Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
File: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft (raw, json)
Hash identifier: QXIgQg/ZTu8+SXElOd60jEZ40LTBHXZySnDr584zHpA=
Subject key identifier: 24:E7:0F:E3:92:23:17:20:2D:02:5C:0E:22:ED:A4:3B:57:74:67:5B
Authority key identifier: DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
Certificate issuer: /CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Certificate serial: 0194BC72CD94D29630C9921EC2D6E07E6B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:27 +0000
Manifest this update: Fri 31 Jan 2025 13:00:27 +0000
Manifest next update: Sat 01 Feb 2025 13:00:27 +0000
Files and hashes: 1: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl (hash: wXePxNYVvhGQpJkotojK0w64UCW7YX5zS+gAE4hapHQ=)
2: aKn5wX9zpC6koraTjDd3gqhXdek.roa (hash: UCw+VdmiwuxVJRZ+XJIJQKAozSvDmGpk4Pb8r0Al3WE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:cd:94:d2:96:30:c9:92:1e:c2:d6:e0:7e:6b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Validity
Not Before: Jan 31 13:00:27 2025 GMT
Not After : Feb 1 13:00:27 2025 GMT
Subject: CN=24e70fe3922317202d025c0e22eda43b5774675b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:a4:85:b8:51:d0:74:3b:84:5a:9e:1b:52:
9f:9c:56:08:51:06:cb:99:b1:5b:13:06:c3:e3:1f:
2a:fb:9d:89:25:82:3a:1d:02:38:d5:4a:35:34:ec:
29:ad:c5:ef:bb:af:76:2c:2c:04:3d:8b:f8:4b:e5:
33:94:33:69:fb:23:67:45:b0:e1:00:88:38:64:10:
0e:c6:f1:db:35:0c:43:96:05:d0:23:6f:11:6b:78:
09:cc:64:75:df:05:63:ec:72:a0:56:5b:07:8c:c8:
61:e2:ed:1b:cc:07:e0:32:8f:bf:10:1d:57:f2:bc:
cc:71:24:0f:2f:37:b6:41:bd:e1:f8:fd:7a:e4:9b:
b8:11:52:0d:16:e3:b9:3d:a0:47:cd:0e:f0:a4:ac:
cf:38:43:34:8c:4c:75:3d:39:3e:6f:c2:24:7a:80:
78:e6:66:5e:47:a4:8f:9a:a7:c6:92:fc:77:9f:3f:
32:23:1c:0a:74:88:91:23:31:10:c5:8b:0d:32:f6:
f1:31:99:36:e1:6b:72:04:5c:8a:7b:20:40:41:d4:
2d:52:3c:fc:3e:83:c2:29:df:dc:41:07:2f:9c:3e:
97:8c:ce:81:e6:c1:cd:13:81:d1:ac:07:72:dc:f9:
10:b2:df:31:35:52:48:00:88:20:6c:8c:60:36:02:
e5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E7:0F:E3:92:23:17:20:2D:02:5C:0E:22:ED:A4:3B:57:74:67:5B
X509v3 Authority Key Identifier:
keyid:DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:19:6b:6b:c7:c9:43:c9:1c:21:fd:0f:7f:4a:50:02:f1:5a:
91:a0:0f:35:d5:fa:09:72:81:54:c0:ec:38:bf:43:80:08:d6:
c5:f7:cd:dc:e2:79:5f:a1:e9:a7:d0:f4:c5:2b:93:0b:c2:e8:
25:94:72:cc:c1:aa:47:75:7a:c7:a8:51:32:c9:9f:0c:bc:84:
28:6f:d6:54:f2:12:dc:6a:0f:9d:25:20:28:24:c9:d9:9a:a8:
f7:89:7e:62:13:90:1d:b2:81:74:d9:ae:0d:d2:1e:4d:43:58:
73:46:f0:85:a0:e3:6f:20:a1:b4:3c:9b:c6:f0:b0:eb:07:4d:
4c:d3:d0:bd:4e:16:22:5f:ea:cc:34:53:96:cf:08:01:20:97:
8e:70:b5:2b:3e:4b:3b:a5:c5:aa:75:57:4d:6b:2d:49:dd:7a:
79:29:80:b4:87:f4:5d:14:7a:11:7e:86:97:5a:75:6e:e0:85:
10:2a:68:22:10:f1:f5:1a:b2:7f:8f:c4:13:64:10:d8:fc:51:
a3:d3:87:a3:8a:6e:96:37:48:93:98:e6:72:33:ed:73:b9:5c:
2c:93:a3:c1:50:f9:5c:02:2e:b8:b0:6d:d0:a3:55:af:97:4b:
cf:a6:69:d4:37:1f:5b:a1:91:2a:6a:e9:fc:f5:46:3a:21:8e:
8e:ec:23:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:19 2025 by rpki-client