Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft
File: 3x4tS9NitiuARQIdw1CxIOVTAmU.mft (raw, json)
Hash identifier: ngTXWKNotfBu26DAPOi2K9YCe3cfZHvCce1/QZdTI4E=
Subject key identifier: 34:27:CB:FA:8F:95:13:BD:39:1F:39:2F:67:B3:CC:10:03:99:92:A5
Authority key identifier: DF:1E:2D:4B:D3:62:B6:2B:80:45:02:1D:C3:50:B1:20:E5:53:02:65
Certificate issuer: /CN=df1e2d4bd362b62b8045021dc350b120e5530265
Certificate serial: 01974366302B093AFB5B499F963EB1F4908A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3x4tS9NitiuARQIdw1CxIOVTAmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft
Manifest number: 1359
Signing time: Fri 06 Jun 2025 04:00:59 +0000
Manifest this update: Fri 06 Jun 2025 04:00:59 +0000
Manifest next update: Sat 07 Jun 2025 04:00:59 +0000
Files and hashes: 1: 3x4tS9NitiuARQIdw1CxIOVTAmU.crl (hash: 3wpxEnZ06GNMfdOxhr+Wrf3uQqMxQYDLShBs5e4erqM=)
2: LhNnprcCte85399D5qvu-u84KAQ.roa (hash: 2LB8rKyBQKRt7zyGuV1bupYjAdN8o5kJt68LBUyvJtQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:66:30:2b:09:3a:fb:5b:49:9f:96:3e:b1:f4:90:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df1e2d4bd362b62b8045021dc350b120e5530265
Validity
Not Before: Jun 6 04:00:59 2025 GMT
Not After : Jun 7 04:00:59 2025 GMT
Subject: CN=3427cbfa8f9513bd391f392f67b3cc10039992a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:91:3e:a4:e8:eb:b7:54:33:ff:f2:ca:b9:be:
79:59:d5:63:75:4d:f7:6e:40:65:c9:d5:98:f4:70:
42:47:cf:0e:4e:c8:cc:5c:30:82:0b:b0:c9:03:ab:
e4:99:0c:bf:8b:c6:57:e2:b0:ed:18:10:d1:a0:9f:
54:f7:27:35:58:0c:3f:8e:58:d2:17:8d:ca:4e:5e:
74:8a:11:f6:9d:e1:2a:d7:89:8b:20:11:1a:24:2a:
f7:53:aa:46:b6:11:04:12:c9:45:03:0f:95:78:61:
e2:f7:9a:f6:4e:54:1e:c8:7e:fe:95:a9:43:2b:02:
eb:51:61:28:29:f5:12:84:d0:25:8c:12:69:79:d6:
d5:8e:a4:e1:67:6e:82:8d:ab:0d:4b:c8:07:b5:77:
a0:3c:d1:b1:aa:14:57:ca:b2:c7:35:91:77:38:49:
81:8d:10:93:39:9f:a5:c8:b4:de:2d:d2:57:39:e5:
82:48:82:8b:6d:9e:f6:e4:4a:1b:24:22:61:ae:ae:
b6:63:a4:32:24:22:25:e4:98:d1:31:d0:f6:5a:e3:
66:c5:14:52:51:49:a9:03:45:ee:18:23:d4:0d:74:
08:4a:82:f6:90:9d:bb:ae:44:ac:3b:29:a8:46:38:
b2:b0:2b:a9:af:a9:b7:c1:8c:85:dd:2e:d1:b1:1f:
68:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:27:CB:FA:8F:95:13:BD:39:1F:39:2F:67:B3:CC:10:03:99:92:A5
X509v3 Authority Key Identifier:
keyid:DF:1E:2D:4B:D3:62:B6:2B:80:45:02:1D:C3:50:B1:20:E5:53:02:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3x4tS9NitiuARQIdw1CxIOVTAmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:3c:19:2e:2e:3d:6d:cc:e0:37:e6:ab:95:43:3b:b6:36:77:
2e:7a:60:f3:70:6f:17:a3:1a:ee:5c:8a:95:42:d1:f5:52:eb:
ca:5e:97:16:e6:35:a3:33:14:5b:e5:1c:55:d5:0e:3d:a8:0b:
39:1d:71:b3:e3:7d:fe:19:a1:43:d5:4c:69:86:20:4e:df:bf:
de:02:f2:49:1b:c6:87:e4:51:4f:e0:03:50:ff:5b:70:82:9e:
37:55:93:e7:ac:01:af:e1:5f:47:a1:8c:ec:f8:c2:65:3c:f1:
42:04:c7:7e:0f:33:55:bd:a0:1c:63:fb:08:b6:1f:55:c1:c6:
fb:24:16:fe:20:e2:6c:2c:0e:0d:02:01:f1:dd:73:fe:29:ea:
3f:6d:49:f9:e5:e0:b5:da:75:b9:af:f7:5e:b5:48:d4:21:90:
81:fb:f5:22:48:0f:22:46:cc:28:7f:81:1e:27:94:f4:bd:ea:
12:80:99:87:5f:ac:7b:7c:fe:a7:0f:e7:7d:82:72:df:e2:2a:
9f:7a:a2:e8:e5:24:9c:4b:39:86:43:fc:b3:5b:10:03:37:64:
9e:c5:d1:00:24:19:d7:18:d4:5b:c3:7f:a3:62:76:b9:89:90:
90:34:b6:4c:19:fe:e5:34:ae:0b:66:cf:31:75:ad:a3:37:71:
fc:7c:12:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:15:27 2025 by rpki-client