Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
File: 3_JHJt8-d_b0yOBDZhOzURDurzg.mft (raw, json)
Hash identifier: lFtl77iPCDo32LNVKbaRXbtF7s3ZSizJ6iM07zqkjak=
Subject key identifier: C9:C2:31:F0:F8:6D:63:5A:8D:98:85:9C:86:D4:A4:2F:99:0F:41:CB
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 0195E07D501B7C7C04840121B35D5E02115C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
Manifest number: 10B5
Signing time: Sat 29 Mar 2025 06:01:03 +0000
Manifest this update: Sat 29 Mar 2025 06:01:03 +0000
Manifest next update: Sun 30 Mar 2025 06:01:03 +0000
Files and hashes: 1: 3_HM3LXI2dI7yCUkbwsS0LVmtPQ.roa (hash: dlvoBhBeGam9xbjGOiUpXKoso+XH3qNTVfnBCvdbd3Q=)
2: 3_JHJt8-d_b0yOBDZhOzURDurzg.crl (hash: VxDCyd6a2W9++2EmuFsUt6hKt6RaEJL2dkwT42nNOhg=)
3: E_7EA8UJkxlGETtzRt_qHmFJYsI.roa (hash: 407g7UlI6CqSY6AOA+kHrysQofaOwh0+lRwTxsDvEPM=)
4: EgzHUocwnSDaTR0mcH1N2AahbPA.roa (hash: qnns/hwFAonNH2cGnXK7MoaWY9Y+ZF5REF6qTFex00M=)
5: EqWJbW00yHom-8ojBy6QYR1H3FM.roa (hash: jchk7todvo3pxE5MJlQ/7M5jHRN15mY+WmGn6RIiL74=)
6: KByvn3G9xMi5zVMf2hfCx6ANxyI.roa (hash: h4AZQDVtiSftBpybDJxG4QIlGy8TOkA79xpxhxDweg4=)
7: LBBRl1_5PTCAndMsefaH2qIgsWI.roa (hash: P4yu/hSYw0dip59FJgO1wKqB51hJxMddEa7BdAJON18=)
8: SFJQLYtyuvLa-Z-_p6GETmClzzQ.roa (hash: TpY/D4v+35T3Gg8FMD0C6YxKf8fx/yuDpF1EWp6QNws=)
9: SW2UHW6XXrCRSFkNV0CVmfSilT8.roa (hash: OU29d/hqTbWW7Cob/3TqpwPxH+8rWvDwLVXV+Khg58o=)
10: gLpL93_717seB53wtn-PIYRSJpQ.roa (hash: BEBryS8Pk5M96RkjmV9ApUKiEfxXTgBuMMQoR0rPtvE=)
11: qIy8EEGEKThhCv4eyhu0aaS6jQQ.roa (hash: FTpKxy8SMv8Ii+e2R+cokRiry1onK0HB+M+lb5hU0DQ=)
12: sl5VJ3i7CbF6mq-XTH5pxWMmK5o.roa (hash: 4bfJxuYHYnVskQrhNVV+ZwN1afVTdgzyH0yWLAaqMRM=)
13: yiW-kmeX6T3jx-yL7EZZYoVvwps.roa (hash: QstF1sZuORe/6EM2aW5TGBrHuj8rjUHPJQAAamVQG0Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:50:1b:7c:7c:04:84:01:21:b3:5d:5e:02:11:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Mar 29 06:01:03 2025 GMT
Not After : Mar 30 06:01:03 2025 GMT
Subject: CN=c9c231f0f86d635a8d98859c86d4a42f990f41cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d2:db:a7:2e:8e:1a:f9:23:df:46:43:90:fc:
c6:2e:86:00:a7:05:f2:41:f6:f1:b2:ba:02:70:88:
4e:c6:56:1b:51:6b:45:3c:61:42:d7:8d:df:dd:59:
69:c3:79:59:91:b5:65:e0:3d:84:5f:36:57:4c:a2:
f8:77:e8:30:9b:20:a6:17:88:20:13:0b:8f:8f:f9:
fe:cf:fd:12:fb:ed:55:ff:c5:59:ed:48:5c:a3:f3:
38:92:f4:8d:8d:db:d6:d5:55:e7:5c:25:5c:89:2b:
37:fa:d8:45:ff:cb:a4:03:9e:ab:2a:77:50:a2:99:
2c:fc:7e:3e:0b:a7:f7:af:bf:f6:9b:b6:e2:ec:de:
82:85:60:2a:8e:47:f1:c7:7b:12:94:01:9b:85:a6:
e2:d1:75:38:27:96:e9:58:86:ab:71:05:be:59:54:
4b:83:fd:9a:c0:c2:d3:63:83:6e:5f:32:8a:19:c4:
54:11:d6:d9:84:b7:0b:7f:a0:22:56:1d:1a:5c:59:
e4:78:88:5d:76:4a:7f:d5:3f:4b:af:fa:3e:80:c8:
bd:01:e5:09:11:31:84:3e:3f:c5:37:5d:71:40:6c:
a8:61:ff:e7:fa:fd:4f:87:e0:d9:15:d7:e0:f0:12:
cb:9d:1b:e7:3e:af:a3:57:e5:a3:eb:c6:d4:64:eb:
f7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C2:31:F0:F8:6D:63:5A:8D:98:85:9C:86:D4:A4:2F:99:0F:41:CB
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:45:7f:88:c9:1c:23:a6:5d:23:36:1f:a3:32:5e:81:ab:ac:
11:ba:3c:b9:e9:41:f8:37:6b:06:0a:76:56:09:de:77:ea:37:
9d:8c:e0:fb:1a:66:19:24:f2:0d:86:be:bd:fe:76:75:b6:3d:
cd:42:63:43:5f:48:7e:25:d6:48:07:f4:97:56:6d:b2:4a:e6:
4f:a2:97:3e:38:41:a9:74:7d:04:ae:22:84:c5:b9:06:1b:99:
7a:7f:da:ca:b4:3c:88:aa:ab:aa:cb:80:78:d7:0d:e9:aa:a3:
8f:73:0d:67:50:a0:f6:fb:1a:c4:76:e9:2a:62:4a:7f:c5:9c:
ab:0f:fe:55:62:6c:d2:ab:5d:51:b0:dd:29:bc:13:62:55:d3:
36:f2:73:2b:08:18:b4:9e:9a:16:7a:34:3a:0f:8d:8e:bd:7a:
c1:0d:54:ad:b6:2b:e8:2c:6f:69:8e:17:27:7a:4c:1e:5d:f7:
a7:ac:ef:1d:18:7b:45:be:47:14:ae:8c:9a:db:83:24:94:dc:
20:8f:1c:3e:29:21:9a:6a:8c:a7:32:73:d4:01:e4:4b:d8:b4:
c9:05:30:41:38:ef:68:45:e1:3f:f5:63:ed:c0:37:97:bd:cb:
3b:cf:b0:be:e4:d3:8b:89:54:37:73:09:ac:39:b4:09:23:ff:
40:d8:0b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:09 2025 by rpki-client