Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
File: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft (raw, json)
Hash identifier: Dn+UW3cGgH3otxyq6Rkr9UN35y8zBSCaDfb+CSi7eMM=
Subject key identifier: D8:EE:60:A6:32:39:04:57:44:0F:B3:C6:96:86:56:81:2C:65:C5:97
Authority key identifier: DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
Certificate issuer: /CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Certificate serial: 0194BC3CAF3905C51746B28B623234C37C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
Manifest number: 0748
Signing time: Fri 31 Jan 2025 12:01:21 +0000
Manifest this update: Fri 31 Jan 2025 12:01:21 +0000
Manifest next update: Sat 01 Feb 2025 12:01:21 +0000
Files and hashes: 1: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl (hash: na4u4w4n0opyOJWFgcWEYtwvUNnb8R+KiB73VQmFQVg=)
2: vrZbrmq-YLZHy_jTQFADJGPxi-I.roa (hash: SoRxaIEIcm9lF/KB/PtX621zexUgH5AtUpObYQIQZW4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:af:39:05:c5:17:46:b2:8b:62:32:34:c3:7c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Validity
Not Before: Jan 31 12:01:21 2025 GMT
Not After : Feb 1 12:01:21 2025 GMT
Subject: CN=d8ee60a632390457440fb3c6968656812c65c597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e5:2a:cc:78:84:09:e2:8c:e6:4b:21:a1:5f:
8c:f8:6a:ac:20:52:c5:05:29:93:25:dd:90:4b:0f:
80:3f:ef:a9:32:bc:9c:47:dd:e8:e1:ef:e0:3c:d4:
4f:5f:b6:4c:2f:1e:70:55:91:c8:46:37:b8:77:ee:
3c:8d:b4:53:36:f6:69:5f:48:b7:ec:b2:57:0e:b4:
86:d0:29:d1:0d:22:44:a9:35:ef:1c:4f:57:88:71:
86:8b:07:9d:c4:57:e2:cf:60:84:ad:da:af:fe:51:
82:85:80:cb:85:13:b6:c7:f5:c4:bb:00:31:e8:54:
32:73:a9:10:79:94:b6:39:ef:6f:27:37:e9:e4:bb:
e3:36:e1:ea:64:4b:70:68:d6:c7:ad:14:0d:94:b4:
88:b4:39:f7:8c:0f:98:8b:ec:c8:e4:e3:a3:45:dc:
d0:cd:84:fe:c1:ea:57:9a:88:ed:39:b4:bb:35:a8:
c9:90:2d:68:ee:ee:b0:be:17:0b:e4:54:af:e4:e3:
5e:f1:4d:b9:ed:f6:a8:11:d7:9c:00:8b:48:0f:42:
8f:4e:9f:1a:3c:3e:d2:d9:51:db:b2:76:9a:75:8f:
47:d3:7d:12:a5:78:cb:10:6f:ff:c1:2c:6d:0b:44:
33:73:15:ad:93:2a:f0:4d:b5:2e:0e:d3:3f:94:73:
1f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EE:60:A6:32:39:04:57:44:0F:B3:C6:96:86:56:81:2C:65:C5:97
X509v3 Authority Key Identifier:
keyid:DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:34:76:3f:5e:fa:4a:b9:9b:6a:44:33:e3:27:55:1f:a8:c0:
b2:32:4e:c7:db:5d:b2:57:fd:5d:93:d6:8e:9c:0e:9d:2d:3f:
33:c5:0e:06:c8:82:60:4e:8b:e3:80:26:b7:63:fc:2a:15:23:
b8:ec:62:eb:68:5a:86:ac:b6:b0:24:43:1d:e1:c5:cf:e1:26:
71:1c:6a:62:e7:35:e3:22:14:fe:6f:01:a6:55:a6:3d:52:2c:
a4:97:e7:93:75:cc:b9:74:3b:03:95:ec:ab:0b:1c:3c:24:07:
aa:62:ab:d3:75:94:fc:f0:c2:25:09:9b:76:03:c6:17:97:3e:
f2:c6:dc:c8:76:71:36:f0:87:62:60:bf:3b:fd:cb:5f:82:c0:
d1:02:2b:28:1d:6b:b4:8f:6c:3a:7f:9b:c4:56:6b:02:92:99:
73:55:c8:38:76:4e:42:22:4d:7e:dc:30:57:74:5e:5d:8f:30:
ec:99:bd:dc:c8:d9:bd:ff:5e:ea:bc:83:6c:21:c2:0d:1a:70:
2b:26:69:02:8c:8f:d2:f3:db:b2:7d:c1:41:45:3b:71:a9:8f:
8e:b8:c6:5c:ba:df:88:27:09:86:c4:fd:02:e0:6e:fe:81:ad:
20:14:d0:00:97:71:c9:f2:38:68:99:85:97:56:e6:18:f6:d0:
15:d6:b5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:19 2025 by rpki-client