Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
File: 3cwuYUgshl3CU8D6lD49os6X2gU.mft (raw, json)
Hash identifier: v9Yrd5yInkbTyXbF2NQk871xlz6CCJ3bl+6tMViaMNQ=
Subject key identifier: 8F:45:D1:22:8E:4E:5B:6B:3A:4E:A3:94:CB:0B:7B:ED:F0:81:21:53
Authority key identifier: DD:CC:2E:61:48:2C:86:5D:C2:53:C0:FA:94:3E:3D:A2:CE:97:DA:05
Certificate issuer: /CN=ddcc2e61482c865dc253c0fa943e3da2ce97da05
Certificate serial: 0194BD178EF1D1FF6EBBB996FBA9F6D5487D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
Manifest number: 03AF
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: 3cwuYUgshl3CU8D6lD49os6X2gU.crl (hash: 0XkZdl6VEyBgOjmqSQV4x+85g7EbN/K0Oeh7cpt86OY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8e:f1:d1:ff:6e:bb:b9:96:fb:a9:f6:d5:48:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddcc2e61482c865dc253c0fa943e3da2ce97da05
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=8f45d1228e4e5b6b3a4ea394cb0b7bedf0812153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:23:5e:af:fb:21:e6:ae:5e:c3:d8:d3:59:9f:
8f:3b:17:26:be:5a:58:50:2d:85:22:93:ee:5a:18:
c0:c9:06:38:ef:9c:50:ab:ea:67:23:31:59:80:bc:
7c:ec:5b:01:2c:d6:80:60:91:a5:4e:e1:1e:fb:69:
16:fc:79:8e:7b:16:c3:68:a2:18:b4:5d:03:d6:f1:
47:c6:0c:97:8f:83:e7:95:ac:4a:c8:aa:7a:41:4f:
79:13:17:d8:b4:96:6b:00:89:2f:98:a8:d0:1b:b8:
ac:51:98:40:b4:43:d0:5e:f8:be:a8:07:49:fb:1e:
5d:0c:5a:f2:f6:d8:ff:dc:a2:94:36:09:ca:e3:37:
3e:8a:cc:fa:3c:fe:16:3c:58:d1:78:53:3a:a7:84:
2c:62:96:7e:c0:b8:d6:63:49:9c:50:0c:42:62:11:
f9:7c:30:4d:1e:43:c4:0e:c9:56:5b:3d:00:ec:87:
90:0f:77:f0:4b:7f:c9:1c:49:2c:ed:2b:d0:0c:9f:
9f:2e:93:e2:ac:ad:50:4b:25:fb:d4:20:3e:34:c1:
79:f7:37:b2:b8:6c:20:03:a1:f1:9c:6e:3e:c1:ee:
85:52:4c:cb:00:02:d4:9a:a1:d3:f3:64:68:87:aa:
29:c6:9e:16:b1:e6:61:00:99:ce:25:2b:2b:26:e8:
83:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:45:D1:22:8E:4E:5B:6B:3A:4E:A3:94:CB:0B:7B:ED:F0:81:21:53
X509v3 Authority Key Identifier:
keyid:DD:CC:2E:61:48:2C:86:5D:C2:53:C0:FA:94:3E:3D:A2:CE:97:DA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b3:66:f4:dd:34:1a:12:dc:8b:f9:7e:1d:47:45:7b:f4:dd:
e6:83:ac:4f:ce:42:88:72:60:f1:74:5f:22:c9:b7:3f:c7:56:
3e:d9:61:88:20:18:d8:fe:76:39:5f:f7:56:3a:3e:6d:5f:9d:
fd:6c:79:ba:7c:92:05:8d:08:ba:53:86:6e:3e:51:5d:91:d3:
13:1e:47:46:b0:34:ec:71:76:af:df:6e:1d:fb:53:84:e3:3b:
a9:a6:91:3f:e0:2e:cd:b4:ba:87:05:6b:24:72:04:11:e5:61:
ee:eb:bc:bd:67:ff:38:91:cb:bc:1d:13:3b:2d:68:27:57:13:
a5:e9:67:aa:19:24:2f:7f:6f:1b:f1:95:f1:19:73:eb:20:fd:
f3:9f:be:31:57:27:c9:04:08:1f:46:f4:c4:7d:92:b2:01:3b:
47:0b:3c:51:a4:bc:3c:49:77:ec:48:34:c0:cd:b8:6b:0c:da:
1b:14:64:42:b9:ea:f4:36:37:63:80:fd:4a:bc:71:b8:e2:20:
7b:0a:84:52:a4:f5:a9:6e:c3:d1:6b:ba:93:36:ba:e2:3d:43:
c2:c6:50:11:82:ab:19:42:ce:ad:70:47:05:f1:a5:79:ab:85:
d8:2c:47:0a:80:a2:ba:22:67:49:f9:a2:a1:8c:82:91:ba:9d:
a6:be:ef:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:55 2025 by rpki-client