Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
File: 3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft (raw, json)
Hash identifier: P71tFZ/lPHJvpSZa5KDLET+OpJEZ6V+/RzvJYzoFu6w=
Subject key identifier: 71:F4:01:2A:D8:73:98:78:D4:02:56:8D:1D:84:A4:C7:0A:9C:69:AB
Authority key identifier: DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
Certificate issuer: /CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Certificate serial: 0194BBCEA8B4F4F66F1BE817E7581E23E387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
Manifest number: 137F
Signing time: Fri 31 Jan 2025 10:01:10 +0000
Manifest this update: Fri 31 Jan 2025 10:01:10 +0000
Manifest next update: Sat 01 Feb 2025 10:01:10 +0000
Files and hashes: 1: 3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl (hash: 5Jw7avIbt4cRJilux5gb74Bk0dck/mabqkaH1zaKmYo=)
2: Ldu0EGXQ1MYyGdeyQmSIejuBpSw.roa (hash: zigF7LOpUtd1pS/tfQIWkRyp68k6cu70RaVSak3Qv0w=)
3: Y2gjl-Swzk92ryq3Z-Z6gp7HzLE.roa (hash: PMTJytzI+iwFKg204deNXF6qN+csOXo8Jl+I9xD+TfM=)
4: agxYPLnYdjCRAQfydoFhcZumCgg.roa (hash: NCy7EyPm/0lV8RywpILyDqtiIlQ48M258Jt/bjYI+0I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a8:b4:f4:f6:6f:1b:e8:17:e7:58:1e:23:e3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Validity
Not Before: Jan 31 10:01:10 2025 GMT
Not After : Feb 1 10:01:10 2025 GMT
Subject: CN=71f4012ad8739878d402568d1d84a4c70a9c69ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d4:9d:f3:42:f8:37:89:ee:51:91:b8:f4:73:
78:74:94:49:8f:d7:98:2f:54:3e:76:60:b9:cc:dd:
af:15:97:de:0b:3e:5e:63:be:96:43:2e:c2:bc:2e:
d4:c1:2d:d9:03:e5:75:14:97:eb:c1:0f:df:1b:71:
31:a9:64:f8:7b:7a:ff:5f:b6:a8:dc:0a:ec:42:af:
d2:2b:56:3b:7a:e1:7d:4c:be:4e:fd:c3:77:9c:25:
29:6e:df:04:69:67:bb:f9:21:6c:77:fa:20:74:43:
15:c3:52:36:8c:08:ac:80:33:7d:de:2e:94:6c:7e:
26:1c:c3:b4:ca:dd:6c:99:f9:6c:de:c7:2f:0c:06:
af:fd:cb:10:cd:f3:68:f9:cf:ac:f6:65:8b:1d:83:
67:29:64:2d:75:b2:dd:ba:60:0b:8b:82:f8:b6:2b:
e1:f3:74:f5:c4:71:67:0e:13:34:aa:3d:ce:95:5c:
2c:58:4e:49:59:f7:c0:c4:33:d5:36:80:b0:93:d3:
25:e1:10:46:70:53:aa:02:5b:bb:db:8a:b8:7f:c2:
57:fb:8d:1b:69:0c:82:02:cc:10:52:83:33:49:44:
05:d7:df:76:0f:d6:e9:03:d3:38:37:07:b7:58:22:
c9:c2:e0:cd:10:84:9f:8d:d8:de:f2:d8:97:0e:9c:
7f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F4:01:2A:D8:73:98:78:D4:02:56:8D:1D:84:A4:C7:0A:9C:69:AB
X509v3 Authority Key Identifier:
keyid:DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:cd:28:50:ef:c8:5d:cb:58:c5:ae:f8:18:5f:a5:ae:8e:62:
4f:31:04:61:91:72:be:12:9e:e3:24:1b:c8:ac:67:d4:63:b8:
56:f1:3b:c1:06:da:f9:0b:39:8d:3c:83:63:9d:44:31:22:59:
dc:f7:07:81:11:bb:8d:20:f8:45:1f:fc:19:b6:85:0b:30:00:
43:59:51:13:0e:41:a2:05:cf:c4:fb:59:09:4a:c2:69:b8:68:
f8:9a:82:31:eb:09:af:f1:b3:63:c4:86:84:7f:3e:9f:12:5c:
10:a6:77:0f:68:49:3f:0c:ab:b8:04:3b:8d:24:f1:19:8e:b5:
c2:39:85:7d:b4:4f:25:48:69:f2:77:b5:37:53:e7:26:08:e1:
5f:da:e0:31:07:34:86:d5:77:1c:82:74:64:5c:4d:c9:7a:42:
f8:39:fb:45:68:fe:4d:f9:61:23:dd:8d:81:2d:30:8e:ef:d2:
33:90:76:dd:68:20:9d:4f:1b:45:06:bb:29:da:ba:a0:96:59:
3f:c7:af:10:19:95:43:4c:e4:29:b4:59:ce:2d:e2:d6:eb:39:
97:20:2b:be:29:0b:dd:7a:de:77:bc:10:1f:26:97:a7:66:8f:
de:ef:3e:74:fc:01:9e:97:e3:66:41:90:be:03:7b:15:8f:de:
d6:8b:b3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:11:33 2025 by rpki-client