Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
File: 3K5LBHGmGHLEBBQuH5D1B08NbxU.mft (raw, json)
Hash identifier: Ec/axcA2Cgeidi2J5D2L4R6QGnGEQFoI5VeiPCGFVtE=
Subject key identifier: 29:8B:3E:2C:BB:B6:31:40:33:80:C1:B7:9C:01:9D:AD:9C:48:96:FF
Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
Certificate issuer: /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Certificate serial: 0194BD4E4B97781C2842AB4E38CCD25BD51B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:12 +0000
Manifest this update: Fri 31 Jan 2025 17:00:12 +0000
Manifest next update: Sat 01 Feb 2025 17:00:12 +0000
Files and hashes: 1: 3K5LBHGmGHLEBBQuH5D1B08NbxU.crl (hash: +uD9krsTr8kt9ORsm6BokF4uusp1v/q0f5mAeNGSDNQ=)
2: TWCQBg2-t-jrjyzWp02-IpHykDE.roa (hash: OzxPmG/iv0ZxRaIlS2kwO8RCX9n3cTZki/wmozkxxLc=)
3: w-Jga3ncDiQpUhbU2MQ6dRKRInQ.roa (hash: 5XUytb4Y6hE0gSnX9zthe9SyxMsKZ/nIOoxPG8EDHcQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4b:97:78:1c:28:42:ab:4e:38:cc:d2:5b:d5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Validity
Not Before: Jan 31 17:00:12 2025 GMT
Not After : Feb 1 17:00:12 2025 GMT
Subject: CN=298b3e2cbbb631403380c1b79c019dad9c4896ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:55:fe:0f:bb:ec:8f:bf:cc:9b:3d:bd:f4:62:
d1:2f:f0:45:fb:52:7b:0e:d1:6c:13:88:60:ca:8b:
3c:75:77:97:dc:3c:71:30:d6:28:c6:74:83:40:c0:
96:93:b9:57:88:8e:4e:01:9a:74:ba:43:b4:54:87:
77:15:c8:63:ac:54:46:6b:cd:f0:75:c3:d4:29:94:
2b:33:c5:db:71:ca:74:61:6f:5d:23:07:c6:bd:07:
f2:5d:d4:ea:de:8c:e3:8e:f1:1f:97:5b:f3:73:16:
5d:7e:96:cd:98:23:cf:0b:5b:26:c1:9a:74:4f:69:
86:21:f3:5a:04:32:86:79:aa:ed:d3:df:56:b7:64:
c0:fd:88:7f:16:a6:76:c0:2a:4b:4a:14:2e:1b:30:
b6:53:fe:34:91:06:3f:02:9b:90:3c:58:0d:04:29:
2e:58:9a:e8:57:b8:4a:a8:4f:bb:36:6e:ec:30:c0:
a3:71:69:a5:9c:14:83:07:d7:6c:7a:7d:c3:f5:46:
05:f0:79:00:4a:db:e0:82:a9:57:bf:d4:8e:72:74:
e7:c6:40:16:36:31:55:bc:89:32:c4:dd:8b:12:2a:
5d:5f:96:27:0f:6a:d6:24:d3:e1:0c:ae:42:e2:a8:
ad:eb:86:a4:1b:42:f0:bf:b4:5e:26:4d:36:1c:8b:
ee:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8B:3E:2C:BB:B6:31:40:33:80:C1:B7:9C:01:9D:AD:9C:48:96:FF
X509v3 Authority Key Identifier:
keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e5:a1:aa:5f:79:83:03:6a:ab:a4:b8:8a:64:8c:7c:d2:cf:
00:31:02:45:1f:94:b9:05:34:b9:1c:c3:59:0e:65:d5:06:bc:
b9:46:84:cb:62:44:6a:60:7a:42:1d:6e:a9:cb:04:67:e4:02:
71:31:82:8e:36:2d:65:b7:a9:5f:be:2b:2d:21:d9:66:0c:52:
2d:35:f8:5b:1e:c9:fa:a8:f9:6e:05:e1:d3:8e:d2:38:2e:89:
73:ef:e7:e3:7d:7f:4d:aa:30:6c:a3:82:d8:1b:99:9e:b5:2f:
a5:b6:c9:f8:fa:a0:5d:d0:47:39:c5:2c:f2:88:89:10:a4:bc:
cb:d6:e7:06:a0:36:1b:88:20:9b:61:a4:49:86:b3:a0:16:bc:
8b:f8:2a:bc:bd:66:33:71:be:93:78:e1:f9:3b:2a:2d:09:07:
66:8f:53:aa:a2:cc:25:d8:12:6e:64:e8:fb:11:1c:40:e5:d7:
2e:15:4f:df:ac:89:e6:21:5a:74:73:3d:78:e5:20:6f:e8:5b:
9b:71:8e:21:e7:97:a2:40:f4:59:89:71:9b:3a:e4:89:03:89:
26:0c:e7:71:c8:19:12:96:17:5b:c7:b4:9a:1a:7d:f7:15:54:
d9:92:23:28:2d:76:00:c2:eb:a4:26:19:69:db:00:6c:ad:05:
f5:7f:16:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:33:18 2025 by rpki-client