Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
File: 3-xclF0DU12WcwlREFRrHJjmGGA.mft (raw, json)
Hash identifier: PhAxvxznsiOrLCaDP/XTBon5gmHCYnIJUwkw/x0+1ds=
Subject key identifier: D8:55:4F:5C:D9:DC:A8:FA:8B:EA:D2:C8:50:43:DB:A4:5C:3E:4B:6A
Authority key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
Certificate issuer: /CN=dfec5c945d03535d9673095110546b1c98e61860
Certificate serial: 0194BC3BE5FA2C130852E513D98DB6A8A3DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
Manifest number: 0DDE
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: 3-xclF0DU12WcwlREFRrHJjmGGA.crl (hash: RjBVrYY4KLic4ySApilEsXXE/GtDnCVunLaaFYl8RLs=)
2: c9o5omZ6L0iy-4hOihQzK8OPns4.roa (hash: 1kJZAp6d0yNMzeCujPn+gVtlVbLTFpBiKQFw2wsKEIc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e5:fa:2c:13:08:52:e5:13:d9:8d:b6:a8:a3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfec5c945d03535d9673095110546b1c98e61860
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=d8554f5cd9dca8fa8bead2c85043dba45c3e4b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:e2:09:05:80:9f:76:61:b8:98:f7:99:04:
90:cc:32:0e:b2:a4:e8:66:47:23:c8:1e:54:73:df:
dc:23:d3:50:e1:38:0e:06:f9:76:5b:32:68:38:8d:
3f:e7:ee:c4:56:80:5b:ec:f3:3b:5e:3b:ed:60:8c:
38:4a:04:15:5c:ab:a4:78:04:9a:14:13:b7:2c:11:
a2:fc:63:58:6a:bd:b4:61:d5:9c:02:b5:0e:93:a7:
77:53:d7:bb:4e:ee:8e:33:2f:4d:e7:c6:ef:55:e0:
d8:de:93:97:25:a2:b7:ca:38:e7:10:84:7b:55:98:
ed:29:c7:85:ff:73:22:00:7d:5f:5c:b0:48:58:1e:
0e:18:36:ba:7f:d1:d3:7c:fb:dc:40:d0:70:86:47:
eb:31:f7:44:dc:4f:3a:c6:ff:1a:5b:3a:c8:e1:1d:
8e:de:e9:93:4b:bd:97:8d:c0:a3:79:00:34:d5:71:
6e:cf:fd:c0:ae:75:eb:3d:6c:4d:db:52:58:98:38:
e3:e4:a4:a4:1a:3b:56:57:02:8f:df:da:29:84:62:
52:07:52:6e:9b:ff:29:9c:9d:b0:d1:da:94:a2:ca:
92:fa:a0:b1:64:8a:c4:73:cd:98:b3:24:22:04:07:
62:a1:e4:1e:e1:45:aa:64:f8:a0:63:45:4b:8f:64:
85:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:55:4F:5C:D9:DC:A8:FA:8B:EA:D2:C8:50:43:DB:A4:5C:3E:4B:6A
X509v3 Authority Key Identifier:
keyid:DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:64:14:6d:a9:c3:29:e3:c1:ac:e7:2a:55:03:55:0c:c4:13:
50:25:97:fa:30:a2:c7:28:fd:b0:4e:65:d0:31:e4:a3:f7:a5:
6a:f0:61:00:65:75:9b:f1:3c:4f:5a:3c:98:7a:ef:29:ce:f6:
c2:88:8a:d2:02:f8:4a:f0:ac:af:11:47:2d:f3:88:52:9e:7c:
13:54:f4:10:58:57:db:b8:6d:49:3a:52:18:bb:44:f7:c8:81:
67:10:45:2f:3f:05:39:a3:02:43:13:40:c5:8c:1f:70:4d:ac:
e5:67:69:73:75:d7:44:04:ff:58:bd:0a:13:c8:1e:98:8a:27:
c3:30:9b:c0:48:8b:81:00:a3:b8:ae:91:8b:ef:66:d2:d5:95:
1e:06:bf:36:49:63:9e:6c:8d:c2:a5:43:fc:95:93:73:f8:1e:
59:a0:d3:2c:c2:f2:b9:0d:9c:2b:02:a9:ed:d2:57:a3:46:1e:
35:3b:e9:8f:30:16:cd:8d:5a:43:ad:e7:84:46:8d:e9:b2:7c:
99:00:ce:be:6a:a1:b5:fa:c1:e6:24:04:0a:0e:fe:13:76:b6:
ef:90:bd:b7:95:a2:1f:66:06:fc:55:a5:65:0c:28:2f:67:3d:
ee:b4:07:c8:c4:49:be:ef:7f:04:ce:6b:ba:e8:bc:33:b1:8e:
66:09:32:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:40 2025 by rpki-client