Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
File: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft (raw, json)
Hash identifier: X6qsPUmEUP36LS/NNxMbKJlwRGrwSKQFxQEHtOJGn7s=
Subject key identifier: 91:E4:EE:BA:8A:D6:BC:9A:7C:2F:4A:9E:BA:B9:13:77:D4:B9:7A:54
Authority key identifier: DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
Certificate issuer: /CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Certificate serial: 0194BCAA21A538D4F953CF7C082CFE744BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl (hash: jD9kVQ7dXoSNnI8iIqXKwtoaVbxR8DxXa1+KB2hSOvw=)
2: IXT2ShwYMDTPNqnR-lmJPCt_hM0.roa (hash: YktH9Y4fzOrvY5vhhRnBY1iI8LZ09iZ8zTmc5w1S0Jw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:21:a5:38:d4:f9:53:cf:7c:08:2c:fe:74:4b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=91e4eeba8ad6bc9a7c2f4a9ebab91377d4b97a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:84:5f:9e:00:78:fa:f6:93:42:8d:b7:b7:
50:9b:f5:a6:bc:ee:c4:d0:c5:da:ce:60:4c:63:1e:
46:e3:58:0d:1b:db:9d:3e:ad:6c:b6:3f:03:8c:e5:
f0:6f:6f:85:16:7d:aa:eb:93:3c:e9:68:f3:6b:fc:
51:7d:d3:7e:d7:61:a8:e3:78:36:8e:b2:7f:fc:ce:
6a:dd:e5:3e:7e:96:11:20:f2:78:f9:17:e7:28:f3:
58:2d:e0:b8:79:2a:99:a1:c3:a4:0d:52:74:d7:ce:
eb:4f:3e:be:aa:1b:a3:89:0d:f7:fb:9b:0b:f0:a4:
a0:59:c4:f4:d7:0a:b0:78:be:c2:98:23:a9:f2:5a:
41:c2:0c:a6:bf:ef:97:e4:87:13:e7:bb:f9:a4:90:
28:ab:a6:d7:15:f3:7e:36:b2:34:5a:94:f3:b1:76:
ea:a3:ac:01:e0:4b:6c:38:80:e6:59:99:79:0a:e1:
ec:da:d3:dd:89:2e:f9:3f:7f:b0:88:b0:c7:cb:da:
f5:cb:bb:de:1b:a9:5c:5d:c1:1f:64:51:34:0f:94:
a0:93:88:86:64:19:82:d3:2f:a0:bb:e7:c3:9a:2d:
bb:df:7b:9c:96:27:86:5c:9a:a1:89:e2:b3:1e:ee:
51:aa:55:09:63:0e:fa:53:06:34:a3:4b:f5:6f:23:
de:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E4:EE:BA:8A:D6:BC:9A:7C:2F:4A:9E:BA:B9:13:77:D4:B9:7A:54
X509v3 Authority Key Identifier:
keyid:DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:99:eb:ef:af:f5:92:30:c4:71:be:e0:c9:49:85:d7:7f:9e:
dc:00:ae:1c:c6:eb:c6:a2:de:c2:0d:f9:52:5d:53:ef:b0:9d:
96:3a:77:82:c1:de:b6:32:c4:ad:fd:e7:b9:57:4a:af:2b:c5:
f9:b9:0c:0a:60:2e:a6:cf:49:3e:07:73:4e:b5:23:d9:40:e3:
13:28:cc:db:5f:5f:e4:fc:c9:33:08:aa:b4:4b:06:44:ff:dc:
6b:91:25:33:2b:d6:8f:07:9b:4c:0a:96:27:1c:a1:c9:74:8e:
98:21:ae:36:51:b8:af:7a:2c:a5:fe:db:36:19:24:1d:ed:d6:
c0:b8:32:3f:98:50:c7:69:b9:66:b7:d4:48:7d:c5:46:77:fd:
36:03:c6:43:e7:95:14:99:23:97:93:08:ca:a8:a4:a4:71:e8:
f1:44:fe:cd:fe:24:b0:d1:90:30:4d:ff:b8:e2:f2:62:0a:d8:
99:2b:7d:3d:6f:80:8c:cd:c5:b9:66:8f:47:36:78:39:dc:f3:
87:56:62:06:30:14:bd:fa:40:d8:c2:73:70:f7:aa:f8:89:a0:
41:01:f5:3f:8c:1c:90:bf:6f:14:8b:66:ca:e1:66:72:76:37:
b0:24:b7:fd:42:76:cc:64:cf:c0:d0:d9:bd:49:b7:58:88:dc:
fc:c9:f5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:53:29 2025 by rpki-client