Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
File: 3Bo6oM-N-pFn0k2S7YoW6054BEw.mft (raw, json)
Hash identifier: 5QP8jhhFSpu3vJtEYYLHgU2XwDR605v1rEGVstTEWEM=
Subject key identifier: CE:75:CA:E6:CF:DD:D8:D3:AF:DA:96:8F:2C:10:C4:54:1B:34:18:DE
Authority key identifier: DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
Certificate issuer: /CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Certificate serial: 0194BCE069A1B556C80D6C2FE9DD9A4651D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
Manifest number: 0600
Signing time: Fri 31 Jan 2025 15:00:11 +0000
Manifest this update: Fri 31 Jan 2025 15:00:11 +0000
Manifest next update: Sat 01 Feb 2025 15:00:11 +0000
Files and hashes: 1: 3Bo6oM-N-pFn0k2S7YoW6054BEw.crl (hash: XPrJrPCRLmJK6XNzXHknBIRBUYuqBSK9qjPme69nung=)
2: tmyLpJpJchhVaXtc4hY4-3-tLv0.roa (hash: ptDhwK/duydywl6VxB7EOOZhOpM1y3n5bCF72ET2KLE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:69:a1:b5:56:c8:0d:6c:2f:e9:dd:9a:46:51:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Validity
Not Before: Jan 31 15:00:11 2025 GMT
Not After : Feb 1 15:00:11 2025 GMT
Subject: CN=ce75cae6cfddd8d3afda968f2c10c4541b3418de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:10:fd:dd:de:a6:72:ee:65:37:aa:8c:78:
99:e3:7a:ba:10:4f:60:51:39:4c:d8:c6:51:21:2d:
89:85:70:7e:f0:27:2f:eb:c2:99:fb:5b:2b:0e:36:
24:58:27:19:bb:ab:24:ae:b5:74:73:e1:98:3c:4c:
2b:1f:a0:36:31:5a:b3:e1:07:25:26:1e:60:37:5f:
ab:51:81:94:1c:3b:69:27:e6:62:96:73:83:3a:bd:
73:53:99:e4:4b:3f:b6:f3:46:26:87:d8:51:5c:56:
61:13:1b:ec:14:2f:04:8d:32:77:c9:37:b4:0d:19:
1f:bc:bf:9d:5e:a1:20:fb:57:45:56:c6:9a:cf:7d:
e4:8b:5d:4c:d0:aa:dd:38:e1:5f:36:a5:7e:6c:e8:
8a:e7:70:f9:f8:a5:0b:16:e3:96:a4:80:4b:f6:fd:
6e:e5:65:6c:e2:c1:f4:ab:a4:06:d6:15:be:92:25:
37:0b:ed:dc:73:23:4a:b7:9e:27:54:c4:9a:5b:09:
a9:96:e4:ab:7c:ed:d3:df:00:fe:70:15:42:fc:27:
3d:98:d6:27:00:16:bc:95:e3:fe:24:60:e1:f6:b5:
81:1a:76:e8:b9:61:29:1f:10:48:1f:d7:90:23:46:
fc:d1:22:15:9b:b5:55:c7:af:6d:04:7e:20:b8:e2:
2f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:75:CA:E6:CF:DD:D8:D3:AF:DA:96:8F:2C:10:C4:54:1B:34:18:DE
X509v3 Authority Key Identifier:
keyid:DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:78:78:84:80:24:8c:60:b9:36:b6:19:8b:68:35:e4:be:37:
41:e1:da:31:3b:a2:32:63:61:71:3e:14:60:e2:a0:c8:8f:42:
fa:62:ca:21:ae:cc:af:65:7b:f0:d4:c7:f4:a5:31:2e:d9:84:
6b:bd:7f:28:11:00:a6:ec:fb:1b:2e:80:b9:74:87:56:f7:2c:
39:c2:76:4a:48:9f:10:f9:78:71:77:af:f7:c0:2e:19:70:96:
d9:de:3c:b0:69:a7:01:07:be:38:38:4e:85:3b:94:ab:f0:5b:
09:03:91:70:28:8f:23:c1:6c:a7:d0:87:19:a3:ea:46:d3:e4:
f5:4b:35:ae:93:d9:b9:0a:32:f1:6f:08:2a:10:73:21:d7:dc:
35:3c:88:20:ca:88:54:49:d0:f9:12:6a:15:a4:bb:1a:f9:64:
21:a5:10:d0:58:34:9b:6c:c1:c2:d1:14:39:f0:86:7e:0c:bf:
cb:f9:8d:6a:e3:0c:ce:b3:37:ef:60:ff:8c:c4:98:e6:0e:02:
e5:32:e3:8a:a2:29:03:c4:99:1c:30:21:7a:47:56:ac:4f:30:
da:a0:3e:c8:94:5e:9d:c5:10:81:68:cd:69:7e:99:55:4f:52:
e4:83:3b:3f:a5:2a:57:b5:1c:0b:13:3d:0a:f7:1a:70:41:e3:
24:97:0d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:46:36 2025 by rpki-client