Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
File: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft (raw, json)
Hash identifier: A3UnK7CzI4iN7mNUAZuCYQtdoOIzrBbXjsRP0PMvxJw=
Subject key identifier: BA:BD:57:D7:26:8F:B7:5D:A2:C6:2F:C6:62:B5:A3:5C:28:47:BD:0C
Authority key identifier: DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
Certificate issuer: /CN=dc4f90a93dc9427855644903cb70c1f74b931786
Certificate serial: 0194BD1764535487E1322AB7EB0C1EADCAB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
Manifest number: 022F
Signing time: Fri 31 Jan 2025 16:00:14 +0000
Manifest this update: Fri 31 Jan 2025 16:00:14 +0000
Manifest next update: Sat 01 Feb 2025 16:00:14 +0000
Files and hashes: 1: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl (hash: XqfltP7USt5Rb9yHy0S1Bw6NjWX04gXdCpotION8YCc=)
2: PT68lLdfHWq61L0p7mbOXLRwHhw.roa (hash: A4keDsv/7uOGmjAx+h6C5RlssIOEsmTqNcUP9OgH66s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:64:53:54:87:e1:32:2a:b7:eb:0c:1e:ad:ca:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4f90a93dc9427855644903cb70c1f74b931786
Validity
Not Before: Jan 31 16:00:14 2025 GMT
Not After : Feb 1 16:00:14 2025 GMT
Subject: CN=babd57d7268fb75da2c62fc662b5a35c2847bd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:5c:e5:3d:97:94:d1:b7:d3:f0:ff:06:5d:
58:cf:12:09:bf:0b:c3:4a:6a:45:50:20:22:9f:ff:
e6:1b:41:08:7f:0c:bb:02:d7:fe:fe:db:4c:18:46:
c0:51:d4:a5:7b:23:99:55:7d:d7:18:c0:5b:b4:3c:
54:59:5d:a9:be:b8:26:89:35:ad:ef:18:b5:af:e9:
3b:2e:7f:2c:8f:f6:e1:db:8d:b2:15:a0:f0:33:f0:
51:bf:6d:e4:2d:cf:1d:23:90:01:ac:1f:bc:e3:87:
ed:c3:fe:4b:29:ab:47:3c:c9:80:b8:16:fd:c7:2c:
1f:96:11:f0:7c:07:4c:15:a0:ea:40:4e:5b:1f:6a:
04:af:fb:c8:8b:86:7f:8b:35:fc:8a:07:af:cc:a9:
7a:f8:34:23:b1:b2:47:ed:c2:a1:9f:4e:02:44:b7:
82:51:b2:6b:76:40:c1:74:c6:7d:76:17:25:a7:3a:
6d:b8:7f:03:d3:6c:19:59:d7:5f:e0:00:a5:a5:c4:
5c:f1:12:20:73:54:0a:53:6c:02:fa:de:82:5a:28:
37:a2:1b:46:2d:18:9a:71:e6:0e:2e:a0:9b:0c:46:
6b:db:03:36:0d:ef:a4:3c:3b:e2:77:70:b5:2c:59:
3c:1b:4c:72:90:f2:bd:7e:32:30:48:52:a9:2e:fb:
e4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BD:57:D7:26:8F:B7:5D:A2:C6:2F:C6:62:B5:A3:5C:28:47:BD:0C
X509v3 Authority Key Identifier:
keyid:DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:dc:ab:ca:7a:8a:f9:9b:11:8e:26:fc:16:d7:91:95:7a:b6:
c4:d8:e2:71:8a:28:1a:49:be:60:05:12:19:d8:ea:10:b8:7f:
d1:d7:ea:16:92:dd:c8:e9:ed:0e:47:17:06:d1:c9:93:ce:67:
90:a8:bb:ca:2e:4e:4b:cd:7c:d4:49:db:c0:7f:6d:54:a0:4b:
52:1c:8f:71:c6:ba:ec:da:44:03:36:a5:7c:68:7c:b9:a5:bb:
1d:d9:33:05:a7:05:b7:c1:ef:68:ec:39:eb:66:44:1a:f0:c3:
6b:b7:a0:02:4a:15:fe:d4:94:bf:a6:f0:1e:dd:e3:51:15:ef:
0e:27:d3:d5:d5:52:fb:9b:f1:d7:bb:bb:fb:bf:ac:2f:27:7b:
8b:a0:16:43:6b:35:69:48:85:e8:97:c5:26:64:69:8f:16:01:
32:ba:72:4f:c0:f1:6e:ab:fa:f2:6f:ca:38:68:d3:5a:d5:f1:
bf:1f:d6:1c:4c:f0:66:6d:92:dd:68:09:86:ae:26:ef:37:6b:
69:d3:83:f2:a9:24:ce:42:70:39:e2:13:a9:ff:fb:b7:d5:78:
da:29:e9:64:7b:a4:5f:a5:91:0d:eb:c5:99:0c:2c:5b:34:13:
3b:a5:4e:12:ac:86:fe:b2:cf:db:84:67:0c:46:33:1a:85:8c:
44:35:07:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:59 2025 by rpki-client