Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
File: r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft (raw, json)
Hash identifier: u6EwF6XkjJIehMmaEH59vAD4unfLEkGIoDAdLzf0c8A=
Subject key identifier: 68:E1:6C:D9:8B:9A:40:59:92:31:3F:73:D4:BF:C3:B2:89:D3:FE:BB
Authority key identifier: AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
Certificate issuer: /CN=af782dae3d40caf2223262541c4054e62945d933
Certificate serial: 0194BD85346B9087CD5B2ACB2CEB163DAD6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:10 +0000
Manifest this update: Fri 31 Jan 2025 18:00:10 +0000
Manifest next update: Sat 01 Feb 2025 18:00:10 +0000
Files and hashes: 1: r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl (hash: Y+ovyKwo/WS7iYW/ls/Kr32x57b7/zN7p4YvAOj3JcM=)
2: zwiEAg55TtHyIaM_PRVFnX4DSAo.roa (hash: ylKaMThBpY1ZvZheIftHUUCXqnEHukLo3wFRWG0DpZk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:34:6b:90:87:cd:5b:2a:cb:2c:eb:16:3d:ad:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af782dae3d40caf2223262541c4054e62945d933
Validity
Not Before: Jan 31 18:00:10 2025 GMT
Not After : Feb 1 18:00:10 2025 GMT
Subject: CN=68e16cd98b9a405992313f73d4bfc3b289d3febb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:c8:b0:4b:e8:fb:e5:63:5c:2b:fd:8c:6e:
b7:d1:1b:d0:8a:51:8f:86:85:63:31:cc:56:17:0a:
b4:2e:2d:18:7e:1e:bb:9d:f9:90:fe:5e:bd:9e:6a:
60:d6:cd:9c:78:a4:31:da:38:23:d6:f3:03:f5:35:
a9:6a:73:83:5d:df:92:b8:50:8f:8f:13:95:54:54:
4d:8b:20:c8:91:9d:b8:0c:63:33:8b:a4:80:62:11:
c7:b6:ce:f7:f5:94:cd:4f:6e:ef:78:a8:58:fa:16:
e3:5a:94:a4:21:ac:84:db:d6:45:14:5d:91:d4:cb:
01:77:fb:84:19:1e:dc:08:73:41:61:94:de:79:c8:
37:70:bc:c2:88:ac:0b:d9:8f:b7:26:ec:d4:92:c9:
f4:90:ac:4c:e8:e8:1f:d5:05:82:9b:38:26:5b:52:
31:39:df:1e:94:10:f4:5c:5b:a6:94:d4:86:5e:87:
2b:b5:f1:34:35:ed:57:d2:5a:99:a4:82:8d:93:b0:
f0:56:a8:5c:51:75:33:1a:fd:74:3a:3e:89:df:88:
42:eb:d9:6b:c7:67:0c:b7:48:a3:9d:0a:ee:e9:94:
d8:36:93:4e:7b:9a:1d:fd:1a:15:8d:9a:c4:ea:bc:
c9:2d:29:d2:46:a0:8e:2c:4a:11:8e:77:b8:68:78:
6e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E1:6C:D9:8B:9A:40:59:92:31:3F:73:D4:BF:C3:B2:89:D3:FE:BB
X509v3 Authority Key Identifier:
keyid:AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b4:81:8f:13:a4:81:26:ef:a4:08:e3:bf:03:f7:4c:5b:81:
92:72:e6:86:e8:68:40:90:8c:88:ac:33:1d:d8:ba:78:69:fc:
d3:e6:81:59:2b:18:01:76:bd:6b:f7:c9:a3:07:bf:3e:a1:81:
6c:16:94:47:ef:20:56:49:9d:70:12:f2:c2:35:73:02:ef:d5:
d3:1e:37:62:9f:8e:7d:cd:75:b2:70:15:d4:30:8c:af:e4:69:
41:6b:e2:19:dd:ae:bd:87:e4:e3:73:5d:01:38:dc:46:28:0a:
3f:42:fa:92:0c:c9:7f:e6:86:99:7d:23:fd:95:19:63:4d:db:
c6:d5:37:73:5b:ca:7f:6c:0a:08:50:86:f7:6a:8c:7f:78:92:
60:f1:a3:f5:3e:67:3f:cb:54:52:7e:f3:a4:25:5f:ad:43:68:
5f:69:8d:ab:8e:b8:dc:97:8b:29:a4:13:43:ee:ef:59:f1:b4:
8b:6e:4c:9c:80:07:89:0c:67:8b:31:6a:f5:9a:77:88:dc:20:
fe:b1:53:31:ff:3c:a4:01:37:99:08:a4:c1:e4:dd:ff:5a:24:
2f:ba:cc:98:79:a6:a7:60:a4:a8:52:df:c9:49:9f:c8:4f:5f:
66:85:a4:26:d2:3c:69:20:a9:15:45:22:dc:1e:8f:78:4b:c6:
4c:71:d4:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hTRrkIfNWyrLLOsWPa1uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNzgyZGFlM2Q0MGNhZjIyMjMyNjI1NDFjNDA1NGU2Mjk0
NWQ5MzMwHhcNMjUwMTMxMTgwMDEwWhcNMjUwMjAxMTgwMDEwWjAzMTEwLwYDVQQD
Eyg2OGUxNmNkOThiOWE0MDU5OTIzMTNmNzNkNGJmYzNiMjg5ZDNmZWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjPIsEvo++VjXCv9jG630RvQilGP
hoVjMcxWFwq0Li0Yfh67nfmQ/l69nmpg1s2ceKQx2jgj1vMD9TWpanODXd+SuFCP
jxOVVFRNiyDIkZ24DGMzi6SAYhHHts739ZTNT27veKhY+hbjWpSkIayE29ZFFF2R
1MsBd/uEGR7cCHNBYZTeecg3cLzCiKwL2Y+3JuzUksn0kKxM6Ogf1QWCmzgmW1Ix
Od8elBD0XFumlNSGXocrtfE0Ne1X0lqZpIKNk7DwVqhcUXUzGv10Oj6J34hC69lr
x2cMt0ijnQru6ZTYNpNOe5od/RoVjZrE6rzJLSnSRqCOLEoRjne4aHhuXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjhbNmLmkBZkjE/c9S/w7KJ0/67MB8GA1UdIwQY
MBaAFK94La49QMryIjJiVBxAVOYpRdkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjNndHJqMUF5dklpTW1KVUhFQlU1aWxGMlRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kZWU4MzMtZmU1Yi00YzEwLWJiZWMt
ZjAxMjVkMDJlMjYyLzEvcjNndHJqMUF5dklpTW1KVUhFQlU1aWxGMlRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9kZWU4MzMtZmU1Yi00YzEwLWJiZWMtZjAxMjVkMDJlMjYy
LzEvcjNndHJqMUF5dklpTW1KVUhFQlU1aWxGMlRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApLSBjxOk
gSbvpAjjvwP3TFuBknLmhuhoQJCMiKwzHdi6eGn80+aBWSsYAXa9a/fJowe/PqGB
bBaUR+8gVkmdcBLywjVzAu/V0x43Yp+Ofc11snAV1DCMr+RpQWviGd2uvYfk43Nd
ATjcRigKP0L6kgzJf+aGmX0j/ZUZY03bxtU3c1vKf2wKCFCG92qMf3iSYPGj9T5n
P8tUUn7zpCVfrUNoX2mNq4643JeLKaQTQ+7vWfG0i25MnIAHiQxnizFq9Zp3iNwg
/rFTMf88pAE3mQikweTd/1okL7rMmHmmp2CkqFLfyUmfyE9fZoWkJtI8aSCpFUUi
3B6PeEvGTHHUBA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:09 2025 by rpki-client