Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
File: 3thYKwJDhjxXLOJXhsyzb_eVsi4.mft (raw, json)
Hash identifier: sx2HCF2GwGsjfHkf3y5jP0QiXg0HhX4XU5cYQ3hOxpw=
Subject key identifier: 98:6C:01:6E:1D:BD:1D:98:C5:24:D8:2C:7B:1D:18:14:57:4D:6D:D9
Authority key identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
Certificate issuer: /CN=ded8582b0243863c572ce25786ccb36ff795b22e
Certificate serial: 0194BBCE7406F84018C287D900C6CABDA3F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
Manifest number: 0B60
Signing time: Fri 31 Jan 2025 10:00:56 +0000
Manifest this update: Fri 31 Jan 2025 10:00:56 +0000
Manifest next update: Sat 01 Feb 2025 10:00:56 +0000
Files and hashes: 1: 3f1U8HcG3gg1d7c-AMV0OeLqnk4.roa (hash: 6g/YiGFM7SXH1avma+AWhdPQYeSM8xFquer6wIrnMrw=)
2: 3thYKwJDhjxXLOJXhsyzb_eVsi4.crl (hash: BkPCfHYJ+1kZr4CtaMDk4nVkWKSfoXm/QP/hJmGf5B4=)
3: LKSIMzg2qS8EWL02SO5YPjrz_I0.roa (hash: ZtwqDuK6zfdHnP5iApdAnlCr/naZTEL8mOtuOOiHgUY=)
4: uKO3HquanWKUmJ90M8YK1DIe1PA.roa (hash: XUrZ548wn+DveWLDDAs++NbjxnozKfTkNs4dRtLEX4w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:74:06:f8:40:18:c2:87:d9:00:c6:ca:bd:a3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded8582b0243863c572ce25786ccb36ff795b22e
Validity
Not Before: Jan 31 10:00:56 2025 GMT
Not After : Feb 1 10:00:56 2025 GMT
Subject: CN=986c016e1dbd1d98c524d82c7b1d1814574d6dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:4f:14:81:de:41:c3:7d:a2:38:be:8f:f4:
49:19:13:cc:11:f3:9b:10:ca:2f:2a:4d:56:d6:55:
d9:ee:b5:ca:5b:ba:7a:19:fa:f8:85:75:04:e7:8a:
40:35:43:6e:bd:a4:e5:2e:23:fc:45:90:b0:3d:ef:
4b:95:bb:ef:e9:34:71:d9:0e:6d:dd:25:4b:89:d9:
38:a8:40:6f:e3:ec:74:94:76:43:90:5b:b0:d6:55:
02:4b:60:84:42:52:57:2d:e8:94:e2:4f:05:cf:31:
07:4b:6d:c0:d0:c3:dc:a8:43:79:22:03:a3:26:28:
df:6f:5f:2e:eb:ea:3a:4b:ce:98:d6:4f:99:c4:75:
d9:bf:c9:4c:19:76:a6:4b:a8:2d:99:ff:4b:b0:dc:
d6:f8:48:26:4b:d4:6b:cc:88:45:47:61:ed:e9:e3:
a4:63:d4:38:fc:05:6a:8c:21:d1:13:1f:ae:f7:5e:
ab:66:23:e0:b9:50:67:5b:74:79:42:e9:a7:aa:43:
b4:9d:ce:cc:52:12:37:65:1c:5a:7d:ef:52:b9:7b:
4d:23:c0:37:b8:38:05:50:3c:3f:7a:82:3b:73:21:
27:e2:03:7d:53:a7:ad:a3:1f:05:88:b6:9d:58:17:
45:30:d9:37:6c:1c:80:25:67:fb:b2:a3:12:ff:95:
d0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6C:01:6E:1D:BD:1D:98:C5:24:D8:2C:7B:1D:18:14:57:4D:6D:D9
X509v3 Authority Key Identifier:
keyid:DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:03:63:02:2c:7c:2d:1a:26:86:b4:da:6b:25:e3:cf:cf:17:
f3:f6:76:56:ff:25:ad:65:da:f8:2d:24:3a:76:f5:26:75:61:
f5:6e:2e:c5:5e:36:2b:80:37:02:76:2f:61:3b:94:b0:7e:89:
39:57:64:dc:af:6c:f9:40:ba:e9:6a:31:c8:09:5a:17:8c:ca:
ef:1b:2d:4d:90:0d:8f:69:64:c6:a7:e8:53:9f:41:aa:37:b9:
8f:59:ad:b5:25:79:74:b1:e7:ea:71:d4:63:71:89:af:2d:a0:
94:92:2c:b7:12:f0:f1:d1:63:4b:62:4b:d1:80:c6:51:25:11:
da:8d:b3:c8:95:4a:f5:8e:34:ff:17:eb:58:b0:e5:f4:cb:c3:
59:97:0a:bf:30:13:80:9a:29:bc:bf:04:57:81:b0:31:e0:1d:
e8:a5:e0:c1:2d:58:5b:ba:5c:23:e0:6c:45:d9:c0:e2:a2:c3:
c3:b7:a7:33:70:3a:e7:be:f9:e9:3b:e7:e3:2d:74:80:2e:4f:
cf:cc:97:c7:13:f0:ac:80:17:16:7c:1a:fd:bd:e0:47:18:4c:
a2:97:1f:78:c3:e3:dc:e0:f0:79:f3:fe:6e:08:fd:4d:fc:38:
5a:d8:37:e9:1c:fc:ec:22:ab:fc:f8:10:29:a9:1f:a4:cd:73:
7b:d3:c1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:38:31 2025 by rpki-client