Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
File: 3AWXDmUMKq8atqOjOoNzJGahUS4.mft (raw, json)
Hash identifier: k31zRqS5e0LGxLmwSD0hplc+/v55c2dme5SAr7CHk18=
Subject key identifier: FD:A1:EF:B7:87:28:8B:B3:18:8D:E4:58:5B:2B:A7:C4:86:7C:8C:DA
Authority key identifier: DC:05:97:0E:65:0C:2A:AF:1A:B6:A3:A3:3A:83:73:24:66:A1:51:2E
Certificate issuer: /CN=dc05970e650c2aaf1ab6a3a33a83732466a1512e
Certificate serial: 0194BCE0A57EAE0A4A869B5053E60DA45DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:26 +0000
Manifest this update: Fri 31 Jan 2025 15:00:26 +0000
Manifest next update: Sat 01 Feb 2025 15:00:26 +0000
Files and hashes: 1: 3AWXDmUMKq8atqOjOoNzJGahUS4.crl (hash: 2ndjzGh7QLMGefmTQYjAmRgkoEJgRaRpwV7+ruZH9wk=)
2: FzwFRP4-A3VF1cOjtYqnBZUlK8Y.roa (hash: arVJNSKTx0owboHk87Pz6q3TsmBB0DVqu8a1mnGjuAI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a5:7e:ae:0a:4a:86:9b:50:53:e6:0d:a4:5d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05970e650c2aaf1ab6a3a33a83732466a1512e
Validity
Not Before: Jan 31 15:00:26 2025 GMT
Not After : Feb 1 15:00:26 2025 GMT
Subject: CN=fda1efb787288bb3188de4585b2ba7c4867c8cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:92:97:39:ad:c3:0c:88:ab:3d:1d:a4:a7:51:
5b:ec:53:91:82:58:00:2a:09:68:26:23:88:38:34:
9b:6e:b6:fa:0c:a9:59:cd:f3:83:de:b2:c3:89:4c:
b7:f7:b4:a2:e5:87:52:26:bf:43:79:9d:6d:b9:d7:
34:52:bc:e2:e4:44:35:07:39:39:20:48:a0:d4:af:
ef:e1:b2:3a:4b:31:44:f3:a7:23:40:de:82:84:f7:
0c:b4:d4:ca:8a:ff:5e:ee:e9:88:29:8e:15:92:49:
99:8f:18:7e:9b:66:17:cd:53:44:ff:70:51:b5:94:
a2:53:70:80:ab:2c:2d:b7:b7:c6:9e:76:1d:ac:1e:
7f:0e:a3:1b:70:d9:49:fc:63:96:20:45:57:ee:23:
03:28:6d:dd:b4:f9:5f:b3:9c:af:84:86:09:f9:cc:
8d:5e:0d:e3:c9:a9:4f:c4:96:e6:97:b4:e1:ff:c8:
6a:ab:51:f7:64:1a:0e:3f:f5:8e:3c:e1:db:9e:34:
1f:77:03:3c:03:18:eb:73:13:f0:b0:2f:34:77:12:
ec:94:e4:a7:dc:ea:43:28:90:50:95:ea:13:f5:f7:
92:35:e4:74:cb:20:49:4b:b1:a7:f8:aa:7c:a7:80:
88:83:fc:d1:01:84:e8:6b:3b:af:61:44:87:8e:bd:
04:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A1:EF:B7:87:28:8B:B3:18:8D:E4:58:5B:2B:A7:C4:86:7C:8C:DA
X509v3 Authority Key Identifier:
keyid:DC:05:97:0E:65:0C:2A:AF:1A:B6:A3:A3:3A:83:73:24:66:A1:51:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:12:75:62:46:fe:c2:8c:f2:0f:4e:2e:bb:fe:e4:35:af:59:
e4:92:cd:cc:e8:91:82:f5:cc:9a:b7:05:aa:ba:ff:b8:7a:f0:
5c:e3:97:72:24:3d:ca:f6:bb:32:2f:cc:fd:71:18:9b:d1:95:
80:15:b2:03:08:86:13:ca:06:c3:8b:3b:2b:79:29:31:00:c0:
0e:b0:4d:b9:b7:3d:a9:9a:b8:c1:17:3a:0e:08:c9:d0:cd:70:
40:27:6f:d5:a3:4b:f2:e8:4f:23:4d:ee:22:13:ed:e5:10:f0:
cc:0c:0d:92:77:a8:db:91:85:59:50:5c:0b:05:bf:23:4b:67:
31:11:76:db:cf:da:cd:4b:93:ef:89:ee:96:67:0b:9c:84:e2:
71:44:68:17:d5:da:17:1a:62:96:d9:d5:7d:37:bf:75:76:f9:
c6:2b:11:13:7a:5d:a4:7c:f9:4a:9b:c6:eb:56:fe:8c:24:0e:
95:65:e7:28:a7:47:d3:6f:b5:17:c9:98:7c:f4:9e:ce:1c:0f:
74:cb:2b:9a:0b:3c:d9:31:3e:c4:9d:66:3d:fa:fd:83:c4:34:
1b:7a:a1:c1:05:e0:c0:36:52:8c:c4:dc:a7:8a:51:2c:51:46:
d3:67:8b:6e:c9:1b:9e:7e:6d:08:e6:f3:2d:6a:3c:5e:65:dc:
66:bf:82:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:45 2025 by rpki-client