Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
File: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft (raw, json)
Hash identifier: srrgttOhSmy3Fv/2YON4IMy9yJf0HOOsD+oZH7cWw/8=
Subject key identifier: 09:6C:39:CC:2C:D7:5B:7B:40:4D:BB:FF:64:52:5B:57:06:E2:E7:5D
Authority key identifier: DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
Certificate issuer: /CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Certificate serial: 0194BCA992FD2B35827E2445F9F6C8B6406C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
Manifest number: 1384
Signing time: Fri 31 Jan 2025 14:00:17 +0000
Manifest this update: Fri 31 Jan 2025 14:00:17 +0000
Manifest next update: Sat 01 Feb 2025 14:00:17 +0000
Files and hashes: 1: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl (hash: +0E6O3zXTf/V+uOdT/6QRk/ugVlwcJXO07i0iDV9/ok=)
2: bPbl9DKxYJUxR3ZUVzukhGWYurM.roa (hash: FAnYMWhXeH8TjI8m2ivn5nzVc0hLKvZ4QbjQQh/aekU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:92:fd:2b:35:82:7e:24:45:f9:f6:c8:b6:40:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Validity
Not Before: Jan 31 14:00:17 2025 GMT
Not After : Feb 1 14:00:17 2025 GMT
Subject: CN=096c39cc2cd75b7b404dbbff64525b5706e2e75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:77:f2:66:d3:0a:6d:4e:b0:06:69:0d:df:9e:
9f:43:ae:29:ea:8e:06:49:1c:c8:95:ea:32:30:96:
03:06:5f:76:3d:fa:e5:35:4f:e3:d2:8a:73:5b:dd:
50:a5:7b:2f:4c:c0:84:40:ce:b1:cb:3a:3d:60:f1:
42:69:65:f3:b0:23:e1:0b:65:d9:5f:aa:78:61:3c:
c3:4b:f9:81:32:79:69:d2:af:63:6c:15:dd:22:71:
bc:aa:9a:5f:e5:56:a3:0c:e3:96:ce:31:c3:fe:51:
b1:d8:11:68:06:5f:60:18:39:af:48:06:4d:f7:ff:
f8:1a:75:0b:e9:df:64:e2:17:49:39:8b:9b:66:3f:
5e:56:7e:60:92:66:07:ba:be:88:34:ff:b4:d7:bf:
6d:9c:43:e6:34:e8:fe:96:8e:a4:ae:13:70:08:86:
7f:35:6a:fc:76:a8:b3:7d:09:20:14:8b:c0:3c:ab:
fe:c9:4f:f8:c2:c1:4b:16:07:6a:62:bd:27:43:4c:
6c:9d:01:e6:bc:56:cf:cb:9a:88:1d:76:47:80:b5:
81:a1:1e:a1:7a:92:36:83:9f:98:9b:e9:c1:e4:bb:
27:16:a3:f2:5e:bb:11:e8:60:cc:8f:d0:ad:b8:b5:
f2:25:6d:94:f8:30:26:83:b1:a1:6d:7d:f2:94:14:
c4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6C:39:CC:2C:D7:5B:7B:40:4D:BB:FF:64:52:5B:57:06:E2:E7:5D
X509v3 Authority Key Identifier:
keyid:DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:64:05:e5:ed:75:ef:33:3a:c0:14:0a:a2:e7:5f:e3:d6:2b:
60:33:c3:43:ee:ab:6b:2d:04:f9:23:5b:24:76:c4:88:f2:e6:
d0:ff:5e:8e:b0:55:9b:f5:38:1f:23:a1:9d:11:48:34:84:56:
2c:10:da:86:9e:f1:7f:b6:a8:3f:25:81:67:d8:c3:bf:b0:ce:
f6:c9:b9:03:db:83:66:8e:44:61:02:d1:01:21:b3:da:b9:3f:
77:f7:1e:d6:bf:a7:b4:72:2e:39:88:35:a6:26:50:e3:47:b8:
3a:4f:6f:87:b3:7e:54:0c:c1:3b:2e:ef:4f:df:f8:21:1e:7c:
fc:77:a5:89:e4:d8:a6:89:1b:0b:ff:49:d5:07:35:7c:33:f9:
d3:56:92:a9:79:5e:a1:10:ae:0f:27:da:67:19:49:21:8f:b1:
6c:38:d9:21:05:a6:2a:ee:4a:2e:bb:0d:8f:f3:3b:5f:32:7e:
fa:c2:d6:db:a6:44:e5:da:92:20:4d:e8:eb:b6:f2:e6:a4:1d:
5e:fe:0b:d8:d5:77:ab:e4:45:b1:b3:aa:e7:8b:4b:64:4f:f4:
63:d4:4e:fb:83:ac:67:9e:ff:07:d1:08:cb:df:fa:4d:f8:f1:
21:8d:ba:a0:b7:ed:d1:26:8c:a8:4d:fd:04:30:57:e5:b5:f2:
0b:b4:5e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:28 2025 by rpki-client