Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
File: 3RWKDaAyZt8UTImntuNadhxJmPc.mft (raw, json)
Hash identifier: Bs3eqAwyJPqMs3ohvK/Let9CICI8cTzhQJoPKe2m6d0=
Subject key identifier: 49:67:2A:F8:87:D3:3D:71:38:2F:E2:42:A8:D5:A7:4D:38:A3:E6:9A
Authority key identifier: DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
Certificate issuer: /CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Certificate serial: 0194BC72D8866FDD9E9F7412203C0658718D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
Manifest number: 0122
Signing time: Fri 31 Jan 2025 13:00:30 +0000
Manifest this update: Fri 31 Jan 2025 13:00:30 +0000
Manifest next update: Sat 01 Feb 2025 13:00:30 +0000
Files and hashes: 1: 3RWKDaAyZt8UTImntuNadhxJmPc.crl (hash: +NFGdbXW7zX3NWrL8ruiNwbKHMQ52/PnnHbbZByMRRE=)
2: SgPyWwZqgDNPA8owk5q0U1El74Y.roa (hash: 2WD/wZDaJwBT3f8KDVnzNeXbI0E4vbABGDS2AFap2t4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d8:86:6f:dd:9e:9f:74:12:20:3c:06:58:71:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Validity
Not Before: Jan 31 13:00:30 2025 GMT
Not After : Feb 1 13:00:30 2025 GMT
Subject: CN=49672af887d33d71382fe242a8d5a74d38a3e69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1d:c3:52:00:fd:f5:24:31:36:f6:84:63:b4:
19:28:0d:08:68:ce:6b:a1:75:dc:77:59:0c:e6:32:
d4:9a:20:97:db:7d:f7:f9:4c:d4:4d:a5:13:83:d8:
67:85:77:df:f3:a2:30:61:9b:0a:54:63:9f:20:a3:
f5:c6:38:5b:c5:4d:1c:92:dd:96:44:ba:5b:81:b3:
f9:11:ac:2d:e3:38:1c:37:6c:7b:ee:2b:75:47:6f:
4d:b5:a2:67:c1:f7:a4:91:d6:55:e5:15:dd:87:b3:
a5:b1:bd:6d:a3:30:11:1f:ca:ae:d7:de:d6:b4:4c:
c6:ec:19:69:98:b1:38:c3:ca:30:eb:b2:ed:66:e8:
b7:aa:66:a5:55:47:f5:e1:86:95:7d:bb:bd:87:33:
96:9b:40:7a:38:b9:af:b9:a4:3d:2f:5f:0f:fc:74:
ea:1b:fa:6f:cf:63:01:28:8c:be:c0:24:a0:32:99:
a1:dd:6c:e9:c6:e3:8b:9f:fe:0d:6c:0b:8a:f9:eb:
9e:da:91:e2:88:c8:9e:9f:7f:d4:ae:66:2f:76:8e:
d3:43:ff:aa:a6:be:73:39:2b:2c:dc:cd:9d:2b:78:
f4:32:12:2c:eb:9d:b5:a4:9e:e9:21:51:3a:e5:a6:
5e:f2:d3:45:36:f9:9e:69:bf:0b:9d:eb:b9:49:cf:
1e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:67:2A:F8:87:D3:3D:71:38:2F:E2:42:A8:D5:A7:4D:38:A3:E6:9A
X509v3 Authority Key Identifier:
keyid:DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:90:f1:50:bc:66:89:cb:a9:7b:ca:81:9f:5c:55:18:d9:88:
32:0b:7a:08:ff:c1:59:ec:f8:ff:bb:0b:1c:f9:a6:c0:77:38:
09:f8:9c:08:0d:f5:aa:a6:33:a6:75:87:3f:49:56:f8:07:2c:
c6:5e:e3:29:34:4f:24:0c:7a:e0:66:f9:ed:d5:0f:b2:7c:66:
81:40:cc:79:92:82:fa:e4:8e:9f:38:c7:39:b9:c1:6e:2b:4c:
b0:ec:c0:40:ed:dd:5c:b2:e3:49:a8:f0:c0:0c:fa:ec:41:71:
e8:09:66:a5:cc:03:f0:11:a9:72:ad:43:3e:de:5a:64:44:59:
4a:7d:c7:cf:11:43:48:4a:ea:ef:b8:80:76:60:e0:0b:b5:eb:
a8:69:2b:46:09:6a:e9:46:3a:8b:c2:6a:69:92:7d:72:26:b7:
06:4e:5f:df:1d:4c:98:7c:08:bc:36:e0:c1:55:7a:d9:ab:9a:
54:8c:58:02:59:4d:9b:9e:4d:27:a8:ba:a1:cd:f9:6c:ac:61:
05:6c:88:f0:4c:94:7f:d6:f6:4a:48:5b:37:de:d7:24:d2:4e:
40:07:18:cd:f2:96:f5:f9:49:75:2f:c7:e7:62:22:41:b6:b3:
9b:a4:00:c9:26:ad:e2:5d:d6:5e:b3:03:44:1e:99:48:92:da:
96:ac:cb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:52 2025 by rpki-client