Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
File: PiDHANmNdqnGQBc4ifk2faneiZc.mft (raw, json)
Hash identifier: 3TblObjLlvkzATR5cbdzDI1Cpf1Gzj3ABTPpk5eZ6Os=
Subject key identifier: 41:9A:B5:80:85:82:51:F6:0E:10:90:18:05:BF:A5:8B:3C:6A:BB:67
Authority key identifier: 3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97
Certificate issuer: /CN=3e20c700d98d76a9c640173889f9367da9de8997
Certificate serial: 0194BC04C30F9EF6FCF2852B056F60406DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
Manifest number: 1433
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: 8HB6gBMH1OXCC4HSHxjMBJPAXNM.roa (hash: 6HXyg8j0+e0B50uY00MrE32ixPRXRhbFhui9gW2K51g=)
2: Kc-64DdvpDRYpryEgWVmiZAxLb4.roa (hash: fJnE6S6w3zcsSEIUNp19rp72G3CDdr3kfBB8oEmZDtA=)
3: O10H_NXAAD1i_gphnWNg3Wq_zvU.roa (hash: S3bnGRkcKICV24Gqt4GllsXulmARfu6sriFJ2/wRC7Y=)
4: PiDHANmNdqnGQBc4ifk2faneiZc.crl (hash: Sxivbx6hhh+wsRZTcBmfrHi631LWbG1epH5H/gB7W4g=)
5: dqzUrFY323Ep8f9_EznYPf-FHbk.roa (hash: tHn5PdWDaptFE9kcckqjz78Qa974P1HY2yrHA0Adm4E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c3:0f:9e:f6:fc:f2:85:2b:05:6f:60:40:6d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e20c700d98d76a9c640173889f9367da9de8997
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=419ab580858251f60e10901805bfa58b3c6abb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d9:d3:e0:bd:52:f9:99:a5:05:41:60:35:39:
92:53:10:89:e2:21:00:db:18:c5:48:78:e5:ed:0c:
d9:e9:ca:15:50:49:f8:3e:31:ed:fa:a0:b4:83:75:
ad:43:9d:bf:3f:51:01:f0:e1:45:81:a1:8d:e2:8e:
40:68:de:4c:b0:d3:a0:35:59:eb:3c:2c:9c:ed:64:
0d:00:a4:83:8a:8d:2a:db:cf:2d:2a:30:bf:0a:ea:
6a:1c:9d:31:9f:c0:6c:37:0b:64:64:03:4a:10:c4:
1d:4a:a9:8e:aa:1d:97:0a:71:e0:d2:c8:f9:27:4f:
51:d2:70:26:4e:b4:ce:53:0e:17:79:cf:2f:33:7e:
8a:68:a9:d1:2b:16:33:ef:23:95:5a:45:20:68:15:
80:18:6c:fe:f1:f2:79:3b:49:58:3c:24:f7:fa:69:
45:9e:d3:84:96:84:e9:db:16:b3:1c:7f:e9:a0:9b:
9d:91:24:9c:a3:1d:5b:ca:2a:82:88:b1:43:64:59:
89:00:ec:58:77:06:f1:f3:94:0d:6f:92:db:0b:29:
b3:6a:c3:18:5c:57:2e:2f:c0:6d:a5:2e:1b:cf:10:
a5:bc:3a:46:eb:f0:79:01:4f:94:67:68:32:36:4b:
0c:1e:03:5c:3a:04:19:53:74:3c:c3:c6:f6:40:13:
a1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9A:B5:80:85:82:51:F6:0E:10:90:18:05:BF:A5:8B:3C:6A:BB:67
X509v3 Authority Key Identifier:
keyid:3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:7d:a4:b5:98:b8:4f:3d:db:25:b0:f8:41:2c:68:43:90:e6:
86:64:b9:d4:84:2b:0d:15:22:2d:17:77:5e:85:a7:ce:1e:df:
c4:68:36:89:b9:bf:97:b9:a5:a9:ba:f5:ee:39:80:ce:8b:6d:
a9:db:8b:36:fd:53:6f:f2:1c:65:df:47:04:43:f9:f0:37:41:
cf:1e:47:a9:de:95:02:6f:99:fc:4d:74:16:c3:e2:b4:ff:71:
6f:5d:ce:12:50:30:00:18:bc:27:46:78:84:25:ef:fc:47:3f:
10:27:24:0a:ca:2a:1d:a7:f9:28:d9:c6:bf:d9:0d:da:a1:30:
33:3c:96:46:7e:58:74:e3:a3:91:70:ab:d9:3c:22:3e:85:b7:
77:41:90:de:62:86:7a:0f:2b:69:38:05:e9:74:6d:3a:b0:98:
7c:f5:d4:fe:56:08:b4:0a:47:7e:c6:05:14:49:d0:a1:1f:15:
d2:79:b9:50:4a:99:86:22:4c:a9:e0:9c:7d:8d:35:eb:af:44:
e2:20:96:6f:0e:62:82:f7:11:07:85:c0:42:90:1c:2a:ca:80:
02:eb:40:88:b7:b3:4a:a3:a9:d9:ae:e6:9b:df:94:14:6b:62:
08:18:f6:ab:ae:e4:52:ac:06:4c:c8:bf:db:0c:58:2a:42:53:
b3:7d:1f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:26 2025 by rpki-client