Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
File: 3BAvYTHOWnRutZgd1MHWtOF7Az8.mft (raw, json)
Hash identifier: kgdpuKjWH/nXqZY8jwq5nBoVukPkWizBnaG/lOgnEgU=
Subject key identifier: 52:7A:5D:D9:26:20:6A:3C:0A:35:4D:E7:4F:75:F4:FD:BB:DE:AF:F3
Authority key identifier: DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
Certificate issuer: /CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Certificate serial: 0194BBCED02A47DB706D2A7513C526160E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:20 +0000
Manifest this update: Fri 31 Jan 2025 10:01:20 +0000
Manifest next update: Sat 01 Feb 2025 10:01:20 +0000
Files and hashes: 1: 3BAvYTHOWnRutZgd1MHWtOF7Az8.crl (hash: ZqYm2rnRmu1H+WvLibnSdPSpJt9qyC0XZrxtZKmO1Pg=)
2: 4aMsThSQ8pto7QNh_kFB73sOXo8.roa (hash: HEBFusOcNgQfdZRF0U/he5dAzzkTri4ddTPSMK0+giU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d0:2a:47:db:70:6d:2a:75:13:c5:26:16:0e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Validity
Not Before: Jan 31 10:01:20 2025 GMT
Not After : Feb 1 10:01:20 2025 GMT
Subject: CN=527a5dd926206a3c0a354de74f75f4fdbbdeaff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:49:cd:d5:86:1a:6c:a2:3c:fe:1d:5c:62:72:
49:7c:80:3b:21:0d:1f:e6:59:19:83:19:a0:a3:21:
d0:bd:7d:da:2b:6a:a4:5d:88:64:74:a3:dc:1b:f1:
25:09:43:62:04:f2:11:f5:ba:5c:2b:6f:05:e1:3b:
3b:9f:8c:7e:68:90:45:f7:48:07:e9:06:e7:38:24:
1c:0c:df:57:7a:01:0d:5d:48:69:60:98:48:e9:2f:
5c:8d:99:96:17:d2:02:13:d3:08:f7:ac:6c:e0:bf:
18:5a:5a:4b:1f:88:70:1d:de:05:be:85:1d:3a:7f:
5f:4c:db:09:99:49:06:dc:bb:65:28:fb:30:83:da:
90:7d:db:b0:c7:4e:c7:1e:6d:27:34:b1:49:1e:3e:
e6:1e:e1:fb:3a:a2:ac:d3:2e:74:40:b1:10:b5:64:
ec:62:1d:a6:34:83:00:01:b4:1e:7f:94:f6:8b:a3:
8f:2a:b1:50:ab:7d:0b:b8:58:58:3f:2d:5e:cf:3c:
99:5a:d8:c9:29:9f:b3:aa:58:bd:db:8b:44:98:21:
2a:24:80:0b:53:fe:1a:f5:c1:0e:4a:56:b6:a2:ec:
70:c7:50:a3:1f:d6:d9:03:fd:52:8a:0d:1e:74:23:
17:99:e3:8c:37:54:a7:a9:8a:64:ac:be:97:81:ff:
13:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7A:5D:D9:26:20:6A:3C:0A:35:4D:E7:4F:75:F4:FD:BB:DE:AF:F3
X509v3 Authority Key Identifier:
keyid:DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:19:ed:98:ac:49:c7:ca:11:9f:d9:1d:ff:f2:57:78:9c:42:
c3:78:aa:72:d7:72:15:b7:b3:5d:b3:70:a5:e7:9a:e5:f0:c2:
e9:13:0e:2d:04:b7:e1:39:e5:67:31:35:23:b0:de:08:1a:d3:
f4:15:0b:42:01:6c:98:21:e9:3e:be:44:a6:ed:f8:e1:8f:c2:
58:46:63:da:46:e9:35:e6:f7:9e:6b:80:8e:c4:82:03:fc:fe:
dc:b7:22:d8:bf:f4:93:73:42:a5:3f:8b:05:f4:93:00:6f:52:
cf:ea:40:9d:3a:49:bb:88:e0:73:e2:c5:c0:db:75:e0:1d:9d:
a5:0d:70:09:20:16:84:8c:da:af:02:33:1e:87:cb:00:d5:0a:
18:bf:bd:f4:fc:64:5e:5b:0b:fe:7c:b7:86:f8:f6:10:b5:08:
11:cc:2f:9d:48:57:d0:29:10:cd:19:c7:38:df:87:ef:cd:1d:
d3:17:77:9c:f7:1b:43:82:0b:33:b3:08:0d:ae:01:d7:7c:4e:
df:af:5e:66:55:82:76:a7:98:ff:41:14:99:a5:56:56:b6:6a:
96:60:74:a0:7a:45:0b:76:5a:0c:c4:64:9a:0d:b9:3e:22:85:
3a:dd:29:75:84:08:f2:89:1d:63:3a:ab:96:b2:7e:23:d0:7f:
a0:78:74:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:15 2025 by rpki-client