Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
File: 3pRhwhG_NVHFUHyTC0IExuxDsyI.mft (raw, json)
Hash identifier: MTBTdueXD69FqLZAobBm7uRUkbc1BN94oifX+9BNj4o=
Subject key identifier: 2C:E8:2F:F6:B9:90:B9:12:2C:04:77:65:96:10:DE:14:0F:2C:9F:E4
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial: 0195E07D686082410F2B746A26FECE00E6B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
Manifest number: 0F60
Signing time: Sat 29 Mar 2025 06:01:09 +0000
Manifest this update: Sat 29 Mar 2025 06:01:09 +0000
Manifest next update: Sun 30 Mar 2025 06:01:09 +0000
Files and hashes: 1: 3-CeBnshHuRaivw3WbqdE0Qd_Xs.roa (hash: QxTBnM9GZ47qowObu5DgA3PPZPI+pK+0T/E1jxfDI4A=)
2: 3pRhwhG_NVHFUHyTC0IExuxDsyI.crl (hash: 66oLDsjDX0rsiSOkvzGmzRz0y+vKuV+UxapO9KyRWD8=)
3: HxAxelvKfyvRBGZgYNyGH359bcw.roa (hash: 54oYSMM6V461t0pj1oiVJIo5XRCMuwwoyF2Ks6PmNo4=)
4: Vij9kWTTMdVr0KoR9iCmyiP1xZU.roa (hash: rcjHhBt0ZSx11oiGkYVO9itg34bAhG/5unoT9d3Y9g4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:68:60:82:41:0f:2b:74:6a:26:fe:ce:00:e6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
Validity
Not Before: Mar 29 06:01:09 2025 GMT
Not After : Mar 30 06:01:09 2025 GMT
Subject: CN=2ce82ff6b990b9122c0477659610de140f2c9fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:68:02:6e:33:03:1b:b9:57:39:d8:ee:c3:
ac:d3:da:cb:02:1d:e6:9f:92:73:d5:53:cb:ee:3d:
01:7c:d7:f5:be:a8:e7:d8:40:fb:d7:e3:21:5f:65:
61:7f:38:ec:79:3c:a9:31:87:da:28:b0:02:01:e9:
5e:27:42:1e:f1:48:cc:c2:2c:53:85:3b:01:19:9e:
d2:34:c4:08:18:d0:49:35:b6:3d:c2:32:fb:be:7e:
ae:f9:2f:e4:1e:5f:82:4c:89:58:bc:3d:a4:7f:11:
2d:0b:35:33:81:ca:8f:a6:16:bb:b5:26:6c:7c:34:
f9:12:c3:f5:50:bf:de:8e:3d:61:b2:d2:c1:40:7e:
22:62:86:d0:47:16:e5:b4:46:ba:8f:f7:38:ad:02:
ba:8e:e2:ed:fc:87:b4:58:5c:43:73:72:66:d9:8c:
be:b5:dc:99:ed:65:c7:95:f4:4b:bb:88:9e:f9:08:
78:1e:82:85:d3:ae:c2:e2:a6:3c:94:48:f8:3f:c7:
1c:9a:b7:5d:87:00:c5:3f:74:f7:66:db:88:9d:81:
a7:f4:e2:69:86:9a:f5:59:2e:95:fb:c9:fb:6b:1e:
2a:34:78:57:22:14:56:82:44:06:99:e2:33:cc:8c:
f6:54:fc:6d:15:e5:19:e1:09:2e:f4:fc:a4:98:3f:
1d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E8:2F:F6:B9:90:B9:12:2C:04:77:65:96:10:DE:14:0F:2C:9F:E4
X509v3 Authority Key Identifier:
keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a3:9a:52:be:2b:0d:87:43:e6:c4:17:0f:7a:53:19:58:9d:
54:28:69:f3:1a:c9:31:21:24:60:cd:07:6d:c4:ac:7d:01:d5:
11:23:53:29:7e:ff:b8:68:ef:90:80:c2:b5:ec:c8:66:61:8b:
a3:67:4a:ab:ad:71:03:ff:5c:8d:95:89:bd:08:07:45:85:70:
ff:22:9f:8b:fc:41:9d:38:3a:0f:2f:2f:aa:a9:33:f6:95:20:
81:ae:d7:fe:d4:eb:11:94:2c:23:ff:f4:b5:09:d1:4c:19:cf:
31:39:a8:08:c2:46:e3:f3:cc:16:cb:6a:95:8c:0a:89:71:1b:
bf:e5:c9:f0:cb:a3:6a:99:a7:10:1e:0d:2c:db:ac:c1:ce:ba:
ba:4d:a5:ec:af:6f:d6:da:06:58:a7:98:0c:af:49:b0:3c:29:
b6:0c:66:24:22:e7:b1:55:bb:52:a5:5c:61:7e:a4:4e:ac:e0:
b4:0d:9d:b2:a6:8e:b8:c2:68:9b:7e:c0:f1:70:17:07:79:62:
dc:93:1f:6b:36:5a:85:8c:99:0a:2c:5c:eb:f1:c5:11:48:39:
a6:56:a0:00:f7:c1:54:b8:2b:23:5b:f0:6b:6b:1f:dc:2b:89:
a1:b9:c5:22:2f:14:2b:66:4a:5e:dc:7e:25:eb:d2:17:4f:42:
88:bc:8a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:42:56 2025 by rpki-client