Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
File: CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft (raw, json)
Hash identifier: P7ZDFVZqVKj4PZtavLTlIMyIlI7MP23oJQU3Op+Lyuk=
Subject key identifier: 4D:A3:AA:33:D6:92:46:AA:3C:F1:BE:A3:68:AA:C4:10:B6:BC:FB:1E
Authority key identifier: 09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
Certificate issuer: /CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Certificate serial: 0194BCAA2A3683AFFD989B7E1B8D436BE1EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
Manifest number: 0E65
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl (hash: 5BgJVeOMFbIhWtuJgJpns+/MbLagmgTDQZS145NeKv8=)
2: XmZzj7JcB6jd6mOFVB5P5PDKL5E.roa (hash: 0790uLZ+/UaE4zF4DtLMPcWHd+AL9SLdbKcmlMREbOY=)
3: fRGE3gXQY93KoteIKmDWsv7Pa8E.roa (hash: oBozhLOPrWsT/ybptTbngKdb/+Q5fLnG+R66tlH23uY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2a:36:83:af:fd:98:9b:7e:1b:8d:43:6b:e1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=4da3aa33d69246aa3cf1bea368aac410b6bcfb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:61:b8:d6:18:30:1e:9f:17:65:d6:4d:5e:cd:
13:d0:6c:48:13:69:c4:88:3b:43:ca:fa:08:b4:7d:
e4:34:ce:17:1a:54:33:28:c1:f5:6d:5e:3a:0d:3b:
21:5e:e0:fd:c2:3a:cd:85:90:be:66:3d:15:f9:6b:
95:9d:36:c0:ca:b5:9b:75:94:c5:32:60:07:ea:64:
01:36:c5:fa:26:92:14:7a:ff:64:49:4e:87:5c:f1:
59:8b:86:a8:f7:fc:18:89:91:ee:11:5e:cd:91:8a:
fd:62:ec:dd:60:e3:65:75:b5:36:ec:39:6c:bc:c8:
73:cd:80:e4:58:30:cc:6f:a5:21:94:9b:3a:bb:ff:
7e:84:9e:07:9c:ed:dc:8a:f4:5c:26:1f:28:0c:2a:
ad:f9:9f:c1:6c:e5:82:ad:0e:fb:ac:35:2f:7a:4c:
d1:a8:63:ac:69:16:1c:79:b4:9f:e4:67:22:6c:ba:
36:62:5d:25:2d:dc:16:b8:27:93:6c:5e:4c:de:d5:
88:1e:4c:f7:0a:03:14:fe:ac:2b:96:b1:80:c3:c8:
42:d5:29:44:28:5f:67:50:a2:e4:9c:2e:25:07:8f:
cf:c1:5b:9f:f8:17:87:1b:11:1c:51:51:31:b4:c8:
ce:07:48:9c:65:fc:72:17:26:9b:fb:31:d7:40:99:
60:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A3:AA:33:D6:92:46:AA:3C:F1:BE:A3:68:AA:C4:10:B6:BC:FB:1E
X509v3 Authority Key Identifier:
keyid:09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ce:76:00:1e:60:42:20:84:58:9b:0a:72:36:3e:2d:98:f9:
68:c5:a8:33:38:72:f7:ab:fe:42:a6:2a:87:70:e6:91:6b:01:
1f:3f:bf:2f:16:19:c4:20:4e:49:b4:a7:71:0d:50:71:ac:48:
f2:31:89:67:0f:a1:15:ab:81:0c:7c:d1:60:8a:4a:f4:67:f6:
a0:4a:58:75:cb:f9:02:2e:81:23:24:9d:97:e4:de:3d:1d:ee:
39:17:47:ec:6e:ca:81:4b:f3:da:84:28:67:6a:82:6c:fc:61:
4f:92:13:da:e4:b4:b9:43:d0:ba:76:cf:a6:ea:12:de:40:7f:
c5:50:a9:b1:56:dc:1e:4f:3d:1f:d0:b7:1c:9b:ba:44:19:7f:
53:24:e9:79:1c:5d:4e:74:c6:43:42:fb:85:9f:c9:18:8e:2a:
9e:47:1d:c1:55:bd:b0:77:62:16:df:be:d4:85:1f:66:d7:92:
b5:1f:7e:5d:84:1c:6e:44:b7:3b:e2:8b:44:2a:d4:30:af:17:
6d:aa:f1:d7:a4:c8:37:9e:4a:d4:14:4f:5b:0d:52:7f:9f:7e:
3a:e4:08:d5:ac:e2:ee:4c:ff:1f:3f:d9:ac:5e:3e:6c:aa:08:
db:14:73:06:8b:95:59:f9:27:e4:16:76:50:55:4d:20:0b:68:
55:ca:30:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qio2g6/9mJt+G41Da+HrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NWRmZjFmNmJkODgxM2RlNWZmOWFmMTY3MjQ3Zjc4Yjg4
NDM5YmQwHhcNMjUwMTMxMTQwMDU2WhcNMjUwMjAxMTQwMDU2WjAzMTEwLwYDVQQD
Eyg0ZGEzYWEzM2Q2OTI0NmFhM2NmMWJlYTM2OGFhYzQxMGI2YmNmYjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmG41hgwHp8XZdZNXs0T0GxIE2nE
iDtDyvoItH3kNM4XGlQzKMH1bV46DTshXuD9wjrNhZC+Zj0V+WuVnTbAyrWbdZTF
MmAH6mQBNsX6JpIUev9kSU6HXPFZi4ao9/wYiZHuEV7NkYr9YuzdYONldbU27Dls
vMhzzYDkWDDMb6UhlJs6u/9+hJ4HnO3civRcJh8oDCqt+Z/BbOWCrQ77rDUvekzR
qGOsaRYcebSf5GcibLo2Yl0lLdwWuCeTbF5M3tWIHkz3CgMU/qwrlrGAw8hC1SlE
KF9nUKLknC4lB4/PwVuf+BeHGxEcUVExtMjOB0icZfxyFyab+zHXQJlgEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2jqjPWkkaqPPG+o2iqxBC2vPseMB8GA1UdIwQY
MBaAFAld/x9r2IE95f+a8Wckf3i4hDm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1YzX0gydllnVDNsXzVyeFp5Ul9lTGlFT2IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81ZDAyNzgtMjE2ZS00NzEyLTk0ODct
MTliM2QxNTQ0YzM5LzEvQ1YzX0gydllnVDNsXzVyeFp5Ul9lTGlFT2IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy81ZDAyNzgtMjE2ZS00NzEyLTk0ODctMTliM2QxNTQ0YzM5
LzEvQ1YzX0gydllnVDNsXzVyeFp5Ul9lTGlFT2IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAac52AB5g
QiCEWJsKcjY+LZj5aMWoMzhy96v+QqYqh3DmkWsBHz+/LxYZxCBOSbSncQ1QcaxI
8jGJZw+hFauBDHzRYIpK9Gf2oEpYdcv5Ai6BIySdl+TePR3uORdH7G7KgUvz2oQo
Z2qCbPxhT5IT2uS0uUPQunbPpuoS3kB/xVCpsVbcHk89H9C3HJu6RBl/UyTpeRxd
TnTGQ0L7hZ/JGI4qnkcdwVW9sHdiFt++1IUfZteStR9+XYQcbkS3O+KLRCrUMK8X
barx16TIN55K1BRPWw1Sf59+OuQI1azi7kz/Hz/ZrF4+bKoI2xRzBouVWfkn5BZ2
UFVNIAtoVcowkA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:26 2025 by rpki-client