Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
File: PRH7pD9XqwRF5UL87suHaBZXzPM.mft (raw, json)
Hash identifier: ulPfZIMToGVMp2Hlm+RJUfIBSRXbH3gz2bmoQmqlxh8=
Subject key identifier: 13:DB:CC:2F:BD:15:92:30:5E:7C:9D:4E:3D:BA:30:5A:A8:00:F5:E4
Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
Certificate issuer: /CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Certificate serial: 0194BBCE1DE3CFB4D41531B3BA3C1C247C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
Manifest number: B3
Signing time: Fri 31 Jan 2025 10:00:34 +0000
Manifest this update: Fri 31 Jan 2025 10:00:34 +0000
Manifest next update: Sat 01 Feb 2025 10:00:34 +0000
Files and hashes: 1: 2DxOeFRwGr0ZkLmLFLoh-xJZObE.roa (hash: aeAg8fL5FqA68LiiZmemChuMc/666QpvAefI6BAnFLU=)
2: PRH7pD9XqwRF5UL87suHaBZXzPM.crl (hash: 1TUXtKmQsDienQ2GX9fdYdJdg9Bc9/mKwBhARIRzSiA=)
3: QubVM_6N5lx1EgDJtxcjPI_RV3o.roa (hash: 0U5OEeLVzA3Fo3jdio9FkyyDkZiO1CmcUt6CGyuWF74=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1d:e3:cf:b4:d4:15:31:b3:ba:3c:1c:24:7c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Validity
Not Before: Jan 31 10:00:34 2025 GMT
Not After : Feb 1 10:00:34 2025 GMT
Subject: CN=13dbcc2fbd1592305e7c9d4e3dba305aa800f5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7c:64:5f:a1:fd:10:1b:23:5a:23:3f:a3:87:
31:db:f0:ad:82:f7:5e:86:05:08:c6:e2:f1:61:35:
8a:8f:39:97:50:7c:3f:35:25:c0:8a:f0:5b:b9:42:
aa:90:4f:1b:70:2a:f3:20:b3:7d:6d:e0:17:33:93:
32:77:38:2b:a2:48:cb:dd:8d:7f:b3:58:3c:20:67:
18:ed:c0:ee:6c:56:cd:c8:cf:8c:11:68:ca:94:2d:
1b:a3:4b:4e:70:7a:41:74:93:b3:44:d5:3d:db:c8:
5f:ed:aa:57:5d:57:3d:0c:97:66:2b:35:1a:12:e2:
d8:85:11:b9:e5:f3:a1:23:c6:38:fb:ed:0d:87:6d:
0b:10:f5:13:04:97:2c:2d:bf:f1:6c:c6:7f:58:5c:
c0:23:11:09:02:e1:be:8d:89:dc:51:a1:5f:ed:73:
81:02:eb:22:0a:19:8b:3f:4e:ad:c6:9c:39:7b:ef:
72:52:02:4e:eb:3f:1d:5c:aa:05:09:ca:07:57:db:
0b:e0:f9:ee:0d:73:a8:a0:51:01:be:1e:06:9b:2c:
b2:f3:61:4d:ff:58:f6:ca:8d:75:d4:bf:82:2d:dc:
a7:98:11:d2:d3:e5:8d:d0:a0:d0:a6:bc:d2:36:5b:
1d:00:3e:61:d2:a2:d0:4c:ae:2a:51:93:82:ab:3f:
0e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DB:CC:2F:BD:15:92:30:5E:7C:9D:4E:3D:BA:30:5A:A8:00:F5:E4
X509v3 Authority Key Identifier:
keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:bb:93:f0:00:d0:6c:14:4c:e3:ab:84:a9:ec:6e:eb:5c:1a:
95:f9:76:ea:31:b6:12:f6:c4:b9:d1:4c:73:c8:2e:d6:b7:b6:
3d:26:af:3e:d3:08:c9:7c:a2:0f:79:43:77:37:47:18:06:cd:
aa:b5:8f:92:af:d8:f5:56:bb:df:63:60:30:79:17:e9:43:91:
07:bc:8e:28:3e:ea:b7:ab:d5:b8:bb:0d:b4:34:2d:2c:27:e6:
79:51:c1:9d:67:aa:cb:c8:12:09:90:5c:b1:b5:06:93:37:ff:
4d:7a:67:2c:aa:09:09:ab:c7:63:70:a0:ab:52:60:41:b1:46:
71:5c:52:b9:87:3b:9c:b8:c5:47:d4:46:7d:1d:5b:2c:f0:85:
2f:68:8d:56:a6:b2:3a:33:b2:2e:7b:47:44:82:ac:d4:bb:7a:
5b:c4:9d:4a:f2:5c:ea:23:30:56:0f:1f:00:ca:51:54:22:20:
c1:c5:65:a8:84:79:1f:e3:3b:0a:4d:20:7a:40:45:42:6a:09:
0a:e4:50:85:b9:8e:7f:6f:9e:23:ba:9f:45:70:84:a1:b8:f8:
f6:c8:8f:bc:eb:4e:56:1d:9c:65:01:4a:c6:31:32:54:da:02:
88:87:5f:87:dd:66:50:28:33:71:d7:6a:18:ce:bf:aa:ed:cc:
f1:64:be:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:33 2025 by rpki-client