Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
File: 3VXsF19u56H8H4mt91S7KghiV4o.mft (raw, json)
Hash identifier: 9nEtss5R28y7qwsrcgM4kIpXOIf2QMWJH1zYxOCDkqE=
Subject key identifier: 3F:3C:8E:B2:93:37:FA:6E:8A:8F:DB:26:D6:F4:49:33:5C:ED:E0:16
Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
Certificate issuer: /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Certificate serial: 0194BC72A0CB3AA4C65C1168704908D8A03B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 13:00:16 +0000
Manifest this update: Fri 31 Jan 2025 13:00:16 +0000
Manifest next update: Sat 01 Feb 2025 13:00:16 +0000
Files and hashes: 1: 3VXsF19u56H8H4mt91S7KghiV4o.crl (hash: /GVjrxUTjS2wmqk+PSIBbuS6naiFyh8HeuyBLIifMiw=)
2: QYQzorGK1cakLmK4R7aZ_z5BtRk.roa (hash: K/JfnEYnWlRvZUne2cydti381OQHnxSabuUVM9ge064=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a0:cb:3a:a4:c6:5c:11:68:70:49:08:d8:a0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Validity
Not Before: Jan 31 13:00:16 2025 GMT
Not After : Feb 1 13:00:16 2025 GMT
Subject: CN=3f3c8eb29337fa6e8a8fdb26d6f449335cede016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:72:95:98:fe:e3:a6:6c:32:7b:25:b7:ed:
d2:97:57:eb:ce:4a:18:79:89:e2:4e:b2:4b:3f:63:
b9:e2:f1:7b:f5:61:52:36:e2:c4:8b:78:88:ae:fc:
2d:f2:e3:a5:fc:8c:3d:ad:fc:1b:0e:3e:0a:71:a6:
6f:02:0d:33:15:a0:7f:79:30:43:37:8e:5a:0d:23:
85:ef:5f:ff:96:2b:e0:d4:b3:3e:60:65:4b:56:be:
b8:48:61:fb:f7:38:ac:c0:ce:77:3e:e5:e9:d0:6a:
5c:90:18:d1:51:6c:dc:38:f0:6a:f4:4b:4d:9f:24:
e3:18:ce:c2:82:c9:c9:bc:f1:0b:14:e0:24:db:a3:
47:4a:ac:68:46:9c:95:1d:b5:cb:b6:e6:25:ae:62:
53:cb:2b:c9:b2:0b:ae:75:d9:a8:50:80:9a:e4:ce:
e7:7b:50:b5:08:4a:e1:f8:96:66:f4:65:e7:33:dc:
03:33:a9:30:16:bb:b1:09:2c:32:50:9d:ee:c3:e1:
80:48:ab:49:f8:4c:f1:04:96:05:83:69:62:0e:f7:
f4:a3:dc:43:b6:81:38:db:35:03:50:93:97:0f:04:
4c:fd:69:05:bd:08:ea:92:58:91:eb:67:e3:a6:9c:
24:45:24:05:22:11:d0:62:6e:57:6e:da:7b:f8:68:
63:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3C:8E:B2:93:37:FA:6E:8A:8F:DB:26:D6:F4:49:33:5C:ED:E0:16
X509v3 Authority Key Identifier:
keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:35:41:7e:dd:52:7d:74:23:52:2f:9d:51:43:6f:1f:94:d4:
2c:fb:ba:94:11:e6:53:f7:7f:a4:d1:d9:3f:82:ab:a7:37:2b:
bf:f6:a7:9b:45:68:90:d4:41:1f:e5:35:e0:4d:42:1a:f5:b8:
ad:41:16:f1:e6:93:6b:7b:3f:a9:e5:d4:ca:51:8c:68:b7:52:
d5:88:82:51:f7:72:4b:b6:02:7f:a6:d7:23:59:d5:84:57:3e:
ad:e5:fd:8c:e3:6e:41:d1:a1:e2:4f:a2:21:3b:4a:f5:08:99:
04:5f:be:0d:8c:b1:1f:30:9a:59:6f:51:0d:cf:f2:3c:34:9a:
bd:11:95:c2:f5:5f:da:26:d4:f4:41:14:66:ca:02:15:65:f4:
91:43:17:31:80:42:f7:85:28:d1:c6:0c:ff:25:03:68:3e:04:
07:c1:2f:1b:5a:23:e6:25:6d:91:77:f3:78:63:ec:18:40:ee:
25:a6:f5:09:14:ed:a9:9c:14:a0:90:c3:94:10:1d:d8:b5:05:
f8:ac:8b:54:b3:d2:92:53:02:47:16:56:a8:f4:89:03:5e:78:
1a:7b:46:21:48:b8:c2:84:4c:81:39:8b:43:89:bb:13:5b:d5:
a9:74:05:0c:49:c2:ab:b9:50:3b:5b:5c:6d:33:7f:95:94:3a:
1e:f1:f3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:46:12 2025 by rpki-client