Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
File: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft (raw, json)
Hash identifier: I9SRzr20X6LSsLVVJ2tvlRPZHQ+4/QO0IZ6jeSQxRSY=
Subject key identifier: 1B:2F:36:83:74:6A:B9:EF:BD:E6:D6:FB:41:43:9F:C4:BF:A1:ED:4C
Authority key identifier: AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
Certificate issuer: /CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Certificate serial: 0194BBCE1D7B2A4CA088F317A968DC9608B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
Manifest number: 03C4
Signing time: Fri 31 Jan 2025 10:00:34 +0000
Manifest this update: Fri 31 Jan 2025 10:00:34 +0000
Manifest next update: Sat 01 Feb 2025 10:00:34 +0000
Files and hashes: 1: 5Glc2B08f5NNNCUv9fqw3ZiV604.roa (hash: qKV0O/uQL4URhMfYX9S0ZOufXlqcIe3xRJXIrY3RJwE=)
2: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl (hash: qyZ0TT0ue1qcHKDeiEU9KzMWghc/ADA5CfiDOC2I30E=)
3: wzyOntPyHe2_vob8ftvNa_NHz8Q.roa (hash: jsopFRalC2C1iJbieVLkelaTdE/c46JWYuJBBa2M4iA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1d:7b:2a:4c:a0:88:f3:17:a9:68:dc:96:08:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Validity
Not Before: Jan 31 10:00:34 2025 GMT
Not After : Feb 1 10:00:34 2025 GMT
Subject: CN=1b2f3683746ab9efbde6d6fb41439fc4bfa1ed4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fc:bc:af:2e:6f:c6:a8:bf:42:d9:06:ad:b8:
1c:c1:7e:99:23:81:19:e2:da:8a:57:9e:1b:d3:cf:
ff:22:c6:2f:c8:09:4d:89:58:ea:d7:48:3b:ed:86:
08:bc:16:16:a7:ac:39:32:a0:3d:f5:34:33:24:f7:
28:88:9f:90:d3:99:63:71:fe:f7:ff:07:48:28:53:
e1:66:3c:fe:ee:36:04:67:93:69:4c:cb:34:99:54:
3d:36:de:c8:39:86:e6:59:97:92:bd:80:49:05:26:
cf:16:81:01:ee:1a:26:12:4b:5f:62:1c:13:c7:87:
42:e5:77:5b:b1:5e:11:24:ff:da:28:46:09:84:78:
f3:c8:1f:0b:13:d0:fa:af:9e:03:77:41:f2:13:95:
48:55:30:06:25:c3:0e:ab:77:82:01:72:a9:8d:0c:
95:b3:c9:b6:d8:80:6c:9c:f9:12:73:e6:86:f4:f8:
8b:01:dc:f0:f6:8e:57:e8:12:c4:00:80:5b:f1:cf:
e3:d5:26:31:57:d5:63:00:99:eb:d1:d7:68:6a:f3:
7d:a4:22:be:66:b6:8d:33:48:65:9b:d2:09:2f:80:
58:8a:ff:53:fb:b8:40:51:d3:3e:d7:d0:4f:f1:fd:
4d:79:e9:fa:78:2b:35:8a:4e:3b:51:ae:16:f2:2d:
6e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2F:36:83:74:6A:B9:EF:BD:E6:D6:FB:41:43:9F:C4:BF:A1:ED:4C
X509v3 Authority Key Identifier:
keyid:AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:9e:ab:ba:eb:62:86:76:bb:d5:f7:88:c5:50:40:07:30:a3:
01:ac:26:15:49:14:4b:74:09:f5:9b:50:82:45:db:3f:c7:23:
ee:36:0b:ff:60:85:56:66:10:7a:6e:be:74:0e:06:1f:0f:6a:
c0:05:7f:ad:e1:2c:5c:09:93:a2:e1:51:70:36:76:df:e7:b0:
0a:a6:cd:b2:b5:76:60:72:f2:68:ec:07:71:22:47:34:f5:db:
91:e3:2c:61:d8:18:74:ad:14:97:15:6e:28:26:69:ad:27:c6:
a3:af:41:42:a4:e1:f5:78:70:bd:aa:73:dc:99:c4:6d:d5:78:
0d:cf:e5:4c:47:60:99:92:43:5a:0f:fa:51:b7:77:4e:6e:04:
41:f3:fd:83:23:4b:85:a5:42:c1:54:92:95:1f:e8:12:12:f4:
bf:72:63:bf:65:ea:97:6d:71:e4:f4:45:2a:0c:87:1b:41:60:
7a:13:6b:2e:45:6b:7b:e5:bd:78:20:30:7e:14:a2:64:33:52:
2d:d9:bc:88:4d:a3:8c:d3:71:27:b8:91:5f:cc:83:45:ca:77:
1a:09:2e:d4:2c:4e:93:d2:cd:e6:e4:0c:a4:d5:28:0d:e6:dc:
eb:32:3a:19:48:45:e9:55:d0:87:3a:2c:41:16:b8:a2:33:fb:
ec:a6:7e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:34:08 2025 by rpki-client