Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
File: 3hm6qMiAqUWdxfRNZ13qTvltve8.mft (raw, json)
Hash identifier: uEBmLGmYk6bGEk/FFjXTEJw295W24y6pPS4htIPiyCA=
Subject key identifier: F0:BB:53:D8:29:96:6C:AE:77:10:E8:53:A6:D3:27:04:4B:D8:B2:19
Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
Certificate issuer: /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Certificate serial: 0194BD854C9E3F3E4415CFE73CD504D29E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:17 +0000
Manifest this update: Fri 31 Jan 2025 18:00:17 +0000
Manifest next update: Sat 01 Feb 2025 18:00:17 +0000
Files and hashes: 1: 3hm6qMiAqUWdxfRNZ13qTvltve8.crl (hash: jf2mBireHQzSwdpA8O0fkTd5l2atvaZVo3nDiQvaY8o=)
2: KW800OmJGIdT7uikc0QcQ975IG4.roa (hash: dwHKNqVSICACPiCia+yUDPbsR26gug+E9f0Pra0zV6s=)
3: cEC9bPBmfz9Z43qJKU1IUGSC0lI.roa (hash: 4mEdeYIHzDK/DCJ4cVdrdS7DkgcRn2OeioiYgUbofOs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4c:9e:3f:3e:44:15:cf:e7:3c:d5:04:d2:9e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Validity
Not Before: Jan 31 18:00:17 2025 GMT
Not After : Feb 1 18:00:17 2025 GMT
Subject: CN=f0bb53d829966cae7710e853a6d327044bd8b219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0e:c8:61:81:db:f7:d8:b2:2e:76:9c:77:d0:
92:98:28:90:16:20:7e:2c:38:1c:db:fd:f2:4b:62:
d7:92:7b:81:f2:fb:c4:98:50:a5:6b:b6:96:49:9b:
cd:34:e2:b7:fd:4d:c5:ce:27:22:58:e0:46:c0:2f:
9c:8d:d2:5d:e8:4d:66:e3:81:55:e0:c5:9d:6b:33:
2b:23:7c:0b:c9:8c:f2:25:bc:87:ed:61:e1:fa:c4:
cd:a5:46:4c:83:c2:2d:0c:53:b9:66:15:dd:20:df:
16:b0:5d:be:b0:b8:00:e8:df:4d:b8:50:22:56:15:
63:a2:66:86:27:13:6d:22:6a:ce:a2:40:d2:23:c2:
d7:ff:ad:8f:04:03:7e:bf:c3:0f:31:aa:e2:e5:6f:
92:12:a6:24:03:a7:fe:82:ea:7f:1d:75:5f:a6:12:
25:ec:98:48:f7:72:2f:c4:06:35:b6:7c:8a:2c:ae:
77:d8:80:cb:7a:83:69:f5:77:e2:bd:10:c8:09:83:
49:60:f7:f6:76:33:4b:31:f7:01:34:f9:01:53:68:
17:8d:39:24:7b:ae:a3:61:24:3e:a4:b0:fd:dd:44:
1e:82:67:d9:aa:6b:13:1e:9f:40:b5:06:e4:cd:98:
d8:ec:d0:f6:db:25:79:96:e6:05:c3:c0:30:91:f8:
aa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BB:53:D8:29:96:6C:AE:77:10:E8:53:A6:D3:27:04:4B:D8:B2:19
X509v3 Authority Key Identifier:
keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:64:e3:51:79:93:6d:fc:a5:ee:4f:ef:80:41:29:e0:2a:39:
03:90:fe:ab:96:f9:6a:11:72:c5:3d:c8:4f:11:0d:a5:d0:01:
ff:64:d8:bd:e4:c6:9e:82:ec:92:62:15:a7:00:a1:88:97:5d:
bf:93:25:88:0b:81:b3:64:af:64:14:f3:b6:10:f2:79:76:40:
78:cd:b0:9d:e9:55:09:80:f8:96:a2:4e:06:94:ae:9d:75:2c:
96:4d:79:bd:bb:cb:23:77:98:24:69:a5:98:ad:40:18:f6:5c:
7b:dd:6a:f7:4c:a2:47:95:d6:08:1b:73:07:a9:be:26:50:f4:
9e:73:3b:fa:9e:ee:a7:59:62:ce:7a:a7:d8:b3:76:07:6a:13:
53:ed:07:9f:7a:ac:46:5e:00:df:01:26:cb:b9:22:57:55:88:
13:8b:47:d3:9e:be:e1:e3:79:7d:c0:7b:fa:12:29:32:20:74:
ce:98:a3:0d:a2:fe:53:2d:2d:cc:8d:46:b0:7d:4d:a5:2f:77:
ee:5f:b9:72:48:02:c6:8e:d0:b5:18:46:9e:66:75:ee:c0:b1:
96:4f:83:f6:7a:1a:10:79:a6:b3:f9:87:12:55:3f:49:97:4b:
47:8d:a9:ba:b5:08:f0:62:41:f9:0d:df:e7:0e:16:c2:53:4d:
b5:ab:65:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:30:27 2025 by rpki-client