Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
File: 3OVg8OyFDainwPjW84JRAtTeSs4.mft (raw, json)
Hash identifier: 1Z0jCfQ5IYmPzfqWkx7jOWNxydbkM6OtK4aAvyCF10U=
Subject key identifier: 71:5E:6E:E7:C7:F5:F2:0C:65:64:1F:6F:89:09:38:DC:C8:2E:EA:E9
Authority key identifier: DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
Certificate issuer: /CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Certificate serial: 0194BBCE41A245A02DEF28BDC5E512CE3800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:44 +0000
Manifest this update: Fri 31 Jan 2025 10:00:44 +0000
Manifest next update: Sat 01 Feb 2025 10:00:44 +0000
Files and hashes: 1: 3OVg8OyFDainwPjW84JRAtTeSs4.crl (hash: CqpVG1gbYjCHHlM1zFEd0nAfwhV8rsUfLFG/eKVJcjs=)
2: cvAMZ-azozJjAwqBJfc2rmmZkME.roa (hash: Gewk40CVQw5q21r2SfPnFc/pGMGpE0T4SZt3vyzVUaM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:41:a2:45:a0:2d:ef:28:bd:c5:e5:12:ce:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Validity
Not Before: Jan 31 10:00:44 2025 GMT
Not After : Feb 1 10:00:44 2025 GMT
Subject: CN=715e6ee7c7f5f20c65641f6f890938dcc82eeae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:48:16:e8:f8:9e:88:08:70:7f:f3:0a:03:7b:
55:7f:aa:2a:e0:f3:e7:14:ca:a0:62:50:b4:0e:cf:
0d:ad:79:0b:dc:c2:02:5d:f1:90:25:1b:c1:41:e6:
71:c7:a2:37:96:5a:f5:e7:21:e4:92:f2:dc:1e:f6:
fe:ab:e1:62:0c:a3:47:92:20:2f:b6:91:d9:18:d9:
34:a1:d3:1d:49:f1:ed:51:48:63:ad:9c:32:c8:87:
db:6b:f3:e9:e3:70:ff:a4:08:e1:d5:3c:e9:07:5e:
5f:9b:4e:c0:3c:1b:48:e2:3c:b9:4c:64:a0:ff:36:
01:22:6d:42:7a:18:07:6b:43:c6:d4:d5:58:10:eb:
e3:05:d3:4f:e3:c4:71:91:17:5f:00:4a:e7:f5:ae:
77:47:e5:a1:cd:75:55:51:fb:8f:44:16:01:a8:57:
82:b9:bb:0c:48:7c:97:10:05:d9:4a:8b:f2:51:14:
42:40:33:4c:1c:94:ba:bf:43:3a:50:0f:cd:9f:ca:
15:af:d6:9a:ac:95:ba:5a:be:63:db:e2:57:bf:63:
4e:54:c2:71:1f:1c:92:54:9b:06:26:74:b6:03:bc:
3b:7e:2f:8c:20:d6:81:fc:ba:30:29:d4:46:bc:eb:
00:43:61:cc:d0:c1:72:c6:68:66:39:74:29:fd:c9:
da:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5E:6E:E7:C7:F5:F2:0C:65:64:1F:6F:89:09:38:DC:C8:2E:EA:E9
X509v3 Authority Key Identifier:
keyid:DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ac:0c:7f:74:d9:da:47:c2:54:66:56:6b:11:0e:6f:31:a4:
60:a7:91:e3:ff:3e:fd:43:e5:b3:47:54:9b:f1:16:2f:25:a2:
7c:90:9e:ed:c8:f2:58:0b:36:1d:13:fb:30:c8:f4:07:09:54:
fe:42:c5:72:05:5d:da:b0:08:b3:4b:8a:49:e7:cd:1c:f8:99:
8a:fe:80:06:b2:5a:39:fb:67:d4:b8:14:80:c3:ca:ef:51:6c:
f2:1d:7d:90:9a:b2:5f:df:fe:92:49:90:2d:95:98:f5:cd:43:
87:90:70:73:a3:ba:cf:b2:46:e9:4f:67:f2:61:2e:33:7e:a3:
88:1e:c9:7f:74:19:e2:75:06:08:38:b7:da:a1:b3:6d:a1:06:
e7:e9:ab:a8:43:53:65:39:e7:b6:96:ee:e8:d8:2c:86:63:31:
36:1b:0e:96:16:d8:ac:74:c6:ac:a9:02:46:25:62:8e:c9:89:
1c:b0:60:3c:e6:5b:01:b5:2e:89:62:17:b2:31:33:d7:c7:f8:
9f:fa:ef:0d:fb:41:b4:82:bc:03:26:a1:21:e8:c4:c0:37:36:
96:da:8c:a4:04:0f:ae:c4:bb:ab:d8:cc:aa:5e:3b:ce:cf:25:
58:a8:2e:52:c6:98:1e:2b:09:4b:41:00:1e:22:dc:a7:14:df:
4a:af:8e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:40:32 2025 by rpki-client