Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft
File: 3j4BZ79YLOzkjWxtApqCzeJyqdU.mft (raw, json)
Hash identifier: RPGGh8vkMADWqWiN0NJdWm1I5Pgk51NjtjofC1NBK/c=
Subject key identifier: BD:D2:BF:28:FA:98:32:47:42:B6:6C:6E:76:2B:14:C2:2A:41:19:5C
Authority key identifier: DE:3E:01:67:BF:58:2C:EC:E4:8D:6C:6D:02:9A:82:CD:E2:72:A9:D5
Certificate issuer: /CN=de3e0167bf582cece48d6c6d029a82cde272a9d5
Certificate serial: 0194BD4E7CA72288ABBA8EDFF8337136E24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: 3j4BZ79YLOzkjWxtApqCzeJyqdU.crl (hash: NKX1HxtW6Vo25f9DKoSrJ0hFLkqpV9yBnvrN8YVpScY=)
2: WK3H-x4lvtSz5PAYVzf83jx6Xhg.roa (hash: IHyV2nIBoBadJ+LZrUqe4zccqPuVek6+/UVCrBQ/9jA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7c:a7:22:88:ab:ba:8e:df:f8:33:71:36:e2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3e0167bf582cece48d6c6d029a82cde272a9d5
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=bdd2bf28fa98324742b66c6e762b14c22a41195c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fe:c0:5e:a3:aa:2f:16:54:27:36:72:01:a2:
10:6f:6b:e0:ef:c2:b9:aa:73:e8:d1:2f:d6:6b:a6:
86:21:b2:54:d7:a8:97:fd:f9:e0:57:0f:2e:77:90:
72:91:9e:f2:04:7e:2c:52:b7:ef:f5:9d:6e:d0:ca:
d7:cf:74:33:29:07:19:98:a1:57:db:d3:b2:eb:28:
82:da:66:15:23:ad:0e:01:b7:02:0a:9f:2c:2c:45:
68:88:7b:62:60:81:ca:2e:dc:28:7f:2f:a9:6e:86:
f0:d5:ec:fa:58:81:84:5c:9f:b6:64:3d:6c:e4:0c:
0b:d8:65:d7:f7:5a:f7:5f:20:51:12:b2:8b:40:d2:
90:4e:fa:5f:48:8c:73:27:c6:f6:15:07:89:bf:8d:
6a:fd:bd:7f:92:64:de:6b:16:28:9f:24:1b:19:7c:
70:0d:cd:68:da:78:20:78:ca:0c:26:d7:1e:00:29:
c1:0e:b0:a3:f8:bc:56:45:85:83:67:44:e0:a5:44:
dc:62:7c:bd:fa:d0:02:c8:bd:43:e8:ad:0e:23:72:
2e:e4:72:59:3e:53:ee:5e:d0:49:77:67:8b:06:48:
c1:3e:cf:2a:f8:92:27:00:a9:58:60:93:b1:0e:29:
97:2f:a6:97:5b:3f:bf:f6:64:9e:83:b2:7b:7a:6e:
c3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D2:BF:28:FA:98:32:47:42:B6:6C:6E:76:2B:14:C2:2A:41:19:5C
X509v3 Authority Key Identifier:
keyid:DE:3E:01:67:BF:58:2C:EC:E4:8D:6C:6D:02:9A:82:CD:E2:72:A9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:42:ff:29:6b:96:ae:76:51:e5:1d:d6:e9:69:5c:47:33:83:
76:16:a7:07:eb:d0:c0:23:67:8f:0a:f8:41:92:a0:5e:9a:52:
a5:8f:af:55:0b:23:fd:6a:80:4f:88:c2:21:98:52:57:e8:2c:
d8:a7:c8:51:a0:b9:29:c8:11:9d:3d:32:67:18:e0:5c:3c:9e:
3c:a3:0c:a5:e9:a4:72:ab:08:31:45:b2:c0:07:35:cd:bf:de:
73:e5:b6:5a:2b:bf:b5:64:5f:14:3e:12:eb:82:57:15:9e:6c:
60:a6:77:07:cd:84:2c:f9:c5:be:09:ef:38:04:05:af:2d:96:
d2:dd:7d:e7:54:73:01:53:45:f1:ed:7d:10:b6:c7:e7:0f:92:
cb:da:18:f8:a2:21:49:ee:09:3f:76:4d:7f:94:9d:e4:6e:c6:
4a:90:c9:f9:aa:92:e5:7d:d3:87:99:10:19:5a:39:a6:8f:af:
6e:d6:00:7c:a2:f5:6f:11:1e:80:aa:de:d8:6b:34:de:aa:6e:
ec:ac:07:88:38:b4:d1:c6:dc:bf:b6:58:d8:81:b0:00:b8:81:
c7:18:7d:ae:0a:fb:75:86:bf:17:51:71:97:53:10:8d:cb:f0:
97:cc:d4:d9:fb:e3:fd:b1:51:28:2a:8b:11:b2:6e:87:79:1d:
5b:b7:d0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:29:51 2025 by rpki-client