Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
File: 3f2U67jLmKHb31C9zWncwpFEiJ4.mft (raw, json)
Hash identifier: D/q80B910Nklw1/wVLhpX49TSz+0R6NWHLor9SuSxbc=
Subject key identifier: D4:C5:1A:41:66:F0:09:DF:10:09:EF:AC:57:BF:40:B0:78:BC:50:02
Authority key identifier: DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E
Certificate issuer: /CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
Certificate serial: 0194BCE0C1DFA75141346E75C3EA858807F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
Manifest number: 0B11
Signing time: Fri 31 Jan 2025 15:00:33 +0000
Manifest this update: Fri 31 Jan 2025 15:00:33 +0000
Manifest next update: Sat 01 Feb 2025 15:00:33 +0000
Files and hashes: 1: 3f2U67jLmKHb31C9zWncwpFEiJ4.crl (hash: GUGlkhLvB2qzOZYDYnbRoneca2h3p/FdAMx+lCJKPzk=)
2: yOI7tiSRDXgdskD_bs5AhIY61n8.roa (hash: jCxGB8CWsOl2EvkB0hTjOgeBy34atnE5kB7r6h+CCmI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c1:df:a7:51:41:34:6e:75:c3:ea:85:88:07:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
Validity
Not Before: Jan 31 15:00:33 2025 GMT
Not After : Feb 1 15:00:33 2025 GMT
Subject: CN=d4c51a4166f009df1009efac57bf40b078bc5002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:29:2c:b9:53:a8:b7:39:bb:9d:65:db:97:5e:
5d:27:31:af:09:93:ce:31:c9:f6:2c:ca:e6:63:be:
df:df:e5:6f:3e:d7:83:22:cf:21:ff:fd:b7:96:58:
57:25:de:b7:75:70:81:73:8a:29:65:fe:24:04:e5:
73:72:75:85:25:12:0f:7f:9e:fc:ad:c3:8c:8b:30:
89:2a:3f:2e:ac:db:a4:0e:92:99:1a:27:24:3c:27:
bb:68:58:bf:31:0e:56:17:5c:4e:5c:1d:08:76:20:
b7:16:96:2f:fe:6d:b9:32:5b:dc:7a:50:fe:05:ce:
4b:27:30:34:c3:3d:c6:ff:85:33:72:2e:bd:43:11:
09:1f:1b:83:e4:48:1f:cf:06:85:1a:6e:34:df:d2:
fd:24:57:c5:ca:39:c9:2c:61:be:b9:99:e8:f4:e8:
ed:82:29:48:12:e4:bf:50:06:7d:7e:22:22:ea:a5:
03:f2:2d:9b:d7:71:c3:ef:ca:90:ba:cd:b6:08:9d:
26:23:35:aa:3b:78:48:99:ec:04:f5:4d:64:b5:d7:
9e:b1:24:d3:e3:7c:b1:59:ca:90:8b:1b:24:5a:04:
ac:28:ca:9b:f0:7e:ae:81:5f:4c:13:44:f2:cc:fb:
08:4e:44:47:1b:8e:31:1a:85:50:15:c6:a4:9c:f7:
54:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C5:1A:41:66:F0:09:DF:10:09:EF:AC:57:BF:40:B0:78:BC:50:02
X509v3 Authority Key Identifier:
keyid:DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:05:e2:39:a9:20:e5:81:3a:de:88:e7:17:40:ac:ca:9d:d0:
61:7a:09:86:9d:3e:dd:7c:24:2d:a0:24:2f:79:a4:5b:4a:1a:
91:29:55:74:de:5a:cb:7e:8e:19:38:db:b8:3e:7e:e8:61:34:
6f:6d:01:41:af:5d:b3:08:08:88:96:68:26:32:8a:61:01:15:
1c:48:d4:ed:36:5e:cf:f9:44:79:32:7b:66:61:c2:59:56:3e:
d1:e5:bf:9d:41:da:f0:d9:c4:b5:0e:08:4c:78:0e:0b:d2:c3:
8b:e4:2e:b7:9e:67:d9:8c:ab:25:1f:de:a5:21:5b:66:89:c8:
d3:bf:03:e6:34:02:30:fb:55:2d:2c:9f:85:34:24:cd:fa:98:
df:5e:67:47:87:8c:76:93:74:ae:dd:00:ec:70:e2:23:34:9b:
5c:e9:2b:a1:83:18:b8:19:3e:9d:57:a8:32:87:63:cd:e4:0f:
b7:42:80:2f:df:7f:a4:27:af:2e:62:2e:23:21:5e:9f:8f:bc:
8c:ec:f5:6b:b9:21:b1:4e:30:07:63:46:4c:40:d0:b7:e1:49:
2c:75:b5:c2:fc:5c:b7:80:a1:eb:74:d1:1d:dc:49:70:f5:42:
67:a2:ca:8f:56:2f:6c:39:c8:10:b9:d1:49:d8:38:0d:7c:9c:
09:f8:65:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84MHfp1FBNG51w+qFiAf2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZmQ5NGViYjhjYjk4YTFkYmRmNTBiZGNkNjlkY2MyOTE0
NDg4OWUwHhcNMjUwMTMxMTUwMDMzWhcNMjUwMjAxMTUwMDMzWjAzMTEwLwYDVQQD
EyhkNGM1MWE0MTY2ZjAwOWRmMTAwOWVmYWM1N2JmNDBiMDc4YmM1MDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySksuVOotzm7nWXbl15dJzGvCZPO
Mcn2LMrmY77f3+VvPteDIs8h//23llhXJd63dXCBc4opZf4kBOVzcnWFJRIPf578
rcOMizCJKj8urNukDpKZGickPCe7aFi/MQ5WF1xOXB0IdiC3FpYv/m25MlvcelD+
Bc5LJzA0wz3G/4Uzci69QxEJHxuD5EgfzwaFGm4039L9JFfFyjnJLGG+uZno9Ojt
gilIEuS/UAZ9fiIi6qUD8i2b13HD78qQus22CJ0mIzWqO3hImewE9U1ktdeesSTT
43yxWcqQixskWgSsKMqb8H6ugV9ME0TyzPsITkRHG44xGoVQFcaknPdUdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTFGkFm8AnfEAnvrFe/QLB4vFACMB8GA1UdIwQY
MBaAFN39lOu4y5ih299Qvc1p3MKRRIieMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2YyVTY3akxtS0hiMzFDOXpXbmN3cEZFaUo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9hNmY1MDYtNjk0OC00Y2VmLTg1NDgt
YzkzYzFlZTg5OGJlLzEvM2YyVTY3akxtS0hiMzFDOXpXbmN3cEZFaUo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9hNmY1MDYtNjk0OC00Y2VmLTg1NDgtYzkzYzFlZTg5OGJl
LzEvM2YyVTY3akxtS0hiMzFDOXpXbmN3cEZFaUo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALAXiOakg
5YE63ojnF0Csyp3QYXoJhp0+3XwkLaAkL3mkW0oakSlVdN5ay36OGTjbuD5+6GE0
b20BQa9dswgIiJZoJjKKYQEVHEjU7TZez/lEeTJ7ZmHCWVY+0eW/nUHa8NnEtQ4I
THgOC9LDi+Qut55n2YyrJR/epSFbZonI078D5jQCMPtVLSyfhTQkzfqY315nR4eM
dpN0rt0A7HDiIzSbXOkroYMYuBk+nVeoModjzeQPt0KAL99/pCevLmIuIyFen4+8
jOz1a7khsU4wB2NGTEDQt+FJLHW1wvxct4Ch63TRHdxJcPVCZ6LKj1YvbDnIELnR
Sdg4DXycCfhlwg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:17 2025 by rpki-client