Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
File: 3A4bkNUSzDQC92FBQGKXleTUrEw.mft (raw, json)
Hash identifier: dkEzbx2vERhxJ/qJpfbXgWbbHuv7ry8F85MHYtUAZos=
Subject key identifier: D9:FF:CE:E6:DE:CB:FF:92:6C:51:11:09:68:0C:09:5A:01:0F:E8:82
Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
Certificate issuer: /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Certificate serial: 0194BC727F30557E0117F3C6985EC4B1C69F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
Manifest number: 0F3C
Signing time: Fri 31 Jan 2025 13:00:07 +0000
Manifest this update: Fri 31 Jan 2025 13:00:07 +0000
Manifest next update: Sat 01 Feb 2025 13:00:07 +0000
Files and hashes: 1: 3A4bkNUSzDQC92FBQGKXleTUrEw.crl (hash: ++wAibAdln7s2Umyh5heIwxDWcU3kvib8fW3nXE2E9U=)
2: ruyaJPOfuuheWzXgHxMIwRIiRmI.roa (hash: dOziRNC4DuCftQxbewVCKgY2HoDJCSSxS8NFyfVWRc8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7f:30:55:7e:01:17:f3:c6:98:5e:c4:b1:c6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Validity
Not Before: Jan 31 13:00:07 2025 GMT
Not After : Feb 1 13:00:07 2025 GMT
Subject: CN=d9ffcee6decbff926c511109680c095a010fe882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:41:1f:32:c5:33:74:46:73:4c:e0:6d:83:cb:
f9:12:80:76:08:1b:ae:e7:0f:89:b7:4b:08:86:6a:
8a:31:f4:99:9c:d4:83:2d:49:e1:dc:89:a3:85:e6:
67:06:60:2b:22:47:f4:07:c8:8d:1e:ac:f4:e4:61:
65:62:27:82:f7:ea:91:38:a9:ce:84:bb:92:c3:4a:
67:dc:2d:85:40:37:31:2d:9f:6f:ec:04:e5:16:2d:
b3:99:99:14:60:d1:b7:31:58:34:df:25:b2:9a:60:
f5:9a:d9:c3:0f:0b:99:33:46:68:40:5c:5e:4a:fe:
07:9b:23:e7:df:52:cf:fc:a8:30:59:06:bb:50:b4:
1a:e8:ea:bb:65:b8:0f:59:2c:83:ba:38:ab:b9:dc:
ef:5c:2d:a8:20:f3:b5:c4:8d:a3:a0:e3:9c:ad:23:
29:58:ea:fa:93:93:38:e1:34:eb:23:ee:fe:c4:20:
bf:c3:83:a8:c9:84:53:af:f1:45:22:d2:1c:d0:e9:
c0:86:6b:b3:7e:2e:96:87:49:e9:01:fb:2e:d8:da:
90:e2:2d:e6:58:df:9f:53:10:ac:36:7a:86:19:9a:
23:e9:fc:76:ba:f4:b2:da:e1:9e:18:81:e0:50:70:
65:17:43:0e:44:68:17:19:5e:ba:c7:06:af:f1:f7:
3b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FF:CE:E6:DE:CB:FF:92:6C:51:11:09:68:0C:09:5A:01:0F:E8:82
X509v3 Authority Key Identifier:
keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:27:31:82:62:cd:de:8b:4e:09:43:d7:43:b3:27:be:d9:63:
e0:36:a7:5d:d9:26:c1:32:d4:22:22:f7:4f:b9:74:05:af:35:
c5:f7:07:cd:2f:f3:e1:32:6d:1f:a1:4f:a8:f2:33:31:e6:24:
fe:bf:ff:c3:d4:ef:c7:55:30:ab:5a:da:9f:c6:a1:10:f0:71:
55:2e:d6:77:f5:bf:49:91:0d:9e:30:6f:d3:51:e8:69:8b:a1:
56:a4:fd:2d:56:b3:af:ea:0b:b7:65:62:0b:d1:82:f6:66:19:
85:a6:8b:14:cc:a1:a4:fd:75:4d:32:35:39:ed:39:a2:1f:3c:
57:32:00:fc:c7:aa:2a:3d:82:19:72:d4:a0:31:1a:ca:0b:a6:
20:15:a1:c1:8d:b7:ad:e1:b1:6e:ce:0d:b7:65:2a:91:62:68:
79:e5:ab:8c:1f:a2:fa:ca:fe:32:5b:33:66:6b:c8:f6:d7:64:
a9:57:96:be:de:aa:0e:37:47:ef:4f:dc:36:46:60:ba:65:80:
21:a6:7a:51:91:92:00:3b:9e:a5:82:c7:b0:a0:a7:40:e5:aa:
71:03:7e:28:c1:67:e6:e8:50:ed:e9:00:a6:95:12:a9:99:7f:
8b:af:ee:4e:f7:d1:98:c0:44:fb:15:c4:6d:8e:77:87:ee:83:
1e:02:15:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:39:21 2025 by rpki-client