Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
File: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft (raw, json)
Hash identifier: kPMhPAUeCnav4UEiyKIhM2wP0rI4nO9reUtCaaCm9bM=
Subject key identifier: 62:12:84:B3:1A:09:CB:24:02:7B:C2:10:18:B0:78:31:37:95:3D:2D
Authority key identifier: DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
Certificate issuer: /CN=de23f18c576d6fa609133533c0d0e38d7732c652
Certificate serial: 0194BC04CA63E2B980A9F94A68B772413463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
Manifest number: D2
Signing time: Fri 31 Jan 2025 11:00:18 +0000
Manifest this update: Fri 31 Jan 2025 11:00:18 +0000
Manifest next update: Sat 01 Feb 2025 11:00:18 +0000
Files and hashes: 1: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl (hash: p3JpDuOLez1xylKh5Wv4V3LZlB1jVWiGsNw/nwZSooU=)
2: _uzKcHUnRqCblBfJ7LQOWwPDs9E.roa (hash: QtEg8CgvNKFjK8sDnq+KQm/gvMScP6wDUlBc5heZNlQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ca:63:e2:b9:80:a9:f9:4a:68:b7:72:41:34:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de23f18c576d6fa609133533c0d0e38d7732c652
Validity
Not Before: Jan 31 11:00:18 2025 GMT
Not After : Feb 1 11:00:18 2025 GMT
Subject: CN=621284b31a09cb24027bc21018b0783137953d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:13:e3:ac:2b:9b:ea:72:df:f0:b4:6c:da:
61:1d:a1:66:38:18:db:31:7c:74:4d:66:81:7e:9e:
92:b7:f1:f0:1f:b5:d6:67:a5:4d:d6:8a:6c:00:6f:
90:14:d2:17:4d:f3:cc:af:39:64:fa:ca:a4:c2:77:
69:67:7f:eb:dc:97:a3:c6:4b:92:05:a0:02:dc:ca:
00:15:7b:b1:e0:cd:a3:82:02:b7:05:e3:fe:61:ac:
0c:2c:cf:f8:b5:36:0d:f3:d2:97:0b:c3:ec:b8:d0:
c3:6c:9e:54:d4:89:dc:b0:7b:62:29:ca:0e:b8:7a:
0b:a7:a3:23:6c:2b:08:62:e4:3a:aa:9d:eb:ee:ee:
e5:39:da:91:31:97:73:e4:ee:3d:ef:2f:2b:5b:e5:
2a:78:f4:09:3a:23:10:44:bd:e1:26:26:f8:7d:0a:
c1:e1:69:0b:c3:43:dd:ee:27:38:79:a6:03:51:a4:
9e:2e:2a:9e:4b:4a:8d:11:e4:0d:66:c5:db:03:e3:
cb:08:26:cc:0c:c3:ff:e3:3d:8d:45:cd:fb:d8:ff:
d7:1b:60:d2:d3:cc:b4:08:c3:2a:ab:75:d6:6d:97:
57:58:b8:24:99:bd:f6:92:cd:94:b2:a1:88:b8:d8:
7f:46:23:be:a6:a1:e1:27:66:34:6c:0e:d7:83:88:
fb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:12:84:B3:1A:09:CB:24:02:7B:C2:10:18:B0:78:31:37:95:3D:2D
X509v3 Authority Key Identifier:
keyid:DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:8a:a9:34:b5:b1:bb:9c:be:54:f3:91:dc:01:58:79:a8:b1:
62:92:0a:ff:eb:4f:39:c4:08:7a:a0:ea:c0:45:49:f0:24:29:
0d:0d:88:e8:3f:31:75:8f:53:fe:3d:a0:6f:61:81:6c:d2:5c:
23:b2:24:3e:79:2d:34:29:2e:4f:51:ba:59:e6:8d:94:2f:74:
b7:95:82:57:2a:68:b8:5c:29:05:e3:2a:42:05:b1:bb:19:21:
70:75:32:99:73:7b:63:f7:86:a7:e0:73:ab:9f:b5:f6:78:3f:
76:f9:72:bf:45:bc:3d:12:15:66:8e:aa:f5:db:57:f4:2d:25:
9b:c4:6f:5f:96:74:d4:44:51:75:e9:c0:b3:27:0e:70:26:de:
ea:7e:2f:21:97:ae:15:17:41:ea:22:28:5b:7c:36:bb:76:01:
a4:19:b3:69:fa:5c:2a:14:3a:83:01:21:85:f9:c6:d2:fe:40:
18:69:45:25:19:43:cc:9e:70:df:b7:f5:c3:02:e2:68:38:50:
e9:18:78:9f:7b:4e:f3:8a:db:9e:5a:14:c4:c5:24:9f:67:7c:
3a:d9:15:2a:3a:ca:99:2a:7d:2d:60:ef:92:cd:7b:22:4d:1c:
39:44:cc:ad:15:4f:53:d4:8a:33:49:5b:52:1a:92:ad:bd:6a:
a6:55:a0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:36 2025 by rpki-client