Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
File: 3fHfWY9KjzotB0zLb20WtU0dERw.mft (raw, json)
Hash identifier: oKME/UCPsK9r05Y0HbVvGL/rUeQfSTLDTi0MZMf3XiQ=
Subject key identifier: AB:72:90:77:94:10:6A:24:F7:73:91:EF:92:D0:4E:84:FB:51:A9:4C
Authority key identifier: DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
Certificate issuer: /CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Certificate serial: 0194BCE0703BFA43136DFA9C53D0F934B7A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 15:00:12 +0000
Manifest this update: Fri 31 Jan 2025 15:00:12 +0000
Manifest next update: Sat 01 Feb 2025 15:00:12 +0000
Files and hashes: 1: 3fHfWY9KjzotB0zLb20WtU0dERw.crl (hash: 20Y8sV0bnvBlhXE2PwLVQzDphjPzKaGkRmqNHrAxv0I=)
2: 5395RGU-O7_Y-Wk8o5ckF03TEl8.roa (hash: 2x9LkbbQVmDZR4+CDqZEC8HuaScYKr9cs6YHpuOZlvY=)
3: JRT-ehjK87EWSX2wN_VxdPNgZVU.roa (hash: FFbMq3Jl0t/JwkKVVNHldSFfVrz4m+b2CW8bGskb98A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:70:3b:fa:43:13:6d:fa:9c:53:d0:f9:34:b7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Validity
Not Before: Jan 31 15:00:12 2025 GMT
Not After : Feb 1 15:00:12 2025 GMT
Subject: CN=ab72907794106a24f77391ef92d04e84fb51a94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:26:56:87:62:f8:d4:12:e8:dd:14:b9:92:f4:
ea:6c:5e:31:ae:47:93:24:17:e1:26:3e:46:1e:8c:
72:71:85:a6:a7:9f:08:71:3d:b1:63:0f:e9:56:52:
b2:f7:2d:bc:41:45:ed:10:88:2a:3d:4d:1e:25:88:
20:9f:f5:99:63:7d:b8:af:77:a2:6b:0c:c6:e0:cd:
2e:14:1c:52:49:60:86:06:13:56:16:21:27:d1:db:
4e:18:c5:db:05:7a:37:91:32:6c:f6:c5:d9:47:f7:
d3:a6:4a:11:15:b3:02:8c:91:75:37:29:75:e4:6a:
6e:79:01:a9:c1:64:7c:d3:04:85:8a:84:f0:3b:d6:
6a:d3:e5:fe:fe:15:dc:b1:0b:3a:5a:ef:98:9d:00:
40:c4:4f:55:01:1a:98:96:61:47:db:7f:00:f1:64:
2f:5a:fc:7a:28:b6:de:f6:fc:d3:0b:e1:d7:61:48:
76:9c:82:79:c0:f2:e9:15:ff:03:c9:5b:b3:4e:54:
a7:bb:41:0c:d8:1d:93:fe:9d:57:24:b7:51:9f:df:
2d:f1:76:ba:8c:bd:7e:9d:ba:f8:33:83:57:bf:61:
09:a7:12:24:f5:43:a3:79:59:ad:f1:13:4a:60:10:
ae:3b:6d:4d:17:da:99:64:9a:40:90:00:eb:49:7f:
47:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:72:90:77:94:10:6A:24:F7:73:91:EF:92:D0:4E:84:FB:51:A9:4C
X509v3 Authority Key Identifier:
keyid:DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:09:28:54:66:fb:0d:c8:e5:27:61:52:ca:f3:b4:77:a2:d4:
7d:54:24:c9:00:83:ce:6b:e4:b2:97:24:24:95:38:4e:24:1a:
82:ad:c6:03:fa:86:e1:ef:80:f6:7c:88:d5:8f:ec:0f:60:95:
42:55:6a:2d:c3:d4:b1:e9:f6:cf:00:72:f8:30:7c:6a:a9:da:
81:4e:d8:8f:ed:fa:ba:3d:38:65:54:01:2a:2b:38:3d:1f:b5:
df:fe:96:61:06:e2:0d:2e:f4:5e:32:de:06:c1:52:7e:08:7e:
f6:64:a2:2c:47:be:b3:39:77:ca:66:8a:f4:05:a8:b7:a1:0c:
4d:18:7e:e8:cc:16:25:52:87:6c:70:06:eb:88:2c:04:f6:9c:
0e:1c:fd:2a:ab:75:51:7c:e7:d8:6a:49:b7:9d:6b:aa:55:ca:
29:7e:09:37:62:01:2f:0d:55:0b:1a:17:29:cf:8e:17:78:3e:
a2:0d:22:a4:2a:63:20:d8:35:ad:86:79:2c:34:32:e4:f0:bb:
72:7d:b7:46:e4:b9:01:fa:8e:da:e4:68:4d:5a:3c:05:dd:89:
86:32:be:f9:88:70:88:2d:7c:da:7a:27:fa:ab:1f:eb:64:26:
8a:ac:56:be:9a:c1:8d:00:e6:31:97:de:1d:3e:f8:2a:94:32:
7d:a0:21:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:17 2025 by rpki-client