Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
File: 3SppXEEiHdjt3PxcS1zAt4nLlTs.mft (raw, json)
Hash identifier: V2dAKtrx2SmVY3mADDzUfgMh0QKyPQ7V9SjqnDCbkfY=
Subject key identifier: 5C:40:00:06:98:E7:97:B6:E7:4A:C2:1E:72:D3:B6:E2:3F:3E:8F:A2
Authority key identifier: DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
Certificate issuer: /CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Certificate serial: 0194BCE0E17AA65EE2C1E98E17FAF6128ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: 3SppXEEiHdjt3PxcS1zAt4nLlTs.crl (hash: wnFxOHHNhDfYkpgiH+lJBdcXCNLsKe7k84/+C7fm8n8=)
2: ZxKbEdzKxauu7o-Y7eoipbP5kS0.roa (hash: bVgUBiwiMttSarotQ+bYBGzvg0m/rWkM8yb5LV2CZwA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e1:7a:a6:5e:e2:c1:e9:8e:17:fa:f6:12:8e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=5c40000698e797b6e74ac21e72d3b6e23f3e8fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:af:8f:48:46:b9:81:1b:bb:e8:09:14:97:c2:
1f:1a:44:8a:d3:01:78:d0:19:ab:e0:90:48:9d:2f:
05:09:87:be:d3:09:a5:da:9b:21:62:e6:b6:46:f7:
97:7b:37:e5:af:3f:63:b8:2c:11:49:94:cc:e9:a6:
dc:2d:16:86:4c:e0:5d:8e:1f:61:56:9f:ea:31:34:
da:f0:44:d7:50:12:58:58:0c:7e:31:0b:a2:db:18:
52:fe:86:3a:9f:28:14:94:8e:cd:6e:21:7c:f6:bf:
67:bb:af:8f:f5:69:db:de:7a:ac:d6:80:1e:b8:d1:
24:89:9a:e8:3d:6f:fc:ba:71:b2:d9:2a:46:31:cd:
c0:d7:98:ff:89:a3:3b:74:ca:b8:2e:f4:9c:ec:4a:
08:19:29:5c:6e:a7:95:5d:bc:5b:14:fd:23:1b:8a:
96:5f:06:82:4f:57:c7:bf:00:95:6f:69:81:b8:4e:
f0:5f:a8:e4:a8:40:46:52:44:40:2a:65:f0:60:e0:
81:6b:cc:40:b8:68:eb:4f:1a:53:6c:75:0f:31:56:
51:65:cf:9f:80:ac:88:b2:20:05:43:e8:5c:1e:6d:
77:b6:05:f8:51:4a:2f:70:a3:a6:30:7e:d0:2e:5b:
ca:1f:2f:9a:bb:08:0f:ad:d3:f7:c1:0d:82:43:2b:
a5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:40:00:06:98:E7:97:B6:E7:4A:C2:1E:72:D3:B6:E2:3F:3E:8F:A2
X509v3 Authority Key Identifier:
keyid:DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:66:d1:14:a3:74:09:9a:58:c2:4a:9d:00:01:26:ad:03:e7:
a6:ca:85:4c:cb:77:1a:9f:95:be:4d:ec:60:a1:dc:ed:8e:86:
27:aa:d4:63:66:17:89:77:78:d9:56:19:30:d3:69:3c:fd:4f:
8c:4a:78:23:d9:69:16:58:91:89:7b:d3:26:c5:93:55:b5:32:
45:63:5d:75:72:fb:35:09:2e:d2:49:ba:e5:fd:02:52:90:97:
86:f3:e2:d2:da:4d:94:93:2f:99:13:25:d2:67:b6:83:65:42:
92:7a:3c:b5:5f:40:f4:1f:0c:70:73:55:c5:21:1b:62:96:32:
59:a0:38:c3:87:b2:a0:f7:df:34:d1:ea:93:00:22:e9:4c:01:
d0:cb:34:e3:6a:55:ef:bd:cb:73:7f:f5:0d:56:5c:8a:83:46:
28:d1:46:a1:71:dd:4c:ec:79:01:01:c2:2d:d5:21:2d:10:2f:
d6:52:a0:87:c9:96:07:ac:d9:56:cd:89:a3:e0:ef:e4:32:66:
eb:3f:34:47:70:45:a9:25:32:95:04:ac:b9:89:c2:24:a4:62:
bb:fa:20:5d:e1:af:1f:68:a1:24:76:52:90:61:7b:f4:0e:11:
f9:bf:ae:1f:f5:0b:86:74:d3:3b:e7:be:30:6b:04:38:05:aa:
b1:67:ae:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84OF6pl7iwemOF/r2Eo7MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMmE2OTVjNDEyMjFkZDhlZGRjZmM1YzRiNWNjMGI3ODlj
Yjk1M2IwHhcNMjUwMTMxMTUwMDQxWhcNMjUwMjAxMTUwMDQxWjAzMTEwLwYDVQQD
Eyg1YzQwMDAwNjk4ZTc5N2I2ZTc0YWMyMWU3MmQzYjZlMjNmM2U4ZmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76+PSEa5gRu76AkUl8IfGkSK0wF4
0Bmr4JBInS8FCYe+0wml2pshYua2RveXezflrz9juCwRSZTM6abcLRaGTOBdjh9h
Vp/qMTTa8ETXUBJYWAx+MQui2xhS/oY6nygUlI7NbiF89r9nu6+P9Wnb3nqs1oAe
uNEkiZroPW/8unGy2SpGMc3A15j/iaM7dMq4LvSc7EoIGSlcbqeVXbxbFP0jG4qW
XwaCT1fHvwCVb2mBuE7wX6jkqEBGUkRAKmXwYOCBa8xAuGjrTxpTbHUPMVZRZc+f
gKyIsiAFQ+hcHm13tgX4UUovcKOmMH7QLlvKHy+auwgPrdP3wQ2CQyul/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxAAAaY55e250rCHnLTtuI/Po+iMB8GA1UdIwQY
MBaAFN0qaVxBIh3Y7dz8XEtcwLeJy5U7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1NwcFhFRWlIZGp0M1B4Y1MxekF0NG5MbFRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85NGFjMTctZjlkZC00OWY2LWE4OGEt
MjA4ZGMwNjhkNTNjLzEvM1NwcFhFRWlIZGp0M1B4Y1MxekF0NG5MbFRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85NGFjMTctZjlkZC00OWY2LWE4OGEtMjA4ZGMwNjhkNTNj
LzEvM1NwcFhFRWlIZGp0M1B4Y1MxekF0NG5MbFRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGbRFKN0
CZpYwkqdAAEmrQPnpsqFTMt3Gp+Vvk3sYKHc7Y6GJ6rUY2YXiXd42VYZMNNpPP1P
jEp4I9lpFliRiXvTJsWTVbUyRWNddXL7NQku0km65f0CUpCXhvPi0tpNlJMvmRMl
0me2g2VCkno8tV9A9B8McHNVxSEbYpYyWaA4w4eyoPffNNHqkwAi6UwB0Ms042pV
773Lc3/1DVZcioNGKNFGoXHdTOx5AQHCLdUhLRAv1lKgh8mWB6zZVs2Jo+Dv5DJm
6z80R3BFqSUylQSsuYnCJKRiu/ogXeGvH2ihJHZSkGF79A4R+b+uH/ULhnTTO+e+
MGsEOAWqsWeuOw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:45 2025 by rpki-client