Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
File: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft (raw, json)
Hash identifier: 0c3hnyftbjuVBRFi+x5sNq/TVmdyMEWvFwYOuU+ZDDE=
Subject key identifier: 99:AA:69:CB:9A:3E:1B:46:7A:DA:0E:C5:36:51:85:DC:D7:24:67:34
Authority key identifier: DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
Certificate issuer: /CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Certificate serial: 0195E00FCFE2831684A8B187F402FF64B5CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
Manifest number: 14C0
Signing time: Sat 29 Mar 2025 04:01:27 +0000
Manifest this update: Sat 29 Mar 2025 04:01:27 +0000
Manifest next update: Sun 30 Mar 2025 04:01:27 +0000
Files and hashes: 1: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl (hash: /v6qLUewUToJuNljZbcCMOZUfRaH/RttrATB2Ku0Lrc=)
2: eB3vCKwTA_4LHzl8qmjJhPE1E0I.roa (hash: 4iTyC4OoX2gbX1y0Qqu+BwBX8s/wE3y91+xS9nzRcWU=)
3: p8zRssL-qoCfvvI_dtLWUNgx7c4.roa (hash: zYGisfdidI1eM9pSCirssYszt8G/y6UD9xrE/AACroU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:cf:e2:83:16:84:a8:b1:87:f4:02:ff:64:b5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Validity
Not Before: Mar 29 04:01:27 2025 GMT
Not After : Mar 30 04:01:27 2025 GMT
Subject: CN=99aa69cb9a3e1b467ada0ec5365185dcd7246734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:10:37:67:02:55:be:6d:71:a2:d6:a7:0f:2d:
d8:e2:54:39:70:4e:83:c9:98:27:eb:d8:6c:3b:15:
6b:68:f5:77:d8:e6:ad:ee:2e:9f:65:76:44:0f:ad:
e8:c8:a7:21:6c:d1:e7:d2:61:8a:ad:52:ce:2c:7d:
9c:b1:95:e6:76:da:f5:00:d5:be:e0:04:ec:5a:4f:
e1:fe:65:2c:c5:ae:5d:18:15:06:e9:3e:95:2e:89:
4f:45:10:f4:b4:5c:dd:a0:2b:e5:88:1c:dd:70:3a:
90:b1:79:52:4d:d5:c1:c8:2f:6e:67:2a:17:23:d1:
2c:93:0f:a1:31:12:87:a3:1e:eb:be:62:3b:28:e6:
21:b2:b8:d4:aa:7e:62:13:62:00:90:41:65:16:da:
29:5e:02:d1:cd:0c:3d:7e:ca:73:fd:ec:d6:85:d2:
25:1f:e0:80:7c:c6:60:39:95:31:40:63:5f:fe:fd:
1e:fb:ae:8e:72:03:a1:2e:cf:bd:b4:c0:3f:3f:28:
96:f2:fb:f8:e1:30:12:a6:fd:91:53:1c:aa:1c:5e:
3a:40:73:70:44:9b:6a:f4:ad:02:48:03:97:9d:f5:
a3:c4:30:27:47:38:b0:24:43:cb:20:b3:9c:75:46:
92:28:c5:45:63:67:c4:92:2b:66:81:89:e7:54:e5:
f7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AA:69:CB:9A:3E:1B:46:7A:DA:0E:C5:36:51:85:DC:D7:24:67:34
X509v3 Authority Key Identifier:
keyid:DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ec:cf:db:78:1a:f4:d7:2c:26:93:28:34:ac:3a:6e:69:bc:
f1:6b:1c:67:73:99:2b:34:84:c2:22:82:e8:c8:53:8a:ba:a3:
5c:6a:63:de:63:a8:18:80:83:14:6f:7b:60:fc:e5:d0:97:3c:
82:89:61:37:1d:06:66:b2:74:75:48:f4:fb:c9:e1:42:26:d1:
a6:80:6b:80:3e:1f:7b:36:07:bb:cb:f0:72:6b:24:06:c3:bc:
02:2f:76:83:72:58:48:62:99:51:33:72:af:45:30:a6:08:71:
51:51:88:21:7e:e1:23:b5:51:a0:4f:21:6a:19:0e:b1:68:c5:
a1:89:be:46:60:33:ce:27:e6:69:ea:90:f3:0a:ac:0e:94:54:
1f:be:0a:10:f1:ce:e8:a5:f5:19:60:72:b4:7c:49:e0:82:f1:
a6:5c:3e:7e:75:29:dc:30:cf:bb:bc:4d:da:a1:4b:c0:8b:c4:
a0:b0:4e:3e:c3:09:be:6c:bf:49:9e:97:c9:fa:8b:ac:31:ce:
9f:79:bb:b7:4d:04:55:41:85:a3:71:1a:41:7a:9d:b0:d8:64:
e2:3d:ff:92:e2:3a:5e:68:4d:c5:f5:0f:71:9c:fe:a2:aa:ca:
f4:69:8e:de:13:87:f4:ff:09:bb:be:84:2d:6e:4a:b5:e3:60:
c7:30:e4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:13:40 2025 by rpki-client