Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
File: 3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json)
Hash identifier: HT9fWKdIjmE/WAyFPc5A4jPuyoqbXLnH0Gh91OPWNnQ=
Subject key identifier: 0F:22:5C:8E:AF:7E:3A:CD:A7:0C:76:4C:A1:9E:51:64:F1:22:95:EE
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial: 0194BC04C44852E24F3D8F1172829E8798B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
Manifest number: 130B
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: nvBxps07ZRBbLJiQvs5I1yGIbWhqtJdWCRXyOSCP29s=)
2: EoONLCC0uBU4UnkK6hGEDKnLwOs.roa (hash: BvTXgf3VZmemwuiX/6PvTlFRYmGF/FW7bb7KGQyaCiA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c4:48:52:e2:4f:3d:8f:11:72:82:9e:87:98:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=0f225c8eaf7e3acda70c764ca19e5164f12295ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:85:e7:2a:e1:b4:e4:b6:55:69:ac:97:cf:
f9:24:4e:dc:6c:34:f1:7e:ec:be:e7:d6:82:af:a4:
cc:53:e1:d8:b2:a3:0a:dc:a9:3e:d9:56:e1:5e:2a:
67:e6:2c:52:8d:a8:ab:80:29:9d:5d:e6:62:cf:a9:
c4:6a:39:cd:4e:44:ac:bc:85:15:c4:63:a0:5e:b6:
4d:54:09:42:68:23:3e:d4:c4:fb:cb:55:a8:c7:81:
25:b5:a6:c9:bc:c0:d7:34:06:96:56:cd:2a:01:1e:
0d:6b:d6:3c:b5:7f:a6:5e:ae:e2:3a:dd:e5:6a:c3:
ee:2c:6b:89:7e:1f:5d:c0:78:bc:d5:81:d8:8b:75:
b3:ae:19:64:6b:19:d7:ef:08:30:94:0b:1b:3a:1f:
51:36:9b:ba:6a:96:39:a7:bc:89:56:b5:50:11:ca:
b7:d0:ba:a6:7d:a5:82:56:1c:37:ed:5d:bf:aa:07:
63:e4:b0:1b:57:c3:7d:08:5a:29:1d:5d:c7:37:70:
2b:87:a6:18:32:23:16:88:4a:47:e8:65:fc:56:70:
d3:49:74:f2:37:ab:1e:e5:f1:bd:a9:f6:43:68:9d:
0b:24:3c:8d:08:a7:f8:da:a6:e9:8c:93:e8:2f:54:
5f:c2:bd:ee:68:23:44:33:0d:15:1f:0d:4b:1f:ec:
0c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:22:5C:8E:AF:7E:3A:CD:A7:0C:76:4C:A1:9E:51:64:F1:22:95:EE
X509v3 Authority Key Identifier:
keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:32:d2:87:dd:3a:af:c1:26:81:89:11:2f:b8:7f:05:15:95:
63:a3:71:92:a0:d0:7b:96:08:94:6a:49:f0:f1:9f:63:91:9c:
09:56:4c:a3:88:3e:dd:c1:f2:06:54:c6:ba:38:24:61:e1:70:
6a:95:44:e6:df:f8:74:0d:e5:d1:54:18:c9:36:a2:25:7d:44:
89:c2:ff:2d:01:da:04:72:aa:d0:a9:a1:38:d1:7f:47:9d:b5:
d8:ee:5a:7f:23:31:4c:43:43:0b:49:9c:88:4f:57:3b:07:af:
b2:a9:9f:5f:79:0d:4f:17:55:56:9a:7e:76:f0:c1:f7:dc:58:
dd:e7:5e:ff:13:dc:da:b1:5a:5c:2e:92:49:57:07:5d:ed:92:
5b:58:58:d0:2d:e6:06:26:b3:7e:53:93:42:4c:7c:96:9e:9b:
dc:4b:82:65:28:5b:cb:b3:a1:d3:63:05:41:26:eb:ae:28:26:
1e:47:65:a5:98:53:84:76:73:c3:f6:ca:cf:76:b2:56:36:f0:
82:b6:c1:42:7b:cc:70:a8:7c:c4:5e:29:db:5d:e0:85:24:8d:
5e:0d:29:90:2f:d7:9c:b5:56:42:99:2e:b0:14:cb:7f:b3:d5:
85:e2:25:63:82:53:3d:8a:e5:0d:3d:87:1c:f4:32:fb:76:0f:
b5:9c:38:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:30 2025 by rpki-client