Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
File: 3XGhKciwiZWUIZnqbRsigmU1DQs.mft (raw, json)
Hash identifier: XPRYDOPdgAO6aK6VtRBUYv507X+X9CcRcsYa6Ajikf0=
Subject key identifier: DF:65:15:D6:CC:31:E7:50:CC:99:B1:98:3C:71:9E:5B:F8:9C:29:6A
Authority key identifier: DD:71:A1:29:C8:B0:89:95:94:21:99:EA:6D:1B:22:82:65:35:0D:0B
Certificate issuer: /CN=dd71a129c8b08995942199ea6d1b228265350d0b
Certificate serial: 0194BC72AC17CC5B25568358390C44CE5DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: 3XGhKciwiZWUIZnqbRsigmU1DQs.crl (hash: qPMhNqemdAff0CyGpZZ+3Jw5zVgLN8St/2QRrz/rTKs=)
2: OwG4_h94ip7CzANECDf39dfwNGk.roa (hash: XIXqYD1CZdADAiBPHja+pimegzmDxikS2efUTrBV4t8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ac:17:cc:5b:25:56:83:58:39:0c:44:ce:5d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd71a129c8b08995942199ea6d1b228265350d0b
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=df6515d6cc31e750cc99b1983c719e5bf89c296a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:76:54:2e:b1:50:0c:d5:03:0d:1f:47:44:a0:
39:04:52:62:83:3f:c8:c5:c1:37:ea:ab:74:bd:fd:
51:56:de:ea:2f:7c:48:e6:61:fe:40:cd:b3:9f:d0:
14:3a:67:b1:9d:0f:4a:2a:66:f3:b1:49:f7:e2:e6:
e3:23:48:be:26:34:3b:84:54:8a:52:38:38:fc:a5:
ca:12:57:0e:31:02:19:7f:46:ba:0a:f6:65:8a:18:
f6:24:74:c5:57:02:43:58:5c:57:2b:29:e0:20:e5:
7a:b2:26:18:aa:cb:49:49:59:5e:e5:41:cc:07:f2:
37:13:7f:1e:e9:f2:38:ee:34:f4:9b:2a:9f:dd:c4:
2b:75:ba:b0:6b:ef:7a:78:67:6d:ef:19:69:58:9c:
6b:5d:9b:b8:da:a9:1a:c9:a4:ef:a6:ab:a1:a8:9c:
bb:92:e6:06:47:e3:0f:41:35:63:af:cd:0e:0a:ae:
d0:fb:2b:10:f7:95:71:fe:9b:98:10:17:61:43:d0:
70:cf:23:a2:13:98:d1:4d:b0:bc:86:fe:7b:90:39:
82:2e:83:16:e3:c0:a0:9c:f0:89:16:da:36:13:33:
df:4b:56:b8:10:c7:d3:11:5e:9a:57:75:30:4f:a2:
26:ee:67:9d:76:98:21:e7:7a:0e:bd:22:5b:56:87:
0a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:65:15:D6:CC:31:E7:50:CC:99:B1:98:3C:71:9E:5B:F8:9C:29:6A
X509v3 Authority Key Identifier:
keyid:DD:71:A1:29:C8:B0:89:95:94:21:99:EA:6D:1B:22:82:65:35:0D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:bf:84:af:b1:16:95:69:a6:a0:a3:ec:46:30:67:37:98:87:
b7:28:d8:66:22:22:6d:23:0f:d8:88:c0:05:00:f5:25:71:2f:
b3:90:ff:09:6d:c6:b6:21:25:d8:31:53:a6:b7:8d:60:f7:f7:
cc:08:c7:14:42:a2:e7:4f:cd:83:1c:27:7d:31:5f:0a:a2:76:
ab:5a:3a:5c:ae:02:c4:20:17:c5:8c:6b:f7:1f:06:32:d1:69:
93:8b:65:c9:6b:8d:8c:e9:2c:04:ee:59:f6:f1:95:ae:94:59:
03:88:90:6c:9f:43:a8:69:3b:09:f9:09:76:28:d1:3b:9e:8a:
71:c7:00:19:0a:3b:ef:0d:6b:e3:2a:71:d2:ef:94:c9:2b:03:
f6:dd:d2:02:cf:c2:02:83:11:46:13:6d:1c:78:cf:7f:dd:28:
8c:b9:23:df:17:d4:06:1a:ec:5a:b3:48:c5:10:71:4b:85:ed:
c2:1c:98:7d:97:a3:ca:08:7a:ab:f4:ba:0d:a2:2b:24:41:f8:
a2:5e:76:af:63:20:40:3f:f9:01:02:28:c6:0b:29:b5:bb:13:
30:92:fb:5c:24:16:97:21:26:7b:31:d0:10:6a:99:e8:d3:78:
cf:57:c3:81:90:06:80:9f:dc:e8:27:0f:7b:a0:f0:6b:28:f3:
e5:64:c3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:59 2025 by rpki-client