Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
File: 3Iy0oRyrrCBK37iltYfjL-5KG1U.mft (raw, json)
Hash identifier: OuVKeW1S3ZRpcMn/NEzwqFvq2AL2V9dZBBKbHgbvEtc=
Subject key identifier: A7:02:62:E9:E6:E8:E2:E2:C3:F3:01:1E:97:45:0F:89:D0:7D:14:43
Authority key identifier: DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
Certificate issuer: /CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Certificate serial: 0194BD178097D7BCC8E4C849106D6123A6CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
Manifest number: 0AC2
Signing time: Fri 31 Jan 2025 16:00:21 +0000
Manifest this update: Fri 31 Jan 2025 16:00:21 +0000
Manifest next update: Sat 01 Feb 2025 16:00:21 +0000
Files and hashes: 1: 3Iy0oRyrrCBK37iltYfjL-5KG1U.crl (hash: /k0njjbxdZYz2x5TCNVaSM/36j9/4aC8bYeqadlboD4=)
2: mKsKKQCdLodyBncOeNIhWtaYAoQ.roa (hash: fizUUsz/TAb+LHuegB83yr/hnzwxKplkZhpso2ufXV4=)
3: xfMF5Mt4jBFimRoPjDOTrOYZb_c.roa (hash: GuaLpdFfqfVEq3DS5+BP2JqM2gB3tItjQlR22xolKBo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:80:97:d7:bc:c8:e4:c8:49:10:6d:61:23:a6:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Validity
Not Before: Jan 31 16:00:21 2025 GMT
Not After : Feb 1 16:00:21 2025 GMT
Subject: CN=a70262e9e6e8e2e2c3f3011e97450f89d07d1443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ea:20:f9:00:f8:b3:c7:c9:98:03:ac:55:17:
38:8f:8b:26:66:63:3f:dc:c4:e5:f4:1c:e9:91:60:
b5:a6:3c:04:02:c5:4f:c0:3a:27:88:b4:a8:b9:f4:
04:39:9f:bf:de:96:b9:a1:35:60:f8:38:5a:91:1d:
81:6a:3f:96:91:d9:b2:5d:f1:26:33:9d:d2:5b:66:
f9:d8:3b:68:96:2a:69:9f:c7:56:b1:3b:95:65:1d:
81:ee:43:4d:91:1b:a1:e8:8d:19:39:64:cf:f3:ae:
b7:c2:22:1d:c3:ba:a9:44:c2:ef:6e:18:a6:fd:5b:
73:26:89:55:9e:50:72:6b:58:32:6a:b5:83:45:dd:
00:fc:d2:cc:c7:95:a6:06:25:b9:21:00:4a:af:fb:
c7:f3:55:29:b5:65:62:27:14:9c:21:da:6f:58:3e:
bd:d4:ed:4c:80:98:ef:ce:fe:74:77:06:c2:df:da:
44:ae:49:b1:b8:1b:c5:47:23:07:88:41:09:e9:d8:
2b:45:74:2f:60:15:2a:e9:cc:35:f2:f2:bd:9e:9b:
8e:ef:f7:cf:44:b2:10:f0:b3:8f:85:f6:f5:31:41:
f5:a2:22:79:f1:dc:af:69:8d:38:4d:4e:b0:c7:5b:
d4:f5:99:b2:83:2a:77:5a:95:70:17:78:81:5c:91:
74:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:02:62:E9:E6:E8:E2:E2:C3:F3:01:1E:97:45:0F:89:D0:7D:14:43
X509v3 Authority Key Identifier:
keyid:DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:69:52:9d:11:31:b1:85:d4:8a:65:d0:2c:6e:af:f4:f9:ee:
33:73:d3:a6:8b:6b:73:6f:2c:42:18:a8:f7:59:c5:1d:55:e8:
4c:3d:35:b6:61:ad:95:e8:e0:a2:8e:6b:d1:1e:9c:4a:20:8b:
40:45:da:f1:08:8a:32:6e:6b:2d:b6:64:4b:7e:a8:9a:87:99:
92:df:43:92:1c:19:70:a9:5b:7a:c0:bc:28:85:9c:c3:d8:ce:
c4:cf:a1:ae:ed:8c:06:8b:07:35:75:cf:b2:80:73:02:6a:0c:
ee:a1:23:fd:43:45:ad:6c:4a:2f:56:51:6f:7c:34:fd:2c:90:
4a:5c:a4:a2:4b:cb:40:aa:27:4f:3b:54:28:27:56:ff:b3:b2:
9d:70:91:6e:7d:ac:a6:65:5b:3e:17:7a:49:48:bf:41:85:42:
95:61:d2:24:22:60:dd:49:e7:63:4b:9b:cd:e1:dd:32:42:9f:
24:5d:bf:2a:02:5b:48:fa:75:77:aa:d2:96:02:eb:1c:fd:ad:
03:84:45:4a:78:dc:21:0d:31:0a:d9:ee:0e:de:45:06:85:08:
6a:41:46:ee:2a:08:eb:0d:43:f7:63:f1:3b:c9:53:c9:91:0e:
8e:fc:6a:4e:64:2c:bc:3f:ef:31:cd:7f:06:15:ee:ed:60:ea:
00:80:3e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:48:05 2025 by rpki-client