Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
File: 3L-wBIqNpVb9nT3xB3QC-EP11wM.mft (raw, json)
Hash identifier: Ei741g98zt68WPvc+hudVGIpyqY0Z2lrodIAQQ/Qlz0=
Subject key identifier: 61:6F:B1:64:C6:52:C8:E8:D2:17:47:7F:F1:28:79:C3:49:E1:BC:38
Authority key identifier: DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
Certificate issuer: /CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Certificate serial: 0194BC3BEFDBC27EAB78BAFFAB0C4CEF9093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: 3L-wBIqNpVb9nT3xB3QC-EP11wM.crl (hash: REXfjtdnEwwMnSq72a11oE6y2qE81wGfWMxxMV9OCbI=)
2: Do4PLeA5o1GoY13K0QrZV2b74eA.roa (hash: B+FCeD+X05tR69YheF7VQWedc1p5umVaXn20qWaAN1Q=)
3: hbNbIVCjEN8lItMWW7GZDYik4tU.roa (hash: /QjTSPpaK1t0LSYMylHsSi3d6TtpowMr+RmtBrzOYQo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ef:db:c2:7e:ab:78:ba:ff:ab:0c:4c:ef:90:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=616fb164c652c8e8d217477ff12879c349e1bc38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:64:f8:84:31:17:11:70:7d:8a:59:06:49:6c:
00:f9:d7:ae:16:16:fe:e9:d3:14:bb:d4:6f:e5:7b:
ec:e4:ef:c9:97:01:b4:28:c6:d9:73:a4:58:2f:78:
c6:22:68:d7:14:7a:43:f8:08:79:aa:b9:6f:64:c8:
e1:13:9b:97:d0:81:ad:e1:f9:c7:bf:15:8a:08:a6:
8a:1c:e8:36:9f:4c:68:a9:3a:46:20:02:06:11:56:
03:bb:8a:5c:f5:f3:61:65:cd:36:a0:eb:17:f0:a5:
73:1c:0b:94:ef:96:53:10:0a:be:3c:2a:d5:07:49:
52:68:ee:3d:09:3e:5e:22:3a:4a:4c:09:13:ab:dd:
c9:46:ea:1e:d4:ab:ea:7f:7d:98:28:4b:ec:85:aa:
7e:88:87:a8:e3:7c:24:b7:22:02:45:4a:7f:bb:98:
eb:de:c8:42:7a:06:30:aa:c9:1a:fb:9f:52:6c:d2:
36:49:aa:86:da:cd:42:77:c4:43:09:a6:cb:db:7e:
13:c4:61:55:95:3e:75:48:e2:19:b6:32:89:9c:99:
25:60:4c:ff:b3:bd:47:22:9a:0e:e3:77:fa:08:97:
a2:46:fb:e1:16:e4:5b:60:a0:03:ea:65:8e:46:34:
30:46:f7:3e:8c:a9:c7:e2:36:a1:bf:f4:02:09:50:
74:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6F:B1:64:C6:52:C8:E8:D2:17:47:7F:F1:28:79:C3:49:E1:BC:38
X509v3 Authority Key Identifier:
keyid:DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:84:14:fa:bf:0f:6d:62:0f:06:bb:5f:ca:ca:9a:d3:8d:e5:
1d:e6:da:82:83:dc:7c:5f:ad:52:de:73:1c:c6:97:5f:b0:97:
5c:ee:ec:1d:0a:7f:47:27:c9:b8:f5:d6:21:22:e7:43:0c:fa:
f1:e4:bb:8f:4b:d2:79:97:41:ec:2d:99:d1:28:4c:d4:77:68:
44:72:e5:f2:2f:71:26:d6:33:3b:d1:e1:2a:2b:72:48:70:67:
53:f2:f4:05:8f:15:e3:2d:f4:17:68:94:75:75:d3:d4:8a:21:
70:8a:da:25:4e:94:91:fa:85:89:50:da:99:cb:d7:a2:2a:56:
ba:9f:68:e2:aa:48:6c:dc:85:bf:aa:4c:18:7d:8f:60:0b:35:
46:0c:9b:44:87:d5:9e:f1:a6:77:be:41:e3:8c:6e:2b:f2:af:
92:ac:a2:38:8b:5b:69:e6:b5:10:5d:00:31:88:46:4e:8d:cd:
e6:49:66:cf:2d:74:ff:d7:5b:7c:20:79:d0:c5:b1:2e:ba:31:
51:2a:cc:02:e8:29:5d:d2:0f:39:03:2f:67:37:0a:d6:8d:e0:
05:a5:8a:ab:94:aa:7e:e1:44:4c:e9:3c:1f:d1:77:ab:7e:17:
87:9d:3d:9f:40:87:c1:ca:8d:53:e3:ac:db:c9:c2:2b:7a:4a:
d7:59:87:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:23 2025 by rpki-client