Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
File: 3ciCMsB94s3Llur551FVC6pmxYg.mft (raw, json)
Hash identifier: uJjcYeg/NyCz6RjJ6vSunU0s+N6L5V2pLgOGWMSSYVw=
Subject key identifier: F9:2E:3C:AD:BD:6A:23:F6:5D:AC:5D:27:74:D2:1E:AD:D2:4D:22:F3
Authority key identifier: DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
Certificate issuer: /CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Certificate serial: 0194BD4EB822924137773102C00263926328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
Manifest number: 0B8D
Signing time: Fri 31 Jan 2025 17:00:40 +0000
Manifest this update: Fri 31 Jan 2025 17:00:40 +0000
Manifest next update: Sat 01 Feb 2025 17:00:40 +0000
Files and hashes: 1: 3ciCMsB94s3Llur551FVC6pmxYg.crl (hash: J4DFO3uLWhLci4Gv+/tH/QtRbBJBZBhFwp88AseykdQ=)
2: OK60eEXoBVz15pEwVmX0yYULZbk.roa (hash: irOuBXNJpmhp7Bb40BZggz4rGVp00h/PvH1AyeAmbL8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b8:22:92:41:37:77:31:02:c0:02:63:92:63:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Validity
Not Before: Jan 31 17:00:40 2025 GMT
Not After : Feb 1 17:00:40 2025 GMT
Subject: CN=f92e3cadbd6a23f65dac5d2774d21eadd24d22f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:34:c0:ab:69:5c:ce:8a:13:6e:dd:7d:f9:de:
1f:93:86:11:b0:a1:88:e2:d3:88:00:9d:f9:d8:89:
56:80:61:f9:32:6c:5b:a2:b4:de:44:40:82:1e:a9:
85:d9:6e:bf:15:30:18:e2:96:83:93:ed:2d:0c:bb:
89:80:97:61:c5:55:20:b3:d6:b8:27:41:9e:f4:df:
f0:b4:64:88:48:c9:e6:bf:4c:82:32:db:81:a6:79:
74:e0:80:e8:fe:40:3d:cd:0c:3e:79:8d:12:96:f8:
eb:6b:f6:43:e0:c7:6e:a2:25:ab:87:64:5c:a2:71:
32:1b:98:bc:b9:7e:ac:2b:5a:be:60:4e:c0:fb:f6:
a1:01:a8:c1:82:8f:3d:8e:54:f8:63:a6:52:e8:26:
b4:42:c2:a8:de:61:7a:f9:50:44:d7:8c:39:33:7c:
5d:bc:2a:f3:bc:43:11:4f:8b:98:56:7a:2f:fb:de:
8c:4d:70:4d:4a:06:75:8d:16:24:80:bb:d9:16:a2:
d9:30:6e:6e:85:df:21:18:28:62:b4:5e:02:36:96:
42:ac:d1:91:5a:09:da:ae:08:e1:fe:81:a9:4c:0f:
b2:24:81:ac:22:e9:87:43:03:ff:00:68:be:70:30:
9e:e9:eb:cf:a8:9c:85:35:b1:19:c9:f8:7a:f6:94:
37:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2E:3C:AD:BD:6A:23:F6:5D:AC:5D:27:74:D2:1E:AD:D2:4D:22:F3
X509v3 Authority Key Identifier:
keyid:DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d5:59:83:89:16:50:ce:0c:5e:a2:96:41:71:51:b7:f8:47:
8b:ce:32:36:9d:c1:9c:fa:d7:07:f5:95:19:4f:45:2b:3f:c6:
ae:de:c5:4a:21:90:61:d7:79:82:aa:d5:bc:42:f9:46:31:24:
76:b7:e0:a2:7f:99:b7:bb:18:70:f0:6d:9f:8a:0b:8d:88:44:
31:9b:54:0b:96:c8:8d:63:16:58:2e:63:34:db:5e:ba:a2:39:
ea:c5:d1:da:60:cd:ab:60:ac:87:64:6f:44:7a:44:24:99:df:
cf:c9:ea:38:ef:0e:94:17:45:6d:1f:ed:11:bd:3b:06:33:36:
b9:5e:65:91:18:f0:bd:4f:2a:d8:27:aa:8b:84:c2:6b:df:22:
27:f2:16:e6:c3:1a:1b:80:54:6b:0e:bd:f3:55:79:33:8f:46:
bf:cf:70:8e:e8:e9:dd:77:66:5a:f9:34:c7:b6:c9:81:47:48:
61:27:07:38:5b:43:a8:b3:12:2a:32:a7:f7:12:56:9f:29:b9:
0a:d0:fe:67:28:2c:ae:51:26:e3:96:13:66:c0:eb:ce:e1:55:
1b:c1:0e:e7:8f:61:5b:08:d8:07:3c:5e:e4:47:8a:ed:d9:dc:
a0:e1:b0:37:38:90:d9:56:54:fd:be:1f:6a:f5:c0:3b:4c:f0:
b6:b7:7f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:46:49 2025 by rpki-client