Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.mft
File: 3DC4_dBG72WGgJfwNrinyFVyqtA.mft (raw, json)
Hash identifier: WC9nmcyLfGXpUjOPtuBy3wx1OAIEKWF0GLMVcdWocZ0=
Subject key identifier: 38:18:19:CA:89:42:69:C8:68:FA:21:16:78:E9:B4:96:85:CE:92:9D
Authority key identifier: DC:30:B8:FD:D0:46:EF:65:86:80:97:F0:36:B8:A7:C8:55:72:AA:D0
Certificate issuer: /CN=dc30b8fdd046ef65868097f036b8a7c85572aad0
Certificate serial: 0194BC3C435EB25C5E467E88B7E6CEBCA1AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DC4_dBG72WGgJfwNrinyFVyqtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: 3DC4_dBG72WGgJfwNrinyFVyqtA.crl (hash: TF9Gkm4svfMJ5bnN3ZOSlHnm0ypBejfmQd17qSPKXug=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:43:5e:b2:5c:5e:46:7e:88:b7:e6:ce:bc:a1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc30b8fdd046ef65868097f036b8a7c85572aad0
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=381819ca894269c868fa211678e9b49685ce929d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:16:04:c1:67:4a:11:37:ca:fd:02:e3:8c:8e:
3e:6a:0e:af:75:61:46:13:53:ef:af:51:60:17:b3:
d0:d8:96:3c:e0:e3:cd:74:8f:2c:cc:e5:08:d5:b2:
ff:15:3d:9e:ba:83:f2:96:01:20:66:65:eb:59:22:
e6:9d:3e:29:ab:1e:13:fb:37:1c:6f:d3:14:e1:76:
a4:fd:2d:ca:8e:9e:7f:90:40:ba:7d:e0:f5:e7:d4:
0f:0d:f6:7d:30:02:ef:64:d3:e0:8e:fa:cd:c9:8d:
a5:15:26:3d:03:5b:20:63:ce:67:dc:dd:25:ea:2e:
2e:47:ca:4e:a9:a7:b4:16:4c:28:15:61:8e:de:a6:
0f:bf:6f:82:45:80:e4:c7:ce:eb:a1:d9:1c:73:84:
9c:b9:fd:1d:00:3a:e9:20:9e:01:6e:4e:43:76:e7:
a9:6c:2e:89:81:a3:f5:79:b6:0a:da:a9:5c:6c:51:
1a:d1:c6:64:1a:1a:a7:59:8a:ff:58:66:5a:05:7d:
45:6b:9d:f9:08:45:ef:cb:06:07:e5:3f:ff:26:31:
bb:56:6c:dd:ac:9c:f8:61:2f:9d:dd:c0:b3:02:dd:
d1:57:e0:71:e4:73:a6:c0:9f:0c:ea:77:42:8b:f5:
04:64:ec:57:c8:b3:ad:48:9b:d2:6e:67:bc:3a:20:
65:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:18:19:CA:89:42:69:C8:68:FA:21:16:78:E9:B4:96:85:CE:92:9D
X509v3 Authority Key Identifier:
keyid:DC:30:B8:FD:D0:46:EF:65:86:80:97:F0:36:B8:A7:C8:55:72:AA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DC4_dBG72WGgJfwNrinyFVyqtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e1:28:f2:3d:c5:85:99:15:ed:6c:a2:07:68:67:ed:75:99:
64:e2:da:9e:2d:0c:51:ec:a6:23:e8:ea:8b:b3:a4:67:37:4e:
8b:24:53:3c:40:ed:a0:1d:33:e8:de:37:5d:8e:3f:b0:0d:df:
5d:bf:3f:ec:98:a3:99:14:de:c2:47:5c:eb:08:4c:0f:62:21:
34:b0:53:0d:9e:8c:8a:6b:ca:ff:dd:d8:f6:53:4e:b6:32:00:
80:ef:8b:b1:e8:3e:1b:3d:a3:1e:b2:21:f6:09:41:ad:b5:30:
c8:bd:a5:47:d4:3f:ff:c9:15:07:b7:fa:b7:bd:15:66:5a:eb:
f6:06:17:8f:47:0b:00:e0:c1:75:6d:31:63:7e:35:c4:4e:fe:
6d:88:8e:dc:69:75:97:e0:72:f4:95:10:a8:c9:d8:9b:30:28:
e8:64:b3:85:04:be:c6:d0:b5:54:51:4b:f2:1d:78:da:c6:dc:
3b:59:80:3a:3e:45:a6:ad:f2:31:fa:aa:43:e9:16:ab:c3:0a:
37:a8:3a:b9:e5:1c:68:73:98:39:cf:ca:8b:0d:e6:84:8e:53:
3c:82:6c:46:6b:9b:ef:52:88:6f:2a:0d:c6:e7:b9:dc:bb:46:
d1:39:e2:f4:39:17:16:c0:3e:2e:5a:a2:68:66:55:62:0c:09:
ee:b5:c8:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PENeslxeRn6It+bOvKGuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMzBiOGZkZDA0NmVmNjU4NjgwOTdmMDM2YjhhN2M4NTU3
MmFhZDAwHhcNMjUwMTMxMTIwMDUzWhcNMjUwMjAxMTIwMDUzWjAzMTEwLwYDVQQD
EygzODE4MTljYTg5NDI2OWM4NjhmYTIxMTY3OGU5YjQ5Njg1Y2U5MjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RYEwWdKETfK/QLjjI4+ag6vdWFG
E1Pvr1FgF7PQ2JY84OPNdI8szOUI1bL/FT2euoPylgEgZmXrWSLmnT4pqx4T+zcc
b9MU4Xak/S3Kjp5/kEC6feD159QPDfZ9MALvZNPgjvrNyY2lFSY9A1sgY85n3N0l
6i4uR8pOqae0FkwoFWGO3qYPv2+CRYDkx87rodkcc4Scuf0dADrpIJ4Bbk5Dduep
bC6JgaP1ebYK2qlcbFEa0cZkGhqnWYr/WGZaBX1Fa535CEXvywYH5T//JjG7Vmzd
rJz4YS+d3cCzAt3RV+Bx5HOmwJ8M6ndCi/UEZOxXyLOtSJvSbme8OiBlHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDgYGcqJQmnIaPohFnjptJaFzpKdMB8GA1UdIwQY
MBaAFNwwuP3QRu9lhoCX8Da4p8hVcqrQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0RDNF9kQkc3MldHZ0pmd05yaW55RlZ5cXRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81MzkzM2MtZDFiOC00MzYyLTllMWYt
MjlhMGFhNmM0YWQxLzEvM0RDNF9kQkc3MldHZ0pmd05yaW55RlZ5cXRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS81MzkzM2MtZDFiOC00MzYyLTllMWYtMjlhMGFhNmM0YWQx
LzEvM0RDNF9kQkc3MldHZ0pmd05yaW55RlZ5cXRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnOEo8j3F
hZkV7WyiB2hn7XWZZOLani0MUeymI+jqi7OkZzdOiyRTPEDtoB0z6N43XY4/sA3f
Xb8/7JijmRTewkdc6whMD2IhNLBTDZ6MimvK/93Y9lNOtjIAgO+Lseg+Gz2jHrIh
9glBrbUwyL2lR9Q//8kVB7f6t70VZlrr9gYXj0cLAODBdW0xY341xE7+bYiO3Gl1
l+By9JUQqMnYmzAo6GSzhQS+xtC1VFFL8h142sbcO1mAOj5Fpq3yMfqqQ+kWq8MK
N6g6ueUcaHOYOc/Kiw3mhI5TPIJsRmub71KIbyoNxue53LtG0Tni9DkXFsA+Llqi
aGZVYgwJ7rXIfA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:38 2025 by rpki-client