Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
File: 3zt208DGDWY1BqJSZxxSjjQ5_3U.mft (raw, json)
Hash identifier: UYHhCsSD0ARc6JdePivMxlRNY3KsBgaMP06aZ7GEY3s=
Subject key identifier: E7:DB:12:8D:74:C7:ED:53:9D:0A:89:7C:90:C2:5C:F0:24:19:F1:26
Authority key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
Certificate issuer: /CN=df3b76d3c0c60d663506a252671c528e3439ff75
Certificate serial: 0194BC72FF81686969FA4ED5F43D682B30E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
Manifest number: 13CB
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: 3zt208DGDWY1BqJSZxxSjjQ5_3U.crl (hash: U8rCUOh4vke49PH1Kn6rCRq7ycB7bc5YlUaIK6KH8N8=)
2: MSp6uSJniwR1tjfPjmXw8Wg_0YU.roa (hash: 0fQ4kAnNMwAWjVPJbNDfudzXYDSGRSTHXnaddIlGIe4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ff:81:68:69:69:fa:4e:d5:f4:3d:68:2b:30:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b76d3c0c60d663506a252671c528e3439ff75
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=e7db128d74c7ed539d0a897c90c25cf02419f126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:65:f5:f6:fa:03:7b:1a:01:8f:62:33:1c:
78:b8:3b:84:e1:90:6d:37:ba:55:17:a4:e3:fb:5f:
c7:bc:cb:bd:da:2c:17:a7:65:31:61:d3:06:2d:80:
cf:ce:e9:ac:22:a6:ea:9c:c3:ff:5b:43:80:b1:25:
c0:cb:3c:34:2a:97:b9:f0:c9:66:7a:72:bf:1a:39:
04:6b:d8:12:a4:21:ed:1f:4f:b8:bc:33:9c:f1:ea:
f9:28:bc:94:56:b0:b2:79:35:e1:61:84:89:04:35:
5b:41:97:24:73:59:28:f3:8a:10:48:a4:a4:3d:48:
94:5d:b2:60:f8:e4:66:9b:2b:19:7f:44:2d:58:18:
3b:11:6c:ba:c2:68:f6:a8:26:96:27:cb:bc:94:c8:
94:b3:90:00:f6:0e:f2:ab:c9:b2:9e:7a:07:dc:39:
15:1c:b9:c2:49:6b:64:77:ce:82:59:d0:e6:8e:a7:
43:d0:7e:ae:c5:92:88:fa:e4:50:f9:00:86:15:ea:
fe:b1:42:d4:39:cf:d9:0a:dc:3c:a0:77:47:fd:90:
49:47:39:56:6d:1a:f3:3d:8b:4b:de:2b:4f:da:dc:
34:22:6e:ef:c2:83:83:c9:da:b5:ed:36:16:15:57:
8c:a5:31:1c:7d:94:bc:19:51:16:a6:31:03:09:0d:
5a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DB:12:8D:74:C7:ED:53:9D:0A:89:7C:90:C2:5C:F0:24:19:F1:26
X509v3 Authority Key Identifier:
keyid:DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ae:83:0f:7e:bb:45:c3:32:a2:e1:ea:ae:39:56:0b:ee:26:
27:29:da:ce:a2:8d:64:aa:c3:e0:ae:52:48:fb:00:4e:dd:e1:
fe:ab:9c:53:bc:98:c2:2c:19:a4:5a:b6:73:22:f8:2d:be:7d:
35:08:b9:4a:ff:2e:ef:78:4f:4a:74:34:be:de:5f:55:0b:c5:
cb:23:bb:df:8a:a4:74:ea:8d:a7:0d:02:87:ed:ea:e1:97:66:
65:48:f8:ab:a8:f9:8a:2b:b0:69:cd:1b:f7:41:da:e1:5e:b6:
54:f2:b6:b0:73:d7:74:f7:b9:d4:30:69:50:81:45:2d:a7:7d:
78:73:2f:7f:cc:03:48:6f:95:25:86:53:5e:3c:0c:13:9e:e7:
bc:7c:a6:9e:24:38:fa:34:ed:b9:17:8a:bf:83:fc:df:99:dd:
3b:d0:1d:34:c5:92:54:16:51:a4:d5:bb:91:5b:ab:f1:97:38:
60:05:f8:95:83:24:e2:c3:c3:e2:79:f1:45:21:08:0b:8c:62:
fa:7f:ce:11:ac:e1:67:eb:88:4f:b4:ec:88:98:6a:cd:b0:98:
ea:f5:5a:35:08:eb:72:6f:2d:76:83:ab:3a:45:8b:b0:59:9f:
39:36:00:0b:f4:27:15:1b:fb:bb:be:e7:19:9d:0c:22:e0:ee:
70:df:34:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:11 2025 by rpki-client