Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft
File: 3tRskpaCjJwCVTCqaEFgmt8FaaA.mft (raw, json)
Hash identifier: 0SWUmU2DyLPHJ0GX9hGEOjwYDvRct2FhYHdlc7mvmV0=
Subject key identifier: 49:E9:5E:FB:A0:32:E5:98:46:89:A0:8D:73:A7:62:CD:50:FB:0A:CF
Authority key identifier: DE:D4:6C:92:96:82:8C:9C:02:55:30:AA:68:41:60:9A:DF:05:69:A0
Certificate issuer: /CN=ded46c9296828c9c025530aa6841609adf0569a0
Certificate serial: 0194BD174C4A99DFD69BD50318ABCAEFB855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft
Manifest number: 0142
Signing time: Fri 31 Jan 2025 16:00:08 +0000
Manifest this update: Fri 31 Jan 2025 16:00:08 +0000
Manifest next update: Sat 01 Feb 2025 16:00:08 +0000
Files and hashes: 1: 3tRskpaCjJwCVTCqaEFgmt8FaaA.crl (hash: KyyICFZ9JBnoA8P2tFiZRh5jdFXbL5MH498+lfo3n1g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4c:4a:99:df:d6:9b:d5:03:18:ab:ca:ef:b8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded46c9296828c9c025530aa6841609adf0569a0
Validity
Not Before: Jan 31 16:00:08 2025 GMT
Not After : Feb 1 16:00:08 2025 GMT
Subject: CN=49e95efba032e5984689a08d73a762cd50fb0acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5c:6d:06:ca:1f:bf:b7:5a:f4:30:b9:48:fa:
dd:26:d7:ca:5b:12:5e:21:41:3c:08:22:46:66:c2:
d0:3b:ac:30:c2:e4:2d:26:01:17:3c:a1:b0:4d:f5:
40:98:34:9e:d8:c5:fc:73:f1:78:d6:23:c1:e1:9d:
81:3b:17:51:8d:12:7a:50:19:aa:bf:05:c1:6c:65:
5f:7b:da:44:c9:c0:19:0c:54:3b:fc:dc:27:86:39:
36:23:ba:b6:56:08:16:e6:38:51:b8:d4:c6:ea:08:
20:fe:22:dc:ef:dd:e1:b1:38:1a:2b:ad:d3:c3:95:
93:9d:ea:63:c1:a6:d4:87:22:fd:5b:10:f1:af:6e:
bf:9f:a1:75:f0:56:53:0c:1b:5a:0b:f4:18:f2:1f:
fc:53:9e:3c:18:0f:96:a3:88:76:9a:a9:df:9f:eb:
2f:51:5c:2f:b0:cc:a5:d6:f4:db:de:0a:29:0c:18:
c9:fc:48:03:63:12:6e:bc:a2:b0:c4:61:1d:62:c7:
2e:27:8b:6c:5e:68:0b:a4:28:de:1d:2f:fc:a6:0e:
d9:2b:03:5d:f8:26:37:50:c7:47:2a:f5:2d:9e:db:
a3:d7:4b:65:9e:a4:b6:6c:27:8d:f2:f2:08:2e:ae:
7e:40:09:58:59:24:a9:0c:32:53:99:56:4f:ff:7e:
a3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E9:5E:FB:A0:32:E5:98:46:89:A0:8D:73:A7:62:CD:50:FB:0A:CF
X509v3 Authority Key Identifier:
keyid:DE:D4:6C:92:96:82:8C:9C:02:55:30:AA:68:41:60:9A:DF:05:69:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:af:ba:d7:bd:b0:6e:17:f2:2f:2f:f8:88:e0:47:e8:c7:ab:
2f:b1:c4:0f:2d:84:9b:b8:53:3b:be:97:a7:ac:b4:38:86:44:
88:36:28:16:00:3d:73:03:10:cb:90:9e:27:59:3e:e0:57:f8:
ee:97:a7:b9:eb:31:45:16:d1:e1:6d:ac:5a:d3:b2:1e:bf:de:
4b:06:74:7c:32:c2:6b:0f:c4:6c:3e:1d:3e:8e:93:32:cb:a7:
9f:d6:12:7d:fe:bf:35:12:a8:b5:a9:dc:2e:cb:b0:ec:8d:ef:
7d:85:06:b2:67:d9:6e:f1:3c:5b:b5:dd:b6:cd:c0:e6:66:aa:
9b:8c:7f:f1:1f:a6:10:c5:5b:85:03:3d:1a:f0:a3:bb:28:78:
80:8e:0b:e2:7f:1e:3a:c5:7d:5d:b8:0d:fc:10:38:d0:fd:21:
43:4c:d4:dc:f8:e1:de:57:a2:6c:5c:20:95:de:36:b8:ee:05:
95:01:8d:6b:36:23:fb:ea:8f:a2:60:c3:2f:b6:98:91:98:24:
7a:15:c6:23:71:a0:d0:23:80:ff:f7:70:d4:50:3c:3d:72:d6:
0f:99:39:78:71:95:8e:f4:24:b2:e2:55:bd:3e:23:c1:72:c9:
d5:1e:e5:ae:e2:97:16:b9:0b:66:c5:0e:48:a2:8b:d1:4d:fb:
69:52:20:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F0xKmd/Wm9UDGKvK77hVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZDQ2YzkyOTY4MjhjOWMwMjU1MzBhYTY4NDE2MDlhZGYw
NTY5YTAwHhcNMjUwMTMxMTYwMDA4WhcNMjUwMjAxMTYwMDA4WjAzMTEwLwYDVQQD
Eyg0OWU5NWVmYmEwMzJlNTk4NDY4OWEwOGQ3M2E3NjJjZDUwZmIwYWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1xtBsofv7da9DC5SPrdJtfKWxJe
IUE8CCJGZsLQO6wwwuQtJgEXPKGwTfVAmDSe2MX8c/F41iPB4Z2BOxdRjRJ6UBmq
vwXBbGVfe9pEycAZDFQ7/Nwnhjk2I7q2VggW5jhRuNTG6ggg/iLc793hsTgaK63T
w5WTnepjwabUhyL9WxDxr26/n6F18FZTDBtaC/QY8h/8U548GA+Wo4h2mqnfn+sv
UVwvsMyl1vTb3gopDBjJ/EgDYxJuvKKwxGEdYscuJ4tsXmgLpCjeHS/8pg7ZKwNd
+CY3UMdHKvUtntuj10tlnqS2bCeN8vIILq5+QAlYWSSpDDJTmVZP/36jSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnpXvugMuWYRomgjXOnYs1Q+wrPMB8GA1UdIwQY
MBaAFN7UbJKWgoycAlUwqmhBYJrfBWmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3RSc2twYUNqSndDVlRDcWFFRmdtdDhGYWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC85MzZmOTMtMDkyMi00ZjVkLThlM2Et
YTAwMDdiZDVhY2U3LzEvM3RSc2twYUNqSndDVlRDcWFFRmdtdDhGYWFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC85MzZmOTMtMDkyMi00ZjVkLThlM2EtYTAwMDdiZDVhY2U3
LzEvM3RSc2twYUNqSndDVlRDcWFFRmdtdDhGYWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6+6172w
bhfyLy/4iOBH6MerL7HEDy2Em7hTO76Xp6y0OIZEiDYoFgA9cwMQy5CeJ1k+4Ff4
7penuesxRRbR4W2sWtOyHr/eSwZ0fDLCaw/EbD4dPo6TMsunn9YSff6/NRKotanc
Lsuw7I3vfYUGsmfZbvE8W7Xdts3A5maqm4x/8R+mEMVbhQM9GvCjuyh4gI4L4n8e
OsV9XbgN/BA40P0hQ0zU3Pjh3leibFwgld42uO4FlQGNazYj++qPomDDL7aYkZgk
ehXGI3Gg0COA//dw1FA8PXLWD5k5eHGVjvQksuJVvT4jwXLJ1R7lruKXFrkLZsUO
SKKL0U37aVIgjg==
-----END CERTIFICATE-----
Generated at Sat May 10 08:35:46 2025 by rpki-client