Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
File: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft (raw, json)
Hash identifier: 1vDRNb8o94ZzhLXBzRcdV4lFx7nRYvYuFChFl6aXFnQ=
Subject key identifier: BA:0B:64:8C:7C:C8:3A:C8:02:11:02:52:B3:FC:72:EE:9D:5E:78:E9
Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Certificate serial: 0194BC729EE099A928C31B0805655AB15083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
Manifest number: 0F31
Signing time: Fri 31 Jan 2025 13:00:15 +0000
Manifest this update: Fri 31 Jan 2025 13:00:15 +0000
Manifest next update: Sat 01 Feb 2025 13:00:15 +0000
Files and hashes: 1: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl (hash: mD0ROj1hBkC6HrTbefu8N50zm0emkoGtiJSqvKKQr+E=)
2: _eQTxfZZbwefhXlLKHO7CEbeNzo.roa (hash: XwbhtEsqMzoTs493oAMc1WoC+bVurXPqsNp3fAtN59M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9e:e0:99:a9:28:c3:1b:08:05:65:5a:b1:50:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Validity
Not Before: Jan 31 13:00:15 2025 GMT
Not After : Feb 1 13:00:15 2025 GMT
Subject: CN=ba0b648c7cc83ac802110252b3fc72ee9d5e78e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:25:a1:c7:e3:77:cc:93:21:f8:e5:6f:b2:62:
96:b7:52:bb:19:82:94:8d:2c:4e:89:66:77:42:09:
d8:d9:a0:ac:0f:1a:7a:60:b4:a7:a8:93:aa:97:45:
4b:9b:89:52:ff:ac:79:f4:f2:dc:51:0f:36:98:06:
5e:38:2d:44:2a:27:6f:9c:88:04:17:c7:ef:e4:17:
15:06:bf:8d:0d:8f:76:26:67:27:a1:7f:5f:33:e4:
56:61:8d:ee:95:9e:3d:8d:23:35:bf:55:ec:8b:f3:
7b:cc:14:d5:28:b3:2a:13:ab:ab:1b:c0:68:c1:b7:
3b:4e:1f:a7:41:cd:5d:16:c9:57:bc:5a:4c:bd:cd:
77:8c:ad:93:cc:6b:9f:74:15:f8:b9:58:48:e4:24:
fd:d9:84:86:c7:86:71:4d:15:48:39:ba:b9:42:c4:
eb:8e:63:fa:8d:2e:64:7d:ce:51:e0:ef:12:ac:31:
6f:0c:85:6a:37:c5:3f:47:f3:ef:73:b2:a4:25:ae:
a9:fb:98:37:57:ae:a8:b8:24:2c:38:b0:03:a2:7d:
c2:ea:55:38:16:1c:80:f3:7f:68:d5:b8:64:4d:ef:
51:e6:17:c7:77:2a:1b:93:80:de:7a:cb:96:b5:09:
76:70:d7:d2:48:e7:6f:1e:ec:5c:30:3a:34:20:9f:
b7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0B:64:8C:7C:C8:3A:C8:02:11:02:52:B3:FC:72:EE:9D:5E:78:E9
X509v3 Authority Key Identifier:
keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:67:b5:e2:c3:b7:86:51:4b:15:20:f8:82:07:df:f1:d7:14:
77:d7:4f:5d:28:b0:b5:66:47:cf:d7:e1:db:11:1a:fe:d2:1c:
f6:5e:85:0f:a6:72:8f:bc:c3:fb:cc:69:74:ac:37:85:4e:7f:
22:68:32:e1:d1:6b:44:3d:0e:79:79:0b:0b:b4:d0:cc:e2:c3:
58:f7:ac:ef:84:51:ab:bd:92:9b:2b:2b:6e:15:8a:59:5f:64:
14:58:9e:ad:a0:5e:f2:39:c0:6d:47:6a:cc:a6:cb:60:36:f0:
e3:22:de:67:76:38:7c:bb:e8:de:cb:6c:a6:6b:e4:b6:f0:82:
a3:9c:b1:24:a4:b9:9e:ee:4b:5e:2b:b7:a4:35:1c:c9:39:be:
8a:ac:b0:51:c9:bd:20:ef:ac:df:fd:a1:1e:b1:dd:80:80:09:
ae:89:43:c8:c2:b2:1a:4b:64:f3:af:52:d9:29:5e:97:e0:c3:
a4:1e:99:07:99:c6:b8:44:e8:35:cc:ea:5d:ce:be:5f:3e:02:
7a:9c:c3:c2:1e:32:12:96:19:81:f9:5c:ba:c6:56:91:73:23:
5d:b7:ca:60:c3:45:d0:0e:12:29:98:c0:ff:04:0f:3f:ea:b4:
f7:11:d7:d3:64:bf:a2:a5:21:db:59:cb:9a:b8:c5:ee:c3:83:
a8:89:ad:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:13:28 2025 by rpki-client