Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.mft
File: 3ikhmJ19kMZOuzVliDH-ao9JyTg.mft (raw, json)
Hash identifier: 0JqEaQ53iwK4Ye0sOChu0/ioxiE8GTcto9PYpXurbGg=
Subject key identifier: CD:01:AA:92:0A:11:DF:45:48:BA:B5:EA:D7:9E:3E:BC:DA:68:F1:92
Authority key identifier: DE:29:21:98:9D:7D:90:C6:4E:BB:35:65:88:31:FE:6A:8F:49:C9:38
Certificate issuer: /CN=de2921989d7d90c64ebb35658831fe6a8f49c938
Certificate serial: 0194BC3BDDC3C07AF62D4740FBDEA99F59FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ikhmJ19kMZOuzVliDH-ao9JyTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.mft
Manifest number: 089B
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: 3ikhmJ19kMZOuzVliDH-ao9JyTg.crl (hash: djkS2x10gtpnwUyFTcn4KvoFdv16iToUPC1Yakssgho=)
2: TOKJ7leUflS6UttAZzwZcKF4cuU.roa (hash: FbxsOsIky6908M3EghoAhEv3FVACCPzpDuJvnzX9foU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:dd:c3:c0:7a:f6:2d:47:40:fb:de:a9:9f:59:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2921989d7d90c64ebb35658831fe6a8f49c938
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=cd01aa920a11df4548bab5ead79e3ebcda68f192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ff:6e:15:c3:67:1b:d0:15:d8:60:61:c0:b0:
88:89:b6:6f:2a:11:a3:10:c7:df:7b:2a:8a:1d:85:
3d:4e:e2:07:0d:06:7c:f7:d4:49:c6:f2:71:a4:f8:
d4:50:8e:1d:5b:ed:62:b1:dc:f7:57:3b:fe:41:60:
6b:cb:28:e5:1c:92:22:a9:e4:0a:39:49:ba:b9:3a:
4c:b5:0a:e2:fb:10:37:6a:3f:e0:c8:26:4e:6d:fc:
54:eb:0e:57:6c:29:79:74:f2:2c:d3:3e:b2:8e:51:
95:f2:53:41:df:19:e4:59:e5:69:1b:fc:18:b7:c1:
b3:48:b7:dc:88:96:04:d8:5f:b7:de:28:d8:5c:73:
75:53:b1:cf:93:98:03:53:21:69:c6:a0:47:2c:db:
eb:7e:19:41:06:9d:9f:27:4c:b5:18:ec:cc:ed:17:
ba:d3:d5:65:8d:89:38:63:2a:38:30:15:cc:f1:69:
c4:d6:94:be:50:c0:62:00:ec:f3:55:38:c7:52:84:
b3:f1:84:73:1f:41:3c:1c:a5:a9:b1:e9:f0:ef:dd:
9b:75:0d:3c:db:be:51:b5:f2:7a:52:e9:c0:fa:60:
b7:84:7e:4a:97:02:9c:4a:5c:8c:88:e5:04:1f:9e:
a8:fc:30:02:9f:89:4b:99:ed:d6:6f:72:a2:6c:9a:
8d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:01:AA:92:0A:11:DF:45:48:BA:B5:EA:D7:9E:3E:BC:DA:68:F1:92
X509v3 Authority Key Identifier:
keyid:DE:29:21:98:9D:7D:90:C6:4E:BB:35:65:88:31:FE:6A:8F:49:C9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ikhmJ19kMZOuzVliDH-ao9JyTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:1e:76:27:56:8f:40:8f:10:98:7a:ad:7f:b7:09:22:ca:03:
71:7a:e8:f4:c4:4b:8a:83:4a:b0:6c:44:54:44:14:a2:8c:89:
b9:b6:34:19:89:4e:0b:b6:05:0e:79:66:63:7f:0f:9b:3e:f6:
4a:eb:a7:f9:c8:7c:4f:25:ca:88:f5:fc:d6:55:b3:d5:f6:87:
51:c4:b4:25:57:fa:fa:27:77:0a:c8:61:27:43:78:0d:f9:a8:
1e:59:be:2b:88:9f:8a:2d:55:c2:5a:28:a2:f3:c9:eb:b0:3c:
31:85:5a:74:9a:54:6f:69:ad:d5:a5:d4:6b:8c:d2:1f:3e:05:
76:49:72:5d:20:77:1d:d4:4f:e5:52:d8:0f:11:a2:92:3f:5d:
7f:ab:70:92:f7:b2:2a:be:fe:25:d2:a1:9f:df:2a:43:b7:70:
6a:f1:2d:8c:00:9f:eb:cc:f8:be:2b:df:6c:d1:33:08:26:2e:
fa:47:e5:a4:12:7a:2f:99:4f:0b:3b:f5:e9:28:d2:7b:4b:ad:
24:50:d3:cd:8f:fd:3c:dd:e8:ac:41:05:48:85:69:b4:68:71:
a7:42:8f:cb:41:4a:cb:ab:b5:15:e5:be:b9:20:a2:b6:0e:d8:
9e:a8:0e:c6:4f:74:9c:09:41:79:f4:95:82:c9:e9:4c:fb:d5:
13:be:16:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O93DwHr2LUdA+96pn1n/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMjkyMTk4OWQ3ZDkwYzY0ZWJiMzU2NTg4MzFmZTZhOGY0
OWM5MzgwHhcNMjUwMTMxMTIwMDI3WhcNMjUwMjAxMTIwMDI3WjAzMTEwLwYDVQQD
EyhjZDAxYWE5MjBhMTFkZjQ1NDhiYWI1ZWFkNzllM2ViY2RhNjhmMTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/9uFcNnG9AV2GBhwLCIibZvKhGj
EMffeyqKHYU9TuIHDQZ899RJxvJxpPjUUI4dW+1isdz3Vzv+QWBryyjlHJIiqeQK
OUm6uTpMtQri+xA3aj/gyCZObfxU6w5XbCl5dPIs0z6yjlGV8lNB3xnkWeVpG/wY
t8GzSLfciJYE2F+33ijYXHN1U7HPk5gDUyFpxqBHLNvrfhlBBp2fJ0y1GOzM7Re6
09VljYk4Yyo4MBXM8WnE1pS+UMBiAOzzVTjHUoSz8YRzH0E8HKWpsenw792bdQ08
275RtfJ6UunA+mC3hH5KlwKcSlyMiOUEH56o/DACn4lLme3Wb3KibJqN5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0BqpIKEd9FSLq16teePrzaaPGSMB8GA1UdIwQY
MBaAFN4pIZidfZDGTrs1ZYgx/mqPSck4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2lraG1KMTlrTVpPdXpWbGlESC1hbzlKeVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS80YjljY2YtNzUzNS00NWRkLWJkOTct
MGI1ZWNiNDc0ZjE1LzEvM2lraG1KMTlrTVpPdXpWbGlESC1hbzlKeVRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS80YjljY2YtNzUzNS00NWRkLWJkOTctMGI1ZWNiNDc0ZjE1
LzEvM2lraG1KMTlrTVpPdXpWbGlESC1hbzlKeVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfx52J1aP
QI8QmHqtf7cJIsoDcXro9MRLioNKsGxEVEQUooyJubY0GYlOC7YFDnlmY38Pmz72
Suun+ch8TyXKiPX81lWz1faHUcS0JVf6+id3CshhJ0N4DfmoHlm+K4ifii1Vwloo
ovPJ67A8MYVadJpUb2mt1aXUa4zSHz4FdklyXSB3HdRP5VLYDxGikj9df6twkvey
Kr7+JdKhn98qQ7dwavEtjACf68z4vivfbNEzCCYu+kflpBJ6L5lPCzv16SjSe0ut
JFDTzY/9PN3orEEFSIVptGhxp0KPy0FKy6u1FeW+uSCitg7YnqgOxk90nAlBefSV
gsnpTPvVE74WMg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:26:38 2025 by rpki-client