Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
File: 3KLzDk5paSsbT-zrrpH9VgS97JM.mft (raw, json)
Hash identifier: EOMuxr4/pbvdr93T6YzSbEv4ufzjXde48tv+GfW+JCA=
Subject key identifier: FC:66:47:8D:63:91:88:27:F6:E1:6E:60:69:19:98:49:F6:0C:8A:36
Authority key identifier: DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93
Certificate issuer: /CN=dca2f30e4e69692b1b4fecebae91fd5604bdec93
Certificate serial: 0194BBCEDE8848C5569BEACDFF35C17B96D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
Manifest number: 03E3
Signing time: Fri 31 Jan 2025 10:01:24 +0000
Manifest this update: Fri 31 Jan 2025 10:01:24 +0000
Manifest next update: Sat 01 Feb 2025 10:01:24 +0000
Files and hashes: 1: 3KLzDk5paSsbT-zrrpH9VgS97JM.crl (hash: kRGL/+q+yEK3yb0KpqOIJkCmfsW0fMTCDGxZdtqN8Ks=)
2: AJoKV4qloK-gv346yQRe9jE_1Lc.roa (hash: cy9XY0oo3u/4Yi8UZQJSoFS5/DHP0ILoCjdTHcKoQDk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:de:88:48:c5:56:9b:ea:cd:ff:35:c1:7b:96:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca2f30e4e69692b1b4fecebae91fd5604bdec93
Validity
Not Before: Jan 31 10:01:24 2025 GMT
Not After : Feb 1 10:01:24 2025 GMT
Subject: CN=fc66478d63918827f6e16e6069199849f60c8a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:29:d3:25:2c:a7:50:31:47:3a:56:82:4f:3e:
f2:bd:8e:d9:11:7f:35:01:c4:f1:22:7b:11:44:99:
73:28:71:4c:7d:96:54:ef:4b:a9:9e:88:34:dc:f7:
95:79:f3:69:a8:e4:3b:c0:15:f1:43:80:b5:90:79:
e7:49:9e:eb:b1:26:99:02:62:70:65:59:9e:ca:58:
e4:38:67:4b:88:74:aa:48:7b:b4:ba:51:b8:41:2f:
7b:ce:36:80:74:8b:2e:8b:d3:9b:44:3a:d7:5c:c7:
4e:bc:04:fa:0f:17:9d:70:67:ce:a7:43:f3:bc:0d:
16:50:af:97:67:40:ed:a8:fc:48:1f:27:5a:84:ea:
cc:0f:af:94:7f:d0:a1:3e:da:04:ac:7a:e9:1a:42:
50:56:0b:28:de:e1:c5:ec:38:d7:a7:03:e6:52:c9:
7a:2a:50:ba:38:cd:a2:39:f3:df:8e:65:fd:f5:21:
11:7a:19:a7:66:16:c3:60:09:0d:96:73:2b:c7:5b:
fe:8b:e2:88:f7:39:58:2e:f9:1b:44:44:77:bc:c7:
32:1f:55:37:e9:e8:89:4b:b5:11:3d:37:15:03:e2:
29:5e:1a:42:78:b0:79:1e:c7:34:75:9e:9d:f8:89:
f7:5d:27:16:cd:6c:c6:a8:bc:a1:f8:eb:c4:9f:bd:
9c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:66:47:8D:63:91:88:27:F6:E1:6E:60:69:19:98:49:F6:0C:8A:36
X509v3 Authority Key Identifier:
keyid:DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:31:38:f7:27:cf:27:12:bc:53:a7:c2:13:ce:a3:23:94:66:
0e:9c:41:b7:8d:4f:ff:f9:29:39:07:92:88:e0:98:b8:20:b2:
a8:70:84:2e:00:22:1a:59:92:44:5f:7b:e8:d6:1d:2c:f5:4e:
4f:09:de:b9:e3:3f:6b:15:44:7e:30:70:43:e1:0d:22:83:bf:
cb:6c:b9:bd:bb:66:e2:3a:0c:11:78:a2:ab:64:c1:f6:b1:a3:
db:98:53:c9:81:ee:3b:d9:69:63:da:10:89:1d:0c:06:b2:e1:
62:28:50:29:a8:02:2e:14:df:5b:a0:34:b4:c4:89:4a:a2:47:
63:a3:7d:a0:d0:45:b6:4b:df:df:9a:3f:14:b4:da:60:be:01:
26:33:2d:ae:c8:6f:b3:31:56:cd:49:15:12:e3:00:0d:95:f2:
f6:70:4a:a7:53:e7:c1:1e:3c:ac:ce:13:a3:45:87:8a:c5:1d:
92:b3:d9:72:bf:92:f2:72:88:fe:4b:38:16:81:01:1a:a1:0a:
9f:bd:a3:5f:5b:a8:6a:35:dd:aa:04:ae:0d:93:db:b6:b3:91:
a8:0b:e2:8d:b0:cf:44:97:49:d6:83:77:8c:10:db:bb:c9:57:
02:2f:63:dc:16:b8:fe:c1:16:24:f5:58:e1:2c:de:53:b0:bf:
4d:dd:96:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:47 2025 by rpki-client