Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
File: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft (raw, json)
Hash identifier: Yo1Jrg8NHx9rwAP8ZKZYnB9IRshPYAUKK7sJcMGR3so=
Subject key identifier: C8:A5:01:A9:FE:EF:EB:05:88:27:F2:12:0C:8B:81:E1:B4:BF:CB:6F
Authority key identifier: DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
Certificate issuer: /CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Certificate serial: 0194BC050B72A8C8E263477E4A6D79D1639B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl (hash: rFSxPGwZPmjYUv1R2qJrbrrt+LgZJJEYU0liLSyt9h0=)
2: b5tCOGfZlXjj3Rp4LI2wyRIwTZc.roa (hash: Ux81ccFaPxD7MPa+kjPcqatGWLTvR5GEGbxi2D0f0BI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0b:72:a8:c8:e2:63:47:7e:4a:6d:79:d1:63:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=c8a501a9feefeb058827f2120c8b81e1b4bfcb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2a:52:c6:0d:8e:20:a9:4c:4e:99:9e:e4:38:
5e:a6:ba:26:a6:b4:a8:18:3a:7f:14:c6:0e:7f:d6:
dd:05:77:11:d7:ea:1a:ad:aa:ae:79:16:44:c5:b5:
b7:52:2c:ef:be:78:cc:25:32:c0:50:20:ab:4b:31:
9c:35:8e:d0:cb:9b:e9:fb:2a:3a:b8:c3:44:52:42:
59:ac:15:85:3c:ce:f9:6a:15:52:e5:5c:79:35:08:
42:98:c9:5e:f6:e3:e6:ac:c4:87:c6:bc:23:35:78:
e9:25:ab:76:44:cb:af:fb:47:df:0d:be:e1:ef:78:
fd:c1:f8:dd:bf:eb:75:95:80:12:be:93:ad:83:6c:
7c:49:65:fb:84:42:39:03:88:8d:d5:a5:86:eb:99:
cd:7f:ae:87:d8:74:30:50:55:8b:d7:bd:d2:52:c1:
aa:4f:bd:dc:15:25:b1:27:94:e3:71:28:de:61:7d:
f2:6e:a2:76:86:af:a1:2b:ec:92:0f:2c:37:20:89:
29:81:38:63:32:fa:36:3f:81:7d:00:eb:ad:d2:2b:
b1:0d:f2:4b:8f:15:91:93:36:58:27:8c:58:f0:75:
1e:fb:9b:c2:a9:16:ae:ac:d7:29:0f:c9:b6:40:78:
f0:cc:3e:30:9d:47:e2:07:e2:c1:2b:7a:a2:b9:60:
94:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A5:01:A9:FE:EF:EB:05:88:27:F2:12:0C:8B:81:E1:B4:BF:CB:6F
X509v3 Authority Key Identifier:
keyid:DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:bd:ea:d3:1e:0d:2d:e4:b0:6c:13:b0:42:42:f2:b0:3f:a3:
26:21:2e:2f:fc:b2:80:0f:24:f5:3d:3b:6a:66:b1:74:69:6f:
79:4f:6f:6a:6d:e4:e3:65:bd:af:ed:e9:12:a0:88:1f:48:69:
10:62:18:be:9e:6e:c9:27:a5:af:a0:e2:ac:2a:3b:8d:c6:eb:
63:5c:f8:30:26:01:c5:75:c1:5d:d0:4c:a8:f3:97:b0:f3:e6:
7f:1e:50:f1:fa:06:63:71:ec:1b:f9:5b:8c:fd:80:38:26:79:
99:a4:e4:e6:fd:6c:02:2e:cb:5f:b6:22:e9:76:c0:3b:ea:b5:
22:a0:75:30:6a:ac:b4:79:7d:d4:09:4f:c8:58:57:19:54:83:
04:0d:a5:e8:c7:b1:03:52:28:82:6d:9d:3b:05:aa:ef:3e:5a:
4d:35:f0:df:3a:75:41:60:6b:29:d1:27:9a:3a:06:2d:e4:fd:
25:a5:9e:af:e2:6f:41:af:a1:30:7e:26:e2:be:08:66:01:54:
bf:a8:83:87:d9:20:d0:b6:6e:94:de:74:a5:c3:a7:9a:93:cb:
86:4f:3e:bb:31:2b:76:f8:ab:84:fc:f9:72:be:54:05:b6:9b:
2a:ac:dd:92:34:9c:46:fd:aa:36:9c:4a:f7:12:ec:fe:d7:95:
03:e0:66:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:24:50 2025 by rpki-client