Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
File: 3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft (raw, json)
Hash identifier: ENzfS0qAtKAD2HwlMuB0+kbMi9SPlwQt7IuYmKRlnJs=
Subject key identifier: 7E:D3:49:58:F9:C0:8D:B6:36:09:AB:6F:45:37:7D:EB:0E:7E:C9:EB
Authority key identifier: DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3
Certificate issuer: /CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
Certificate serial: 0194BBCE8C98557FC4B8AAC744895748137A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:01:03 +0000
Manifest this update: Fri 31 Jan 2025 10:01:03 +0000
Manifest next update: Sat 01 Feb 2025 10:01:03 +0000
Files and hashes: 1: 3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl (hash: blRyAauT5DzpcCMgB2DSzmYIXQwfsuta1aaQymqPL+w=)
2: XQd1c0isqEth9h07f_gdrmhW6kM.roa (hash: WoVAodjsDqf5sS0K6LPcCANkMFHDsRKs5Hf+/9kb228=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8c:98:55:7f:c4:b8:aa:c7:44:89:57:48:13:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
Validity
Not Before: Jan 31 10:01:03 2025 GMT
Not After : Feb 1 10:01:03 2025 GMT
Subject: CN=7ed34958f9c08db63609ab6f45377deb0e7ec9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a5:0b:ba:ba:56:fe:55:d6:ef:95:06:8e:da:
00:bd:c8:9f:15:43:63:81:13:72:3e:a7:4a:c5:3e:
25:94:fb:3c:14:7b:51:91:6b:3e:93:75:79:07:03:
2e:c1:b2:f7:9e:15:10:5a:85:02:66:81:a4:ae:8a:
af:27:ec:8f:7c:a7:f3:0d:64:dc:18:d8:c9:9d:a3:
1c:d3:ed:3e:69:b4:13:36:90:fa:00:2c:94:5d:38:
a6:3d:82:60:12:4a:84:75:3d:43:ac:db:3f:a7:ac:
65:d0:25:a5:0d:af:91:36:4a:93:c5:13:a0:a5:fa:
a5:64:08:70:ff:a3:79:bc:e3:eb:1a:c1:d0:6f:ce:
8c:e2:e4:2d:d5:a0:9a:3c:05:f8:74:48:b3:23:d5:
a4:9b:63:27:e2:c2:89:e8:07:4d:cd:42:f9:ee:9b:
c0:21:a0:e9:50:fa:df:44:c7:3d:8e:7b:26:04:20:
ff:c9:9b:37:b5:eb:ae:34:57:f9:4a:e3:32:31:6a:
08:fb:71:50:3a:41:e4:69:db:c8:05:40:f7:e6:18:
be:9e:3b:9b:8c:ad:47:b7:0d:90:eb:c2:1f:20:1f:
ec:45:1d:43:4f:23:ba:81:d8:bf:4c:97:d3:ea:19:
9b:da:17:61:54:68:76:83:ab:eb:d3:21:5e:34:8b:
15:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D3:49:58:F9:C0:8D:B6:36:09:AB:6F:45:37:7D:EB:0E:7E:C9:EB
X509v3 Authority Key Identifier:
keyid:DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:db:21:e6:1e:fd:97:e3:9d:a0:40:9d:b2:92:71:33:aa:c1:
b5:8b:0f:e5:9b:da:4e:e9:f6:14:46:d3:38:e7:94:60:e6:1a:
6c:47:b2:f6:ca:2e:2f:f6:99:cc:4b:42:e5:59:33:52:97:fe:
a3:ac:fa:08:0d:1c:0c:1b:ab:5f:70:a1:a4:df:a7:b1:43:63:
40:e8:e5:5c:e3:f3:21:bd:67:06:59:0d:9d:37:e9:75:10:34:
87:d0:30:2a:4a:27:86:83:02:7f:9b:62:c9:46:25:05:b6:f6:
c1:ef:6e:25:62:a8:51:20:d5:09:4f:2f:bc:03:ca:b3:3f:87:
60:59:e8:2b:1e:73:d9:0f:00:04:2c:8a:90:45:e4:c0:34:5f:
b7:d2:01:39:75:2c:48:84:e7:dd:4f:75:54:dc:44:b4:ab:3d:
65:eb:92:c1:dd:f8:4c:08:d9:d7:4b:07:65:c0:33:27:4b:46:
77:56:ea:c5:d2:62:5d:82:0e:ed:e4:2a:74:f8:4d:ec:81:63:
35:d1:e4:fb:56:d5:d8:89:3e:4c:cb:50:bd:1c:01:1d:da:36:
28:98:71:7a:47:8e:5b:fc:0e:dd:c6:03:56:f7:60:ec:4e:73:
a1:f2:30:92:c1:75:37:0f:77:4e:c8:3b:38:38:74:27:d3:71:
76:f4:00:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:10 2025 by rpki-client