Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/734f48-6755-4fee-bd46-3764beeaa1b2/1/s_3fcB3XS6mawfR7Z2fvRPGoEHc.mft
File: s_3fcB3XS6mawfR7Z2fvRPGoEHc.mft (raw, json)
Hash identifier: hHDwkgic/8mYdknmOr9wVhhCN4Lk0JpakAqFq9ls4kA=
Subject key identifier: 81:18:45:46:1E:66:F3:08:B3:50:D7:97:11:B7:12:81:EA:F9:1E:2A
Authority key identifier: B3:FD:DF:70:1D:D7:4B:A9:9A:C1:F4:7B:67:67:EF:44:F1:A8:10:77
Certificate issuer: /CN=b3fddf701dd74ba99ac1f47b6767ef44f1a81077
Certificate serial: 019482156BA68812443C48854D0283B2F9AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_3fcB3XS6mawfR7Z2fvRPGoEHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/734f48-6755-4fee-bd46-3764beeaa1b2/1/s_3fcB3XS6mawfR7Z2fvRPGoEHc.mft
Manifest number: 140D
Signing time: Mon 20 Jan 2025 05:00:29 +0000
Manifest this update: Mon 20 Jan 2025 05:00:29 +0000
Manifest next update: Tue 21 Jan 2025 05:00:29 +0000
Files and hashes: 1: ZLmwBOVrmQyaojtKUVVGQ3HzV7U.roa (hash: eFJ8tH3CVzqWKUWCVFvGbvkJnp6r7UJxyKwXULpeswY=)
2: edybjTyXMEOIpo8OrCMTV-YbDa0.roa (hash: kEaTmQltRi9fx7k84ywpPj0U4xM+95NVEaQ/gywd2oc=)
3: s_3fcB3XS6mawfR7Z2fvRPGoEHc.crl (hash: T8oncbpYqOuq1khuy8uA1MTxqHAVFbGtGf1or3NxkMI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:82:15:6b:a6:88:12:44:3c:48:85:4d:02:83:b2:f9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3fddf701dd74ba99ac1f47b6767ef44f1a81077
Validity
Not Before: Jan 20 05:00:29 2025 GMT
Not After : Jan 21 05:00:29 2025 GMT
Subject: CN=811845461e66f308b350d79711b71281eaf91e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6a:49:8a:47:1e:30:4a:8e:cc:ba:be:b7:15:
8e:a3:6b:94:29:ca:dc:39:2b:a4:ca:83:56:12:c6:
83:72:8f:e6:36:6a:81:9f:df:d5:c2:56:59:aa:84:
99:79:7c:fe:48:63:36:c9:c7:3c:00:3a:5b:cf:04:
06:8a:72:4a:de:64:1e:a4:6f:ed:67:d8:60:f0:dc:
e0:48:dd:b9:06:73:5e:40:b2:69:41:16:a7:03:3d:
45:04:c6:dc:b1:f1:ca:7c:89:58:0a:87:93:78:d3:
97:bf:7c:49:cc:2e:60:ca:f4:ab:93:ac:ce:1a:40:
40:b5:ed:bd:c7:d2:df:7e:07:41:eb:bb:fa:c7:da:
16:8a:ef:fb:c8:7e:58:05:cb:68:ad:1c:6e:c4:a9:
4d:55:26:90:80:a9:b0:1f:04:54:88:ba:68:73:8a:
3c:f4:07:13:0e:57:3d:8a:e3:2b:c8:7c:bd:45:c3:
58:89:99:6a:9a:0b:2a:81:39:cd:f7:3d:a7:1d:de:
bb:a6:da:00:1b:6e:d0:07:97:04:2d:e7:1d:77:b1:
3d:d8:1d:0a:34:c7:44:c4:db:0f:46:fe:2b:da:35:
8c:ee:b4:8d:14:58:35:75:69:59:b3:bd:75:8f:12:
26:29:84:01:d5:4f:68:38:25:e7:f0:21:93:cb:0c:
f2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:18:45:46:1E:66:F3:08:B3:50:D7:97:11:B7:12:81:EA:F9:1E:2A
X509v3 Authority Key Identifier:
keyid:B3:FD:DF:70:1D:D7:4B:A9:9A:C1:F4:7B:67:67:EF:44:F1:A8:10:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_3fcB3XS6mawfR7Z2fvRPGoEHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/734f48-6755-4fee-bd46-3764beeaa1b2/1/s_3fcB3XS6mawfR7Z2fvRPGoEHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/734f48-6755-4fee-bd46-3764beeaa1b2/1/s_3fcB3XS6mawfR7Z2fvRPGoEHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:58:73:dc:e5:7b:d8:d2:f1:df:80:92:09:f8:9c:e8:27:87:
95:38:73:fc:d0:33:cb:db:2b:9b:61:8d:75:fa:c6:2a:c7:a8:
ad:dd:df:05:50:c6:3a:57:82:21:55:74:96:a3:96:53:8f:5d:
37:d9:44:80:d0:8c:1c:38:ba:ec:45:ca:45:80:83:fa:fd:28:
44:1c:55:2b:f5:58:f5:f3:26:a3:c8:3c:1d:92:01:5a:5b:a2:
80:0b:77:c3:ad:2d:98:5f:32:76:c8:d8:23:8b:c5:99:94:0d:
9c:09:7d:78:f0:9f:af:59:24:9e:e2:cf:f8:51:57:3f:a9:0b:
b5:45:d8:5d:64:f6:21:c8:47:1d:37:38:b8:bf:68:53:ac:24:
dc:9d:16:21:01:e4:da:86:23:38:8b:4e:a7:59:f0:a7:e5:bf:
f7:47:35:e9:dc:d5:51:c8:46:b0:02:0f:52:cf:ce:d5:5c:9f:
c7:2f:bd:b9:8d:be:08:d8:e7:10:89:bb:91:ab:ae:af:d3:83:
a8:c8:44:c1:cb:15:8a:9e:75:fd:ac:6d:13:04:c9:b9:d3:7c:
af:d0:53:99:9a:aa:f5:3c:94:8f:74:1a:ed:b2:35:46:5a:75:
18:c4:24:1e:f0:b8:e1:a7:db:5d:c7:8a:53:50:31:f1:a8:b1:
35:66:22:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:00:42 2025 by rpki-client