Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
File: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft (raw, json)
Hash identifier: YsPFUFZm3WBZFRLD2eOPaU4t40nzOJosgeWqD1+tDqY=
Subject key identifier: 21:02:77:A9:0A:19:45:01:B8:FC:75:7C:25:52:D9:C8:32:24:7C:71
Authority key identifier: DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
Certificate issuer: /CN=dcfa86863c55865700634e1135e617e4079af8b9
Certificate serial: 0194BD17B6B4256B42693A7745842589BAEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
Manifest number: 0F85
Signing time: Fri 31 Jan 2025 16:00:35 +0000
Manifest this update: Fri 31 Jan 2025 16:00:35 +0000
Manifest next update: Sat 01 Feb 2025 16:00:35 +0000
Files and hashes: 1: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl (hash: xZ2WOutcmAfgybExPT3FEhxJMP3Mkp1AhtNMPMLIoSs=)
2: Rsq1KtzfZb2Gv4ObbEjxGcXkZwI.roa (hash: peUxHeNiz+fH8nbCOCYsRkuwwMY+SxJRD7icSc0BEwc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b6:b4:25:6b:42:69:3a:77:45:84:25:89:ba:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa86863c55865700634e1135e617e4079af8b9
Validity
Not Before: Jan 31 16:00:35 2025 GMT
Not After : Feb 1 16:00:35 2025 GMT
Subject: CN=210277a90a194501b8fc757c2552d9c832247c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cd:40:89:52:30:0c:2e:57:ce:36:cf:d7:57:
88:ba:53:d0:03:a2:9a:96:d7:97:17:5e:40:30:08:
ac:e6:96:9a:37:7c:5f:f0:86:3f:4d:86:15:04:13:
ad:a4:7b:4e:0d:4e:8b:32:6a:c5:f8:59:39:40:eb:
b0:67:58:73:65:c3:30:e9:2f:d0:87:bc:97:8f:75:
f3:83:d0:f6:f3:c1:15:49:e4:1e:16:56:03:a6:48:
0d:77:87:26:14:41:ca:ac:ec:be:9d:a6:21:bc:7c:
d6:7a:9e:64:fe:69:27:5e:07:a2:f8:77:42:01:dd:
7a:f2:06:ab:c4:45:5d:ec:26:18:2c:a3:21:b3:24:
18:e2:7e:93:02:10:40:46:1a:b4:e5:a1:3e:f3:2e:
75:0b:c9:d9:a5:f6:71:50:2f:2e:40:5d:1a:6d:d3:
62:a9:ad:24:c7:26:f0:2a:d5:a6:7d:3e:9b:75:5e:
f3:36:32:c2:89:89:c9:31:ea:ac:b1:bc:59:bb:89:
45:2f:50:06:33:90:3e:c4:de:0e:bc:5f:c5:e6:56:
f6:e9:88:a2:ad:93:8a:29:42:0e:53:f4:c2:07:0b:
c8:2b:00:2f:45:9a:33:a0:ff:39:6b:8d:b1:e4:a0:
f1:6c:e1:35:8b:51:67:8f:16:0b:d7:ab:76:98:bd:
f3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:02:77:A9:0A:19:45:01:B8:FC:75:7C:25:52:D9:C8:32:24:7C:71
X509v3 Authority Key Identifier:
keyid:DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a3:76:68:3e:26:1b:17:e9:ba:1d:ec:03:66:43:74:5a:79:
91:e8:0f:b9:6d:88:d7:41:c1:ae:98:76:8a:75:ca:fe:4f:92:
88:42:d6:3f:eb:41:c9:5d:e5:d6:c0:ad:f3:57:18:a2:42:c9:
ae:74:76:ac:bb:f1:7a:eb:29:5f:90:45:d1:dd:9a:b8:5a:08:
9c:a3:d8:b6:b8:b3:c6:b9:b5:36:1e:f2:85:33:45:71:49:d8:
1e:19:7c:07:0c:a2:ae:f0:08:4e:22:92:72:4e:c2:9b:91:36:
24:f1:79:38:01:53:18:c0:70:13:31:6e:db:9a:28:73:4f:58:
11:eb:ec:16:85:2b:44:af:53:8a:2e:09:71:04:1b:1d:b3:96:
3a:3b:67:6a:ea:2c:4d:06:15:90:da:40:e4:36:a1:e4:4c:95:
bb:92:3a:94:5f:97:fe:7c:1b:59:8a:73:39:91:bb:30:0e:3d:
79:06:7f:45:74:4e:49:dd:5d:62:8b:a6:c2:58:bc:59:de:b7:
d0:dd:4f:0c:dd:90:52:44:47:e0:8b:29:da:1e:42:5d:74:f5:
ed:ab:9a:4c:f0:7d:c8:0d:73:58:27:6d:4f:3b:88:74:c0:9a:
6a:2e:ee:fc:ff:7d:ba:c7:d0:a8:4e:18:04:ed:5f:1c:24:a2:
da:08:2b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:26 2025 by rpki-client