Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
File: 3L-wBIqNpVb9nT3xB3QC-EP11wM.mft (raw, json)
Hash identifier: uL2MYrjLGewjPngjVteHV/kHZ2Z50WlbzAwTEdkNYcE=
Subject key identifier: 07:FA:3B:35:E5:FE:E2:D2:BD:3A:69:75:DB:A2:DD:F7:E3:1E:CB:5D
Authority key identifier: DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
Certificate issuer: /CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Certificate serial: 0195DFD8D0B80A0C8F312F4051699FF6D823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
Manifest number: 14C3
Signing time: Sat 29 Mar 2025 03:01:23 +0000
Manifest this update: Sat 29 Mar 2025 03:01:23 +0000
Manifest next update: Sun 30 Mar 2025 03:01:23 +0000
Files and hashes: 1: 3L-wBIqNpVb9nT3xB3QC-EP11wM.crl (hash: hPjjbb0uF3kw4o2WQyUwEN/9ZWrzeLeIKRDo2LkAWdY=)
2: Do4PLeA5o1GoY13K0QrZV2b74eA.roa (hash: B+FCeD+X05tR69YheF7VQWedc1p5umVaXn20qWaAN1Q=)
3: hbNbIVCjEN8lItMWW7GZDYik4tU.roa (hash: /QjTSPpaK1t0LSYMylHsSi3d6TtpowMr+RmtBrzOYQo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:d0:b8:0a:0c:8f:31:2f:40:51:69:9f:f6:d8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Validity
Not Before: Mar 29 03:01:23 2025 GMT
Not After : Mar 30 03:01:23 2025 GMT
Subject: CN=07fa3b35e5fee2d2bd3a6975dba2ddf7e31ecb5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:89:87:da:ad:cb:7a:2b:ee:ad:c5:27:ea:40:
9a:7c:04:e6:41:27:b0:e4:3b:12:86:00:d3:da:74:
7a:e7:53:7e:f9:97:15:86:b9:4e:dd:d6:6f:97:62:
95:a9:22:ce:3b:ef:ca:f4:3a:a7:1c:0f:67:22:61:
18:22:1a:01:de:23:fd:d3:3a:87:0b:1c:20:5e:5b:
a2:a1:25:d8:f9:85:f5:70:8e:b1:4e:ce:e2:fa:09:
bd:a8:1f:b4:11:5b:f6:fe:88:01:bc:70:f5:34:96:
2f:02:c6:89:d8:7c:24:90:7a:c3:67:de:35:dd:8a:
cb:e1:a2:4b:c2:47:a5:4a:35:4c:11:03:3f:bc:b8:
e0:5d:1f:cd:2e:c9:3d:02:3b:ec:c1:19:83:ea:9a:
51:ac:16:24:ef:c5:26:5d:f1:10:79:24:b5:6c:a2:
b3:fb:b2:6d:15:aa:1c:99:d3:51:e7:af:13:bc:91:
ca:db:a6:25:c9:7d:7f:91:45:60:d2:6c:44:17:1e:
fb:10:28:c6:9b:f3:13:f9:f4:2e:b1:d1:84:d5:5f:
67:7d:94:33:0f:2f:36:3c:ba:45:a5:ed:4d:ae:ee:
57:32:65:50:7d:5f:dc:b2:2f:1f:35:8b:bc:12:fe:
4a:82:62:de:77:15:ae:63:87:fd:c4:5b:7f:90:20:
48:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FA:3B:35:E5:FE:E2:D2:BD:3A:69:75:DB:A2:DD:F7:E3:1E:CB:5D
X509v3 Authority Key Identifier:
keyid:DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:cc:0b:02:2d:4e:c4:bd:e1:1f:c2:0a:a0:76:f7:23:18:d3:
b1:16:b5:7e:2e:8b:97:3d:51:99:89:97:f0:35:4c:d2:86:41:
2c:5c:6b:d1:16:fa:6c:6e:d5:d7:c5:05:21:e7:fa:d2:8e:86:
2a:d2:db:9a:37:56:f4:7c:af:9e:3a:28:fc:7d:5f:18:33:e0:
56:56:87:a5:e0:d5:b8:1b:6d:b6:56:7f:5f:96:e6:36:e8:ff:
50:48:69:e8:f9:35:29:89:d7:bc:02:00:ff:c5:79:80:99:c7:
00:ee:ff:c5:3b:0a:0a:c4:b3:af:d1:c2:a5:d1:6a:ba:46:71:
f2:e5:e5:66:62:d0:53:6a:37:54:bd:c1:c8:b4:97:f5:a3:0b:
6b:f6:e7:f5:47:ab:68:08:d5:70:76:1a:7f:60:93:97:a9:b6:
5f:d7:ff:7c:f6:32:7a:87:10:df:bc:55:c7:61:e9:df:21:f2:
26:1b:60:7f:80:f9:5a:98:c1:46:f9:73:68:7b:c2:cc:6b:b3:
51:e7:2d:ad:9d:28:e1:df:58:ab:89:8d:fb:b3:c8:34:40:72:
ff:04:8e:14:a3:4e:e0:75:3d:a2:60:2d:0c:e9:38:01:38:cf:
c5:8c:ba:de:8b:da:0c:1b:c2:a6:97:52:01:90:91:25:b3:1a:
d2:71:0d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:33:36 2025 by rpki-client