Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
File: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft (raw, json)
Hash identifier: SZkVgkyQdgoRtB0w5xgwLyUO83/Y9RvxWueUyL2T3+s=
Subject key identifier: A6:5D:28:66:84:6D:E0:52:2E:0A:CA:1E:99:82:67:0D:7F:85:7A:CD
Authority key identifier: DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
Certificate issuer: /CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Certificate serial: 0194BC3C40CA31B642CCF45A954ED3642BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
Manifest number: 0361
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl (hash: iIg+/5Z7hmDuzkPmPGQYKbKYmVgDuXNPkhIOWGUsK0o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:40:ca:31:b6:42:cc:f4:5a:95:4e:d3:64:2b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=a65d2866846de0522e0aca1e9982670d7f857acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2f:87:53:b5:e2:c0:74:9b:4c:36:06:60:83:
7f:37:bc:05:a6:84:e2:93:2c:2b:5a:19:86:85:5f:
c3:d6:cb:d5:e8:db:ee:ce:6f:59:3a:ff:c4:07:f7:
dd:c9:65:08:85:8b:4b:84:d5:cf:4a:37:bb:7e:2c:
d8:b1:d1:29:0a:03:f6:85:77:73:9b:3b:3a:c0:ff:
a4:66:92:e9:cd:ba:41:d2:d6:ea:b4:ac:79:26:4f:
d7:90:58:9d:c2:f9:1a:70:57:fe:06:b1:d2:41:85:
9f:f9:7b:af:37:bb:aa:33:94:f7:eb:f4:43:27:42:
3b:12:90:4d:72:20:d9:3a:49:a5:75:9b:80:e2:c6:
15:8a:e6:38:7d:a0:d5:9c:b3:b7:0f:3b:65:51:7b:
22:bb:55:0c:47:ed:d0:a3:4c:23:6d:18:5f:ff:8d:
3f:88:4a:40:6b:d3:e1:30:bf:88:e4:f1:92:d7:71:
32:2e:7a:47:aa:80:17:be:f4:61:6e:94:bd:1d:18:
39:87:32:ce:a4:74:4e:92:b1:ab:dd:dc:13:b4:0d:
71:45:96:51:13:7f:fa:c2:e5:56:9a:fe:fb:76:42:
d8:ce:6c:47:f4:ad:46:69:98:1a:b7:10:20:1e:04:
00:62:5c:84:37:8f:bd:ec:21:da:af:d5:d0:7f:73:
36:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5D:28:66:84:6D:E0:52:2E:0A:CA:1E:99:82:67:0D:7F:85:7A:CD
X509v3 Authority Key Identifier:
keyid:DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4d:8f:5c:9c:2d:7d:6d:c3:fd:16:6e:70:50:70:a8:0b:e3:
be:14:66:46:0e:77:ce:7f:80:44:e6:e0:a4:2e:1b:4c:8f:87:
53:dc:59:e9:3a:af:65:6b:b3:9f:c4:9c:57:a3:41:8d:c0:3c:
ac:dd:0b:dd:31:ce:5d:59:0a:15:ef:73:f7:a1:3b:a9:a1:28:
c5:79:c0:92:ed:f7:bd:77:fc:71:5a:a9:b2:61:33:53:f3:15:
3a:18:71:4d:0e:07:cd:50:c8:b1:90:78:64:a4:87:ff:e3:64:
96:97:c1:66:eb:11:24:97:3c:3f:f0:37:26:07:f7:31:57:7d:
ec:51:b7:cf:29:d4:45:49:9b:05:cc:12:a2:04:91:ee:31:b3:
2d:57:b5:cd:d8:44:84:37:f2:74:dd:55:5b:a2:04:b9:cd:cb:
67:50:1a:74:10:1b:67:4a:7f:87:86:e4:bc:2c:a5:e8:87:e5:
f8:a8:a6:94:d1:7e:f5:ca:85:d7:65:b8:d9:3c:d5:51:b9:6b:
ac:aa:81:85:d6:65:ca:dc:ee:98:bc:bf:9b:49:f5:97:fb:34:
ff:da:2a:3b:e9:67:b5:12:39:f5:86:3c:1e:27:9f:44:d4:7f:
f1:11:f8:ef:36:e2:e7:bf:64:17:8a:83:63:1d:38:3d:e7:e5:
7e:c7:d5:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PEDKMbZCzPRalU7TZCugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMzY2MzFjYTIwZWM5MmQxOTVjMTZhOGQ3MGE2M2YzNzJl
NTlmMjQwHhcNMjUwMTMxMTIwMDUyWhcNMjUwMjAxMTIwMDUyWjAzMTEwLwYDVQQD
EyhhNjVkMjg2Njg0NmRlMDUyMmUwYWNhMWU5OTgyNjcwZDdmODU3YWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC+HU7XiwHSbTDYGYIN/N7wFpoTi
kywrWhmGhV/D1svV6Nvuzm9ZOv/EB/fdyWUIhYtLhNXPSje7fizYsdEpCgP2hXdz
mzs6wP+kZpLpzbpB0tbqtKx5Jk/XkFidwvkacFf+BrHSQYWf+XuvN7uqM5T36/RD
J0I7EpBNciDZOkmldZuA4sYViuY4faDVnLO3DztlUXsiu1UMR+3Qo0wjbRhf/40/
iEpAa9PhML+I5PGS13EyLnpHqoAXvvRhbpS9HRg5hzLOpHROkrGr3dwTtA1xRZZR
E3/6wuVWmv77dkLYzmxH9K1GaZgatxAgHgQAYlyEN4+97CHar9XQf3M24wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZdKGaEbeBSLgrKHpmCZw1/hXrNMB8GA1UdIwQY
MBaAFNw2YxyiDsktGVwWqNcKY/Ny5Z8kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0RaakhLSU95UzBaWEJhbzF3cGo4M0xsbnlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS80YWMxNjItZTE2ZS00MDZlLWI5ODUt
NWVmNTZmODZhYjgzLzEvM0RaakhLSU95UzBaWEJhbzF3cGo4M0xsbnlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS80YWMxNjItZTE2ZS00MDZlLWI5ODUtNWVmNTZmODZhYjgz
LzEvM0RaakhLSU95UzBaWEJhbzF3cGo4M0xsbnlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATE2PXJwt
fW3D/RZucFBwqAvjvhRmRg53zn+ARObgpC4bTI+HU9xZ6TqvZWuzn8ScV6NBjcA8
rN0L3THOXVkKFe9z96E7qaEoxXnAku33vXf8cVqpsmEzU/MVOhhxTQ4HzVDIsZB4
ZKSH/+NklpfBZusRJJc8P/A3Jgf3MVd97FG3zynURUmbBcwSogSR7jGzLVe1zdhE
hDfydN1VW6IEuc3LZ1AadBAbZ0p/h4bkvCyl6Ifl+KimlNF+9cqF12W42TzVUblr
rKqBhdZlytzumLy/m0n1l/s0/9oqO+lntRI59YY8HiefRNR/8RH47zbi579kF4qD
Yx04PeflfsfVLw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:05:02 2025 by rpki-client