Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
File: 3OSkxIQPyaX9IUphmqiHtbdiS_U.mft (raw, json)
Hash identifier: BoqOM2hNkzh3S2dM5EMIQjtZ3yjgCr4mZDBhy0/WLU4=
Subject key identifier: 34:38:BB:70:E5:52:4E:03:9F:7D:91:68:01:59:1A:68:81:AE:D8:5A
Authority key identifier: DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
Certificate issuer: /CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Certificate serial: 0194BCE07F89ADD09FE4D590B5E60D33C896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 15:00:16 +0000
Manifest this update: Fri 31 Jan 2025 15:00:16 +0000
Manifest next update: Sat 01 Feb 2025 15:00:16 +0000
Files and hashes: 1: 3OSkxIQPyaX9IUphmqiHtbdiS_U.crl (hash: 7eaUd6PBDiCh/5qgf6B55uYXnozcbWA/VytSZ4QAtZ0=)
2: SlznhF9EiZYGKKClhlcBqpQpcMg.roa (hash: Jy5c7P7JMODRFjsTTWh43LUlPZcqwSCq10CJL1zOqOg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7f:89:ad:d0:9f:e4:d5:90:b5:e6:0d:33:c8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Validity
Not Before: Jan 31 15:00:16 2025 GMT
Not After : Feb 1 15:00:16 2025 GMT
Subject: CN=3438bb70e5524e039f7d916801591a6881aed85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:25:b8:1f:c9:e4:3c:2a:03:f5:e4:3f:1d:69:
45:5d:be:4b:2a:a2:08:10:98:e8:7a:16:5b:74:93:
a3:cb:b7:30:5f:d3:00:77:e7:2c:f4:05:96:33:a8:
96:f0:bc:be:62:43:4a:29:71:97:95:f4:f8:82:83:
e9:82:9e:4a:12:1e:7f:d8:ae:35:0a:5c:ec:64:09:
d0:94:95:f0:65:0d:60:75:87:e1:3a:bf:7a:a8:1c:
10:19:fb:35:ed:6a:6c:55:41:5d:56:29:b2:5e:a6:
29:2a:eb:4d:99:bc:04:9d:42:ef:19:75:75:5d:cc:
28:17:84:10:ea:4b:b5:73:53:de:f0:e7:91:0c:0d:
f3:af:4b:13:9b:06:00:0a:da:49:99:06:9d:d9:ce:
d7:27:09:5f:0a:fd:a8:6a:a6:78:28:c6:53:52:bd:
e9:be:f5:02:bd:19:ff:07:bc:6c:ce:dc:19:15:75:
bd:d0:0c:8f:40:2e:31:f6:4b:d6:52:24:6e:87:93:
78:cf:51:5d:8b:2b:8f:41:7b:4e:c6:1e:08:53:94:
d0:a7:33:51:1d:7d:ce:9f:6e:9a:02:2a:13:e0:b9:
0e:e6:ea:5b:b5:8c:24:85:cf:41:1b:d2:94:53:8b:
33:29:f8:44:24:11:a1:13:b5:7b:47:fa:2e:41:16:
68:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:38:BB:70:E5:52:4E:03:9F:7D:91:68:01:59:1A:68:81:AE:D8:5A
X509v3 Authority Key Identifier:
keyid:DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9b:90:ba:22:07:76:d0:ca:d2:e5:85:c9:a1:27:07:c3:60:
51:15:c6:79:a0:e0:7c:71:80:4b:c9:36:2d:e5:0f:d5:15:9e:
43:f2:6d:34:4d:0d:4b:4b:bb:57:88:d3:b7:c1:65:4a:f7:7f:
e9:3f:32:70:51:d6:63:09:b0:3d:df:c0:c9:8d:2b:55:47:a4:
b3:cf:55:c8:62:0e:1c:c3:14:1c:44:f4:e0:a8:af:3e:4d:35:
83:ab:bc:09:82:7c:62:3c:8f:9d:11:2c:3c:bb:02:83:12:fa:
be:5f:4f:64:5d:61:7e:9a:f9:a7:b2:46:24:99:ba:32:8f:ea:
3e:72:d9:f1:89:b3:22:93:da:e9:50:0b:6e:de:fd:28:44:66:
5e:f7:b3:14:58:9b:c0:28:03:90:6b:1a:90:ba:8f:07:0e:ae:
8d:0d:ad:3e:fe:a8:25:55:ce:54:b4:7c:86:fc:99:c2:44:b6:
fc:d1:b9:2e:5b:f7:a1:6e:f9:8e:a9:d2:75:f8:75:25:28:3e:
87:3d:0e:a0:fe:ce:b8:e5:1c:cc:e2:94:2a:b0:f2:d9:66:0a:
3f:2c:a9:67:1d:ef:02:fd:3a:7e:8c:e9:61:b7:4f:d9:90:93:
05:27:86:4a:52:b2:88:c5:71:d0:4e:e2:57:24:40:73:fc:89:
ee:dd:d5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:09 2025 by rpki-client