Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
File: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft (raw, json)
Hash identifier: xpvKHpVd5pnudGgCeMz9c95NDc3W5YC3zsVAPLiaO9U=
Subject key identifier: 6E:53:CE:55:0C:07:09:07:8F:0E:7E:A6:93:36:B2:AB:80:B8:2C:03
Authority key identifier: 0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
Certificate issuer: /CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Certificate serial: 0194BC04BDC0650041DA31749AEBC508246C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl (hash: vzTZMIAhX3e1lr7zn6wQ/jaZVf4uTiEPpa/gBcNm3PE=)
2: GQRsCJTR5eyMxFAsEzKdn1EA608.roa (hash: HAXZ0MI6t/VbluxA0NO0jceUtQ5vVV4JGD/6H3yxEPg=)
3: lqRpbscM182PANHFGsqMxFenQsU.roa (hash: KSrFDxAg8q5YynrUWiOm6jdQGqkWKL+PdBqVLGCQ1I4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bd:c0:65:00:41:da:31:74:9a:eb:c5:08:24:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=6e53ce550c0709078f0e7ea69336b2ab80b82c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d6:78:a8:38:61:18:5d:50:cb:68:10:81:64:
81:81:cd:01:9d:c8:7c:24:8d:38:ed:04:07:ac:f4:
bf:c9:55:3a:b8:ab:f7:4e:68:02:bf:42:20:73:1b:
92:54:de:20:a0:45:94:2a:03:74:9d:49:62:67:c5:
e5:4d:65:4e:f8:3f:16:99:a9:18:18:dd:50:f0:17:
2f:34:a8:c1:53:06:92:dc:d3:a5:2e:a1:a6:9f:38:
c5:45:4f:1e:8e:e5:e2:6a:c0:f5:a5:b2:cd:78:a9:
09:97:b4:bf:3b:6e:e7:01:5e:58:42:26:dc:f3:21:
ff:f9:b7:36:a5:f1:e2:f1:f7:f5:53:1a:30:09:57:
8e:44:40:2b:4c:21:95:bc:76:67:f3:47:22:0c:f7:
23:49:c6:1e:b8:08:62:c8:87:b8:ec:06:73:7f:97:
e6:ea:3a:10:7d:02:6c:85:68:98:fc:a9:b3:98:01:
a5:4e:f0:da:a2:db:30:0f:56:68:ab:0e:fd:53:5e:
4f:96:8f:bf:2a:14:a4:7c:2d:84:22:d3:91:ea:21:
d6:a7:bf:70:30:ad:1d:8d:7d:84:07:24:ae:55:d5:
32:5c:47:33:15:9b:15:e5:74:dc:70:c3:77:04:8f:
78:5f:76:78:d0:70:d2:3d:a5:4e:b2:0c:9b:af:15:
32:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:53:CE:55:0C:07:09:07:8F:0E:7E:A6:93:36:B2:AB:80:B8:2C:03
X509v3 Authority Key Identifier:
keyid:0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:7b:71:4e:51:72:f8:91:0d:47:45:39:55:88:66:e9:65:1c:
be:52:5f:a9:35:eb:ac:c8:51:9b:9a:6a:15:44:4d:42:67:d1:
73:f6:ae:38:a2:09:4e:4d:ae:40:b9:4a:4c:4e:72:52:7c:55:
67:44:7f:23:17:8c:d8:60:93:15:5c:64:a5:29:b7:d7:4c:1e:
87:4e:b5:d8:21:0c:85:ec:c4:a2:83:4b:9a:f0:71:30:54:6b:
c5:f8:04:3a:38:ee:a5:e5:69:93:c9:fb:96:d3:99:96:ab:d8:
10:4c:7e:ce:c4:59:4f:e1:c1:d9:f7:dc:2a:de:1d:e3:26:35:
94:ec:ce:60:04:3e:71:9c:59:5b:ff:07:ba:e3:f7:22:da:b7:
9a:bc:d8:60:ac:03:0c:38:fc:1a:18:47:38:fe:bb:d1:c5:2a:
30:95:d3:50:a0:13:a0:3e:72:84:a1:cf:1a:ac:c7:6e:02:45:
7e:de:75:3d:52:dd:d0:8e:ee:c7:17:7e:20:16:fd:d2:e4:f7:
1a:d5:6b:48:15:1a:93:d7:76:28:b8:17:ca:29:6f:4d:e7:51:
5c:e8:51:cf:f0:71:02:1f:71:9a:9e:b5:5b:51:be:f7:7d:b2:
6a:17:bd:ca:f8:23:29:97:23:9a:58:91:e5:a2:71:bf:f4:eb:
2f:c9:83:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:48 2025 by rpki-client