Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
File: 3RiOwuSayUWFJFtLh0Whu3oc3GY.mft (raw, json)
Hash identifier: +sThID56RGPZCnCBbEBLxxzF0095wllbU4dlGl17KRw=
Subject key identifier: 79:CA:03:6E:98:96:DE:6F:17:53:17:B3:19:51:38:F9:CE:8F:E9:6E
Authority key identifier: DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
Certificate issuer: /CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Certificate serial: 0195E12252EA9BD00794FCBAB6A02EC581A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
Manifest number: 0734
Signing time: Sat 29 Mar 2025 09:01:17 +0000
Manifest this update: Sat 29 Mar 2025 09:01:17 +0000
Manifest next update: Sun 30 Mar 2025 09:01:17 +0000
Files and hashes: 1: 3RiOwuSayUWFJFtLh0Whu3oc3GY.crl (hash: KIZiXLfbsACrtFoCwZrCxKVZL7LlVs+d3DOxGRDu+74=)
2: pDLly0sn53PLZlgmqVTYD5L2Et0.roa (hash: MLKk0AIXSDvV1SnhwkIbUGP+qcSM6FHopsKcU6yMV74=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:52:ea:9b:d0:07:94:fc:ba:b6:a0:2e:c5:81:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Validity
Not Before: Mar 29 09:01:17 2025 GMT
Not After : Mar 30 09:01:17 2025 GMT
Subject: CN=79ca036e9896de6f175317b3195138f9ce8fe96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:27:11:86:ec:cb:d6:91:29:f9:bd:f0:9c:36:
03:e5:f6:79:09:59:b2:93:bd:0d:b4:7e:69:19:d7:
36:13:bf:2e:d1:36:d1:3e:e6:7b:d9:41:48:e1:e1:
11:69:62:fb:79:de:cc:fc:02:5b:ab:f8:7a:1d:c8:
a7:d1:b2:42:90:93:65:83:3d:70:dc:b5:b3:d6:47:
a9:ea:d1:f4:bd:ec:d0:61:b6:08:cd:1a:22:cf:a1:
f1:54:2e:17:3b:92:73:34:b4:33:98:dc:14:76:f8:
1e:dd:82:d1:8c:f3:19:d7:d7:bf:df:17:a2:e4:1b:
06:11:7b:0c:42:29:21:e1:b7:20:96:f5:b4:47:48:
ea:13:85:71:d5:a5:d0:e2:2f:81:fe:1e:84:5d:14:
ee:cf:1a:c0:42:87:4b:d8:60:77:00:e8:e7:9d:ac:
63:3c:39:72:35:34:a4:7f:e7:da:28:dd:08:c7:b2:
da:85:9e:02:0e:37:36:62:1c:70:15:09:80:d9:9e:
12:cc:a6:1c:d6:62:fb:9f:8d:06:64:a2:1e:ce:0e:
17:cc:5c:2b:f9:a1:b8:41:07:c1:50:f7:e0:2f:3a:
fa:c6:13:5a:50:6e:eb:df:9a:77:7d:7b:5a:7f:15:
ae:2f:15:84:5c:c9:0d:2d:66:51:8d:4e:91:e6:41:
0b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CA:03:6E:98:96:DE:6F:17:53:17:B3:19:51:38:F9:CE:8F:E9:6E
X509v3 Authority Key Identifier:
keyid:DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:9e:85:3d:39:c3:cf:63:87:64:62:1d:59:78:20:2d:2c:cc:
ba:58:2a:24:ea:79:54:a8:33:2d:b8:29:82:df:b3:3f:e1:a2:
52:81:5e:07:73:6d:a4:85:1d:2f:67:5b:90:9f:25:3d:a6:d2:
1b:ec:df:b3:c3:5f:03:7c:54:5d:e1:c1:99:f4:b1:16:ca:21:
95:be:bd:e5:13:f1:3a:eb:3d:c5:7f:68:4f:e3:b4:67:2e:33:
b5:aa:69:ad:90:15:3b:ee:4b:11:47:ad:1f:75:f4:f8:66:ac:
13:78:14:b2:0b:a6:75:4d:a8:75:27:62:2c:d5:e3:70:e0:a9:
cc:7f:ea:09:21:74:cb:45:68:50:c9:41:d4:fb:33:b4:1e:66:
3b:de:6b:b8:ae:3a:a3:a4:64:38:0e:a4:87:8d:7a:7d:3d:4a:
33:99:6c:02:c1:1e:21:bd:b0:eb:64:69:e2:1f:59:a1:35:fa:
03:a3:04:09:52:08:18:80:76:ff:32:16:73:87:4f:4e:e5:86:
10:22:63:ce:3b:96:40:88:a2:52:e7:85:9d:1d:9f:ef:7f:2d:
97:44:4c:6a:5c:8d:36:37:ae:75:7e:6f:55:ef:90:40:3a:7b:
0f:8d:fd:fe:97:69:44:94:86:00:0d:9b:13:fd:08:ee:da:c2:
05:5c:ed:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:30:09 2025 by rpki-client