Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
File: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft (raw, json)
Hash identifier: MgrpORyLHi1HLr3Pm50pevXfiqgMvH/0OJeDVR44cA4=
Subject key identifier: 5A:DD:9A:93:6D:89:9D:0B:86:D7:A7:4A:2C:F6:09:C6:8C:8D:BB:AB
Authority key identifier: DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
Certificate issuer: /CN=dd29c370460bec753010fc7e68365c5770bf45e4
Certificate serial: 0194BD17D8CA93FB9B8EE92FCDAE434D3E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
Manifest number: 12A9
Signing time: Fri 31 Jan 2025 16:00:44 +0000
Manifest this update: Fri 31 Jan 2025 16:00:44 +0000
Manifest next update: Sat 01 Feb 2025 16:00:44 +0000
Files and hashes: 1: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl (hash: PDtwZCthZnxu+M7JvUdSILjk0ki4p5DzBSBUdw7x+Jc=)
2: jzen_y9MjkJUaSD6dgV7vhjezg8.roa (hash: D4rABI9YVwiue3KhIMfk5XfCTjj00ChB0kZlnVkANPc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d8:ca:93:fb:9b:8e:e9:2f:cd:ae:43:4d:3e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd29c370460bec753010fc7e68365c5770bf45e4
Validity
Not Before: Jan 31 16:00:44 2025 GMT
Not After : Feb 1 16:00:44 2025 GMT
Subject: CN=5add9a936d899d0b86d7a74a2cf609c68c8dbbab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a1:c9:11:24:38:e1:c8:4d:35:15:e5:1d:58:
04:bd:1b:3e:1d:c5:b9:68:25:96:20:b1:24:2f:72:
d3:ee:75:46:c4:ee:76:61:c5:0b:f3:f3:78:cd:ed:
05:db:16:31:a9:be:19:9e:7d:ea:cb:a8:27:99:0e:
d8:b1:95:b0:09:97:19:4b:b7:a4:5a:04:87:e2:62:
54:c0:1b:fd:fc:5e:6d:98:af:d6:4a:53:9b:fc:0a:
be:48:eb:d4:21:c6:25:e8:01:8e:e7:fa:7d:56:f2:
64:15:82:9a:6c:f7:4e:83:57:67:83:c1:e8:1c:11:
33:cc:0f:18:16:a2:a3:18:58:96:3b:19:e4:57:ab:
46:5c:7b:cd:14:18:03:b1:a4:34:88:1f:7b:38:5b:
71:6d:39:b3:77:c9:4e:24:01:14:f1:e6:8f:73:c6:
59:0d:f2:07:dc:e6:7f:1f:40:a8:f1:5c:aa:0b:ca:
f2:d1:e6:90:8c:c8:96:c9:c4:e4:20:8e:0b:c5:65:
3f:de:47:7f:7f:c6:ae:9e:c5:b3:31:de:f0:5e:db:
4e:4d:d3:ef:b7:08:7b:96:ce:b1:11:89:98:6e:8b:
38:3f:64:ab:88:51:e8:78:d4:fb:d8:fa:61:6f:32:
93:b2:28:5a:30:e1:47:da:fd:48:1f:89:53:fe:27:
c9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DD:9A:93:6D:89:9D:0B:86:D7:A7:4A:2C:F6:09:C6:8C:8D:BB:AB
X509v3 Authority Key Identifier:
keyid:DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:9e:bc:29:48:53:ef:29:e1:a6:fb:6d:a8:9e:6c:91:30:7d:
be:2e:e4:42:fe:e8:f2:2f:e2:d3:93:22:2a:e4:60:be:dc:9d:
ad:3f:18:cc:69:f0:0c:b5:61:27:b0:63:33:3b:95:8a:48:9d:
11:f0:17:c8:3e:34:f5:55:4a:5a:5a:1b:e4:d2:be:02:a3:cd:
32:01:ac:0a:ce:a1:1f:14:14:f2:95:58:5f:7d:54:1f:0a:87:
da:6c:73:b8:24:63:ab:5f:5b:f9:22:ed:68:dc:9a:30:c2:79:
62:1f:5f:1e:be:c4:9b:c9:8c:a2:b2:a8:8c:9e:2c:81:cb:54:
b5:a7:1e:02:5a:18:1b:e8:2f:fb:11:03:f6:a6:49:44:cc:28:
50:a6:a7:e7:bd:1b:67:8c:fd:3f:31:cd:f1:eb:69:b4:e9:57:
b1:72:c1:9b:cf:09:f2:30:d2:62:14:71:c0:30:6f:fd:18:9f:
d9:f7:a0:82:2e:95:71:66:c3:30:6d:ad:80:ef:ab:b6:a0:0d:
03:c6:66:c1:80:14:fe:9c:d3:51:19:ba:70:d9:96:18:2a:f4:
9f:f7:d2:d4:5f:03:75:46:d0:99:6b:d4:93:9b:de:5d:44:6d:
99:c0:2a:01:53:62:09:4f:b3:e1:a7:62:e6:77:40:d2:68:7a:
1a:88:64:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:51 2025 by rpki-client