Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
File: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft (raw, json)
Hash identifier: DCMEHoOoi1y3CtUNyFo3AYxa5G7KaTz7y7hiYnG6qUE=
Subject key identifier: 85:6B:6B:B9:9C:EC:09:12:59:A7:55:D9:A4:72:2D:B1:C7:18:34:03
Authority key identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
Certificate issuer: /CN=dce670a6ed4c78fdd77686792f7e087598906f73
Certificate serial: 0195E046A36D25C76034535BC241E5E81DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
Manifest number: 1454
Signing time: Sat 29 Mar 2025 05:01:20 +0000
Manifest this update: Sat 29 Mar 2025 05:01:20 +0000
Manifest next update: Sun 30 Mar 2025 05:01:20 +0000
Files and hashes: 1: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl (hash: CDQZRKIx2qFKxdKVfalfx9sjXQEyCoIx9iw45NzODdc=)
2: 8weSLoMuWV3usouK6kCYa4DYS08.roa (hash: 7ICkBxIDMmpq8Ld9uPPV7RzwfZWRVUlPiTj2akXnPTs=)
3: g0yMZ7il9emhd1JLy44dXjFFySY.roa (hash: upEcQV7OguWVHmW7d8FqJOmDo+LgE3TCsH4ZkA5EIG4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:a3:6d:25:c7:60:34:53:5b:c2:41:e5:e8:1d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce670a6ed4c78fdd77686792f7e087598906f73
Validity
Not Before: Mar 29 05:01:20 2025 GMT
Not After : Mar 30 05:01:20 2025 GMT
Subject: CN=856b6bb99cec091259a755d9a4722db1c7183403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b5:49:b4:c8:e5:6c:3e:f0:58:a1:e6:af:78:
7c:52:5c:97:c0:49:1b:b9:19:90:5c:b4:a5:f4:c8:
96:6b:4d:92:d7:0d:f7:2d:69:3f:23:34:e4:96:79:
f8:30:6f:47:53:82:76:44:b0:04:c6:5f:91:92:be:
75:c9:c8:7c:9f:bf:5d:be:09:0d:f0:86:85:bc:82:
2a:44:8b:10:64:2e:42:d7:a1:c1:5b:4b:2f:5a:e8:
92:6c:5b:ac:8e:8f:9b:34:4a:42:e4:84:3e:58:2f:
74:ce:34:21:0c:d4:ce:f6:6f:e1:01:d9:31:b9:f5:
ff:4c:a0:83:29:7b:24:57:59:bd:08:3b:8e:6b:2a:
2a:05:01:36:f0:c2:c0:df:92:e3:87:9b:03:42:d7:
9b:49:37:dc:49:ff:ac:c9:79:58:00:2b:f7:d2:7d:
42:9d:72:98:00:25:86:32:0a:68:4c:d4:7f:a7:79:
bc:67:d0:19:11:17:0d:da:cd:bc:ff:9d:06:9a:1e:
14:1e:19:fe:39:7c:8b:af:15:a3:ca:79:c5:a8:ba:
f5:52:53:52:7b:af:1d:13:e7:9e:44:f2:a8:42:56:
72:1e:22:92:19:40:5e:62:02:58:95:4b:0b:ff:9b:
91:01:30:81:68:1f:4e:f2:0c:02:76:3b:c0:e5:fe:
99:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6B:6B:B9:9C:EC:09:12:59:A7:55:D9:A4:72:2D:B1:C7:18:34:03
X509v3 Authority Key Identifier:
keyid:DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:11:77:f9:e2:1a:36:6a:3d:bd:7c:62:b7:8b:0c:b6:cd:27:
da:f2:61:5a:af:8c:e0:9c:86:41:a0:e1:93:41:79:09:69:a9:
eb:f3:6f:0a:1e:ca:bf:bc:35:1e:8d:a6:6e:65:e0:26:03:a3:
b4:50:ee:6d:49:e1:4e:0e:d3:ab:32:b6:d7:e2:2b:ad:ec:29:
eb:f4:3d:e5:62:04:dc:fa:78:34:88:a9:d9:e5:b3:b8:dc:ce:
48:f7:cb:f3:6a:49:ee:23:76:ef:1f:5e:e7:3c:db:98:f6:e2:
6e:28:36:a8:9a:6c:a3:95:aa:4c:13:06:98:8d:61:4a:7a:3e:
66:3b:2e:0a:f7:0e:01:ab:3a:fb:4c:dd:b2:a6:69:a5:02:db:
1c:5c:a7:46:5a:cd:00:cc:1a:d7:ab:6a:4e:13:60:a8:22:38:
f1:0c:ba:9a:ce:26:93:9a:2f:d0:28:a5:b4:c1:69:53:e6:c4:
c7:5c:20:f7:0f:a0:eb:78:81:ec:49:09:d9:bf:51:98:97:31:
ca:d6:6d:22:35:1b:71:4e:3d:32:3b:40:be:76:02:1c:e1:90:
42:0d:01:61:4a:7d:93:88:3a:fe:e2:a3:4e:35:98:3d:76:e3:
bc:14:12:d1:e3:2e:56:0b:6d:70:21:29:ce:a8:55:76:83:91:
5d:a8:bc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:57:20 2025 by rpki-client