Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
File: 3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft (raw, json)
Hash identifier: DQ9xUm5GMRuH5JwgXSeKP1K5ihEgOTC3RRfXRD73hPs=
Subject key identifier: D8:01:9D:FF:C8:B1:09:37:E2:9F:9B:CC:76:D0:29:92:D9:1C:0C:9E
Authority key identifier: DF:0F:32:E5:F0:98:B8:6A:87:94:82:5C:81:12:2D:A9:53:46:62:84
Certificate issuer: /CN=df0f32e5f098b86a8794825c81122da953466284
Certificate serial: 0194BCE067768A0C78B809E86F1EB2FFC938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
Manifest number: 049E
Signing time: Fri 31 Jan 2025 15:00:10 +0000
Manifest this update: Fri 31 Jan 2025 15:00:10 +0000
Manifest next update: Sat 01 Feb 2025 15:00:10 +0000
Files and hashes: 1: 3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl (hash: LIyRRHIEQic3jgPR9miFViPdweqib15cjNwOCtGl2K4=)
2: gBjKKqKZuEY4WvRauB7caOw1S-0.roa (hash: KcvP3QvpprIZ7nrbS5q17f/tcN31DqhQB7sqPQGvSG8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:67:76:8a:0c:78:b8:09:e8:6f:1e:b2:ff:c9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0f32e5f098b86a8794825c81122da953466284
Validity
Not Before: Jan 31 15:00:10 2025 GMT
Not After : Feb 1 15:00:10 2025 GMT
Subject: CN=d8019dffc8b10937e29f9bcc76d02992d91c0c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3b:f5:56:5d:00:7e:1f:37:16:bf:9f:ad:c2:
48:ac:80:e5:cb:95:ae:05:7d:0a:59:f6:4e:ca:86:
67:8a:74:51:ce:e8:a1:a7:c0:55:99:a8:1b:a9:dc:
8b:b7:bd:8a:cb:da:a7:9a:b7:79:da:df:ca:bb:49:
ad:6f:61:82:e5:4f:ad:85:d5:4d:6b:78:0a:da:fa:
85:98:09:c1:89:23:3c:1e:75:f1:aa:88:e5:de:60:
ac:36:5e:a2:50:6c:ca:35:82:56:7f:b4:b2:26:46:
da:f2:0f:f1:e5:3f:e0:04:34:3f:3a:81:7c:50:bb:
ec:04:df:b2:01:9b:49:b9:6e:a1:20:50:eb:55:23:
20:b6:3a:31:41:e5:99:19:b8:88:29:13:3e:c5:af:
f1:47:82:78:66:26:b3:0c:1e:a6:78:52:5b:d8:17:
6e:5a:a9:6a:f5:40:d0:3f:1a:dc:fe:d5:72:81:51:
73:c2:a0:9d:5c:05:8e:88:0b:46:73:0d:9b:07:36:
99:50:38:80:4a:e4:eb:a1:f9:54:6a:2c:26:8b:e0:
5c:d8:72:71:53:7b:bd:1b:91:81:c7:50:9f:5e:9a:
35:c4:97:61:bb:57:2d:3c:23:50:0d:53:44:6b:3b:
13:5b:3b:25:98:88:8f:3a:e9:9b:9a:99:07:be:2e:
8f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:01:9D:FF:C8:B1:09:37:E2:9F:9B:CC:76:D0:29:92:D9:1C:0C:9E
X509v3 Authority Key Identifier:
keyid:DF:0F:32:E5:F0:98:B8:6A:87:94:82:5C:81:12:2D:A9:53:46:62:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:da:ee:0c:87:75:f4:62:c0:ce:d4:40:21:8d:4f:0e:20:f2:
2d:bc:79:01:2c:38:e0:cb:e1:34:b0:83:d0:c6:94:fe:cf:05:
e5:95:7b:0f:b5:5b:9d:f9:5e:2d:3c:98:cf:d3:6f:24:6a:76:
56:12:72:d2:b5:23:d6:87:0d:7d:2c:56:06:b0:c4:03:6b:7e:
0f:e8:d1:14:36:65:24:08:f6:7e:fa:81:e9:04:ed:f5:c1:ef:
83:c8:e9:9b:8a:20:c9:c5:8b:57:89:be:7d:eb:06:49:3c:04:
d9:c7:45:b4:38:6c:31:30:79:96:17:83:11:05:32:8d:88:ce:
0b:5e:c7:0f:93:bb:29:cf:84:92:a7:85:c6:7a:17:fd:46:8d:
d9:a0:c8:f8:90:1d:81:07:6c:2f:3c:f4:70:25:a5:31:1f:01:
39:de:29:2d:69:51:29:f2:5d:fd:ea:d7:64:d3:c0:66:e7:30:
96:ca:5e:88:7c:17:39:45:c3:d0:9b:06:66:c0:a9:68:07:c7:
51:01:a9:8e:26:82:62:0b:df:36:6b:39:12:4b:2c:08:8f:21:
b5:2d:b6:f7:33:f8:ce:f2:14:79:67:81:de:bb:6d:3d:28:f1:
b6:5d:42:2a:07:79:56:60:75:91:9f:39:66:b3:0e:a6:c5:2a:
1b:98:a4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:21 2025 by rpki-client