Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
File: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft (raw, json)
Hash identifier: E7B99ctNO7H7eySZGBk6P8mpsebtz+HL5lBvdriKRZc=
Subject key identifier: 8C:0F:3E:E1:E0:42:1E:98:4B:FF:EB:5F:7D:8D:A5:FC:79:55:13:A0
Authority key identifier: DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
Certificate issuer: /CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Certificate serial: 0194BC050699A335A5C43CC9A4C6273247A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
Manifest number: 0F6D
Signing time: Fri 31 Jan 2025 11:00:33 +0000
Manifest this update: Fri 31 Jan 2025 11:00:33 +0000
Manifest next update: Sat 01 Feb 2025 11:00:33 +0000
Files and hashes: 1: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl (hash: qt7LD5N5U/QEk4KpL6ymnqRL2VwsEoDCmuqEbdKGCcc=)
2: bJ6OkDBz35azmUeGZSSY8SRMI4Y.roa (hash: y21BnaoaGpgbQvC0jOtfGrk+wq3H1xWVUYMR7XJq8OU=)
3: zDL_THkFuQHLJwbg-SI_E4lpZ3A.roa (hash: krJTySa4xAIWcd+RLsqPBRipwsimqCaZxlGeTrQ72GM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:06:99:a3:35:a5:c4:3c:c9:a4:c6:27:32:47:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Validity
Not Before: Jan 31 11:00:33 2025 GMT
Not After : Feb 1 11:00:33 2025 GMT
Subject: CN=8c0f3ee1e0421e984bffeb5f7d8da5fc795513a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:97:cc:0b:25:57:5f:df:61:f1:16:c7:0c:74:
da:62:31:3b:a3:8a:93:a7:a1:ac:f0:8f:ac:3f:93:
62:cb:ee:fe:f1:64:a1:ac:b1:9c:b2:8e:84:23:13:
5e:ba:da:2b:9a:04:5f:05:d1:75:6a:0c:ae:6b:1a:
11:97:99:dd:d3:cd:76:c2:40:c0:93:0a:2d:b1:ce:
c9:ed:b6:5a:b8:e6:ca:46:65:46:9f:59:c2:dc:f5:
d3:db:46:b6:21:f5:bd:bc:0f:c1:4c:eb:9f:71:e4:
b6:96:f0:f1:6a:86:01:a7:f1:56:80:d0:d0:ab:ad:
c4:82:2b:5d:0c:27:c2:69:10:b5:ed:ba:8f:8a:d2:
13:d0:ac:9a:c5:ce:c3:90:56:9d:9a:59:94:51:5b:
14:21:f2:b9:26:fb:ba:39:90:f9:75:0e:a7:f8:5f:
4c:ce:dc:e3:68:cd:74:e8:5c:63:ec:65:7e:71:8d:
a4:fa:f6:d9:21:e0:02:7b:a1:c7:0a:b9:5e:f4:6a:
d1:71:da:88:8b:18:18:3d:f4:ee:d3:aa:71:16:f4:
1d:60:55:ef:ad:24:90:92:00:5b:3e:b3:10:91:9c:
b7:42:c4:f5:7b:6f:1d:97:c6:f7:fb:46:09:91:25:
66:98:9e:8e:35:39:c3:6d:92:1c:18:67:bf:13:31:
4d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0F:3E:E1:E0:42:1E:98:4B:FF:EB:5F:7D:8D:A5:FC:79:55:13:A0
X509v3 Authority Key Identifier:
keyid:DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a9:b5:68:04:09:28:ab:3c:29:f0:87:49:bd:f1:1a:87:b5:
08:52:76:3c:30:f2:43:4e:59:3b:8e:ad:13:c6:68:d8:b6:e0:
fa:09:71:ea:f4:c8:9c:44:1c:b5:18:f7:52:c9:c0:38:18:2e:
0a:2a:0d:34:a2:23:4d:5e:3b:d7:35:3e:3b:70:92:bc:fc:08:
1e:a0:cf:f9:d7:43:fe:31:b1:ac:2f:18:0b:da:d7:0d:81:45:
b6:a1:9b:ab:39:0b:cd:17:92:02:4e:07:7f:82:91:d4:eb:a8:
b5:42:0a:34:e5:0f:99:e4:89:bb:68:43:34:a7:6f:f1:fe:11:
1a:f7:bd:96:cf:15:aa:2e:08:f2:6b:71:2e:3f:5e:62:17:dd:
38:3c:7d:dc:57:d0:91:c5:92:52:c6:58:76:c4:c1:49:56:2d:
10:b3:15:db:8a:63:a3:c4:5e:c7:da:24:3a:5f:31:bd:1e:54:
1d:bb:f8:28:4a:47:01:11:d7:56:4c:05:70:f7:47:43:cb:8a:
ba:3c:48:4b:98:44:20:af:de:b0:ad:eb:b1:8f:8a:94:08:a5:
2c:a8:f0:9d:18:f4:be:77:fe:19:2c:9a:35:4d:50:12:2d:91:
9a:f0:d7:f6:34:15:8c:0f:bb:2d:b2:dc:38:7a:88:c7:ee:cc:
42:30:3e:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BQaZozWlxDzJpMYnMkemMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNzI1YzRkMDk1M2U3ZWNmNDZmMzdlMTRmY2ExNGZkMDlh
MTJkMTYwHhcNMjUwMTMxMTEwMDMzWhcNMjUwMjAxMTEwMDMzWjAzMTEwLwYDVQQD
Eyg4YzBmM2VlMWUwNDIxZTk4NGJmZmViNWY3ZDhkYTVmYzc5NTUxM2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65fMCyVXX99h8RbHDHTaYjE7o4qT
p6Gs8I+sP5Niy+7+8WShrLGcso6EIxNeutormgRfBdF1agyuaxoRl5nd0812wkDA
kwotsc7J7bZauObKRmVGn1nC3PXT20a2IfW9vA/BTOufceS2lvDxaoYBp/FWgNDQ
q63EgitdDCfCaRC17bqPitIT0Kyaxc7DkFadmlmUUVsUIfK5Jvu6OZD5dQ6n+F9M
ztzjaM106Fxj7GV+cY2k+vbZIeACe6HHCrle9GrRcdqIixgYPfTu06pxFvQdYFXv
rSSQkgBbPrMQkZy3QsT1e28dl8b3+0YJkSVmmJ6ONTnDbZIcGGe/EzFNpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwPPuHgQh6YS//rX32Npfx5VROgMB8GA1UdIwQY
MBaAFN1yXE0JU+fs9G834U/KFP0JoS0WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1hKY1RRbFQ1LXowYnpmaFQ4b1VfUW1oTFJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hYWE2ZTMtZjA1NC00OGU3LTgyNDYt
OGYyMGNiNzM0NDg4LzEvM1hKY1RRbFQ1LXowYnpmaFQ4b1VfUW1oTFJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9hYWE2ZTMtZjA1NC00OGU3LTgyNDYtOGYyMGNiNzM0NDg4
LzEvM1hKY1RRbFQ1LXowYnpmaFQ4b1VfUW1oTFJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6m1aAQJ
KKs8KfCHSb3xGoe1CFJ2PDDyQ05ZO46tE8Zo2Lbg+glx6vTInEQctRj3UsnAOBgu
CioNNKIjTV471zU+O3CSvPwIHqDP+ddD/jGxrC8YC9rXDYFFtqGbqzkLzReSAk4H
f4KR1OuotUIKNOUPmeSJu2hDNKdv8f4RGve9ls8Vqi4I8mtxLj9eYhfdODx93FfQ
kcWSUsZYdsTBSVYtELMV24pjo8Rex9okOl8xvR5UHbv4KEpHARHXVkwFcPdHQ8uK
ujxIS5hEIK/esK3rsY+KlAilLKjwnRj0vnf+GSyaNU1QEi2RmvDX9jQVjA+7LbLc
OHqIx+7MQjA+2g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:42 2025 by rpki-client