Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/3f3F4pPp59caluYcPb9oWF1PgwU.mft
File: 3f3F4pPp59caluYcPb9oWF1PgwU.mft (raw, json)
Hash identifier: NqmxuTKPfAWOXtFLhBEW00CHHJp+zo56xwHY4TkExNE=
Subject key identifier: 05:66:BA:EB:49:09:7F:20:58:B7:5D:B0:18:4C:8D:7B:2D:89:E3:92
Authority key identifier: DD:FD:C5:E2:93:E9:E7:D7:1A:96:E6:1C:3D:BF:68:58:5D:4F:83:05
Certificate issuer: /CN=ddfdc5e293e9e7d71a96e61c3dbf68585d4f8305
Certificate serial: 0194BBCDB942F09BD12C84F33A17F749F36A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3f3F4pPp59caluYcPb9oWF1PgwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/3f3F4pPp59caluYcPb9oWF1PgwU.mft
Manifest number: 03D3
Signing time: Fri 31 Jan 2025 10:00:09 +0000
Manifest this update: Fri 31 Jan 2025 10:00:09 +0000
Manifest next update: Sat 01 Feb 2025 10:00:09 +0000
Files and hashes: 1: 3f3F4pPp59caluYcPb9oWF1PgwU.crl (hash: WjhgFa+N6bpGK47rRpolFv3EW5THHtGw7bkSTRaSGao=)
2: m59Hw5TTd3iL4k-AJmszjnzqejs.roa (hash: MFVhj0ei6aWXoFmI3DBbtg6kilc6p8Atkjj8RGegi9o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b9:42:f0:9b:d1:2c:84:f3:3a:17:f7:49:f3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfdc5e293e9e7d71a96e61c3dbf68585d4f8305
Validity
Not Before: Jan 31 10:00:09 2025 GMT
Not After : Feb 1 10:00:09 2025 GMT
Subject: CN=0566baeb49097f2058b75db0184c8d7b2d89e392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:13:82:a1:9c:8a:19:fa:f2:2f:94:6c:ee:94:
f9:9d:4f:ba:0f:a7:83:68:16:9c:d7:13:be:30:37:
fe:45:b0:28:f1:a8:1d:45:5c:4f:7c:8f:18:ad:36:
98:91:c0:41:2f:5f:e3:1d:78:6e:13:72:55:5c:13:
dc:39:e8:03:3b:d8:24:34:40:ff:fa:fd:cb:ea:23:
09:ce:c3:d6:b7:73:c3:5f:4c:b7:b6:13:ca:10:2c:
71:d0:76:57:d1:75:2e:45:fd:9a:77:ce:b7:1b:d0:
ef:bc:5b:1a:e1:a0:df:ee:6c:60:b4:94:eb:76:6f:
18:af:54:94:dc:26:e1:22:0d:da:f3:e0:bc:2d:d6:
11:b3:b8:0f:5b:cd:16:c7:a4:b2:c9:7f:e8:bb:63:
bb:a1:9c:35:aa:95:1d:0e:94:43:f0:dc:7d:b9:70:
7e:0a:e2:68:66:84:48:16:31:80:29:e4:57:71:c1:
ab:4a:27:19:0e:b2:40:87:38:bc:f8:53:c8:b0:a1:
06:65:35:fd:6a:92:a2:90:c8:52:7a:6e:71:29:23:
e0:0c:21:2e:46:0f:c6:bd:f1:80:ba:43:fb:0e:7f:
31:20:7d:9f:11:92:60:02:f0:ae:58:fe:2c:b8:60:
55:38:8b:74:29:d6:ee:88:00:c5:42:6c:89:48:e7:
e3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:66:BA:EB:49:09:7F:20:58:B7:5D:B0:18:4C:8D:7B:2D:89:E3:92
X509v3 Authority Key Identifier:
keyid:DD:FD:C5:E2:93:E9:E7:D7:1A:96:E6:1C:3D:BF:68:58:5D:4F:83:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f3F4pPp59caluYcPb9oWF1PgwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/3f3F4pPp59caluYcPb9oWF1PgwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/3f3F4pPp59caluYcPb9oWF1PgwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:69:a9:5c:56:5d:3a:d2:0b:c3:ce:93:07:0e:6a:b0:99:28:
b2:92:b6:c6:54:8c:7b:0f:86:2c:44:b0:f2:bc:d1:b4:bd:0c:
68:14:f7:a2:fc:22:e6:11:f7:d2:bd:c6:12:5e:d1:5a:a3:91:
fd:95:63:2c:29:8e:3b:18:d2:24:f5:64:7f:e9:b6:5b:c8:d2:
20:15:aa:47:35:5c:a7:7d:e8:26:87:11:a0:35:92:2e:4a:2e:
90:86:57:a1:c9:2f:c7:a8:39:88:1f:2f:bf:64:32:01:73:22:
60:c2:6d:b3:c0:b9:62:a6:f1:8a:7d:6c:80:b1:f8:86:a1:a8:
33:a6:e4:2f:ec:3a:b0:d5:c2:ec:9a:6c:c0:56:8e:80:98:1d:
db:46:91:a3:4a:ff:fa:b9:be:36:cf:09:0f:b9:23:fe:23:b5:
f0:c0:6f:f4:23:a6:35:27:32:e2:48:0b:23:36:48:bb:da:b1:
21:c1:8d:1d:d7:fa:a9:ba:12:04:52:cf:da:ca:cb:df:aa:2a:
78:94:d7:1e:7b:f7:16:fc:48:b4:4d:12:04:3c:60:14:bb:d2:
76:2a:4e:6a:10:99:8f:a4:39:04:9c:60:2c:a1:4c:a8:db:3e:
b9:a8:32:f4:9b:6b:71:56:7e:c7:5c:0e:09:c8:9c:4c:5c:b7:
45:f9:4a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:32:46 2025 by rpki-client