Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
File: 3Go3QvDw-xIJIrM57wHOz4f00e4.mft (raw, json)
Hash identifier: GcqWlzYBPdHhwhqPF9Oah+aLxVP+8dhUZR12B4tz2pg=
Subject key identifier: AB:C3:28:98:1C:67:30:DE:1D:B5:8B:2D:0A:55:3A:5F:75:2A:5B:B1
Authority key identifier: DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
Certificate issuer: /CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Certificate serial: 0194BD17934EC8405CF2888DAD67D5F7F1BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: 3Go3QvDw-xIJIrM57wHOz4f00e4.crl (hash: XJQMAmI5QBGoyLlB0Rjt2swY3uSzSVcri7CUvl21KC4=)
2: pCf2SBThhhwtPhuM3t9JK4mMkuo.roa (hash: Mxx4vZjePTYoAoss+lZxcdSgohHlT76+FicTsz9ie3c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:93:4e:c8:40:5c:f2:88:8d:ad:67:d5:f7:f1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=abc328981c6730de1db58b2d0a553a5f752a5bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2c:58:47:dc:49:3a:67:bf:1f:c4:60:d7:f3:
ca:93:73:b7:d7:16:6a:c3:a6:d1:af:cf:f6:6a:59:
29:1f:9a:3a:de:18:22:fa:26:c7:60:bc:6f:1a:63:
c2:0c:45:1c:0c:f2:96:cb:95:25:65:93:17:bd:95:
88:82:d5:4e:e0:d0:81:03:ef:c1:b2:b9:43:8a:fc:
f0:99:4d:02:a9:2e:0c:15:3f:e5:df:43:8b:88:00:
b1:3e:85:6a:1b:19:19:f2:9a:56:89:de:ad:d4:eb:
d3:83:54:a0:3b:8b:b4:76:0d:d5:ec:fb:77:90:8c:
74:6e:ce:98:4f:4f:e3:30:8c:63:05:e6:ed:f3:3d:
ea:a6:97:cd:d0:52:93:2c:e5:df:78:21:25:60:b1:
3f:8d:c2:5e:2c:72:ec:7c:ca:dc:58:85:cb:98:95:
13:f5:86:c3:dd:dd:62:a5:e4:b2:42:56:8b:84:4e:
12:a0:98:f3:da:04:99:9e:3e:67:a6:8e:aa:58:a2:
8f:c1:86:4c:e4:f8:f1:4d:ec:a5:18:e5:22:fe:49:
e2:27:98:b0:01:f6:7e:2c:0b:85:74:3a:78:82:0b:
b6:44:b8:73:b0:19:fe:44:26:d7:70:80:eb:11:32:
6d:14:80:67:cd:36:7c:7c:6e:31:6e:9e:61:80:d0:
70:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C3:28:98:1C:67:30:DE:1D:B5:8B:2D:0A:55:3A:5F:75:2A:5B:B1
X509v3 Authority Key Identifier:
keyid:DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f7:33:cb:ed:41:8d:1a:a0:ba:d5:02:ce:ad:89:03:38:c6:
2b:9e:13:e5:4e:06:07:38:1c:e3:35:f1:aa:bf:bd:f3:c7:5d:
1f:9c:ec:01:6b:0b:08:11:6a:d0:1d:cb:9e:89:de:4e:71:ea:
8d:7e:10:55:89:04:fc:2f:a6:1b:31:ab:5e:27:d6:33:16:c5:
8e:69:82:18:d7:bd:80:9c:2d:1a:36:dc:fb:37:09:a0:f9:f1:
0c:6d:a7:a8:78:ca:85:b1:22:d1:ab:e6:99:d7:2b:36:e1:c6:
01:86:96:49:62:61:e4:50:d9:36:79:76:e8:16:68:40:00:57:
67:eb:c1:b5:6e:9a:c1:fa:9b:71:d1:a5:b7:8b:98:60:aa:cf:
d7:c0:cd:30:44:49:03:55:1b:c9:75:f8:98:13:c5:91:88:18:
4e:d2:d7:cf:cf:bb:54:0c:07:a8:51:b4:08:72:5d:38:b1:2d:
e8:5f:1a:4a:95:01:4a:3b:87:04:2d:d7:4a:ca:9a:cf:15:19:
f9:05:34:da:97:ac:80:80:e6:48:4d:15:5a:24:29:6d:40:cd:
f4:3b:17:ab:ff:57:6e:c8:7f:d5:34:cc:9d:6c:74:ea:6b:aa:
90:de:fe:47:72:ce:4a:0c:cc:0a:46:bd:0f:8c:ed:d6:82:c5:
87:38:59:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:52:25 2025 by rpki-client