Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1ba419-acbe-4d71-8c0e-6a1a368aa62f/1/3KECtaSoa_R_8E6OprIOzQviOCY.mft
File: 3KECtaSoa_R_8E6OprIOzQviOCY.mft (raw, json)
Hash identifier: tydGTRS1ZhfwgLdE7ZvoKfc+eSRqivIatachRJduXdk=
Subject key identifier: 8C:07:65:39:B2:DF:15:79:6E:E5:F0:F6:AD:0C:98:47:15:12:10:C7
Authority key identifier: DC:A1:02:B5:A4:A8:6B:F4:7F:F0:4E:8E:A6:B2:0E:CD:0B:E2:38:26
Certificate issuer: /CN=dca102b5a4a86bf47ff04e8ea6b20ecd0be23826
Certificate serial: 019265236E5B81CB58096569542B2A6A0415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KECtaSoa_R_8E6OprIOzQviOCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1ba419-acbe-4d71-8c0e-6a1a368aa62f/1/3KECtaSoa_R_8E6OprIOzQviOCY.mft
Manifest number: 0812
Signing time: Mon 07 Oct 2024 04:01:13 +0000
Manifest this update: Mon 07 Oct 2024 04:01:13 +0000
Manifest next update: Tue 08 Oct 2024 04:01:13 +0000
Files and hashes: 1: 3KECtaSoa_R_8E6OprIOzQviOCY.crl (hash: gYI69SxjU4pUYEJFD0VT/5iFttFy17MqqgLRFZadLWg=)
2: mzpE5QIUDk2HkeVCYpwXV3rlGnA.roa (hash: d8vnw+4MmaDVPudrpNRptJYRV49C3VHXYHCAqK6C48k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:65:23:6e:5b:81:cb:58:09:65:69:54:2b:2a:6a:04:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca102b5a4a86bf47ff04e8ea6b20ecd0be23826
Validity
Not Before: Oct 7 04:01:13 2024 GMT
Not After : Oct 8 04:01:13 2024 GMT
Subject: CN=8c076539b2df15796ee5f0f6ad0c9847151210c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2b:8b:48:66:65:d7:22:5e:02:a0:0b:81:ff:
30:ad:8d:5c:a0:ec:b9:54:fd:f0:23:83:4a:2d:29:
58:1e:fc:91:82:0d:24:b3:e0:58:02:24:66:ba:3a:
23:6d:45:1f:7a:23:10:8f:51:39:66:cf:30:95:c7:
89:81:18:ab:c2:1c:b3:c6:1e:16:71:b2:a1:6d:47:
a5:ce:09:d3:2b:4f:be:eb:cb:40:55:30:72:52:ef:
33:47:02:64:a9:69:7e:fc:c5:41:d6:d6:c9:0d:e1:
ed:93:2c:82:89:15:47:fd:59:d9:b3:6c:0c:cc:41:
1d:27:06:e2:ed:59:ac:15:79:19:d0:c2:38:0e:5c:
ba:c0:b9:e5:87:60:d1:c7:57:4e:7c:69:71:1f:06:
de:84:f7:81:dc:b5:e1:b2:75:a0:ff:1d:cc:a0:5d:
69:6c:1b:47:2f:b0:b2:51:f8:6b:7e:91:29:b3:85:
6d:2f:09:57:bb:59:30:0e:b5:1b:08:bf:12:03:b1:
ee:91:64:38:e3:27:40:04:e8:96:4e:63:6a:af:06:
81:44:f4:f4:c1:7f:0b:9b:fb:45:4a:20:ae:7d:aa:
1b:1b:5e:c6:ec:3e:36:38:61:f8:3a:6e:66:62:d7:
da:10:6e:3b:3c:45:96:e6:ae:88:25:84:73:d5:fd:
5b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:07:65:39:B2:DF:15:79:6E:E5:F0:F6:AD:0C:98:47:15:12:10:C7
X509v3 Authority Key Identifier:
keyid:DC:A1:02:B5:A4:A8:6B:F4:7F:F0:4E:8E:A6:B2:0E:CD:0B:E2:38:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KECtaSoa_R_8E6OprIOzQviOCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1ba419-acbe-4d71-8c0e-6a1a368aa62f/1/3KECtaSoa_R_8E6OprIOzQviOCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1ba419-acbe-4d71-8c0e-6a1a368aa62f/1/3KECtaSoa_R_8E6OprIOzQviOCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:db:6d:21:c6:83:9d:25:f6:55:51:23:c4:36:36:ad:d0:49:
95:8b:b3:83:40:c8:4a:e9:92:8c:aa:a6:67:5e:93:92:23:02:
53:11:74:c4:6a:f7:f7:01:24:d7:79:28:7d:6c:9d:e1:f8:52:
66:96:7b:9d:44:2b:34:49:41:96:07:37:42:55:5d:a5:66:3a:
f0:70:df:cd:7d:bb:04:99:4c:71:ac:69:4e:0f:d8:8d:d5:cb:
a4:ca:27:12:c8:6d:e1:08:b6:f9:af:59:a1:10:46:6b:29:68:
11:45:81:35:c9:ab:bd:14:d9:c0:ef:92:a5:4f:9a:e2:0d:db:
d1:af:dd:d6:5e:59:30:dc:96:99:59:4d:a4:4e:8e:b9:ae:19:
83:dd:ed:33:55:a0:4e:5b:6a:1b:4f:20:b8:02:27:9a:bd:cb:
51:d0:fa:5c:94:bf:20:b3:dc:6e:1a:38:ad:95:d9:1a:a3:d3:
26:5c:80:2b:f0:14:3b:e5:e7:6b:da:42:56:d4:db:cb:b3:3a:
4d:90:6f:99:c7:48:60:6f:ef:69:1b:1b:90:0f:b7:e8:df:18:
26:b5:4d:f3:ec:3a:38:a3:91:27:9d:e7:e5:1b:72:37:a5:8d:
b3:49:e6:b1:d5:cf:50:73:94:7d:b3:40:d9:a9:97:99:38:b1:
3c:ab:88:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:46:09 2025 by rpki-client