Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
File: s-3xF3T0QHrdvfPPukweeqAkIiM.mft (raw, json)
Hash identifier: UWW4G2dHDUkjr9Zuygo8oQy3qc0R9LjbH8hUs11XdLc=
Subject key identifier: EF:A1:76:99:7A:5E:A1:05:F8:93:36:DD:1B:4F:FA:94:A7:4D:B2:9C
Authority key identifier: B3:ED:F1:17:74:F4:40:7A:DD:BD:F3:CF:BA:4C:1E:7A:A0:24:22:23
Certificate issuer: /CN=b3edf11774f4407addbdf3cfba4c1e7aa0242223
Certificate serial: 0194BD85BDCF0EE76D989745C248B24EFA24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
Manifest number: 01B9
Signing time: Fri 31 Jan 2025 18:00:46 +0000
Manifest this update: Fri 31 Jan 2025 18:00:46 +0000
Manifest next update: Sat 01 Feb 2025 18:00:46 +0000
Files and hashes: 1: s-3xF3T0QHrdvfPPukweeqAkIiM.crl (hash: RD5rAKTtk3g2q3tUa1KDbcAlrvgLzjqNSvWmCIY24Ik=)
2: uqWPOGEjKAK6cva-7ggQuyGZx84.roa (hash: LmiTjnCPg8ISEkh3ESWU5kwDHzMqe3y8V1474zgHE24=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:bd:cf:0e:e7:6d:98:97:45:c2:48:b2:4e:fa:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3edf11774f4407addbdf3cfba4c1e7aa0242223
Validity
Not Before: Jan 31 18:00:46 2025 GMT
Not After : Feb 1 18:00:46 2025 GMT
Subject: CN=efa176997a5ea105f89336dd1b4ffa94a74db29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1c:c7:6d:92:e3:8b:8e:1d:71:ae:b1:6a:bf:
d6:2e:7b:d4:6e:e9:9b:38:e0:ad:1d:0f:46:31:fa:
fa:e2:d5:20:ab:76:24:90:c9:b4:70:3d:f3:86:03:
74:d3:e2:8e:84:70:72:56:0e:a6:65:bb:8a:2e:11:
ea:db:1d:26:0a:40:44:e3:e2:4c:60:65:18:7a:15:
32:bd:ba:a2:d0:35:25:a8:9a:33:8c:9e:bd:ea:32:
8f:68:6a:d0:8e:34:44:f2:31:77:18:fc:7e:c7:8d:
b1:ba:7e:12:83:e3:53:7a:66:80:64:37:fc:09:14:
fb:64:b8:4d:eb:ec:66:e6:0b:4a:a0:ea:e8:ad:cb:
a6:96:04:17:1c:83:67:57:5d:bf:e6:6d:eb:24:67:
3b:50:b9:b3:bc:ae:b6:d4:43:35:86:ee:bd:d0:bd:
48:e7:47:45:03:4d:7e:e3:7b:1e:75:cf:9f:3a:64:
3a:32:48:be:1c:3a:59:5a:a8:8e:40:e1:f7:d9:ca:
5c:6e:13:51:dd:b0:2f:c7:ae:20:7e:a1:b2:ce:6e:
fa:8a:cc:65:93:7e:04:4f:49:30:30:09:5e:e2:28:
fd:bb:ad:7d:75:59:da:5c:77:48:ce:2c:c7:f7:68:
b9:50:47:e5:5d:24:70:09:9f:c2:a0:40:9c:28:da:
98:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A1:76:99:7A:5E:A1:05:F8:93:36:DD:1B:4F:FA:94:A7:4D:B2:9C
X509v3 Authority Key Identifier:
keyid:B3:ED:F1:17:74:F4:40:7A:DD:BD:F3:CF:BA:4C:1E:7A:A0:24:22:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:83:5b:f1:3f:2b:ad:85:df:0e:b3:76:34:9f:34:e2:ac:63:
bb:1b:99:df:49:9d:c2:5d:4c:f6:b7:75:ff:09:50:69:15:d7:
af:1b:a4:41:3e:15:8a:89:49:b0:09:0e:ff:2b:12:fd:25:43:
94:e4:ad:05:48:59:12:1e:ff:4a:aa:43:ce:3d:0a:4b:67:3d:
b6:59:a3:72:29:e0:c2:a5:e6:22:98:6c:96:79:cf:ed:3f:02:
53:e6:df:41:f3:41:80:7a:f2:be:ec:a2:6f:9b:55:dd:30:8b:
01:ee:a5:32:93:80:d7:73:af:05:1a:2a:3c:54:0b:af:07:63:
95:a9:0d:e8:e8:55:00:a5:f7:e5:cd:9e:bd:a8:0c:b1:48:db:
a0:7f:58:a0:d9:36:00:75:1a:0e:fc:92:d6:e6:60:c7:e0:2b:
3d:48:b8:69:4c:eb:e7:30:39:e6:fd:70:70:8d:dd:9d:e8:6a:
64:2e:5d:ea:54:46:21:d3:84:32:52:60:02:b1:32:7c:02:fb:
c2:f8:b8:a4:f6:6e:5b:85:98:9e:71:53:ae:5a:eb:bf:6c:9e:
ab:07:a0:00:82:57:68:45:ab:6c:55:d9:bf:2b:25:f1:a9:0e:
2b:3c:a6:05:4d:d1:98:9c:06:b2:e5:b3:6e:f6:db:10:ae:bc:
ed:c0:bd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:20:44 2025 by rpki-client