Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
File: 3F-syhTeCBdO9clskfHngl9C0Hs.mft (raw, json)
Hash identifier: E0Jzu9p9V0TDu/q3WSM/lNKmw1omX5qMiPnVnCWdvWY=
Subject key identifier: 88:3C:D9:D3:B0:3E:ED:9A:A7:57:1C:91:C3:11:DE:D5:B4:35:9C:CC
Authority key identifier: DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
Certificate issuer: /CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Certificate serial: 0194BC3C5B44881A2813B1572E221BC77A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
Manifest number: 111C
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: 3F-syhTeCBdO9clskfHngl9C0Hs.crl (hash: aQ+ENu53ExmJulpXVkvuLn3xVdBuoefeII+klqbgqcY=)
2: nyyFnipIH8x-WXxVr5E31pzM3bw.roa (hash: F30BRqsOUfGjHcN42efG2ZXnRs6ncB05ESHRlvFrG98=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5b:44:88:1a:28:13:b1:57:2e:22:1b:c7:7a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=883cd9d3b03eed9aa7571c91c311ded5b4359ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:71:dc:66:a1:d6:34:6b:94:dd:22:fb:32:f4:
3c:62:68:bd:0d:44:c0:3b:7e:ff:16:76:b7:12:2a:
51:9e:0a:bf:d4:72:18:ec:47:d1:dc:b7:52:c8:93:
67:a4:8c:2b:7f:33:fc:fc:b6:60:9a:70:6f:ea:30:
8c:c9:fb:80:a4:d9:62:fb:ca:e1:0c:ee:38:ee:49:
07:ca:62:a4:7c:2a:b4:5f:8a:82:7e:55:ba:3e:fa:
38:80:64:dd:e4:84:95:10:71:68:b1:95:f8:f8:c5:
13:a0:6c:1f:b7:b2:23:b3:76:76:1c:1f:4f:43:2a:
d6:44:81:84:31:05:2f:17:48:fe:49:55:b0:73:86:
be:d0:6b:9a:9d:2f:97:ee:64:27:fa:f2:07:70:72:
da:31:c1:27:aa:f2:6a:3f:f1:38:0c:fd:ae:54:57:
cd:9c:40:58:52:ed:60:f8:d9:53:d7:fc:4f:54:ea:
1a:e1:86:b3:fc:74:b4:17:4c:f1:b9:77:47:96:80:
03:95:6a:0b:35:b6:cb:11:0f:06:cf:6c:c0:e8:1e:
a9:a9:2d:e4:20:60:09:6f:ba:40:98:92:f7:d5:30:
73:91:d9:f9:99:ba:19:b3:00:09:d7:da:29:ee:0e:
87:26:0d:db:61:5e:59:44:d8:99:1a:ef:9a:bf:dc:
a0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3C:D9:D3:B0:3E:ED:9A:A7:57:1C:91:C3:11:DE:D5:B4:35:9C:CC
X509v3 Authority Key Identifier:
keyid:DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:2e:3f:ef:e1:57:56:cf:3a:87:1b:5a:2a:69:3b:b7:62:84:
4f:15:3e:6a:33:fe:51:0d:74:11:eb:2c:d2:7b:76:2f:a0:39:
3b:6d:f9:8e:d3:09:6c:48:74:91:95:42:fc:bf:35:f3:3b:21:
1f:7c:a8:e7:d4:6a:2e:ed:0b:45:22:82:11:bc:6a:f8:cb:6d:
f2:40:89:2a:ca:ae:98:cf:6a:46:08:0d:79:74:d6:cc:05:e5:
b4:22:82:54:52:cd:e8:22:cf:b1:e6:de:ed:b4:b8:d6:c0:cc:
19:ce:86:c9:20:7e:61:38:76:16:92:40:02:61:71:19:fb:3b:
5d:9b:8b:c4:55:4c:e7:d4:ef:17:39:cf:84:94:ce:3e:56:33:
66:e0:f1:11:01:5b:9e:74:0b:d0:05:7f:48:45:d1:cf:84:9d:
1f:83:74:34:1c:8d:f9:83:5e:d3:13:25:bc:5a:6f:c7:8d:8f:
50:ec:ad:05:30:9f:3a:e5:21:9d:85:af:ea:2c:29:b9:a6:76:
4a:c8:8c:6e:73:76:6c:84:ce:59:1b:d4:77:c8:c4:fe:77:1f:
9c:4b:50:26:88:17:d8:e0:1d:65:01:d1:61:d3:35:c5:c7:05:
e0:a2:73:95:99:83:b8:e5:8d:fa:ed:56:11:ab:0a:72:fa:91:
22:09:30:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:08 2025 by rpki-client