Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
File: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft (raw, json)
Hash identifier: goQmhbhPBhwGksz26cTF2BZpiHlTgA+47BRJ4x51WwU=
Subject key identifier: 3A:DF:2F:A0:CA:E8:04:03:BF:9C:3C:89:55:E1:EB:68:65:3C:6E:D8
Authority key identifier: AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
Certificate issuer: /CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Certificate serial: 0195E15A0CA429F29E3FD68A26BF4ADFD620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
Manifest number: 045C
Signing time: Sat 29 Mar 2025 10:02:09 +0000
Manifest this update: Sat 29 Mar 2025 10:02:09 +0000
Manifest next update: Sun 30 Mar 2025 10:02:09 +0000
Files and hashes: 1: 5Glc2B08f5NNNCUv9fqw3ZiV604.roa (hash: qKV0O/uQL4URhMfYX9S0ZOufXlqcIe3xRJXIrY3RJwE=)
2: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl (hash: mDpyUtyJEcX0xqZ1PywSEYGegjMzakXnuaTZx8kKpXM=)
3: wzyOntPyHe2_vob8ftvNa_NHz8Q.roa (hash: jsopFRalC2C1iJbieVLkelaTdE/c46JWYuJBBa2M4iA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:5a:0c:a4:29:f2:9e:3f:d6:8a:26:bf:4a:df:d6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Validity
Not Before: Mar 29 10:02:09 2025 GMT
Not After : Mar 30 10:02:09 2025 GMT
Subject: CN=3adf2fa0cae80403bf9c3c8955e1eb68653c6ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:35:27:a7:c2:06:de:da:28:07:d2:ea:44:69:
23:39:fa:8c:b6:1e:b3:90:03:5c:2b:59:18:cc:25:
29:1a:d0:ca:8b:88:29:0d:13:bd:6e:dc:d9:92:7f:
fe:50:e1:a7:21:b0:3f:d2:36:8e:f7:41:64:a7:df:
32:8f:32:74:36:b5:c9:6f:73:32:67:75:79:97:2b:
34:9d:ee:a6:8f:d9:e5:8c:54:02:53:cb:be:27:85:
c1:b3:d7:75:51:33:af:4a:1a:7d:87:81:43:00:85:
70:8a:c6:64:13:f9:df:21:57:cc:0f:f0:4c:1d:6f:
11:ef:94:17:a8:e5:a3:67:05:96:24:60:8f:68:5f:
d7:d8:ce:d3:22:c1:cb:43:fa:db:a3:0f:13:de:f9:
d2:b1:6d:ac:b5:db:1c:96:a2:80:8d:19:0a:12:7a:
bd:6b:57:95:ad:cc:37:4d:ae:b1:d2:33:9c:73:a1:
61:96:7e:86:dd:65:62:83:43:fa:15:fe:ee:ad:3e:
87:1b:17:51:7d:e3:bc:42:88:98:1c:3c:b4:57:00:
06:e2:51:df:6d:c6:6a:3d:08:1a:de:b2:71:58:2a:
a2:aa:53:73:7b:ea:54:58:31:98:84:1d:45:4c:e5:
1c:da:fd:f8:8c:57:b7:e4:bd:3e:79:16:b8:67:59:
0c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DF:2F:A0:CA:E8:04:03:BF:9C:3C:89:55:E1:EB:68:65:3C:6E:D8
X509v3 Authority Key Identifier:
keyid:AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c3:62:28:2a:3c:16:eb:0f:37:c7:43:82:7f:74:54:a8:7e:
29:52:7a:be:52:33:a1:2d:b0:2b:8b:6c:63:95:38:a3:71:26:
c9:d4:2c:08:6d:62:7d:41:16:2c:9b:4d:1e:96:73:32:51:0e:
2d:69:76:b4:49:c6:d0:37:ae:6e:21:87:03:37:a4:e4:d5:19:
aa:49:7d:d7:62:a1:cb:8d:c9:64:56:17:69:5a:fd:07:0d:70:
c2:08:f1:5f:6c:f3:fd:15:63:f7:1d:dc:69:9c:bc:09:c1:99:
d8:f1:95:bc:2f:82:14:d7:12:84:09:81:6b:f3:93:44:5a:22:
7b:31:ae:f1:04:c2:c6:3d:01:0f:92:a8:a7:8a:bd:10:e2:49:
46:66:d5:10:b4:34:f9:62:26:00:cc:71:6d:fe:c5:89:51:ab:
ca:bf:05:f0:2a:29:f0:2f:80:e7:9b:81:b0:a0:61:4b:f9:00:
8a:79:26:f8:e4:36:cf:51:b5:1c:21:e8:af:7a:5b:3c:b2:cb:
ae:28:14:fa:3d:44:45:91:ff:34:58:22:6f:a6:81:f8:10:87:
2c:61:53:24:83:67:61:b9:ea:f4:2c:77:06:02:1b:61:6d:b1:
98:c9:92:bf:51:73:e5:b9:9e:cc:48:91:1e:5b:5e:1e:30:de:
40:f4:50:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:54:26 2025 by rpki-client