Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.mft
File: 3YXca2FDoX_rSYIOpSAEiVj0itw.mft (raw, json)
Hash identifier: 0PnORkrL0BXAoVGwF7mmGQBfZHJix/sB4jls52GOr4I=
Subject key identifier: C6:92:C0:98:19:FA:64:65:47:69:F0:72:FC:34:71:F4:C9:EA:1C:7B
Authority key identifier: DD:85:DC:6B:61:43:A1:7F:EB:49:82:0E:A5:20:04:89:58:F4:8A:DC
Certificate issuer: /CN=dd85dc6b6143a17feb49820ea520048958f48adc
Certificate serial: 0194BC04D38CFD1BBCD6BC6DCDBBCCEABA48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YXca2FDoX_rSYIOpSAEiVj0itw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.mft
Manifest number: 0EC4
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: 3YXca2FDoX_rSYIOpSAEiVj0itw.crl (hash: vVUkPAZwA6sYf3yGGrnZyy5/ZbOGsRWAFGx/V8aZ8x8=)
2: V06h50tDruiBUg9uiKF_DSq52w8.roa (hash: A6FA8GQqXA3RMWxT5r25HFVTJrUQ2PZEYKc6YcmeWfw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d3:8c:fd:1b:bc:d6:bc:6d:cd:bb:cc:ea:ba:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd85dc6b6143a17feb49820ea520048958f48adc
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=c692c09819fa64654769f072fc3471f4c9ea1c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fe:f9:a3:8a:f3:f8:1c:b5:83:b7:32:d7:7f:
be:61:bb:ba:99:c6:3c:45:b8:d4:fa:23:8b:9d:27:
37:eb:96:a7:65:e4:69:95:2a:80:b0:d5:06:47:34:
32:05:49:68:54:4c:79:38:5a:25:f4:9a:5b:ac:5d:
56:17:1d:45:ee:ec:46:76:6d:8a:e1:89:2c:3e:17:
44:3c:e5:81:10:5f:e0:bf:5b:60:81:12:85:27:e5:
63:48:13:52:05:f0:fe:d7:de:4e:93:d3:99:cd:50:
6e:57:35:3b:97:22:dd:1d:a0:fd:0f:15:44:97:5f:
47:4a:d6:36:70:00:ab:25:a5:d9:d6:9f:ea:12:c1:
c6:27:79:4e:21:ad:d8:22:f8:2a:2e:93:64:be:3a:
6d:19:87:4e:c9:a5:bc:00:9a:c1:8d:15:6b:39:61:
9e:67:d5:30:34:26:2c:a9:09:0f:d4:4d:cf:d0:37:
46:93:1d:99:18:41:b8:e0:be:80:00:28:c1:fe:9d:
f6:b4:52:dc:c4:1e:c8:f0:7b:1c:fc:5d:3f:fb:02:
06:82:e9:80:6f:c7:fd:9b:ae:e4:c7:a2:64:da:e7:
b9:d8:eb:52:37:c5:11:9a:a2:4c:d2:77:a4:7b:f2:
22:da:cb:3a:1b:f7:d1:7c:5d:23:c9:b5:c3:a8:6a:
b8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:92:C0:98:19:FA:64:65:47:69:F0:72:FC:34:71:F4:C9:EA:1C:7B
X509v3 Authority Key Identifier:
keyid:DD:85:DC:6B:61:43:A1:7F:EB:49:82:0E:A5:20:04:89:58:F4:8A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YXca2FDoX_rSYIOpSAEiVj0itw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:95:4a:bb:9e:35:0b:3d:63:ac:71:0f:31:8b:7a:6b:64:61:
37:8d:ce:75:96:c2:4e:59:44:82:69:1d:b0:4b:4c:34:80:5b:
1d:25:4f:81:c8:81:22:ed:63:5f:6b:02:26:12:9b:d7:f5:c6:
49:16:ef:03:44:b3:a4:40:eb:7f:e4:b7:6e:26:fa:74:72:f1:
68:fc:0c:4c:62:d6:bc:7b:55:70:0f:d3:ab:87:ab:cd:0e:33:
30:34:fe:ea:4c:eb:33:f5:15:24:0a:7b:91:09:8c:ce:59:92:
ea:7f:e0:1e:3b:e4:69:21:37:db:18:0d:46:56:0e:9a:f0:d5:
56:d8:21:08:3e:be:c1:d5:74:17:2b:7d:86:12:bd:34:c7:e1:
c2:a8:cc:dd:e3:33:09:76:b6:7f:08:6f:1a:a4:ed:75:6a:14:
c5:70:3c:8b:f1:ce:fa:6d:7e:ff:c7:dc:89:12:b3:e6:ee:fb:
c8:d3:17:2c:ad:6f:0a:80:16:ec:e8:2e:cf:f1:f2:8c:bc:3e:
5c:28:44:2d:54:25:ea:1d:a6:08:b8:fa:92:b5:56:cc:14:a3:
83:d9:47:e9:50:69:98:73:01:06:9c:3f:7c:1c:7f:84:5e:ae:
0b:da:f3:4d:3c:ae:97:b0:73:8d:fd:cf:4f:ce:1c:6c:57:1b:
2b:0d:25:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:09 2025 by rpki-client