Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
File: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft (raw, json)
Hash identifier: 5UXS1q7evy0WF6TA0+Wd7LufQn9v/2ycPUoG5HbPhlU=
Subject key identifier: 84:BE:79:FA:10:BC:75:45:02:24:D3:75:5C:08:69:3E:FA:2E:E9:B4
Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad
Certificate serial: 0194BD856B54C3C3E6C558A67893C3DABFC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
Manifest number: 0EDE
Signing time: Fri 31 Jan 2025 18:00:24 +0000
Manifest this update: Fri 31 Jan 2025 18:00:24 +0000
Manifest next update: Sat 01 Feb 2025 18:00:24 +0000
Files and hashes: 1: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl (hash: piRpcG3dZzsRNF67aiZcsnaYTWd0Yr5dyRMUpKN0n6k=)
2: 4PgtcW6j7xPoaJPy67vk2tMAXu4.roa (hash: fufIwyPbWqbMyORM68+h1FhSNKXbFzjdgG7WcXkavWU=)
3: cUPSsBWZ4irx4TApxzbroJpf5do.roa (hash: 6GPPFraRfTGyKrm5jIIIVF8Jt+KHlsZR8YFMwLgpuuE=)
4: xqYP462dYCt-0eOV8zXikdtxg14.roa (hash: YzKJbzm4Szaaz/1aNRHY+rmqu5/8YwNywOTzBNgzdeo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6b:54:c3:c3:e6:c5:58:a6:78:93:c3:da:bf:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad
Validity
Not Before: Jan 31 18:00:24 2025 GMT
Not After : Feb 1 18:00:24 2025 GMT
Subject: CN=84be79fa10bc75450224d3755c08693efa2ee9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0c:a7:c9:dd:90:1f:4a:71:1b:9a:df:7c:b5:
c5:0d:b4:50:52:cb:7f:bd:1a:91:fe:53:5f:69:d2:
27:a3:a5:59:d0:f2:3e:ee:ba:fd:8d:63:88:9b:48:
8b:c3:98:06:6b:94:a4:ac:be:ae:03:66:d9:dd:0a:
b2:08:42:96:3c:19:71:ae:74:6b:99:46:c5:d9:0e:
55:39:c0:d3:24:f1:98:63:04:69:38:51:5f:08:f0:
66:c8:98:a5:bb:13:f5:19:c2:f8:7c:5a:0e:af:97:
25:03:63:46:08:06:7d:42:3b:61:3d:22:fa:80:f1:
39:a9:83:e5:73:40:65:d5:5a:58:56:7b:63:a9:dc:
86:ff:70:83:08:fe:ab:13:50:72:b5:10:74:34:c3:
61:e1:50:77:43:e9:9e:41:e7:02:a3:5a:3f:31:69:
01:5e:c2:55:5a:b9:19:69:96:8c:86:97:9e:ee:08:
29:22:40:fc:99:a7:eb:e5:77:bb:9e:40:15:52:b6:
d0:f0:4d:23:af:c8:1c:7d:21:4e:f4:0f:fe:cf:10:
fa:8a:c2:e6:72:ec:40:a2:70:ab:db:96:0c:15:cb:
37:5f:f0:c3:f8:16:bf:02:44:ac:11:ec:62:0f:03:
25:9d:79:7d:ae:e3:16:a1:f3:62:e2:8f:f4:bf:20:
55:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BE:79:FA:10:BC:75:45:02:24:D3:75:5C:08:69:3E:FA:2E:E9:B4
X509v3 Authority Key Identifier:
keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f5:74:e0:31:66:96:b7:3c:01:71:f0:e3:16:70:70:f6:2d:
a7:5d:42:5d:bb:0f:8f:bb:df:4b:34:a2:c3:5e:39:44:8d:63:
77:c1:98:6f:f6:a3:da:4e:70:0a:1c:fb:dd:66:9f:5c:88:61:
e5:55:a1:1f:65:d9:2f:0b:f1:37:b6:3d:b2:f1:b7:b7:81:47:
eb:6f:55:2e:1b:d4:25:22:42:36:c4:1f:b2:23:22:0e:fc:16:
b9:96:f8:28:0d:b1:62:06:ed:78:64:43:5f:28:a4:29:07:79:
a7:4b:c0:cf:1e:9d:6a:d2:11:c4:9c:9a:26:34:a7:cf:01:14:
d1:f0:89:2f:ab:a1:88:d7:7d:08:71:2a:de:82:df:4a:1b:ee:
15:68:29:a2:4d:d1:19:08:ef:a8:53:4e:c6:22:93:34:4d:9e:
d9:3d:1b:55:fb:56:c9:3c:1a:c6:6b:9b:d9:6f:bc:cf:d1:1e:
a6:24:e7:43:a5:43:12:80:7f:c0:c6:71:c9:97:24:12:d2:91:
b2:1d:eb:87:5f:0b:62:03:46:79:3e:77:1d:d6:31:6b:09:c1:
cf:d3:fd:5a:30:17:91:da:9f:1a:ef:ef:61:a9:29:20:15:4e:
e9:7b:32:39:fc:27:fc:78:d7:66:ee:fd:99:94:ff:79:e5:87:
03:ac:39:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:39 2025 by rpki-client