Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
File: x3Nu3rkvk36kWJPqm89O-D8V_8g.mft (raw, json)
Hash identifier: eu1qdU3I968eYsICN4fcmFIeqCo58wlPbMLHqGKU1xY=
Subject key identifier: 67:AE:81:6A:9C:C0:A6:2C:C5:34:12:97:1C:86:BE:F9:23:C1:AE:56
Authority key identifier: C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
Certificate issuer: /CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Certificate serial: 0194BD4EC1F4094A98398B2669A972E23544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
Manifest number: 0D2C
Signing time: Fri 31 Jan 2025 17:00:42 +0000
Manifest this update: Fri 31 Jan 2025 17:00:42 +0000
Manifest next update: Sat 01 Feb 2025 17:00:42 +0000
Files and hashes: 1: ZfJgayjX3ZyY4keMrrK5ie3SiNQ.roa (hash: I356ijiy3DFzBI7A3YL8pZIG42TC++pOhoxAzv45n5Q=)
2: x3Nu3rkvk36kWJPqm89O-D8V_8g.crl (hash: +5CvK4sO/0vT+mO1lNR2ctn/V/Zwkwi7yrcmUcjlwEA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c1:f4:09:4a:98:39:8b:26:69:a9:72:e2:35:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Validity
Not Before: Jan 31 17:00:42 2025 GMT
Not After : Feb 1 17:00:42 2025 GMT
Subject: CN=67ae816a9cc0a62cc53412971c86bef923c1ae56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:95:86:95:30:ce:82:02:ea:75:a9:af:2d:26:
80:8f:2d:33:4b:3b:4a:21:9d:b1:80:b4:e5:d4:23:
a5:07:cd:5d:f7:e7:8c:17:d3:fb:7b:d0:b9:77:28:
16:26:69:14:a5:31:f3:cd:0e:3f:6f:41:5f:ee:ea:
80:b3:31:fa:f2:62:a6:46:9e:b8:53:d4:a5:22:fd:
c9:ed:93:93:11:d1:08:85:da:c0:e3:6a:6e:30:90:
72:65:8f:8b:18:2c:97:77:f9:48:51:12:b2:01:50:
06:2b:f9:f0:a7:61:64:a9:1c:80:ba:42:a8:a2:45:
0d:5f:79:ae:0c:51:7e:7e:17:b7:8b:33:ef:32:b3:
46:31:85:78:cd:43:d3:86:4b:83:d9:e7:13:f3:c7:
c6:84:2e:e7:87:ca:c5:30:0c:c7:f4:92:ea:98:5d:
ed:5f:77:82:a9:d1:fb:a2:51:13:db:4e:71:ea:32:
d2:50:32:70:ad:2f:88:33:a0:6c:9b:00:ff:ef:88:
bf:c0:77:60:bb:01:c0:ee:18:00:45:96:b0:b8:2d:
74:7d:7f:66:e4:2a:26:53:9b:3d:08:81:0b:b9:cd:
bc:c0:e0:69:04:1d:ab:79:89:4a:97:5b:86:52:c9:
ca:0b:2a:ff:19:83:c0:b5:46:b8:ce:63:d7:1b:26:
21:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AE:81:6A:9C:C0:A6:2C:C5:34:12:97:1C:86:BE:F9:23:C1:AE:56
X509v3 Authority Key Identifier:
keyid:C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:43:4b:71:75:55:5f:8b:8d:08:aa:ed:cc:ad:18:f2:8d:c5:
27:42:6a:aa:8a:cd:a1:30:4d:16:7e:c5:36:79:d0:d9:a9:fe:
b1:05:81:57:23:18:f3:5e:a0:83:c3:e5:bf:23:aa:f3:86:16:
96:5a:87:33:00:6c:3c:b0:d3:7f:11:f4:0e:d0:84:b4:69:87:
2f:1d:22:88:b7:89:77:11:53:88:cf:0e:f3:0a:da:8e:8e:db:
05:f3:32:b6:c4:43:e5:ac:08:11:db:1b:76:a0:83:4a:c6:d5:
4d:ff:1b:26:9e:2c:aa:23:24:b1:e1:18:d0:c4:8d:91:ec:b2:
30:1f:a6:94:b6:8a:38:54:96:3c:c0:0c:10:2a:b1:15:fb:70:
b1:86:ad:3c:c8:8f:8f:0f:91:05:f3:0a:38:e3:1a:34:11:14:
dc:72:63:58:84:23:ac:10:bb:ab:02:1f:9b:34:96:9e:6e:99:
61:d4:29:26:93:83:af:49:bf:b7:1c:a1:4f:6c:c8:5f:05:a1:
15:97:73:7b:d2:ca:5d:ca:89:1e:53:e3:28:57:1d:50:b7:0d:
2b:59:2c:d1:94:e6:db:d7:13:c2:39:01:ba:14:01:c2:7c:7f:
64:f7:76:97:6f:ae:f9:1c:40:a6:5d:7a:fd:30:0e:92:e7:54:
86:96:2e:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TsH0CUqYOYsmaaly4jVEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NzM2ZWRlYjkyZjkzN2VhNDU4OTNlYTliY2Y0ZWY4M2Yx
NWZmYzgwHhcNMjUwMTMxMTcwMDQyWhcNMjUwMjAxMTcwMDQyWjAzMTEwLwYDVQQD
Eyg2N2FlODE2YTljYzBhNjJjYzUzNDEyOTcxYzg2YmVmOTIzYzFhZTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5WGlTDOggLqdamvLSaAjy0zSztK
IZ2xgLTl1COlB81d9+eMF9P7e9C5dygWJmkUpTHzzQ4/b0Ff7uqAszH68mKmRp64
U9SlIv3J7ZOTEdEIhdrA42puMJByZY+LGCyXd/lIURKyAVAGK/nwp2FkqRyAukKo
okUNX3muDFF+fhe3izPvMrNGMYV4zUPThkuD2ecT88fGhC7nh8rFMAzH9JLqmF3t
X3eCqdH7olET205x6jLSUDJwrS+IM6BsmwD/74i/wHdguwHA7hgARZawuC10fX9m
5ComU5s9CIELuc28wOBpBB2reYlKl1uGUsnKCyr/GYPAtUa4zmPXGyYhlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGeugWqcwKYsxTQSlxyGvvkjwa5WMB8GA1UdIwQY
MBaAFMdzbt65L5N+pFiT6pvPTvg/Ff/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNOdTNya3ZrMzZrV0pQcW04OU8tRDhWXzhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82MWZlMDAtNzNiMy00NWE1LThlZmYt
NjY5NmRhZGI0NWViLzEveDNOdTNya3ZrMzZrV0pQcW04OU8tRDhWXzhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82MWZlMDAtNzNiMy00NWE1LThlZmYtNjY5NmRhZGI0NWVi
LzEveDNOdTNya3ZrMzZrV0pQcW04OU8tRDhWXzhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0NLcXVV
X4uNCKrtzK0Y8o3FJ0JqqorNoTBNFn7FNnnQ2an+sQWBVyMY816gg8PlvyOq84YW
llqHMwBsPLDTfxH0DtCEtGmHLx0iiLeJdxFTiM8O8wrajo7bBfMytsRD5awIEdsb
dqCDSsbVTf8bJp4sqiMkseEY0MSNkeyyMB+mlLaKOFSWPMAMECqxFftwsYatPMiP
jw+RBfMKOOMaNBEU3HJjWIQjrBC7qwIfmzSWnm6ZYdQpJpODr0m/txyhT2zIXwWh
FZdze9LKXcqJHlPjKFcdULcNK1ks0ZTm29cTwjkBuhQBwnx/ZPd2l2+u+RxApl16
/TAOkudUhpYu7w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:51:46 2025 by rpki-client