Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
File: 3AveFGeJXG86Rxl-rFjKE65Lt40.mft (raw, json)
Hash identifier: w/G+/VALXPq7D/FQ4o7mDOeIOIQ6IlnDxxGzfLuDFvc=
Subject key identifier: 23:DD:6A:A6:47:AC:9D:DE:23:06:85:93:7F:8E:A0:C5:D2:C4:55:CF
Authority key identifier: DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
Certificate issuer: /CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Certificate serial: 0194BC050B6E40DA6BAAE4ECC2A0CE0F6071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
Manifest number: 02B3
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: 3AveFGeJXG86Rxl-rFjKE65Lt40.crl (hash: tGVrMn0q1Zt3IJsu0KTDUSj9AOnpMx69oc8NykydAE0=)
2: EZxzjJ6XhYd6ltYTmizd41s0hPw.roa (hash: JYFppnIvAuxE4lEcobv5nYUUPDwGguXkpkPpHyixP6g=)
3: NGkgR_rl3fLugEg3BgzB-iR4GzY.roa (hash: /ZmEtv61Y7p4XUZGiWjRkOyM1ttDKeEvzWRAeWuz5J4=)
4: dnZtsNrDOgg0ilTRrsmn2gSPTLg.roa (hash: c91iCn6NY6pPN3ezsVCeBFuKB5mmWplNz9ITqfibTOs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0b:6e:40:da:6b:aa:e4:ec:c2:a0:ce:0f:60:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=23dd6aa647ac9dde230685937f8ea0c5d2c455cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3a:85:26:9c:3c:be:25:d1:f7:c8:91:76:65:
c7:7b:be:45:f4:f7:3d:8d:b2:9f:61:d6:20:be:ef:
db:7f:75:6c:74:ce:3c:ba:1c:c7:03:a3:72:b5:71:
6f:3a:da:3e:29:cf:f1:c9:1c:a7:78:5b:be:3d:20:
a9:f2:bf:44:5f:dc:cf:b9:3f:ce:50:d1:6b:1a:ee:
98:4a:d2:8c:68:87:f0:f4:8d:d0:11:7c:b5:3b:67:
34:2f:63:0a:90:bd:34:63:c2:6c:bf:e5:f0:38:75:
de:56:a0:d9:90:70:0d:f6:da:fd:d0:8b:23:0b:bc:
66:18:fa:89:16:bc:dd:ee:1a:6e:21:f7:fd:d5:10:
0a:fa:fd:f0:0f:f4:43:01:6e:7a:73:88:fb:ae:5a:
b5:d9:da:c5:e4:8c:0f:7d:93:36:83:66:c6:3f:5a:
f2:58:02:e5:99:f4:3b:bf:c7:3c:88:49:9d:26:37:
a1:f7:25:6b:92:bf:b1:2e:a1:8a:af:80:70:e5:ae:
6d:95:27:33:e2:5f:88:8b:cb:b9:dc:f7:2c:05:82:
6c:64:e9:ab:f9:8d:17:b8:9f:24:e7:eb:65:94:b3:
78:7d:68:f1:d8:29:0a:0b:73:47:eb:6f:63:cd:80:
34:8d:ab:ad:74:c2:ec:5d:94:a1:82:82:71:bf:37:
25:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DD:6A:A6:47:AC:9D:DE:23:06:85:93:7F:8E:A0:C5:D2:C4:55:CF
X509v3 Authority Key Identifier:
keyid:DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:70:1e:e8:3e:a7:30:0e:7c:98:22:6f:a1:56:23:51:f7:f0:
27:9d:b4:f7:e0:4b:e3:67:50:34:d7:7b:4f:99:e1:94:c2:b2:
87:1e:83:5d:59:24:7c:8f:e5:32:fb:8b:59:65:0b:7b:21:90:
0e:b8:82:49:41:49:2f:85:3d:96:56:6d:ca:65:ec:f0:a7:7b:
24:20:22:fd:2c:5c:00:19:57:b5:ee:0a:65:82:00:b7:75:59:
dc:be:f8:4f:51:f3:6d:d0:3f:eb:42:ac:84:24:5a:20:25:a1:
32:6e:94:35:4e:ba:ea:62:36:04:9e:04:9b:58:90:52:2e:ea:
4b:71:0f:07:7c:1a:93:0c:d1:94:86:24:01:55:ff:ff:8a:9e:
24:0b:ef:27:46:1e:46:10:09:f4:29:f7:a4:bc:58:8d:41:da:
02:26:9e:a3:80:d5:d5:2f:b5:ea:ca:bb:5b:07:7f:d5:9f:49:
c6:79:a8:e5:94:ac:16:57:e9:53:9c:d6:57:d4:99:1b:1c:e8:
71:1d:4e:eb:5f:09:39:d5:25:f1:92:16:a9:80:d9:3e:21:00:
19:7b:01:32:c1:5e:f4:e2:46:6b:60:d5:68:98:03:c0:ea:90:
1c:9e:db:36:fd:94:c7:de:9c:f5:94:b1:cb:c3:fc:50:b4:9d:
d3:ef:26:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:36 2025 by rpki-client