Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
File: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft (raw, json)
Hash identifier: PRxXrmCppfJX4UzG8V6UZpBGQ7WBVNLdRDLjsh4Yv+s=
Subject key identifier: F4:07:B3:A5:0D:D8:7A:4D:D2:0B:85:AB:EB:C7:92:45:E4:B0:78:F1
Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
Certificate issuer: /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Certificate serial: 0194BD857B2477C0D94016BD02DD681E78C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
Manifest number: 0153
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl (hash: jTxvBQwvQRS9E4F5oeEJIrUC7MXYLydJ8mOVyydXiqg=)
2: rsRHcAQsRZm8xo329vRETKcxCzw.roa (hash: F0s62aCweEs8uI/ziYG0x/wHrK8NMTpGhS7dtiI2LHI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7b:24:77:c0:d9:40:16:bd:02:dd:68:1e:78:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=f407b3a50dd87a4dd20b85abebc79245e4b078f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:94:04:3c:eb:0e:66:fe:32:ab:56:7b:ef:1d:
6a:df:4c:26:90:f9:a4:72:19:84:14:55:d2:e5:3f:
51:51:34:7b:e4:53:f0:0d:55:82:41:7b:a7:ad:5b:
d2:18:0d:ff:83:10:6d:62:84:b8:7a:0d:06:c5:e9:
64:19:4f:e6:e3:e3:5e:0a:a4:04:ca:f7:4b:c7:5c:
00:41:76:93:62:ce:e8:41:6f:ef:c7:8d:c5:73:08:
d4:29:d3:c7:14:dc:54:ab:6a:6c:2a:15:57:14:90:
a8:65:b1:b5:54:83:1f:6a:a0:5c:92:8a:7f:d8:56:
a3:81:7c:c1:14:c8:bd:71:72:16:97:91:27:26:fd:
35:ab:31:e7:f9:39:0a:70:9d:d4:59:e9:40:05:4a:
0b:2c:d0:12:fe:c7:26:a7:4d:1a:4d:d1:60:f4:fd:
de:22:5c:d9:f2:af:7b:05:2c:02:a1:9c:6a:db:d6:
97:8a:5b:56:14:8b:c0:38:21:02:ea:a6:7b:c8:09:
44:40:eb:be:dc:d6:7d:a2:cb:76:71:d0:14:a4:70:
c3:54:db:5a:8e:93:a8:de:68:9c:de:ef:44:5f:c4:
ae:14:4f:7e:cc:22:b4:9a:c6:6a:d5:91:35:cb:12:
e4:18:3a:15:94:3f:82:a9:2f:26:26:fe:44:c7:6f:
15:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:07:B3:A5:0D:D8:7A:4D:D2:0B:85:AB:EB:C7:92:45:E4:B0:78:F1
X509v3 Authority Key Identifier:
keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:70:19:29:93:c5:93:f8:81:31:43:67:00:53:b3:01:40:82:
f7:97:e8:c5:61:96:71:33:b0:bc:ad:2f:00:85:22:d4:f4:ee:
6a:e9:93:1d:80:81:6a:30:fb:0f:62:1d:4e:e4:aa:62:68:ff:
a8:bb:f1:c5:b3:6a:ec:9e:63:db:b1:0e:58:78:6c:f5:3d:78:
a2:46:82:b1:35:14:2f:22:25:09:ef:8f:46:e2:ed:45:66:e6:
a0:92:4c:4b:9e:d3:6d:f9:b2:4a:f5:85:f0:5c:94:cb:b5:5d:
aa:11:36:10:3f:ae:dc:41:95:9d:1f:85:e8:29:9d:41:a3:a5:
42:ad:8d:9d:37:58:a6:4a:3b:a7:9b:ff:df:4e:90:9c:4a:54:
1e:5b:ee:23:51:89:55:4e:94:1b:fb:59:75:75:7a:0b:9e:e4:
7b:83:61:22:1d:da:0c:51:6a:a0:c7:04:11:27:e8:df:7d:d2:
e0:13:2f:42:44:30:5a:e2:88:c5:0a:9c:67:fd:15:b1:a9:20:
d3:52:ff:b2:61:8b:a7:bb:f4:f4:b5:36:d7:4e:bc:48:e9:47:
d7:98:a4:d6:ab:fe:d0:a7:62:12:d5:5b:80:67:e9:26:d8:77:
0e:6c:3f:5a:9e:ff:4c:8a:04:b6:31:18:f3:5a:1d:1a:88:15:
6a:a5:ed:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:52:40 2025 by rpki-client