Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
File: 3fz_0QDcAH8alqRDDqhyOJxX1s8.mft (raw, json)
Hash identifier: tBdj+BRYsZ+baDEiAmG2f5c4DgjOpoCuBPf387Veci0=
Subject key identifier: 6C:6D:FD:F1:0A:1E:97:FC:48:B0:13:F5:BB:DE:D0:81:06:1E:34:B3
Authority key identifier: DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
Certificate issuer: /CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Certificate serial: 0194BC04EFB369DD6498B5A6FDE8109AB8C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
Manifest number: 011C
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: 3fz_0QDcAH8alqRDDqhyOJxX1s8.crl (hash: cB9l7L6qD3PGUyPuF4I+LRhuTUsLL0OO2ZiWmZlwQGU=)
2: SHvoKKIBU3wgrybj6zWAE812zjc.roa (hash: yK7W9vbdAmqtnEpvGmawrHGyq/oUYACQgVTYc+60SM0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ef:b3:69:dd:64:98:b5:a6:fd:e8:10:9a:b8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=6c6dfdf10a1e97fc48b013f5bbded081061e34b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b4:bc:0b:4b:52:b6:f8:b8:72:2a:2a:1c:1b:
76:d8:b2:89:9f:53:22:be:f8:de:cc:d1:9c:43:8b:
2b:29:cd:29:4b:bc:bb:cc:59:5d:55:17:39:5a:f2:
d1:ce:49:f5:e0:41:f6:c7:1b:82:ad:4e:67:67:8e:
60:d1:cd:b9:94:9d:56:f6:81:c2:ce:1d:c3:43:e1:
7b:83:a9:03:3c:dc:51:ff:2d:ce:5a:95:a5:a4:28:
89:be:ae:f3:ee:86:3a:34:4a:ed:c0:9c:c8:a3:32:
96:62:e9:9d:ac:c5:2b:1c:40:36:73:83:42:1f:5b:
2c:57:82:9e:30:f6:53:24:14:47:48:5b:66:e4:d7:
7e:cd:19:db:1e:4c:b1:fc:98:50:25:54:6b:d1:1f:
5c:69:6f:9b:dc:1b:e8:31:fe:c9:bb:e2:9e:40:2c:
e4:2d:29:68:f2:2e:d7:0f:18:ee:8d:94:7e:0f:59:
25:39:50:60:a7:82:a4:41:04:a5:36:a8:19:fc:4b:
0d:1e:48:dc:73:27:4a:53:68:90:c4:08:c0:80:03:
73:f2:8e:74:6e:46:69:28:97:c3:c4:a3:f7:f9:49:
f1:e0:fc:9c:b1:12:16:10:14:83:5c:77:42:84:ef:
74:66:5b:de:ce:42:b9:91:46:ff:1b:96:e1:b1:0a:
45:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6D:FD:F1:0A:1E:97:FC:48:B0:13:F5:BB:DE:D0:81:06:1E:34:B3
X509v3 Authority Key Identifier:
keyid:DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:07:f0:ea:10:5c:96:c3:82:3f:1e:62:7b:e0:69:29:81:7e:
ea:5b:76:30:bd:f3:51:d6:4f:3e:fe:10:cf:65:7a:1c:a5:28:
5a:23:4c:c2:a8:a7:17:fc:55:ef:db:b3:2f:1e:88:84:f3:da:
2e:e3:be:21:5c:0e:26:1b:dc:e1:8f:b8:1d:19:63:ab:89:91:
96:b5:4a:48:15:92:f1:de:cc:da:ca:2f:18:4d:a5:52:98:77:
89:a6:d9:33:ae:a7:1c:41:88:2d:f7:0e:d9:b8:d6:39:15:6a:
e3:1e:fd:46:88:5a:af:2d:19:22:69:4b:d3:31:92:24:8d:17:
45:d3:a0:0b:1e:f3:df:be:4f:5f:b0:f5:04:fb:e7:6c:98:5c:
cd:41:b7:e0:49:03:b6:cb:9f:4c:eb:0f:1f:02:ff:af:79:6a:
70:d2:9d:69:d8:85:6a:84:4c:de:c8:67:13:86:a1:e2:f6:3d:
80:f2:b9:9f:32:c7:c3:49:d4:34:16:20:b3:d6:b2:70:ef:37:
c3:04:f9:58:e3:4e:41:f5:9f:0b:b8:c4:ab:6b:2b:bb:d9:8d:
39:e1:77:6c:c4:5d:0a:5f:3b:09:e6:15:53:54:42:67:df:e0:
08:fb:7f:c2:3c:60:38:2d:d8:8e:42:cb:29:af:41:30:30:6e:
8e:14:87:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:29:17 2025 by rpki-client