Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
File: 3NJG4YMFZ6sRUjHbd18oedma8KA.mft (raw, json)
Hash identifier: oonkwiAChGsYzeUYzLgK3kUlA01f9GwEZHti2fyMSbQ=
Subject key identifier: F5:24:21:91:E8:CD:97:B3:BA:E5:E2:C2:F0:2B:D8:BC:40:DC:4A:E5
Authority key identifier: DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
Certificate issuer: /CN=dcd246e1830567ab115231db775f2879d99af0a0
Certificate serial: 0194BCAA1941A9655301979CDAD4CDB08781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
Manifest number: 02C3
Signing time: Fri 31 Jan 2025 14:00:51 +0000
Manifest this update: Fri 31 Jan 2025 14:00:51 +0000
Manifest next update: Sat 01 Feb 2025 14:00:51 +0000
Files and hashes: 1: 3NJG4YMFZ6sRUjHbd18oedma8KA.crl (hash: qxirdQYVudGDQ9h7lBLvhFtguqBMGBFVzC63vOcRrfA=)
2: pMwZ_dWs8ojtwFFRIemRw2PGl-4.roa (hash: N5kw38iMWCD98CNIZvqnGspiT0ia5Z9rWUHOZazCoDk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:19:41:a9:65:53:01:97:9c:da:d4:cd:b0:87:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcd246e1830567ab115231db775f2879d99af0a0
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : Feb 1 14:00:51 2025 GMT
Subject: CN=f5242191e8cd97b3bae5e2c2f02bd8bc40dc4ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b7:53:3c:ba:42:e5:93:9b:5c:72:00:c7:c7:
a5:43:8a:e3:8f:c2:4e:f8:bc:49:6a:da:d0:67:d2:
dc:ee:69:28:79:0f:be:0e:13:82:bf:63:cc:68:ce:
d9:36:88:8b:b0:b7:aa:25:b0:ce:f8:b8:b1:23:22:
42:8a:10:61:05:c0:23:82:17:3f:64:c1:a1:9b:e6:
8d:93:11:69:83:8f:40:90:77:f3:61:06:ae:d0:2a:
17:37:96:f9:46:43:84:dc:19:fa:27:e7:90:cb:47:
a4:14:d5:bf:14:25:ce:4b:94:ce:d3:ed:3b:62:cf:
ce:c3:4e:88:18:a0:3e:5c:93:62:09:ed:e0:3c:a3:
3e:77:94:b8:44:30:99:be:d6:4e:8e:b9:90:7d:86:
30:40:6e:50:0f:ca:e6:71:dd:e4:a0:32:7f:bc:f9:
2f:49:bc:9c:ca:2f:62:f5:80:97:80:5d:70:5c:8a:
24:e9:c6:20:10:50:e1:35:0c:32:f9:0e:9d:25:6d:
f9:02:f5:d9:d9:01:fb:b3:67:87:47:f7:0d:b6:53:
fb:a3:75:b9:d7:c3:9e:e9:94:7d:89:75:0b:e0:be:
81:db:db:ae:b6:42:f2:90:6a:b1:81:2a:af:d0:14:
cf:ea:ed:82:14:99:0b:41:15:67:a9:93:2f:89:4f:
4e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:24:21:91:E8:CD:97:B3:BA:E5:E2:C2:F0:2B:D8:BC:40:DC:4A:E5
X509v3 Authority Key Identifier:
keyid:DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:e4:97:21:bf:18:70:cc:e3:af:b0:44:fd:e1:bb:ab:8b:95:
6a:a4:c5:ff:e0:9b:10:c0:49:9f:35:a8:c0:97:22:b1:ce:d6:
34:9f:d0:6c:ac:9a:28:8b:a9:40:7b:41:e5:fc:d9:83:c5:e7:
d0:73:80:59:ad:2e:73:fc:0b:e0:fd:1a:8d:bb:0c:85:93:6f:
4d:ba:07:bd:14:02:ed:be:bd:28:56:3b:52:74:db:1f:7d:a4:
6d:21:a3:c6:6d:83:37:35:f0:b0:29:5c:21:bf:eb:f3:9d:8c:
f6:45:02:7f:6b:55:76:f1:6b:af:09:a2:2c:ad:9d:74:06:13:
a0:57:2a:d3:87:dc:a3:76:62:53:74:0c:53:c3:5a:9a:93:6f:
e7:52:c3:8d:33:b4:47:5a:d7:d8:0e:92:56:04:2a:4a:e2:d8:
dc:26:58:2d:9a:c0:cf:be:74:f8:2b:d7:1b:8b:08:70:a9:dd:
41:fe:06:95:9f:87:73:4c:ca:61:7b:ef:45:20:eb:de:b3:c7:
2f:33:bf:37:3e:48:55:63:9d:34:bb:9a:d8:51:af:f3:ce:48:
ea:3e:85:c9:be:69:30:14:30:90:3a:53:1c:09:07:85:6a:6c:
aa:df:15:86:ef:ca:51:b8:62:33:9b:75:c2:80:85:34:a7:e3:
56:c8:e8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:53 2025 by rpki-client