Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4a29c9-d186-492c-ba90-ddfaa1c8ab9d/1/3TNiNhnlJyn7-XcqVSLXgdo7YyU.mft
File: 3TNiNhnlJyn7-XcqVSLXgdo7YyU.mft (raw, json)
Hash identifier: uHsXvbXeODUFzIEjufzFrdbear4Bidy46FZVVK1q80s=
Subject key identifier: 42:70:70:D4:A1:8F:A4:D6:66:74:8A:4D:04:42:2D:91:84:19:AD:22
Authority key identifier: DD:33:62:36:19:E5:27:29:FB:F9:77:2A:55:22:D7:81:DA:3B:63:25
Certificate issuer: /CN=dd33623619e52729fbf9772a5522d781da3b6325
Certificate serial: 019371FFF894BB9EF8008367A7EF895321B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3TNiNhnlJyn7-XcqVSLXgdo7YyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a29c9-d186-492c-ba90-ddfaa1c8ab9d/1/3TNiNhnlJyn7-XcqVSLXgdo7YyU.mft
Manifest number: AC
Signing time: Thu 28 Nov 2024 09:00:20 +0000
Manifest this update: Thu 28 Nov 2024 09:00:20 +0000
Manifest next update: Fri 29 Nov 2024 09:00:20 +0000
Files and hashes: 1: 3TNiNhnlJyn7-XcqVSLXgdo7YyU.crl (hash: qmdZZaeGYr1by5v4er2p5hAgUKXZ4VLA+2d94Icc05M=)
2: ShaDVXJsV8Mv6uLi6v_RmRWEIOs.roa (hash: 3M3XiG95Oj3CiUKNBmg40s64xAwGRKhEx++cOUPGb8o=)
3: xTKqoPX2dBhNlcT2NUs_e1chUO8.roa (hash: +dfoaZhwpySvyV4GfdG0x0LZsqFRXhC9aHTxd1OPPVo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:71:ff:f8:94:bb:9e:f8:00:83:67:a7:ef:89:53:21:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd33623619e52729fbf9772a5522d781da3b6325
Validity
Not Before: Nov 28 09:00:20 2024 GMT
Not After : Nov 29 09:00:20 2024 GMT
Subject: CN=427070d4a18fa4d666748a4d04422d918419ad22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:94:a2:66:b4:e9:64:30:59:d5:b3:0c:a6:dc:
68:e5:30:ab:3b:06:e7:eb:29:4e:fd:48:72:d3:b8:
14:c1:5e:1b:6c:11:73:3a:4a:4a:ae:3d:94:e9:a2:
98:05:1f:a7:93:7e:f8:5f:69:b2:bb:c5:af:23:a4:
9f:80:cb:e3:88:84:73:ba:a7:28:06:2f:7b:f1:b8:
cc:66:08:d1:b0:81:14:f9:5c:5e:90:97:3e:0a:b1:
cb:9a:68:78:2f:30:6e:48:79:42:e9:3e:7c:db:bd:
8e:1c:79:35:11:77:8c:5b:8e:49:e7:b9:79:17:7f:
65:35:db:4f:82:93:22:bc:f5:d7:95:07:d6:46:3a:
cb:ed:6e:e2:00:de:71:7f:dc:9d:c2:7d:4f:cd:a7:
83:82:ef:73:1e:94:2e:b2:76:54:c2:f9:25:ba:8d:
94:e8:f7:31:6f:69:0d:5d:6c:4a:24:2f:af:e6:16:
76:5d:41:ed:a0:17:8c:09:43:4a:65:a3:7e:a0:ec:
2d:9d:39:df:aa:9f:5f:64:70:9f:de:aa:6b:9a:4a:
28:69:fd:de:52:38:e8:39:9f:f0:d6:42:e1:52:f6:
47:0a:42:56:c3:2d:07:fe:a3:c1:93:9a:b9:e2:a5:
60:2d:3a:0d:c5:00:4d:e3:59:5e:a9:d5:d3:d2:6e:
4f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:70:70:D4:A1:8F:A4:D6:66:74:8A:4D:04:42:2D:91:84:19:AD:22
X509v3 Authority Key Identifier:
keyid:DD:33:62:36:19:E5:27:29:FB:F9:77:2A:55:22:D7:81:DA:3B:63:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3TNiNhnlJyn7-XcqVSLXgdo7YyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a29c9-d186-492c-ba90-ddfaa1c8ab9d/1/3TNiNhnlJyn7-XcqVSLXgdo7YyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a29c9-d186-492c-ba90-ddfaa1c8ab9d/1/3TNiNhnlJyn7-XcqVSLXgdo7YyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c0:41:8b:c5:a1:c0:50:73:cc:a3:18:ae:04:2e:4f:d6:49:
13:87:92:d3:9b:72:6f:3f:54:87:26:93:54:25:4b:78:3a:84:
4c:ad:4f:dd:d4:a7:8b:8b:6c:6d:9d:1f:34:f3:2f:c0:21:d9:
10:6d:59:b7:82:ef:64:57:4d:d9:93:f4:42:b6:85:2c:07:57:
ee:36:a4:07:68:55:b4:fe:2a:dd:69:84:d2:94:e9:bb:78:aa:
91:6b:ec:fb:92:00:1b:d0:ad:28:97:d0:0a:2c:10:92:d7:d2:
84:6a:5d:d9:c1:da:cc:87:92:cc:4b:1e:2b:2c:1b:c9:e1:7d:
13:59:6d:68:7f:48:10:7f:1e:2d:de:d1:9f:76:69:80:35:4f:
59:cf:1c:62:e6:90:b6:9b:98:9a:5f:ff:55:6c:c6:d5:ec:c7:
18:7a:81:ef:1c:ff:2a:a3:0f:21:6a:37:7a:17:85:9d:41:ce:
23:f7:c1:2c:2c:7e:47:12:18:69:16:d8:36:3f:1a:0f:67:68:
fa:25:29:9d:2f:ad:e5:2e:5d:e3:ba:ee:1a:48:96:c8:3b:b2:
84:0a:c9:ec:ca:e8:9c:16:52:0f:be:e4:b0:1b:42:39:de:fb:
c0:1c:5c:1f:b2:9e:89:83:55:d3:8c:89:69:78:69:fe:f8:52:
a6:fc:7d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:10:47 2025 by rpki-client