Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
File: 3BCJyUK2gDNoO03VBsDDb3S-DqM.mft (raw, json)
Hash identifier: AwaHG8zvK+MVo9qePoVew7DIq4nqF4X0JpK4nOHXEGY=
Subject key identifier: 2C:3F:D4:60:94:94:1E:39:20:39:BD:3C:3C:3F:40:58:3A:63:73:7B
Authority key identifier: DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
Certificate issuer: /CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Certificate serial: 0194BCA993FD8E6C8DBD9372D5521545DD7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:17 +0000
Manifest this update: Fri 31 Jan 2025 14:00:17 +0000
Manifest next update: Sat 01 Feb 2025 14:00:17 +0000
Files and hashes: 1: 3BCJyUK2gDNoO03VBsDDb3S-DqM.crl (hash: 10gitJParyDVBDO+pkNjTPlBDDzXI9YSVol9sIkRJik=)
2: 57HaC7393494-Kydk1JdAp5sP5I.roa (hash: MC5zLYnL7jsECqxeDtP30qM0sWScy6N43eUhfx207aw=)
3: m5gUSNnJ2hKaiWTW0ODmWqqDw-s.roa (hash: EE2S7AYIPyyJZqEsdRi77q99LaNKBqMzcLpUq4bS+A8=)
4: nX1l9uEaP3hKft0f6nr66330FaY.roa (hash: Ify3evSlWibc6XFuSTIlXp6BEPgQD/cUtILAv8sgqKU=)
5: rYOTmI6zBWy0_qXug-7vEbI5-NE.roa (hash: WCnXAEMnH2mCY9gWHiuKlZ1HO6eQUoArgriFfc+fAVo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:93:fd:8e:6c:8d:bd:93:72:d5:52:15:45:dd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Validity
Not Before: Jan 31 14:00:17 2025 GMT
Not After : Feb 1 14:00:17 2025 GMT
Subject: CN=2c3fd46094941e392039bd3c3c3f40583a63737b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d2:bc:7b:23:3a:85:fd:67:6b:45:1b:db:b5:
93:c4:ca:4b:81:44:35:a4:39:67:7c:83:95:5b:ee:
de:1b:da:95:4c:74:5a:98:31:78:5e:24:03:55:6b:
a9:14:7f:60:d5:65:f7:4c:20:5a:e0:97:9d:ae:fc:
d8:50:ed:00:e1:be:89:94:6d:00:dc:5c:f1:61:89:
80:29:57:86:57:1d:6c:8f:00:01:75:29:4c:2c:24:
c2:79:e7:77:a0:a6:1f:6c:40:3d:71:81:73:07:59:
bd:23:30:5f:42:42:a1:ad:56:33:b5:16:78:9b:03:
94:29:15:4d:c4:95:96:03:b9:45:6b:aa:e8:2e:0d:
c7:2a:ed:ed:8e:8d:a9:cc:7d:1b:76:37:83:23:0e:
df:cb:8f:37:ab:5b:dc:2b:3b:07:19:66:81:7a:03:
27:23:32:51:3d:e4:1b:2c:c4:34:33:53:74:e9:b8:
4d:fa:2f:a6:68:cb:a3:f7:94:5c:1f:ff:b9:77:bd:
5d:52:95:4f:ca:a7:ee:ac:56:b5:98:39:56:3b:8d:
78:b7:95:5a:d0:22:e1:cf:91:02:cd:8f:8a:82:3c:
5f:3f:0c:f2:a4:48:76:cb:ad:86:3c:aa:23:7a:00:
48:d8:7f:bc:dc:fb:ad:0b:cf:2e:cd:48:d4:83:39:
f1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3F:D4:60:94:94:1E:39:20:39:BD:3C:3C:3F:40:58:3A:63:73:7B
X509v3 Authority Key Identifier:
keyid:DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:72:ee:49:ff:52:cc:41:bf:d7:6e:b9:20:81:45:a2:02:63:
43:19:da:22:ea:06:f1:a1:87:5f:5c:d6:55:16:2b:bc:de:ce:
d2:f1:26:b2:5e:af:ba:d1:c1:e6:91:09:65:52:e3:19:f6:d7:
b3:3a:92:d9:d5:85:fb:0f:e6:b0:ab:90:d9:f7:2f:f0:4a:6e:
77:66:fd:2b:52:78:07:40:2b:7c:8a:0b:cb:92:31:c7:5c:12:
66:01:e8:91:a8:4f:a1:b8:e1:31:0c:c1:1a:fd:f7:4c:76:e2:
9f:18:aa:b0:cc:f7:44:50:7d:82:90:3d:f4:a9:f8:47:63:73:
8b:a7:fa:c1:29:24:5e:9b:c8:5e:db:52:51:f8:c3:87:8b:91:
f5:00:04:e1:9d:8b:46:ba:82:9d:81:36:f8:27:b9:43:f2:fc:
c2:21:fd:e2:8e:5a:23:61:86:c5:d7:b8:0a:ab:e0:b6:e0:9f:
c5:67:a2:d8:63:48:04:4a:2e:14:26:4c:c0:9a:92:9b:16:80:
f0:96:46:c9:82:3e:04:59:f1:9c:2d:53:87:62:e8:04:ba:1d:
60:18:e8:ff:ce:50:9a:76:f7:dd:6e:88:76:a3:1b:7b:7d:2f:
de:23:9e:07:c2:38:3c:98:be:8c:44:00:35:de:4a:10:25:b9:
56:49:99:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qZP9jmyNvZNy1VIVRd18MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTA4OWM5NDJiNjgwMzM2ODNiNGRkNTA2YzBjMzZmNzRi
ZTBlYTMwHhcNMjUwMTMxMTQwMDE3WhcNMjUwMjAxMTQwMDE3WjAzMTEwLwYDVQQD
EygyYzNmZDQ2MDk0OTQxZTM5MjAzOWJkM2MzYzNmNDA1ODNhNjM3MzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNK8eyM6hf1na0Ub27WTxMpLgUQ1
pDlnfIOVW+7eG9qVTHRamDF4XiQDVWupFH9g1WX3TCBa4JedrvzYUO0A4b6JlG0A
3FzxYYmAKVeGVx1sjwABdSlMLCTCeed3oKYfbEA9cYFzB1m9IzBfQkKhrVYztRZ4
mwOUKRVNxJWWA7lFa6roLg3HKu3tjo2pzH0bdjeDIw7fy483q1vcKzsHGWaBegMn
IzJRPeQbLMQ0M1N06bhN+i+maMuj95RcH/+5d71dUpVPyqfurFa1mDlWO414t5Va
0CLhz5ECzY+KgjxfPwzypEh2y62GPKojegBI2H+83PutC88uzUjUgznxmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCw/1GCUlB45IDm9PDw/QFg6Y3N7MB8GA1UdIwQY
MBaAFNwQiclCtoAzaDtN1QbAw290vg6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JDSnlVSzJnRE5vTzAzVkJzRERiM1MtRHFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8yNDE0OWQtZDExNS00MzMwLWJkNDkt
Y2I1NmVkM2VhN2ZhLzEvM0JDSnlVSzJnRE5vTzAzVkJzRERiM1MtRHFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8yNDE0OWQtZDExNS00MzMwLWJkNDktY2I1NmVkM2VhN2Zh
LzEvM0JDSnlVSzJnRE5vTzAzVkJzRERiM1MtRHFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXLuSf9S
zEG/1265IIFFogJjQxnaIuoG8aGHX1zWVRYrvN7O0vEmsl6vutHB5pEJZVLjGfbX
szqS2dWF+w/msKuQ2fcv8Epud2b9K1J4B0ArfIoLy5Ixx1wSZgHokahPobjhMQzB
Gv33THbinxiqsMz3RFB9gpA99Kn4R2Nzi6f6wSkkXpvIXttSUfjDh4uR9QAE4Z2L
RrqCnYE2+Ce5Q/L8wiH94o5aI2GGxde4CqvgtuCfxWei2GNIBEouFCZMwJqSmxaA
8JZGyYI+BFnxnC1Th2LoBLodYBjo/85Qmnb33W6IdqMbe30v3iOeB8I4PJi+jEQA
Nd5KECW5VkmZmw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:05 2025 by rpki-client