Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft
File: 3dya0lC4XNOZSUZbZoGy8d8U1qM.mft (raw, json)
Hash identifier: qoirQJXPwTXBEQlWroi4XnxWXKMjzXMK81SCf36N+q4=
Subject key identifier: F9:D3:E4:E0:F5:50:AE:6F:83:20:ED:15:C1:75:A0:19:D9:08:6D:80
Authority key identifier: DD:DC:9A:D2:50:B8:5C:D3:99:49:46:5B:66:81:B2:F1:DF:14:D6:A3
Certificate issuer: /CN=dddc9ad250b85cd39949465b6681b2f1df14d6a3
Certificate serial: 0194BC729EA0596D81E3A6AF3F7DACB9479F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dya0lC4XNOZSUZbZoGy8d8U1qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft
Manifest number: 0310
Signing time: Fri 31 Jan 2025 13:00:15 +0000
Manifest this update: Fri 31 Jan 2025 13:00:15 +0000
Manifest next update: Sat 01 Feb 2025 13:00:15 +0000
Files and hashes: 1: 3dya0lC4XNOZSUZbZoGy8d8U1qM.crl (hash: /7HuMQ1XuywswvWscQOiqzomPvwCzeQOl9RLT+gdHkI=)
2: dA9DZPAABtlejc0G0adjQxYBv5c.roa (hash: 3UVeFl3N3ODI+QVLphkmL5y9dyL4Gw+YagDr/4SW4gs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9e:a0:59:6d:81:e3:a6:af:3f:7d:ac:b9:47:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dddc9ad250b85cd39949465b6681b2f1df14d6a3
Validity
Not Before: Jan 31 13:00:15 2025 GMT
Not After : Feb 1 13:00:15 2025 GMT
Subject: CN=f9d3e4e0f550ae6f8320ed15c175a019d9086d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:04:f2:16:9b:a8:f2:90:b9:0a:28:41:7b:5d:
4c:6f:3a:97:32:43:7f:87:a0:a2:14:30:a3:f9:a8:
b6:c9:14:7d:0a:b9:fb:3d:13:5d:3c:6e:74:26:83:
7a:80:25:4c:98:3c:74:8a:01:43:42:af:09:5e:7f:
eb:d8:9b:90:0a:58:76:7f:a4:d9:9f:e9:97:3a:8a:
8f:fb:46:80:dc:1a:fe:70:63:6e:f5:05:39:b4:84:
c9:39:d9:00:de:aa:35:03:df:dc:eb:05:ce:2a:68:
0e:11:3c:c4:48:e1:72:d0:2f:ee:e1:85:aa:10:ef:
07:20:eb:67:d5:4c:fb:36:49:e8:7e:50:cc:48:da:
f9:8a:a9:fb:46:f0:8f:51:bb:b4:7c:24:c0:e2:0b:
36:3a:6c:ba:19:ea:3a:2a:92:a1:8c:02:0a:0a:b6:
34:2d:16:09:a2:03:9e:a9:6b:f6:29:54:4e:5c:d5:
a3:d5:d2:c5:f5:61:f2:a1:7d:7b:66:7f:c1:88:da:
25:23:88:22:1e:66:aa:d6:d0:4f:06:7b:b1:52:f6:
a1:ed:44:b3:bf:70:0e:76:44:fa:a3:56:96:22:b0:
24:24:02:71:c2:56:b9:d0:cf:0a:2b:e9:3e:92:e4:
33:1d:ca:50:63:b8:11:fe:e5:51:a2:f8:d6:9d:7b:
e7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D3:E4:E0:F5:50:AE:6F:83:20:ED:15:C1:75:A0:19:D9:08:6D:80
X509v3 Authority Key Identifier:
keyid:DD:DC:9A:D2:50:B8:5C:D3:99:49:46:5B:66:81:B2:F1:DF:14:D6:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dya0lC4XNOZSUZbZoGy8d8U1qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:24:8a:85:fc:10:01:f1:5f:aa:4c:e8:e0:a2:19:b1:a6:29:
db:a4:c9:8e:63:56:2e:a7:c7:c5:51:6b:54:0c:8b:1a:66:94:
9d:49:01:17:af:3d:f9:d3:c3:e1:87:77:ec:5b:60:82:fe:8b:
a4:50:f1:b4:51:e5:5b:03:31:e9:68:d8:7d:6e:31:bb:87:b6:
e6:40:c0:33:74:a2:34:84:21:99:6e:d0:12:57:d7:7f:a0:14:
d1:74:44:dc:d5:e5:be:27:86:f1:6e:4d:a4:6e:b7:de:ef:27:
f2:57:4c:14:c9:6d:3d:df:14:53:76:d2:24:a1:12:ef:4f:b5:
ed:fa:cb:b1:49:e1:a6:d6:13:76:28:49:f3:cb:5d:c7:69:bb:
1f:4f:97:40:83:37:6e:b2:02:5e:c6:96:89:2e:43:4c:ab:a5:
27:49:33:65:1e:65:df:cb:82:e0:ed:fc:7d:be:c5:66:d2:27:
b6:6c:51:dc:df:5d:90:8d:7e:2f:8f:ac:e3:04:c6:dd:b4:d6:
2a:44:4b:8c:9d:6a:41:b0:ca:df:51:e5:cd:a4:a3:fb:98:5a:
22:a5:73:91:d0:f1:84:b1:ee:78:01:77:6f:59:a2:c7:37:0f:
ee:04:a0:eb:21:f9:31:ac:88:89:fd:26:09:f6:24:3d:c9:a3:
07:57:f5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:35 2025 by rpki-client