Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
File: 3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft (raw, json)
Hash identifier: YeZnnimBKr8++TieF8F241e08yH2BgUdNa02darzNV0=
Subject key identifier: E1:DA:3E:79:D7:BB:CB:06:19:CC:3B:59:89:BC:5F:51:5B:7B:D7:C8
Authority key identifier: DD:39:9E:49:41:89:F6:91:A5:ED:64:F3:BE:3A:6A:3B:50:22:50:91
Certificate issuer: /CN=dd399e494189f691a5ed64f3be3a6a3b50225091
Certificate serial: 0194BC73211720CFBAF7C414EA8DFD02CBCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
Manifest number: 0397
Signing time: Fri 31 Jan 2025 13:00:49 +0000
Manifest this update: Fri 31 Jan 2025 13:00:49 +0000
Manifest next update: Sat 01 Feb 2025 13:00:49 +0000
Files and hashes: 1: 3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl (hash: CEpJSgFxWNbaVo6/rI6wLWjYGSJY23ykda8n8QLyw8s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:21:17:20:cf:ba:f7:c4:14:ea:8d:fd:02:cb:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd399e494189f691a5ed64f3be3a6a3b50225091
Validity
Not Before: Jan 31 13:00:49 2025 GMT
Not After : Feb 1 13:00:49 2025 GMT
Subject: CN=e1da3e79d7bbcb0619cc3b5989bc5f515b7bd7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:81:7d:10:a3:e6:a1:6c:5a:4d:bc:0d:00:28:
3d:f2:2e:34:2f:d7:c3:63:a2:0b:6a:dc:76:0c:c8:
9e:af:cc:d4:75:c2:5a:4a:71:82:b6:1a:55:55:50:
2b:1f:83:f0:5b:ab:9f:08:a8:0c:68:10:8a:b5:9b:
e0:86:d0:c6:b3:94:1b:51:03:0e:89:16:b5:84:69:
8d:75:a8:9d:4c:5f:dd:28:72:0b:13:51:3d:01:6f:
11:3f:df:9e:42:d9:2d:3b:1d:4b:d1:11:1e:4a:bf:
38:44:11:7f:7e:d5:98:fd:fd:c0:ab:99:05:e1:b4:
4c:79:a5:ef:cf:02:1f:f8:76:0a:aa:32:00:a1:2b:
5b:c1:bd:7b:66:d5:91:49:93:4d:01:af:c9:13:82:
22:1d:dd:a9:32:9c:47:89:f7:63:60:c0:9b:92:25:
63:f5:6a:ea:f4:28:5c:61:36:47:d3:0d:4a:a7:bd:
94:3c:0c:81:91:a0:96:78:6a:1f:47:29:32:b7:cb:
15:eb:89:b4:36:ea:92:3f:f5:28:9b:5c:14:9d:1a:
6d:1c:66:4e:19:2f:99:9f:8e:32:d8:61:b4:3f:92:
ff:a6:39:6b:c1:06:da:68:9e:3e:f8:d9:26:c2:3f:
a6:e8:9b:7a:b3:0f:81:39:0b:a5:1b:f4:35:61:94:
07:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DA:3E:79:D7:BB:CB:06:19:CC:3B:59:89:BC:5F:51:5B:7B:D7:C8
X509v3 Authority Key Identifier:
keyid:DD:39:9E:49:41:89:F6:91:A5:ED:64:F3:BE:3A:6A:3B:50:22:50:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f6:ef:42:40:3d:29:5b:5c:83:78:39:6f:7d:40:44:4f:69:
00:b8:2e:fa:45:bb:4b:22:86:53:1d:62:1d:87:fa:a4:39:9f:
74:cb:15:fd:e0:cd:50:8a:1d:d4:76:09:bc:34:cc:fe:e9:a9:
db:d1:a7:32:5d:4a:d9:2b:f5:c6:ea:71:c9:52:0d:52:7d:34:
95:e1:a1:26:57:53:7a:c1:36:0b:26:5e:fb:12:bb:1e:36:5e:
3f:2b:02:50:54:97:4f:49:9a:5f:55:ab:69:c5:17:10:41:58:
b8:57:62:01:36:a9:c2:8c:40:38:15:9e:c4:cd:18:ab:e3:56:
1d:6b:b2:24:b9:b4:2d:60:c3:35:89:f6:2f:e4:4f:25:ee:5f:
1f:53:82:19:00:4b:ea:a0:91:26:c5:6c:43:31:f0:52:92:c5:
fc:36:41:d7:fb:44:91:fc:e2:23:3b:f9:3f:37:38:bd:c8:74:
5f:03:ef:08:cf:13:0d:77:d8:eb:ed:e6:0e:bb:d3:15:8e:8e:
e7:6c:8f:63:d8:e4:11:d3:c2:c8:aa:8b:ec:5f:33:3e:8e:f7:
15:86:8b:9d:06:a2:39:dc:35:ce:a9:09:d3:b6:e9:db:90:35:
aa:02:fb:1e:f8:8c:10:ec:f4:cf:df:4f:99:26:8a:44:46:b8:
b6:6e:52:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cyEXIM+698QU6o39AsvKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMzk5ZTQ5NDE4OWY2OTFhNWVkNjRmM2JlM2E2YTNiNTAy
MjUwOTEwHhcNMjUwMTMxMTMwMDQ5WhcNMjUwMjAxMTMwMDQ5WjAzMTEwLwYDVQQD
EyhlMWRhM2U3OWQ3YmJjYjA2MTljYzNiNTk4OWJjNWY1MTViN2JkN2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7oF9EKPmoWxaTbwNACg98i40L9fD
Y6ILatx2DMier8zUdcJaSnGCthpVVVArH4PwW6ufCKgMaBCKtZvghtDGs5QbUQMO
iRa1hGmNdaidTF/dKHILE1E9AW8RP9+eQtktOx1L0REeSr84RBF/ftWY/f3Aq5kF
4bRMeaXvzwIf+HYKqjIAoStbwb17ZtWRSZNNAa/JE4IiHd2pMpxHifdjYMCbkiVj
9Wrq9ChcYTZH0w1Kp72UPAyBkaCWeGofRykyt8sV64m0NuqSP/Uom1wUnRptHGZO
GS+Zn44y2GG0P5L/pjlrwQbaaJ4++Nkmwj+m6Jt6sw+BOQulG/Q1YZQHEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHaPnnXu8sGGcw7WYm8X1Fbe9fIMB8GA1UdIwQY
MBaAFN05nklBifaRpe1k8746ajtQIlCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1RtZVNVR0o5cEdsN1dUenZqcHFPMUFpVUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yN2JhNjgtZjE3OC00OTkxLTk2YTct
NDQyYTAzYjdmMDg0LzEvM1RtZVNVR0o5cEdsN1dUenZqcHFPMUFpVUpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8yN2JhNjgtZjE3OC00OTkxLTk2YTctNDQyYTAzYjdmMDg0
LzEvM1RtZVNVR0o5cEdsN1dUenZqcHFPMUFpVUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvbvQkA9
KVtcg3g5b31ARE9pALgu+kW7SyKGUx1iHYf6pDmfdMsV/eDNUIod1HYJvDTM/ump
29GnMl1K2Sv1xupxyVINUn00leGhJldTesE2CyZe+xK7HjZePysCUFSXT0maX1Wr
acUXEEFYuFdiATapwoxAOBWexM0Yq+NWHWuyJLm0LWDDNYn2L+RPJe5fH1OCGQBL
6qCRJsVsQzHwUpLF/DZB1/tEkfziIzv5Pzc4vch0XwPvCM8TDXfY6+3mDrvTFY6O
52yPY9jkEdPCyKqL7F8zPo73FYaLnQaiOdw1zqkJ07bp25A1qgL7HviMEOz0z99P
mSaKREa4tm5S3w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:07:19 2025 by rpki-client