Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
File: 3_JHJt8-d_b0yOBDZhOzURDurzg.mft (raw, json)
Hash identifier: 1KmRaprSoBJeEYTjU9axWOUK3cWt4K+G65nEtoyJldk=
Subject key identifier: D6:41:05:98:AC:89:B4:63:6C:A4:94:3A:4D:A1:9F:63:96:78:6C:01
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 0194BCA9BA4CF209B03C622D97C952A59DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
Manifest number: 101D
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: 3_HM3LXI2dI7yCUkbwsS0LVmtPQ.roa (hash: dlvoBhBeGam9xbjGOiUpXKoso+XH3qNTVfnBCvdbd3Q=)
2: 3_JHJt8-d_b0yOBDZhOzURDurzg.crl (hash: DhrXnHoKUia4vnT25UY6fyYzVBUey8EhJFt+mUGwP70=)
3: E_7EA8UJkxlGETtzRt_qHmFJYsI.roa (hash: 407g7UlI6CqSY6AOA+kHrysQofaOwh0+lRwTxsDvEPM=)
4: EgzHUocwnSDaTR0mcH1N2AahbPA.roa (hash: qnns/hwFAonNH2cGnXK7MoaWY9Y+ZF5REF6qTFex00M=)
5: EqWJbW00yHom-8ojBy6QYR1H3FM.roa (hash: jchk7todvo3pxE5MJlQ/7M5jHRN15mY+WmGn6RIiL74=)
6: KByvn3G9xMi5zVMf2hfCx6ANxyI.roa (hash: h4AZQDVtiSftBpybDJxG4QIlGy8TOkA79xpxhxDweg4=)
7: LBBRl1_5PTCAndMsefaH2qIgsWI.roa (hash: P4yu/hSYw0dip59FJgO1wKqB51hJxMddEa7BdAJON18=)
8: SFJQLYtyuvLa-Z-_p6GETmClzzQ.roa (hash: TpY/D4v+35T3Gg8FMD0C6YxKf8fx/yuDpF1EWp6QNws=)
9: gLpL93_717seB53wtn-PIYRSJpQ.roa (hash: BEBryS8Pk5M96RkjmV9ApUKiEfxXTgBuMMQoR0rPtvE=)
10: qIy8EEGEKThhCv4eyhu0aaS6jQQ.roa (hash: FTpKxy8SMv8Ii+e2R+cokRiry1onK0HB+M+lb5hU0DQ=)
11: sl5VJ3i7CbF6mq-XTH5pxWMmK5o.roa (hash: 4bfJxuYHYnVskQrhNVV+ZwN1afVTdgzyH0yWLAaqMRM=)
12: yiW-kmeX6T3jx-yL7EZZYoVvwps.roa (hash: QstF1sZuORe/6EM2aW5TGBrHuj8rjUHPJQAAamVQG0Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ba:4c:f2:09:b0:3c:62:2d:97:c9:52:a5:9d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=d6410598ac89b4636ca4943a4da19f6396786c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:30:04:e4:fc:de:f4:d6:99:cf:ce:32:ce:a5:
b3:8a:98:d0:de:e6:af:ab:93:8d:90:51:e5:57:64:
a9:6b:a2:16:50:aa:93:47:a8:fd:09:84:93:bf:fe:
f9:dd:71:09:d1:e1:33:3e:90:af:57:55:60:4d:23:
6e:b7:e0:3b:f0:4d:03:b0:f4:b2:65:2f:f4:74:22:
82:6b:4f:e8:5a:79:99:50:1f:53:25:31:29:82:fb:
9c:bd:ef:4f:e4:d5:9d:40:37:25:2c:7d:74:2d:1b:
11:82:af:7b:fa:5e:35:bb:82:e7:75:d4:f6:f5:f4:
bb:9d:a9:dd:ef:58:75:01:2b:09:bd:e1:3c:de:36:
80:18:13:a6:97:4a:4e:7d:1f:52:95:f4:bd:28:ff:
be:a5:00:65:f3:3d:3f:71:e9:64:3c:75:81:b1:c9:
db:e0:58:fa:e3:11:b7:12:5a:72:08:15:e2:ed:70:
42:85:9e:57:c0:df:9b:20:ab:16:8d:49:c2:93:29:
b8:20:ed:ae:ce:ee:7d:95:bf:34:6f:37:78:fe:de:
fa:39:96:99:28:26:73:83:ad:7f:9c:eb:e8:70:00:
cc:71:55:74:3f:78:c2:cc:ae:64:e4:23:43:91:7a:
9c:68:a3:3a:e0:c9:84:5c:be:1e:d7:09:89:e8:b2:
f6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:41:05:98:AC:89:B4:63:6C:A4:94:3A:4D:A1:9F:63:96:78:6C:01
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:86:68:d5:53:58:be:ce:35:82:2a:cd:6b:95:47:75:3d:83:
a3:6d:06:54:52:e6:c4:25:8e:5b:b9:c3:b5:c7:42:a3:f8:5b:
07:89:a0:f0:5e:8e:5c:70:ad:0c:7e:c6:56:65:87:08:8c:15:
aa:d2:92:19:6b:29:58:61:4a:f3:72:6f:bb:df:44:55:6b:58:
b7:a3:62:d1:fb:8b:a6:37:06:84:0e:22:10:fa:f9:3d:f0:ec:
f9:9b:89:ff:b9:48:40:00:dc:67:64:03:51:d6:c4:d9:9c:ab:
b4:2e:e7:30:ca:8d:d4:00:2c:53:78:8e:12:ae:e6:3d:ae:c2:
68:ec:6d:c8:12:2d:f2:48:33:f0:ed:93:48:c3:38:88:f5:92:
67:cf:6b:62:9e:0e:d4:32:1b:2e:28:80:bf:bc:19:10:ad:c3:
7d:e0:2b:b6:c2:f0:ed:d1:0a:26:28:8b:a9:b3:4f:63:a9:37:
9d:e0:20:59:5b:3c:7b:a6:92:60:ed:06:8a:5f:e1:87:55:45:
40:06:c1:19:0e:f1:6b:71:37:12:53:ef:02:8e:2e:6c:e2:df:
76:2f:0e:52:86:2c:47:08:23:44:18:b4:7e:3c:ea:95:72:d9:
ec:6a:6f:65:33:a0:f6:ba:61:50:f5:31:06:43:32:df:36:16:
56:fd:a7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:02:33 2025 by rpki-client