Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
File: 3QEJONnvchWPyYvUXecbCxqf9yk.mft (raw, json)
Hash identifier: dR3vxzeVLvS9Coopxa64Fxdids6Xo/B4l/XfF6p8YLM=
Subject key identifier: EF:AF:9A:CF:DA:E3:6F:18:E3:D5:7F:97:2B:F6:24:FC:66:7F:C2:4E
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial: 0195E121EAACA51099912C305C6951A1E129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
Manifest number: 0704
Signing time: Sat 29 Mar 2025 09:00:51 +0000
Manifest this update: Sat 29 Mar 2025 09:00:51 +0000
Manifest next update: Sun 30 Mar 2025 09:00:51 +0000
Files and hashes: 1: 3QEJONnvchWPyYvUXecbCxqf9yk.crl (hash: s1Os5bU/zyH6ja25tCgLHBPfz0biayQouf4LN5v3Y/E=)
2: W8Dpmpt_1-01qSbotVM15n3GSek.roa (hash: 8bMbdbcHjYf7KXHu+ym0lwgv0cPY/hCCrTp1Qv0O4sU=)
3: d-If6rwOnPiVqU22C8IZzGvMPvc.roa (hash: giLRuwy5wW+MIOBjFAF7Pd0PEoYtI2K0pgdHGw83fkc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:21:ea:ac:a5:10:99:91:2c:30:5c:69:51:a1:e1:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Validity
Not Before: Mar 29 09:00:51 2025 GMT
Not After : Mar 30 09:00:51 2025 GMT
Subject: CN=efaf9acfdae36f18e3d57f972bf624fc667fc24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:62:e1:92:a4:0f:9d:3b:28:ae:c9:52:ff:
de:12:4d:13:89:35:95:f0:0d:15:fc:15:d3:c2:2b:
5d:bd:be:bd:2d:4f:6c:63:ff:69:d1:a2:cb:a5:43:
f9:43:05:78:f1:15:3a:58:cd:9d:0b:45:d0:f9:a1:
83:3c:48:eb:14:73:a8:80:e0:45:65:e3:a0:97:9a:
c4:4d:43:d4:5e:43:15:ba:78:cb:cd:07:a1:80:91:
9e:a1:c8:a0:19:98:d9:db:be:12:bd:8f:2b:b7:25:
59:65:da:1d:b1:08:01:ac:c7:bb:7e:6b:37:c7:a8:
8c:19:4f:38:43:64:04:70:bb:65:ae:be:f2:bf:66:
84:2c:0f:e8:b6:2e:ad:3c:d0:12:7b:58:f1:6d:8f:
f7:bf:5b:de:5f:6d:fd:de:d3:31:bc:b7:a1:8d:09:
89:ae:28:79:c6:e4:10:4b:8c:7d:4b:a4:d3:3c:49:
6e:21:cf:5f:dd:8e:fa:40:bb:86:88:96:94:99:91:
47:66:4e:99:fb:3b:31:74:2c:55:19:8a:d1:63:b1:
0d:5f:ad:8e:29:42:7f:4c:63:f5:d4:af:6f:6b:95:
c3:3f:1c:17:12:56:33:79:f8:3e:fd:93:4f:40:4d:
c7:67:43:58:08:5d:54:47:b4:ae:18:d0:60:17:6d:
bd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AF:9A:CF:DA:E3:6F:18:E3:D5:7F:97:2B:F6:24:FC:66:7F:C2:4E
X509v3 Authority Key Identifier:
keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:8c:db:70:7f:44:74:10:44:04:f4:9d:1e:7f:a5:79:96:c6:
0c:46:81:d2:94:d0:fa:24:ec:fb:ba:01:ab:78:88:32:8c:1f:
c4:ca:4a:2b:f9:4b:9f:21:b2:01:dc:7f:8e:b5:d4:cf:65:b1:
6e:42:6b:cf:93:60:b5:f4:f5:69:cf:18:17:62:f6:f2:87:a9:
86:59:e4:fa:28:35:88:9d:3e:63:38:62:9f:72:56:f4:f9:63:
e8:ed:21:cf:f8:21:d8:d1:26:7a:34:e8:9c:3f:24:e5:9b:34:
b5:d8:9b:53:61:21:e4:e3:33:7e:e1:12:a2:8b:9a:c3:e1:92:
62:58:34:31:00:41:c8:f9:60:c0:18:fd:c9:d0:04:61:9d:f4:
7e:1b:70:44:4e:4a:a7:e2:39:86:7b:bf:c7:7a:25:ca:c8:66:
37:8d:81:ce:73:c3:b0:c4:44:c4:98:b6:ff:52:f2:b6:57:bd:
2f:6c:ce:c3:14:f1:45:c7:86:60:a8:26:e7:1a:73:73:ab:fb:
0d:4e:c5:64:bc:d6:46:c2:b3:e1:9c:a0:b7:01:25:d8:4b:c0:
f1:13:f8:79:94:f4:3e:8e:ef:db:d1:02:3e:fe:99:e8:91:f0:
26:35:d8:43:14:44:32:e2:27:f4:5d:ee:d3:27:84:35:7c:5c:
ca:43:3b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:55:15 2025 by rpki-client