Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
File: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft (raw, json)
Hash identifier: f/IYRAKh3cTnZJIWMxKVVwVlMfNfQ7CJsrwGyLIzX44=
Subject key identifier: DB:9F:3C:40:44:DB:D5:5A:D3:18:C9:D0:D4:1B:67:FF:05:0C:35:9C
Authority key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
Certificate issuer: /CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Certificate serial: 0194BCE095ECEA298A819C0518DD69277E30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
Manifest number: 0894
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl (hash: wv0g/t5om016tMU5b5FZBpnXalirDvxesfO+39mLL0o=)
2: dKbYijsCo6cz-c8VDyBQbX6KvIQ.roa (hash: s+UDqFCEg39f4gk9fs9ZUXaGmiKaVpMOQ/J8CYcOuY4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:95:ec:ea:29:8a:81:9c:05:18:dd:69:27:7e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=db9f3c4044dbd55ad318c9d0d41b67ff050c359c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9a:f7:eb:99:a9:2f:f1:e6:f5:04:81:2f:83:
03:3e:06:c2:41:d6:a7:18:9a:0e:3b:fa:b6:7a:4b:
ed:35:c9:3f:20:be:c4:55:bd:5f:15:85:86:b8:9e:
f6:9c:38:cd:f3:e9:cc:21:08:c8:dc:78:1c:1e:35:
30:38:67:61:12:d5:cd:36:d1:dd:80:d1:13:0b:dd:
cd:1f:2a:ca:d8:3a:ac:20:3f:63:5b:22:2e:9f:81:
dd:2b:47:e3:6b:f2:74:50:c3:43:e5:f7:32:17:12:
d8:73:9d:da:73:cc:a8:3c:28:48:ca:60:f1:3a:5d:
65:37:fb:a6:66:52:0d:b2:fb:7e:4b:9b:67:14:4f:
16:da:a2:06:53:9a:44:5e:8c:cc:d8:a6:10:ec:ee:
ee:02:94:4f:48:d5:dc:46:2c:aa:c5:df:06:14:a3:
1d:20:48:71:f4:eb:eb:18:13:b5:7d:cb:39:66:53:
f5:0c:be:ca:da:56:b0:ce:52:3a:01:ac:89:32:4d:
72:c3:e4:52:36:ef:30:05:4d:7e:25:a1:15:16:3d:
04:86:94:d9:95:1f:22:ac:de:2c:6d:db:d8:76:32:
24:b6:2f:4e:0c:3b:c6:3b:5d:c1:6e:0b:75:cd:63:
06:d9:fb:95:c5:62:a0:0a:28:1a:36:d2:e1:4c:d3:
a9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9F:3C:40:44:DB:D5:5A:D3:18:C9:D0:D4:1B:67:FF:05:0C:35:9C
X509v3 Authority Key Identifier:
keyid:DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:2d:8f:da:03:e1:fa:9d:29:b7:8a:8f:12:94:42:88:80:bf:
4d:28:26:32:b8:38:a5:0b:2f:7a:5e:fe:e2:cb:ba:14:be:98:
75:c4:10:b5:b4:49:a1:58:84:29:e1:ef:aa:8f:4a:d0:03:2d:
b6:f3:06:18:60:a2:24:77:01:45:a4:88:7d:c5:fa:43:33:51:
45:43:af:72:e5:90:56:b1:e5:e4:ad:da:dd:2d:57:05:e1:13:
3e:a3:19:d4:b4:62:d9:81:ec:74:9a:2e:66:4b:7f:bb:ef:2a:
98:2b:a3:7d:bd:35:f3:72:6b:94:4e:1e:d9:26:d1:9e:d5:25:
35:00:97:72:67:88:5c:98:de:57:25:35:4c:d1:85:4a:ac:e3:
2b:55:90:53:3e:40:da:cc:19:fc:76:f8:2c:b4:c6:80:64:8b:
c3:46:b1:3f:cf:f3:84:9f:72:64:1f:26:0f:d7:a9:b3:33:a8:
a1:64:19:1e:6d:ef:a2:06:d8:78:d1:0d:01:ac:95:34:83:4f:
08:a9:a8:ad:08:74:ef:5c:eb:17:3b:88:34:0c:45:bb:95:86:
1b:9e:aa:bd:b6:55:19:2a:05:b1:98:46:45:f7:e7:c1:d4:54:
19:ff:e3:0b:5b:0f:0c:8c:a2:f0:36:c0:c6:c7:51:6d:08:da:
b4:e2:d1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:18:04 2025 by rpki-client