Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
File: 3GbYudONW7Gc-gxGRLRSk9Hotvo.mft (raw, json)
Hash identifier: ey+xeAr9ZWPfpWP+6YswxQldn+XXfzpRVtxr4hjP1WY=
Subject key identifier: F6:27:99:0C:10:75:E4:9B:DF:10:5D:E2:8A:B0:10:5F:12:D1:4A:87
Authority key identifier: DC:66:D8:B9:D3:8D:5B:B1:9C:FA:0C:46:44:B4:52:93:D1:E8:B6:FA
Certificate issuer: /CN=dc66d8b9d38d5bb19cfa0c4644b45293d1e8b6fa
Certificate serial: 0194BD859B792D27BDE4426FCAEC02A28E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GbYudONW7Gc-gxGRLRSk9Hotvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 18:00:37 +0000
Manifest this update: Fri 31 Jan 2025 18:00:37 +0000
Manifest next update: Sat 01 Feb 2025 18:00:37 +0000
Files and hashes: 1: 3GbYudONW7Gc-gxGRLRSk9Hotvo.crl (hash: ldVbp207E4ihJfhLfjtilcZGrGmZM6st0CI1G/i0oVo=)
2: bcS-hsDeO0gtgs28TEiHyvA81q0.roa (hash: CeE5W6otaxPvfHxN+lyC5C8i9p819egn6IV1iHF00Ew=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9b:79:2d:27:bd:e4:42:6f:ca:ec:02:a2:8e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc66d8b9d38d5bb19cfa0c4644b45293d1e8b6fa
Validity
Not Before: Jan 31 18:00:37 2025 GMT
Not After : Feb 1 18:00:37 2025 GMT
Subject: CN=f627990c1075e49bdf105de28ab0105f12d14a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:64:e1:4e:f8:1a:86:7a:36:5a:ed:91:58:d4:
e0:c7:ab:79:71:e5:a0:b2:cf:cc:f4:e7:c8:58:1a:
e7:b9:9a:86:23:82:ea:a8:d9:e8:d0:7a:a9:5a:bf:
d4:2e:ee:1f:40:d1:85:75:d0:df:91:47:c9:dd:fe:
42:c9:9d:18:36:cc:37:11:3f:1d:c6:24:78:bc:6c:
f9:d8:d7:a1:6b:63:e9:81:30:d0:fb:3a:bd:46:19:
0f:cf:e3:95:ed:8f:6a:a0:8f:f6:91:05:6b:ba:48:
91:77:54:bf:8a:bd:6d:a8:16:02:77:dc:8f:a7:e1:
e6:d8:84:ce:7d:91:11:1b:68:2b:9b:b7:18:a2:81:
e4:c0:e0:bd:e7:fe:a7:5b:2e:d4:5b:d8:d4:d5:65:
6f:58:b6:a7:60:35:35:42:ca:ec:ba:eb:13:0f:15:
14:b3:8f:2a:f0:bf:df:45:2f:91:3d:a2:7f:ad:91:
26:28:e8:03:7f:5e:69:05:1f:00:1f:a0:e7:4a:fc:
ee:a4:99:61:89:77:13:76:70:7d:2f:af:e3:85:d3:
2a:f8:33:c4:fe:15:cd:66:f0:91:60:f3:b2:67:99:
cc:d1:70:2a:32:43:26:eb:6b:7e:fb:d5:d9:50:e3:
7a:60:e4:7c:35:35:cb:72:71:0e:40:89:31:5a:d1:
1b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:27:99:0C:10:75:E4:9B:DF:10:5D:E2:8A:B0:10:5F:12:D1:4A:87
X509v3 Authority Key Identifier:
keyid:DC:66:D8:B9:D3:8D:5B:B1:9C:FA:0C:46:44:B4:52:93:D1:E8:B6:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GbYudONW7Gc-gxGRLRSk9Hotvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e1:92:8b:6c:3d:28:12:e9:d5:85:a2:c7:83:4c:0a:4c:ff:
f1:68:12:8c:fb:a4:7d:1f:6e:31:4f:4a:5f:b9:dd:6e:94:cf:
13:30:35:8d:a2:80:fc:5a:82:f3:5e:81:38:bc:09:98:a8:d0:
dc:0c:f5:cf:76:ef:7a:2d:51:9b:90:2c:72:8d:d7:63:a6:d1:
82:ac:bb:4e:f5:fc:bf:aa:8a:9a:f4:cb:aa:bd:99:8b:ac:b1:
b7:55:e8:a8:43:27:51:d0:57:82:23:ba:8f:e8:c7:a5:73:fa:
5e:70:6d:9a:a8:31:07:27:fa:e9:33:83:e2:04:19:77:8a:2e:
9f:08:11:f6:92:81:af:e6:16:e9:4f:f7:4a:ad:5d:2a:b3:b2:
5b:49:59:37:7c:8f:49:2d:80:67:68:92:27:8e:21:a1:e0:27:
26:4e:0e:bb:fa:79:49:71:1d:0a:08:3e:bf:e8:26:33:aa:64:
c0:11:0a:5b:40:11:79:79:80:a7:65:48:f2:dc:a1:cc:be:b2:
61:5d:c4:bf:2c:e3:11:30:18:d0:e6:53:98:ae:2a:ad:f4:b6:
8c:03:5b:94:0d:11:4f:f8:1e:e4:b3:09:03:7f:ca:35:20:3a:
50:df:f4:ed:19:df:1e:54:9a:c8:12:89:4d:02:36:e0:be:05:
40:b7:1b:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hZt5LSe95EJvyuwCoo6fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNjZkOGI5ZDM4ZDViYjE5Y2ZhMGM0NjQ0YjQ1MjkzZDFl
OGI2ZmEwHhcNMjUwMTMxMTgwMDM3WhcNMjUwMjAxMTgwMDM3WjAzMTEwLwYDVQQD
EyhmNjI3OTkwYzEwNzVlNDliZGYxMDVkZTI4YWIwMTA1ZjEyZDE0YTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mThTvgahno2Wu2RWNTgx6t5ceWg
ss/M9OfIWBrnuZqGI4LqqNno0HqpWr/ULu4fQNGFddDfkUfJ3f5CyZ0YNsw3ET8d
xiR4vGz52Neha2PpgTDQ+zq9RhkPz+OV7Y9qoI/2kQVrukiRd1S/ir1tqBYCd9yP
p+Hm2ITOfZERG2grm7cYooHkwOC95/6nWy7UW9jU1WVvWLanYDU1QsrsuusTDxUU
s48q8L/fRS+RPaJ/rZEmKOgDf15pBR8AH6DnSvzupJlhiXcTdnB9L6/jhdMq+DPE
/hXNZvCRYPOyZ5nM0XAqMkMm62t++9XZUON6YOR8NTXLcnEOQIkxWtEbMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYnmQwQdeSb3xBd4oqwEF8S0UqHMB8GA1UdIwQY
MBaAFNxm2LnTjVuxnPoMRkS0UpPR6Lb6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0diWXVkT05XN0djLWd4R1JMUlNrOUhvdHZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8xNGY2ODQtMDQ1My00NjI1LTk2NmUt
NDc3MWQxYTRkZGYwLzEvM0diWXVkT05XN0djLWd4R1JMUlNrOUhvdHZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8xNGY2ODQtMDQ1My00NjI1LTk2NmUtNDc3MWQxYTRkZGYw
LzEvM0diWXVkT05XN0djLWd4R1JMUlNrOUhvdHZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+GSi2w9
KBLp1YWix4NMCkz/8WgSjPukfR9uMU9KX7ndbpTPEzA1jaKA/FqC816BOLwJmKjQ
3Az1z3bvei1Rm5Asco3XY6bRgqy7TvX8v6qKmvTLqr2Zi6yxt1XoqEMnUdBXgiO6
j+jHpXP6XnBtmqgxByf66TOD4gQZd4ounwgR9pKBr+YW6U/3Sq1dKrOyW0lZN3yP
SS2AZ2iSJ44hoeAnJk4Ou/p5SXEdCgg+v+gmM6pkwBEKW0AReXmAp2VI8tyhzL6y
YV3EvyzjETAY0OZTmK4qrfS2jANblA0RT/ge5LMJA3/KNSA6UN/07RnfHlSayBKJ
TQI24L4FQLcbdA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:39:57 2025 by rpki-client