Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
File: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft (raw, json)
Hash identifier: DoiKHwmT9AoCk4DC2s+kvD9faDndxGFYNw/JU9bWYqY=
Subject key identifier: 2C:3B:ED:C0:E0:30:19:8C:44:50:08:07:A2:DA:06:EE:E7:6C:DE:2A
Authority key identifier: DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
Certificate issuer: /CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Certificate serial: 0194BCE07058923E9CE00731D7AF975A3954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
Manifest number: 0A86
Signing time: Fri 31 Jan 2025 15:00:12 +0000
Manifest this update: Fri 31 Jan 2025 15:00:12 +0000
Manifest next update: Sat 01 Feb 2025 15:00:12 +0000
Files and hashes: 1: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl (hash: xAkWRMI6ZKqE6081okc7Fe1eEME+OiUzSdgeqs0hWoA=)
2: bJQvsBvbQPoYZP2_LHbwvNkWsqI.roa (hash: 6bSavq+Amxtx/G0AW8vYM/flHBEJUHj3DU6R3v4xOug=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:70:58:92:3e:9c:e0:07:31:d7:af:97:5a:39:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Validity
Not Before: Jan 31 15:00:12 2025 GMT
Not After : Feb 1 15:00:12 2025 GMT
Subject: CN=2c3bedc0e030198c44500807a2da06eee76cde2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7e:69:99:4d:0d:cd:3e:de:81:10:34:b0:c1:
55:56:fb:ef:e3:a2:22:6b:7c:ef:2f:82:7f:89:64:
82:97:b1:ab:50:93:07:3c:ca:a7:9f:c8:3f:d0:8c:
75:23:e4:26:93:3b:ba:69:3e:83:94:11:c7:7c:c0:
0f:2c:e5:ad:eb:cb:5c:27:d1:85:f8:d0:97:45:dd:
5e:f7:e4:39:fb:bb:51:1c:8f:44:8e:13:7f:e7:ca:
a2:f2:3c:f2:17:fd:c5:24:39:04:ec:ba:64:b6:61:
21:73:e7:e7:37:90:94:b9:b9:37:8a:10:d6:d4:69:
1e:8f:b6:8b:48:52:a1:c6:1e:0f:aa:88:49:e7:9c:
7c:35:70:93:18:0c:5b:8c:c0:4c:36:49:a0:4f:a9:
b9:26:8e:26:3e:ab:f1:60:94:ef:65:5a:01:b0:d4:
92:35:2d:ff:ea:68:74:b7:bc:a0:5d:0a:f8:fc:5e:
43:77:88:e8:f1:e9:5b:68:24:87:49:27:2a:da:4e:
37:b6:f7:ea:61:02:a1:6b:6e:fa:a5:16:1f:6f:fd:
9e:8e:cc:ab:f3:27:0e:96:c8:9a:dd:2b:34:4b:7c:
6f:62:d9:0f:28:d6:12:15:ad:6d:01:fb:ea:42:9b:
29:c8:80:49:a5:db:f1:a0:f4:e3:89:cf:02:22:71:
34:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3B:ED:C0:E0:30:19:8C:44:50:08:07:A2:DA:06:EE:E7:6C:DE:2A
X509v3 Authority Key Identifier:
keyid:DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:08:1f:f2:b7:d5:42:cd:ed:fd:3d:ea:31:52:69:72:c0:99:
43:04:6a:78:36:b7:ad:31:5b:82:e6:50:75:69:26:5d:54:f3:
fd:4c:05:74:0b:38:b7:92:e4:6c:f2:ff:9f:1c:a1:81:0f:ee:
e3:ae:28:8f:f8:e4:c1:fb:6f:51:1e:2b:d9:94:17:13:3b:b6:
df:20:1c:fb:1e:ef:0d:7a:72:f4:a3:5c:31:3c:75:d0:65:f2:
ca:f4:ac:3a:c7:24:89:63:44:1a:35:bb:3e:e8:d8:84:9b:18:
8e:01:26:d0:70:0c:e3:ae:8d:d8:8f:82:d4:54:eb:3b:89:b0:
d1:26:99:f1:5f:27:67:69:61:df:1c:85:0e:90:e4:37:e2:7e:
09:ea:c3:34:f1:9c:b0:64:60:cf:d3:d3:bb:69:92:dc:14:52:
9c:cd:06:2c:dd:eb:67:f4:3b:55:46:0f:84:96:d4:95:1e:2c:
42:31:7b:86:00:72:f3:54:66:3c:f0:b4:27:dd:82:10:49:18:
56:ae:4a:53:3b:b2:c6:b2:59:a1:73:84:e7:6b:c0:32:07:f7:
35:7b:69:02:c8:1a:ac:de:c4:69:6f:97:51:e6:d5:0d:8c:19:
9e:b2:c2:ec:c3:fa:e3:98:af:c9:5b:51:10:0e:68:8f:58:7a:
ab:db:69:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:00:33 2025 by rpki-client