Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
File: 3EFBHpPiXV7GUJlWmxtcX63Brj0.mft (raw, json)
Hash identifier: I+cpvSV+2iVQZMiN6eySrimx/eaOTf8VAcJTKnqWjd4=
Subject key identifier: 57:B0:24:49:66:EB:F4:AC:55:6F:6D:1E:97:0B:E0:79:B1:FD:35:A3
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Certificate issuer: /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial: 0195E00FD102BF6756BD6B70BC27D2B0ADBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
Manifest number: 108B
Signing time: Sat 29 Mar 2025 04:01:27 +0000
Manifest this update: Sat 29 Mar 2025 04:01:27 +0000
Manifest next update: Sun 30 Mar 2025 04:01:27 +0000
Files and hashes: 1: 3EFBHpPiXV7GUJlWmxtcX63Brj0.crl (hash: YN4N6X2CRyIOSNpReq/WzFQsoFPmE2YQx3W843TzDgI=)
2: I5wQnrgvMCaYn9C8yDvoLQWI0Fs.roa (hash: LLp7jSaPRxKkmfQPCgmC3oWPlWcodXukIf+OL2Y6Xy4=)
3: h62oWk5e6sS8zDCwC47t23u4hGk.roa (hash: KIOG5EX7T8Dsm3c4MU4hyZU5pek+PylPfC7rdsiyJoY=)
4: jGoTTL_48yWV-ohs_hgmOjEwT4E.roa (hash: Q0KSsruo9YLV5d/ARziN3CSGqP5OR6gQhOox+XP9FnI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:d1:02:bf:67:56:bd:6b:70:bc:27:d2:b0:ad:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Validity
Not Before: Mar 29 04:01:27 2025 GMT
Not After : Mar 30 04:01:27 2025 GMT
Subject: CN=57b0244966ebf4ac556f6d1e970be079b1fd35a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:e5:57:11:e2:95:ec:e7:29:b7:37:1f:76:
42:45:4b:d2:04:76:dd:56:37:1a:6e:2c:f7:52:b9:
7b:3b:33:b6:7d:46:eb:45:2c:ab:b9:77:2c:a7:e7:
99:85:00:d7:67:f1:ea:5f:5e:f6:fc:ce:fd:f8:c1:
32:77:9f:5f:47:a2:42:f8:ee:8a:42:96:34:96:fa:
3e:14:62:10:f7:ab:58:96:37:68:5c:65:9e:39:1f:
5d:4e:e7:7e:1c:82:3d:c5:50:16:44:d4:a4:18:54:
f9:9c:d7:f1:97:bf:9f:2a:34:2b:24:53:25:06:83:
77:e7:c0:01:ba:e7:37:56:53:48:bd:8b:d7:7b:d2:
6d:af:56:97:e1:55:48:6a:cd:be:3f:ba:ac:80:39:
68:a9:99:b0:68:67:dc:3c:34:b9:7c:9e:3d:ba:35:
d2:e7:bc:00:bd:ca:90:8a:72:3c:1d:b8:9a:4f:17:
96:7c:6f:1c:15:52:b9:e9:1b:a1:ef:fe:a2:61:92:
90:03:13:73:c7:a9:85:6e:24:5b:f1:40:74:51:47:
b5:a3:e6:f0:d7:90:19:43:9b:3e:b5:36:f2:37:23:
c2:a5:a5:ce:54:9d:91:07:47:af:b3:1d:21:3c:d4:
48:6f:66:80:eb:69:da:78:ae:8b:7f:c1:d2:31:58:
80:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B0:24:49:66:EB:F4:AC:55:6F:6D:1E:97:0B:E0:79:B1:FD:35:A3
X509v3 Authority Key Identifier:
keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:18:46:ab:b6:66:78:51:d5:c2:3f:73:08:c2:21:80:26:cd:
ef:b0:62:db:69:b3:54:a2:28:fd:76:60:a0:63:b0:60:45:4b:
35:1e:86:3b:ee:9f:4a:f9:92:fd:a4:57:0e:72:91:66:61:4d:
44:a3:8f:24:c4:3d:2c:c3:00:15:77:57:a4:18:1a:29:a5:83:
1a:4c:bc:1f:c2:d7:f4:e6:d4:4e:fa:cc:72:6f:4f:88:ae:72:
2e:cd:e1:44:80:cf:07:78:75:57:72:1c:86:4a:c8:8d:68:b4:
50:46:97:31:50:24:5a:2f:ca:95:47:9e:c4:d5:13:da:8f:6c:
9e:05:28:49:89:30:85:c6:06:ef:5b:d1:10:ad:80:c6:03:db:
ae:fc:f2:ec:b1:54:12:bf:43:9b:d3:1b:17:ee:4a:57:24:ce:
a3:3b:47:85:46:bb:8f:95:13:ec:29:b2:dd:ca:d6:65:30:95:
ea:dc:fe:ac:fa:47:fd:d8:cb:de:b4:a9:9f:53:45:ca:4e:32:
f3:b0:af:ed:70:82:61:78:ba:cc:a3:08:7f:73:98:de:2c:6c:
d6:b7:94:54:96:e7:5b:6d:f8:46:9e:b0:14:93:1f:7e:79:c8:
8a:3b:f2:54:c0:7b:b6:00:6d:5c:27:ee:f1:eb:f2:7a:49:55:
e1:5c:5a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:43:35 2025 by rpki-client