Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
File: 3xT-bNqQya_oB1kNLVA3SnaijhM.mft (raw, json)
Hash identifier: P4cFiK1ncCpAbE5esFTpSZK1Fm+XvT/x5D7pJFm05hg=
Subject key identifier: 2F:F4:A5:29:14:17:0A:EB:75:5B:60:36:5D:F9:34:79:3E:C0:A7:08
Authority key identifier: DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
Certificate issuer: /CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Certificate serial: 0194BD174D64633AD5435D460B15775E4A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
Manifest number: 1024
Signing time: Fri 31 Jan 2025 16:00:08 +0000
Manifest this update: Fri 31 Jan 2025 16:00:08 +0000
Manifest next update: Sat 01 Feb 2025 16:00:08 +0000
Files and hashes: 1: 3xT-bNqQya_oB1kNLVA3SnaijhM.crl (hash: M++LhdUEnpw+PNzDuVoTeIXGkKcaIcqWP1ZGszuy+1A=)
2: Swt5oFMQEQM3RtDOFxZCp2VObOM.roa (hash: d7VQjqZCXdGvodDw1gYlaDWjc+rRxAbFcC4KKSSYHOs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4d:64:63:3a:d5:43:5d:46:0b:15:77:5e:4a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Validity
Not Before: Jan 31 16:00:08 2025 GMT
Not After : Feb 1 16:00:08 2025 GMT
Subject: CN=2ff4a52914170aeb755b60365df934793ec0a708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9c:87:a4:b7:f9:3b:f6:0b:ad:ef:ef:37:80:
35:52:51:da:11:92:0d:66:42:d5:da:8b:9f:0e:09:
4d:04:28:a2:b3:cf:e0:b9:46:42:9b:b2:fd:bb:08:
65:ce:b5:2d:15:5a:f7:54:50:bf:9e:36:ee:a0:42:
95:82:f7:4e:b9:9c:4b:d9:c3:df:c6:64:b9:f1:f5:
8a:3e:60:29:22:a3:9f:40:c6:a3:d6:f2:8f:5a:ce:
9f:77:aa:59:7f:35:3b:50:7f:b4:02:4f:42:64:1a:
01:cb:75:a5:37:39:ca:6b:75:bb:95:a9:45:8c:f4:
69:68:39:0a:f9:a1:26:e5:92:aa:24:33:c8:67:9e:
c4:50:7b:3f:db:3a:ff:2d:71:79:04:6a:65:7a:95:
f4:3b:81:25:98:6a:3e:9d:c0:47:d2:e5:a1:88:93:
85:ff:36:ed:cb:68:31:31:7a:3b:c9:e4:5f:82:1a:
c5:24:66:e0:f8:bc:41:2d:a0:e7:e5:cd:60:08:b3:
bd:4a:ea:85:29:69:11:9c:6c:b9:52:bc:4f:35:55:
23:77:c2:a0:01:10:8e:e4:92:bf:46:cb:7f:c7:38:
6b:a9:40:f1:99:13:2e:d3:41:14:73:62:d9:12:c3:
5f:e3:07:62:3b:87:64:4e:e1:6e:b0:df:af:b9:7b:
13:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F4:A5:29:14:17:0A:EB:75:5B:60:36:5D:F9:34:79:3E:C0:A7:08
X509v3 Authority Key Identifier:
keyid:DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:95:7c:51:c8:7f:e7:58:3d:73:a8:fb:5f:95:64:7d:be:c5:
2d:30:74:f6:98:85:b6:c1:3e:f4:a9:71:ca:e5:c3:53:97:bf:
94:58:bd:3d:85:62:4a:87:68:bc:91:97:4d:e8:bc:df:bc:55:
56:c7:0c:a5:f9:0d:cf:96:64:f8:c5:04:10:63:e9:7d:6d:0d:
35:c6:d4:10:98:10:f5:82:08:03:71:e0:19:80:f9:42:e0:48:
2d:e3:e0:59:49:01:b7:d6:ec:17:98:be:5e:23:12:fa:e4:2d:
7c:d1:a4:e1:3e:32:07:f2:51:c4:62:65:ca:6f:dd:96:da:ea:
ac:a2:bd:8c:47:a3:c7:65:04:41:52:60:75:f6:b1:b1:a9:ab:
3e:0f:aa:fe:c2:9d:7a:74:85:24:02:8a:f3:eb:06:f4:d6:03:
92:e7:35:c0:44:6d:d0:8b:68:88:5c:71:52:0a:03:d8:ae:97:
d0:7d:18:cd:71:29:96:b8:1e:5f:a2:b6:81:d8:62:c6:10:1f:
77:78:a4:97:cd:4e:0a:ed:a7:4f:70:3e:5d:b4:79:e4:02:f8:
d5:75:a4:8a:22:1c:eb:a8:d8:48:72:cb:c3:d8:8c:f9:60:8b:
b4:20:b8:21:6c:64:c6:3d:90:18:7d:39:bb:fd:51:3f:d4:e2:
73:fe:0d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:50 2025 by rpki-client