Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/3f3F4pPp59caluYcPb9oWF1PgwU.mft
File: 3f3F4pPp59caluYcPb9oWF1PgwU.mft (raw, json)
Hash identifier: JSUcwN+aokINJntp56fjPnSEKC1NGN595DoeKM+5PzE=
Subject key identifier: 43:56:5A:14:06:7A:C1:AE:5C:21:A6:39:8C:19:32:01:17:D9:E2:1B
Authority key identifier: DD:FD:C5:E2:93:E9:E7:D7:1A:96:E6:1C:3D:BF:68:58:5D:4F:83:05
Certificate issuer: /CN=ddfdc5e293e9e7d71a96e61c3dbf68585d4f8305
Certificate serial: 01957EDB1F90B4B726A7B1426B446E6F09C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3f3F4pPp59caluYcPb9oWF1PgwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/3f3F4pPp59caluYcPb9oWF1PgwU.mft
Manifest number: 0438
Signing time: Mon 10 Mar 2025 07:00:44 +0000
Manifest this update: Mon 10 Mar 2025 07:00:44 +0000
Manifest next update: Tue 11 Mar 2025 07:00:44 +0000
Files and hashes: 1: 3f3F4pPp59caluYcPb9oWF1PgwU.crl (hash: kpn1o8CSP4dW3kscKW2MhxZAj/hP46mo6Dhwyqc1ZEU=)
2: m59Hw5TTd3iL4k-AJmszjnzqejs.roa (hash: MFVhj0ei6aWXoFmI3DBbtg6kilc6p8Atkjj8RGegi9o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7e:db:1f:90:b4:b7:26:a7:b1:42:6b:44:6e:6f:09:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfdc5e293e9e7d71a96e61c3dbf68585d4f8305
Validity
Not Before: Mar 10 07:00:44 2025 GMT
Not After : Mar 11 07:00:44 2025 GMT
Subject: CN=43565a14067ac1ae5c21a6398c19320117d9e21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b6:9f:05:ce:09:14:d7:1e:f4:56:a3:7e:f7:
06:7d:72:6c:a3:4c:f8:88:b7:b9:ce:65:07:6c:83:
b0:2e:67:50:58:61:7c:0b:3f:8a:cd:eb:15:84:96:
e3:6a:9c:ab:eb:db:f0:ef:5a:41:8d:f2:bd:9e:4b:
10:2c:59:94:9a:b8:62:8f:a6:dd:fc:94:30:f5:24:
88:fd:27:50:d3:35:87:ba:5c:6f:82:b9:42:da:8a:
bc:d5:87:03:45:94:63:73:da:dc:3a:18:6a:4d:97:
c0:7d:17:35:cb:e7:81:55:79:c7:90:b9:5b:7b:d1:
e7:66:8b:2f:5a:9c:1f:92:ad:1a:4e:de:50:5f:fb:
3e:37:90:b0:69:70:0f:44:36:d7:ea:79:5e:f8:9b:
90:03:63:b5:2a:c2:31:91:ea:b3:a4:64:a6:d6:61:
e3:ec:69:30:66:7d:e4:02:d1:0d:3f:52:4e:48:f8:
6f:47:df:20:db:2c:50:63:a7:b5:da:ad:79:c7:e2:
88:43:88:c3:a7:93:98:06:f4:b9:12:4a:0b:a1:ed:
01:83:74:1c:20:d1:5a:31:cf:0a:98:a1:88:55:16:
7e:81:b5:6e:cf:e5:81:9c:dc:ef:31:9d:48:8e:f0:
c3:65:b5:73:25:22:35:9c:5c:07:8b:92:b0:24:0f:
52:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:56:5A:14:06:7A:C1:AE:5C:21:A6:39:8C:19:32:01:17:D9:E2:1B
X509v3 Authority Key Identifier:
keyid:DD:FD:C5:E2:93:E9:E7:D7:1A:96:E6:1C:3D:BF:68:58:5D:4F:83:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f3F4pPp59caluYcPb9oWF1PgwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/3f3F4pPp59caluYcPb9oWF1PgwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/3f3F4pPp59caluYcPb9oWF1PgwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:91:58:e9:51:d6:f0:9f:31:c4:ce:3d:8b:ee:79:c6:d2:f7:
19:46:4c:35:da:17:d3:d7:e6:cf:e2:90:51:38:50:66:92:fc:
b3:48:86:be:55:d8:8e:de:ff:95:f6:fd:d8:c6:36:bb:37:8c:
eb:f2:f2:38:8c:38:24:8a:69:0b:f8:45:80:c1:4a:dc:21:98:
ba:8a:bf:6f:cc:1e:c2:58:53:c1:33:3f:24:ce:a1:09:2d:c0:
e2:4b:31:e5:50:39:2a:ff:50:ea:b5:4c:79:d3:47:f0:5c:60:
d2:ad:1e:bd:91:e0:2c:e1:d0:4e:b5:c6:0e:40:33:31:12:c2:
d7:12:21:e9:cd:73:2f:07:89:0a:d7:89:00:4e:5c:78:96:42:
de:c5:d9:d5:8c:83:96:0b:08:d5:43:27:47:d2:3a:c6:3f:75:
00:ca:8d:c0:d5:cd:ec:ee:da:9f:78:bc:17:cc:a5:48:a5:88:
ad:5a:0c:85:c9:f7:19:7d:d6:08:49:87:39:3d:63:52:0e:fa:
8a:1c:ee:31:21:05:82:e5:41:c3:d0:ab:01:ed:9f:18:21:48:
d4:c7:20:36:59:b0:a9:61:5b:28:c3:7d:bf:3c:3c:f4:ba:44:
75:8a:26:04:d5:69:37:89:b0:83:0a:db:be:a3:53:cc:2d:03:
26:dd:fe:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:25:41 2025 by rpki-client