Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
File: 3l428Vn1dpiPtOUdQQG7hdDQyYM.mft (raw, json)
Hash identifier: gPd2hub8sEsvOdFVgB8U987JySy2HhbDAB/CgJsyJ10=
Subject key identifier: F5:80:79:18:FB:EF:23:87:F3:BC:13:42:EF:D6:01:74:AF:7A:B2:1E
Authority key identifier: DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
Certificate issuer: /CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Certificate serial: 0194BC3BEAE54DA3FA8FE07A480894EEB6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
Manifest number: 0E2D
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: 3l428Vn1dpiPtOUdQQG7hdDQyYM.crl (hash: wnZcVb/5fHdyxjcgHZ8bAbkV9H2BXcnF5RlKR0yQ6M4=)
2: CXuHSCaFxVaRaAru4-iFvdd0d-g.roa (hash: po3EKI/Ie4MxQDtGyWIOYbTAnH49FsuKgvn3GW+cz7k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ea:e5:4d:a3:fa:8f:e0:7a:48:08:94:ee:b6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=f5807918fbef2387f3bc1342efd60174af7ab21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:03:06:a4:0c:1f:73:37:bb:1c:6b:5b:3c:a6:
24:a3:f6:bd:5b:b7:3c:9e:48:db:56:8a:4d:2e:9e:
fa:16:04:92:d0:27:e5:e1:c8:ba:4c:76:8e:46:55:
00:41:d5:b1:e5:78:be:ce:08:88:4f:d0:d6:19:c4:
32:da:2f:6c:25:a8:e0:cc:5c:01:e8:96:ca:1c:94:
dc:5a:f2:1a:ad:42:ac:02:38:2e:34:e8:34:f1:ae:
0c:cd:7e:28:44:f5:7d:fc:61:72:4a:c9:df:82:4a:
cd:a2:b1:89:c5:33:b5:68:57:fe:38:8b:49:6e:6f:
6c:82:b4:34:76:0f:a8:c0:42:75:8b:17:03:06:71:
54:2d:68:2f:7e:ea:6e:80:15:6c:ad:83:b8:d1:4b:
d1:98:e7:01:4a:6a:66:87:f6:c3:89:d7:64:56:1e:
3f:c6:7a:20:03:df:4d:a5:70:93:f5:ec:fa:c9:e7:
ff:2d:c8:8c:1a:9b:40:02:e5:03:3c:8b:c1:2e:6d:
2a:2a:07:4d:40:57:ca:c3:f9:65:d6:5d:f9:78:f3:
21:1d:f5:29:9a:7c:0a:cb:54:91:fe:15:65:4c:d7:
57:66:9b:04:0b:af:b7:fa:44:e8:06:74:c8:d1:33:
f2:cc:3b:2c:a0:97:a5:a6:c1:66:35:48:b2:89:9d:
66:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:80:79:18:FB:EF:23:87:F3:BC:13:42:EF:D6:01:74:AF:7A:B2:1E
X509v3 Authority Key Identifier:
keyid:DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:6b:fd:44:f5:3b:59:2b:74:d6:9e:99:22:ac:da:e6:21:15:
00:89:ff:d0:26:1f:53:11:36:c9:a0:d6:37:23:74:7f:3f:c3:
36:cf:2c:e5:f4:c3:b1:01:89:45:be:36:89:60:7b:c8:8f:36:
35:9c:50:34:b3:02:b0:9a:92:8b:21:48:a2:24:cb:24:05:4e:
7a:cf:e0:eb:fd:25:b9:2d:80:78:cb:0c:95:31:a6:c1:8d:77:
92:2a:6a:07:28:d7:f0:a7:08:eb:c9:13:06:bc:bd:48:12:98:
81:44:01:80:69:96:dd:57:6b:5a:2f:3e:9d:33:61:35:f3:4f:
ac:b5:09:82:4e:ff:94:16:b9:05:14:a2:97:a9:f8:88:a5:1f:
c5:6d:56:66:3b:5f:93:bc:47:c0:8a:7a:c5:10:71:f7:0a:22:
6d:a2:15:f6:2d:8a:4f:8f:72:a9:75:62:37:87:78:e7:37:9e:
94:2f:59:15:05:2d:39:8c:cb:c7:15:82:55:cc:a1:44:a5:b1:
d6:35:0d:f0:b5:6a:c4:c8:5d:10:2d:be:67:25:a2:ab:2e:de:
1c:4f:13:8c:61:fe:43:29:97:de:67:3f:ea:5a:0a:38:83:a0:
e7:e8:3f:0a:b7:ae:00:3e:7b:e2:9d:2b:05:48:c9:f6:de:eb:
64:34:68:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:31 2025 by rpki-client