649FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:02 +0000
Manifest this update: Fri 31 Jan 2025 10:01:02 +0000
Manifest next update: Sat 01 Feb 2025 10:01:02 +0000
Files and hashes: 1: 3MIAShrwMLqZ_PRR872I78U4Rqk.crl (hash: qbX5srWa9w+abCDv89T27E3RvCnNYkwABwcVZfweRE8=)
2: AL-L8asVgI-s4USXW1Jxulz_8Sg.roa (hash: UF0FyApaz9L8VccFK4e4NgnphNtboD57IyF8hP0doDc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:89:fc:5d:cb:1f:7b:97:dd:3d:42:b9:a6:49:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9
Validity
Not Before: Jan 31 10:01:02 2025 GMT
Not After : Feb 1 10:01:02 2025 GMT
Subject: CN=bdcdebd8b6ef3795a3dfa5e800d3ebf72dbf09e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fa:c5:ad:49:75:86:25:84:43:34:44:92:e5:
fe:3d:2f:aa:70:04:84:34:9b:3f:c7:d0:bb:0a:54:
3d:e1:72:66:b9:1c:1d:ba:90:35:49:fc:da:6f:42:
58:a5:01:00:22:97:20:a5:01:a2:39:81:c4:a3:e4:
77:0a:b5:8f:8a:eb:97:a0:11:fa:d0:1c:12:47:5d:
6a:f1:ad:ec:b5:15:85:a0:ca:b2:f1:96:74:ed:a8:
2c:55:27:66:45:ff:cd:7b:87:78:45:b7:56:dc:a6:
aa:60:3d:d8:34:60:c0:c3:c5:df:b7:c1:69:20:f6:
44:6d:97:a2:a4:42:a4:1e:a5:98:1b:86:8a:54:ff:
38:65:77:55:b5:f2:de:ca:fc:d3:8c:44:33:a2:5c:
b4:b4:95:e3:66:98:4d:3e:65:b1:da:e0:1d:b1:75:
05:8a:a2:1e:5b:95:cc:4d:de:e6:a5:02:03:75:5d:
78:44:f7:ea:d3:c0:a4:4b:48:72:d1:9f:26:3b:a5:
f9:db:52:88:0e:db:79:23:f7:a3:44:c9:db:93:b9:
d8:e4:91:1a:c7:0b:e6:54:11:7f:92:3e:a3:f1:55:
b8:ad:bf:b4:08:ca:80:db:e4:70:0c:c6:36:89:5b:
a4:13:42:e1:93:71:63:93:f9:0c:25:8a:06:1a:16:
5e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CD:EB:D8:B6:EF:37:95:A3:DF:A5:E8:00:D3:EB:F7:2D:BF:09:E4
X509v3 Authority Key Identifier:
keyid:DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ab:9e:93:3a:72:79:8e:e3:41:e1:40:22:1b:95:7a:7b:cd:
65:60:9f:fc:22:bb:86:ee:8c:6b:9c:f9:f8:47:05:c0:5e:93:
a6:15:21:58:de:cc:3e:7f:f6:53:52:65:84:2d:96:f2:b8:67:
ef:b3:c8:7d:2d:41:20:9e:4a:2a:82:26:b1:08:4c:67:0b:70:
e1:22:c3:20:6d:af:e8:be:c5:22:03:79:07:72:de:06:6e:93:
52:01:a1:d8:49:3d:7f:1a:1b:de:42:04:05:3d:b4:cd:ee:62:
1f:2f:9b:20:84:9f:76:6c:b5:b1:ae:97:14:0d:6f:e2:2b:9f:
f5:43:75:e4:a4:4e:82:c9:c2:2d:0c:69:dc:f5:cd:ac:c9:f0:
1d:a3:b3:8d:0e:93:01:07:94:98:2f:0b:cb:c6:ee:08:3b:62:
80:54:fe:58:29:2b:42:80:86:ba:1f:e3:b5:d2:35:c4:b3:1f:
08:15:e2:ab:41:90:fb:8b:eb:d5:9f:98:4f:74:03:10:1c:57:
ed:3c:82:21:f5:8d:43:59:c6:c6:7a:6e:05:3a:ac:da:af:7c:
55:cc:2d:26:b1:f6:ff:98:34:cc:2e:9b:7a:36:fe:8a:34:b3:
f9:1b:f1:18:9b:e5:90:8a:8c:d4:2a:42:a1:07:e0:61:fc:50:
38:36:92:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:40:11 2025 by rpki-client