Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
File: 3eNumAISZPWoBwEGeAvinUihbGc.mft (raw, json)
Hash identifier: zZ5d6xoWBzwxgpwQirROc92cdUscqJ+9LlJmguVD32k=
Subject key identifier: AD:93:7E:BD:C3:4B:F6:8A:C0:A2:54:41:3A:03:10:D5:71:0C:D8:92
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 0195E07D657806DE67E87E9052EF78F2D207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
Manifest number: 0E02
Signing time: Sat 29 Mar 2025 06:01:09 +0000
Manifest this update: Sat 29 Mar 2025 06:01:09 +0000
Manifest next update: Sun 30 Mar 2025 06:01:09 +0000
Files and hashes: 1: 3eNumAISZPWoBwEGeAvinUihbGc.crl (hash: O7rQpDd84ZxRVfMhar4fl1zxlTSLPNg8T+zkeSWkIXc=)
2: aVFvre28J3DS0B2KG9gBaQhWY8E.roa (hash: w9ACEEmzHkbgzfK1WYGzAfxTUhSKPdzFdcOYaL2Jl/0=)
3: zY66R4PlYnOuPkmGqs8XTZ6eMd8.roa (hash: enNu24b23wg1K1RIp6WfyJxooF13hp5aIKfR3aehppY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:65:78:06:de:67:e8:7e:90:52:ef:78:f2:d2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: Mar 29 06:01:09 2025 GMT
Not After : Mar 30 06:01:09 2025 GMT
Subject: CN=ad937ebdc34bf68ac0a254413a0310d5710cd892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:86:b1:53:43:7c:68:34:98:7b:9d:08:4e:15:
11:f4:fa:27:bd:b2:e9:20:8e:58:0e:27:6c:ae:bd:
9b:d1:09:34:ef:1d:09:09:a6:7d:cc:63:0e:68:54:
1f:06:0f:d2:65:63:84:40:1b:cd:a5:f2:37:89:97:
d2:b4:bc:69:c1:f6:e9:45:09:fc:14:d5:0c:bb:52:
27:6d:e4:37:d0:68:37:1a:eb:4b:4d:79:28:2e:f7:
7c:fd:88:3d:96:2d:e8:33:e7:a8:e9:d0:7e:7a:48:
10:89:14:66:9b:25:97:14:9f:88:01:91:97:33:38:
b6:1e:b5:7d:d5:19:08:78:70:ed:86:40:f6:48:af:
d9:53:d6:21:c7:0e:a9:f2:1d:62:a7:52:ef:29:37:
04:63:6b:6a:27:2b:39:98:ae:58:2d:e5:ee:ff:b1:
81:58:a9:e1:98:62:a7:2f:ba:28:82:6f:cb:69:be:
9f:c9:8a:d8:89:b7:a5:aa:44:72:a8:3f:59:70:d7:
aa:f8:f4:da:3e:56:7b:cf:32:53:cd:19:74:f5:e4:
0e:42:91:9d:e8:c9:c5:c5:6a:29:ea:b9:2c:78:0c:
12:51:a2:1a:4b:de:e2:3d:3c:ba:c8:ad:7c:78:b2:
7e:3d:1f:c4:20:73:16:21:54:69:e8:93:5e:f5:80:
2f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:93:7E:BD:C3:4B:F6:8A:C0:A2:54:41:3A:03:10:D5:71:0C:D8:92
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ad:db:b0:28:c1:70:d4:c4:14:69:1e:1d:fe:83:69:49:10:
6a:d9:7a:85:12:ea:e8:fa:86:03:33:0a:dd:db:e8:84:83:d6:
a1:e7:93:03:47:fd:53:88:e3:f6:b9:8c:bd:01:ed:3d:92:b6:
77:f8:40:2e:e5:b6:56:57:bc:5d:0e:1d:64:c7:7f:17:ba:60:
ce:4a:b4:b5:b5:d6:7f:36:e2:a9:11:91:c3:0a:f3:5e:71:02:
3f:43:43:78:ea:e3:0a:d1:a3:8b:94:3b:bd:5b:ca:c3:59:1b:
5f:98:34:b2:4c:4a:8b:31:68:9b:df:5f:3f:61:4a:19:b5:dd:
b6:98:2b:9b:3f:d5:09:fa:3b:a3:d3:60:b4:10:d3:6e:a5:80:
76:f7:7c:52:e7:b2:3c:d6:80:b8:91:5b:b6:2c:6c:54:61:fe:
05:57:2a:e4:c4:64:d6:84:f7:38:cb:3f:05:ff:d9:e0:b5:1f:
c5:39:93:bc:85:02:7d:4b:25:01:c9:8d:3f:60:a8:99:2b:0b:
52:d3:c3:37:2e:43:4e:f1:ca:e0:8b:e4:c7:cf:b4:ff:35:52:
b1:fb:27:b6:96:1e:db:7a:5d:3c:a1:cb:30:53:e9:6a:fb:9d:
6b:51:1f:8a:01:1f:48:99:90:1f:83:6b:92:ea:98:93:d7:38:
15:b3:92:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:09:51 2025 by rpki-client