Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
File: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft (raw, json)
Hash identifier: QM+zhiR51exWWN9Vas4AmjfW32wxhYTUCa8Ss37xjX4=
Subject key identifier: 9E:85:12:86:0C:06:C1:AF:DF:A2:C5:79:18:AD:C4:82:E4:91:3F:30
Authority key identifier: DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
Certificate issuer: /CN=dc327af32a98492757b200ea040db24ec3136592
Certificate serial: 0194BC04B3625D81C8FEA9F70532DCF5E25E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
Manifest number: 0206
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl (hash: COZpNmnQyU3EobzuSLPsqiAxRXwh69BCiqbfC7dyOl8=)
2: 8W-Z7iZTKA-3rkNjiAd5VURXMsw.roa (hash: 2BY/rA9giuFltjXSROUw0wjIihHos+N8ZqL5OdXbUVw=)
3: SiGDnp8oSt95ArckPVGAAWtJUNs.roa (hash: j9ZTEJfSb12eUtJGUY9GVfUETUmyTkhHBnRZ+wXplM8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b3:62:5d:81:c8:fe:a9:f7:05:32:dc:f5:e2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc327af32a98492757b200ea040db24ec3136592
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=9e8512860c06c1afdfa2c57918adc482e4913f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:03:dd:74:1a:5d:27:1d:b0:37:2a:50:8c:
ed:25:d0:ec:eb:6b:fb:3e:3c:3a:cf:9f:ef:48:51:
f0:a6:90:3e:d9:ae:6b:96:82:80:99:05:97:db:a4:
79:bd:24:e3:ee:76:a8:c1:db:7e:e1:17:cd:06:58:
97:80:50:1a:e7:01:18:1c:80:8b:e4:a1:83:57:45:
f6:92:bd:0a:6a:0f:28:94:3f:19:c0:2e:a6:fa:ac:
84:0f:17:e9:93:fe:6e:3f:27:8a:f9:87:82:97:e9:
be:ab:01:ad:7e:2d:30:fe:91:c5:1b:05:6b:58:94:
f2:ce:75:64:fc:4e:f6:27:c4:bf:b9:7e:ee:c8:c7:
27:e7:bc:6a:7e:a7:5e:cf:69:51:93:4d:cc:2a:92:
e2:d5:4d:bb:fd:dc:61:fe:f2:1c:b5:ca:d6:8b:b8:
0d:d9:a3:98:5e:a2:31:6a:75:77:a1:bb:c7:7a:0d:
28:e7:74:43:e0:28:0d:6a:7c:63:97:f1:0b:81:9a:
d4:78:32:72:3c:61:78:3e:68:be:88:21:85:4d:78:
3c:8c:9e:2c:f9:a5:6b:d3:52:24:31:82:ff:7e:5f:
03:20:3e:c8:8e:49:3d:c8:9c:7c:8b:ce:04:73:bd:
98:21:c6:5a:3e:df:12:3e:f2:c4:f6:34:23:00:2e:
24:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:85:12:86:0C:06:C1:AF:DF:A2:C5:79:18:AD:C4:82:E4:91:3F:30
X509v3 Authority Key Identifier:
keyid:DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:7e:37:ab:3d:ee:e2:3d:f1:97:af:28:34:6b:a5:71:b2:a1:
35:84:51:36:d6:48:35:41:ab:f3:8b:a3:97:0e:27:0c:fd:b9:
8c:a1:bb:72:10:67:86:4c:85:3a:05:e0:aa:97:07:4f:7e:af:
c8:6f:9c:37:2d:90:f5:a2:3b:66:1e:be:57:bd:eb:37:3f:25:
be:9c:3a:2d:15:08:6f:4c:61:20:0c:d5:0a:53:77:85:f8:cf:
f1:a2:39:b8:9a:5e:f2:b3:99:36:ba:eb:38:81:67:8b:92:c8:
9f:88:b5:24:34:53:ac:73:ce:82:af:80:89:8f:14:7d:b7:0d:
d3:51:8f:b3:47:c1:3a:4d:30:53:c9:7a:ab:39:8f:e1:b6:a0:
ae:a0:cd:cd:47:6b:d1:61:cc:57:2b:31:a9:57:e2:eb:60:b9:
75:ca:7d:1e:85:3f:8d:7b:e2:31:a0:ad:59:d0:9a:14:14:23:
e1:37:4b:3d:01:17:c6:a5:1c:cf:63:f8:dd:17:e1:e2:a9:49:
cc:e4:4f:94:60:f5:16:36:28:7e:8e:3e:ed:c3:39:31:74:28:
d4:ea:2d:7a:d4:49:eb:d6:46:de:d8:69:d5:3d:45:c8:0c:fb:
d9:4b:8b:97:9b:45:35:b2:86:f6:03:70:bb:7b:ae:42:29:1a:
00:bf:2e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:43:23 2025 by rpki-client