Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
File: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft (raw, json)
Hash identifier: PxngRkxpK0aVroiBJLB5+ni1MK3FB31dftC5qEXXzNM=
Subject key identifier: 55:82:87:3C:E0:D0:0C:E8:1B:ED:1A:70:E3:8B:A8:0C:67:E1:AC:68
Authority key identifier: DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
Certificate issuer: /CN=de9ff6195096a098c19281548e4107b867c73aff
Certificate serial: 0194BBCDB442A17826F33016F312E18508CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
Manifest number: 1100
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl (hash: E28MI5Pcr3QQ3WVovOtJlrpT3UF0VgGa0tCR7nj5L7Y=)
2: K668RnN8R9Zt_BhcvITxrQRhBNs.roa (hash: 8wo0Wz+L+phQUblwdU8c4kneYF4uQyTcefZ7CpD7SsM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b4:42:a1:78:26:f3:30:16:f3:12:e1:85:08:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9ff6195096a098c19281548e4107b867c73aff
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=5582873ce0d00ce81bed1a70e38ba80c67e1ac68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:5d:c4:75:a2:9f:fe:af:23:d6:15:ee:50:
f3:a0:a9:53:43:b8:40:a2:87:b7:9e:7d:45:ed:4c:
15:09:a8:51:ef:bb:10:37:ea:a9:ae:eb:f0:65:45:
e8:44:cf:70:a0:33:75:65:9c:a9:6e:5e:1d:23:f7:
95:f7:0c:29:4a:51:2f:7c:fb:40:e3:6b:18:a7:ae:
93:75:b2:9f:68:b2:27:94:53:bf:f7:d1:66:94:01:
f3:56:99:66:19:40:61:dd:c8:de:f8:7f:44:ae:64:
c4:21:56:52:9d:1d:69:bc:e1:d8:b2:31:8f:62:c1:
bc:ae:10:fe:e8:ed:da:9e:ef:9c:21:2b:b1:72:85:
b3:74:ad:33:67:0b:29:76:00:22:a4:68:01:d4:bc:
36:3d:86:48:bf:ee:f3:a6:e5:b7:59:98:b0:c5:f6:
ae:0d:58:3b:35:2d:ab:03:e9:10:e4:95:f3:e4:db:
a2:8a:ae:79:5d:ec:bf:8b:88:25:c0:6f:a6:a6:2b:
36:54:d1:e8:c3:44:ee:86:51:ed:06:79:d0:b0:13:
15:9d:0d:5a:35:5a:32:a4:1e:2c:ab:de:2b:a6:a5:
a6:f3:c8:c1:66:67:72:04:50:f6:66:d1:73:7c:7e:
5c:81:62:be:ec:aa:36:6c:8d:88:f2:fc:2e:d6:c0:
02:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:82:87:3C:E0:D0:0C:E8:1B:ED:1A:70:E3:8B:A8:0C:67:E1:AC:68
X509v3 Authority Key Identifier:
keyid:DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:80:e9:dd:a1:66:95:63:89:18:3c:cf:9e:87:19:3c:29:fe:
99:f7:6f:84:96:9f:4d:3a:e7:db:0f:c3:e3:af:ec:83:6d:ab:
35:4f:2c:ac:f5:0d:81:10:75:42:7c:96:7f:63:53:56:71:10:
da:3d:0f:56:2b:0d:8a:02:e3:eb:cf:e4:7b:cb:53:e3:31:72:
81:03:e6:cc:41:c2:6f:2e:77:b6:be:1c:3b:71:62:3f:2e:ec:
e4:85:5c:6d:fd:45:74:a8:51:b2:0f:fb:f7:25:4e:ac:ac:1c:
99:59:e6:fb:8a:da:13:4d:35:19:af:df:23:84:77:2b:3b:40:
01:25:32:4d:0c:aa:df:d5:b4:47:26:f7:4b:f5:0e:9f:89:09:
51:08:f2:00:e7:b4:10:16:b5:0e:93:63:78:d9:00:e8:61:ac:
ca:92:f3:66:64:03:aa:c8:9c:b4:79:58:59:cf:89:f0:14:e6:
9f:e5:68:fe:30:d4:20:55:54:2f:69:1e:42:5b:3d:af:50:88:
79:d8:fb:3e:ce:1d:91:30:38:97:92:d8:ef:b5:89:22:98:37:
de:ba:32:20:d9:a3:11:60:ae:12:81:34:4f:58:13:72:1f:60:
47:bc:d2:af:33:79:36:47:a4:8c:37:c4:9c:25:84:a2:79:2c:
99:f1:f0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:34 2025 by rpki-client