Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
File: 3KCCSJpBQMCnjgPVC2v9VAKwROo.mft (raw, json)
Hash identifier: wVxuu21TI/8P4gw0HfhZkncFUSp0nRVaYztHjIj12Eg=
Subject key identifier: AA:8E:F1:0D:F5:DB:61:E0:9C:11:85:C8:AF:DC:B1:A1:2D:F7:C5:E3
Authority key identifier: DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
Certificate issuer: /CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Certificate serial: 0194BD176037ED026DFC5B4CE904C2F298E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
Manifest number: 0EC6
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: 3KCCSJpBQMCnjgPVC2v9VAKwROo.crl (hash: 48VSTumGdbTCmTiSZjMavkEsQlgMM5uZYV7gsbTTGXM=)
2: wfCvw7M0UWwwmqgY4ndwt7Ezdvc.roa (hash: nadXDZSO5g66NQALk/0GLGlBJpZj5fLYUofWKpN1pZc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:60:37:ed:02:6d:fc:5b:4c:e9:04:c2:f2:98:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=aa8ef10df5db61e09c1185c8afdcb1a12df7c5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2a:b2:4b:a8:b1:ca:24:bd:91:d5:a4:f2:55:
7e:9a:5a:13:db:f8:83:d2:91:42:e1:7a:e5:50:ad:
5c:03:ad:c7:e2:f0:36:52:78:75:dd:2d:e6:7f:c6:
e3:e7:6f:42:2d:b9:67:2c:bf:72:b2:5c:ad:23:b1:
d8:22:c6:49:0f:78:51:eb:4f:6b:dc:fb:0a:cc:68:
d7:76:06:d6:fb:28:fc:b6:e1:17:73:eb:9f:b1:76:
2d:3d:b6:14:4f:21:60:13:4d:91:e2:7b:23:4f:0f:
e7:41:6d:a3:17:92:70:f3:21:db:91:00:6f:3c:cc:
64:44:46:37:9b:21:93:55:28:8d:14:27:ab:88:7d:
47:76:83:92:ba:87:07:d3:8a:ce:df:ba:c3:c7:46:
7d:17:7e:d3:c8:07:ab:c7:1f:43:4e:f3:5a:f8:ee:
f3:b9:ef:e4:e4:f8:af:54:cd:3b:62:0f:89:72:25:
39:d1:7f:12:42:6e:0a:ed:a6:05:b4:9a:e9:a7:90:
a8:fb:64:ca:af:35:ba:32:fc:51:8c:ec:ba:52:40:
3c:6c:fa:9c:6b:d2:61:b5:26:fb:ba:88:47:0f:96:
a7:bf:fb:02:ac:9f:45:e7:0d:bd:e9:ad:31:1a:2f:
29:b7:78:f2:52:88:4f:d0:68:6d:46:bd:12:7d:d3:
a7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8E:F1:0D:F5:DB:61:E0:9C:11:85:C8:AF:DC:B1:A1:2D:F7:C5:E3
X509v3 Authority Key Identifier:
keyid:DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:38:d1:44:ec:0d:ee:dd:d9:93:61:4d:42:bd:6f:34:7b:db:
36:4a:45:27:5c:0b:69:cc:29:31:a6:a2:4c:19:18:5e:c1:ae:
69:dd:ec:5f:b0:9b:74:60:7c:15:c3:d3:6b:fb:7a:70:f8:2b:
8b:8e:5f:fb:88:b0:9d:43:95:4c:17:3c:69:ad:59:92:37:48:
81:54:fb:d8:bb:66:84:8d:53:28:8f:29:c8:68:59:50:b3:c7:
a2:75:ea:49:fd:4b:d6:cf:38:f2:0e:07:b5:85:a7:e7:eb:5b:
eb:39:b7:fc:be:10:f6:d3:f3:8f:4f:df:f6:a3:38:97:be:12:
f3:ad:89:a9:1c:67:79:7d:a4:b1:86:00:56:ce:60:96:f3:38:
1f:27:59:d4:be:e5:16:aa:9f:1d:92:7d:d7:88:83:f9:d7:0d:
51:0b:07:32:e0:a8:97:49:22:37:1b:b2:b4:44:71:90:64:22:
b1:f9:32:bf:68:08:77:bb:bb:9f:64:e1:11:5f:be:84:8a:3e:
81:f6:96:6b:2b:34:01:08:b2:3b:ea:e5:aa:2d:ef:3e:cf:85:
4b:b2:55:87:7e:c8:fc:e3:4b:e8:f4:34:98:a1:a8:ae:84:33:
fa:6b:e4:e0:fe:f0:07:95:28:34:24:22:55:a6:ff:46:08:07:
04:09:f0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:45:13 2025 by rpki-client