Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft
File: 3ofTW9yrEjr_wakdFzaGeWlwmiM.mft (raw, json)
Hash identifier: VQN2UKGtfCzunxwK4hrsOjezW5zhOEoXEPaxOY6QvcE=
Subject key identifier: 00:D8:6E:3E:13:04:A2:CD:EB:14:24:00:95:8B:6C:31:58:76:EA:81
Authority key identifier: DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23
Certificate issuer: /CN=de87d35bdcab123affc1a91d1736867969709a23
Certificate serial: 0194BD179B42F444320258CE84DD456DA4CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft
Manifest number: 0B73
Signing time: Fri 31 Jan 2025 16:00:28 +0000
Manifest this update: Fri 31 Jan 2025 16:00:28 +0000
Manifest next update: Sat 01 Feb 2025 16:00:28 +0000
Files and hashes: 1: 3Y1BHZUILEomegZ6I-JOe2EDqas.roa (hash: nyAIzspdbGpqX40B5GkCbeW1pebw48sxfeKC18TMLdE=)
2: 3ofTW9yrEjr_wakdFzaGeWlwmiM.crl (hash: VsUrfvRslBzj7g5BHgG5vA2sZTYvhpT4u7D110ZIo8M=)
3: m2FaQjqwdirKnIXjWYvZqBXz6X8.roa (hash: T2eJCXBDxAgsoT/g2qbdU7r93yFYU14KBtRd6n9GR68=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9b:42:f4:44:32:02:58:ce:84:dd:45:6d:a4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de87d35bdcab123affc1a91d1736867969709a23
Validity
Not Before: Jan 31 16:00:28 2025 GMT
Not After : Feb 1 16:00:28 2025 GMT
Subject: CN=00d86e3e1304a2cdeb142400958b6c315876ea81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:86:e8:9b:55:33:00:03:fa:79:30:10:a4:71:
d1:02:83:5f:e6:67:50:13:c2:40:76:ce:2f:7f:0c:
79:56:bf:81:bc:1c:f4:94:2b:b5:e2:76:89:ea:ca:
1c:10:24:52:c1:6b:5b:c6:b9:e7:69:02:70:40:2b:
e2:6b:60:9e:be:b7:86:2d:96:e6:4b:44:27:b8:ad:
f1:bf:76:34:8b:b1:a4:70:dc:8f:6a:ab:5b:43:c9:
0c:7e:8d:2b:97:40:f9:dc:92:75:d1:6d:90:7d:09:
c1:45:34:4f:da:90:d1:58:66:72:a5:47:fb:9d:35:
a6:fb:f4:03:c7:ec:fe:b4:98:35:48:20:b9:e6:a0:
10:59:10:18:0b:1b:3a:ab:2a:6d:ba:fb:96:74:b3:
36:5f:dc:44:be:64:60:05:1f:0d:ae:b0:51:77:f4:
eb:ed:49:f4:a9:fa:92:3d:72:cb:a3:af:b1:b7:e2:
96:7a:4f:d3:e4:05:be:a8:e2:54:16:a3:4e:24:2d:
84:84:f7:8a:82:ca:93:0b:56:ae:82:26:fa:a4:a8:
cd:e7:35:0f:e8:ec:ea:dc:56:52:18:f4:fa:e9:73:
d9:c4:08:2d:30:b1:7a:3f:cc:df:18:ae:e9:20:69:
9c:2c:34:fd:c9:21:e3:4d:60:02:cd:1f:40:31:43:
b2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D8:6E:3E:13:04:A2:CD:EB:14:24:00:95:8B:6C:31:58:76:EA:81
X509v3 Authority Key Identifier:
keyid:DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b3:f4:6b:14:ea:53:87:b2:49:87:4d:ab:e2:03:f8:e2:6a:
3e:47:8e:7b:62:0b:ba:d9:78:21:24:50:74:a3:96:20:0b:b4:
df:99:7b:f4:11:e9:6c:82:36:4d:da:47:5e:4d:f8:4e:1f:a3:
ca:45:86:c2:a3:b4:8c:a9:8a:87:ab:f4:02:80:bb:64:02:a0:
04:2d:c9:5c:bc:2d:f3:6a:07:33:b2:a1:54:59:f7:30:4f:2e:
db:85:58:b3:88:10:dd:f4:93:a1:c0:30:9e:e8:ea:0b:31:d1:
a2:94:a9:66:28:06:2d:1d:e6:bc:d5:f3:25:29:74:ac:ee:36:
ca:79:53:e9:85:c5:92:8e:20:41:b4:86:c3:7c:31:c3:82:dd:
1f:af:d0:2f:2b:ff:b7:cf:9a:fe:92:d3:68:b5:0b:0a:3e:93:
82:6f:39:5e:7d:58:66:b4:e5:6b:18:10:ea:01:a1:2d:89:74:
f1:7f:bd:53:3f:51:7c:ba:0d:20:2c:67:ab:a0:df:72:3a:34:
ee:a2:1e:be:b3:af:83:45:c0:25:1d:d8:1e:bd:e3:59:ac:ad:
c0:f0:2e:9c:4c:9d:0d:1a:52:52:56:37:0c:8e:41:b7:f8:3e:
b9:ff:59:c2:e6:44:c0:44:0b:b3:af:72:a1:05:ff:55:04:ca:
25:38:3d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:32:46 2025 by rpki-client