Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
File: 3SSW_v-ZEna9G4Uza3aXqYAPhME.mft (raw, json)
Hash identifier: Cg0mjiz48pYHO/FgStisv5tYmaC72Tkczf04XQQ/o/0=
Subject key identifier: C3:05:E8:78:5D:BC:F8:C8:34:43:DC:2C:4E:87:0D:F4:89:79:8E:62
Authority key identifier: DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
Certificate issuer: /CN=dd2496feff991276bd1b85336b7697a9800f84c1
Certificate serial: 0194BD4E77A7B6B5C352867327AB8E07EB7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
Manifest number: 1204
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: 3SSW_v-ZEna9G4Uza3aXqYAPhME.crl (hash: JSGhp9aBmQTjRzd9vBEUX+f77R5t5xPih4+/4lnDoRo=)
2: _TZfk1Rmeyf1zvc7aTw1N_o9jl4.roa (hash: YhjRwkXWYnkbx6aMihX7dtN/B/p9Fk3n2XWBk8oSMZQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:77:a7:b6:b5:c3:52:86:73:27:ab:8e:07:eb:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2496feff991276bd1b85336b7697a9800f84c1
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=c305e8785dbcf8c83443dc2c4e870df489798e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6f:9f:20:5c:fb:21:4a:72:f7:3c:ee:6b:3f:
29:38:fa:03:3c:b8:eb:92:53:55:ce:f0:42:21:96:
77:a8:21:be:73:52:9a:f7:57:0f:9c:2f:3d:36:f8:
6c:19:1b:e8:6c:7d:58:d9:67:28:41:0c:57:46:b2:
f7:91:8f:08:8a:d5:c1:f5:29:c1:02:1c:66:dc:ab:
0f:e2:02:8a:3f:a4:c6:6f:4e:f8:8a:c4:bb:45:40:
bb:90:ae:48:37:41:95:ea:55:ee:1d:7f:9a:a3:29:
07:53:0f:92:e8:e3:8f:be:ed:af:18:3b:91:ab:50:
7d:0f:49:64:a7:5e:80:05:1d:eb:81:12:84:ce:1c:
a5:34:57:eb:34:e4:1f:81:fe:48:df:5c:fe:f1:f7:
6f:de:c2:65:94:29:52:96:c6:ab:00:c6:68:2d:be:
cb:7a:65:d4:62:9d:50:d7:1a:66:d5:48:03:48:6c:
6a:8f:7e:41:15:23:cc:37:1c:38:c8:e8:86:38:03:
a9:59:08:61:a9:cc:a5:6e:70:a7:00:02:0c:c6:0c:
b6:cb:dd:82:a4:e4:54:32:a6:eb:9a:1a:b5:29:9d:
79:0c:a9:0a:f8:04:53:f9:74:ad:af:8b:cd:4a:4d:
7e:e8:aa:d3:a7:0c:3d:c8:39:13:c4:9c:00:3b:59:
11:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:05:E8:78:5D:BC:F8:C8:34:43:DC:2C:4E:87:0D:F4:89:79:8E:62
X509v3 Authority Key Identifier:
keyid:DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:ee:bf:5b:23:4d:06:55:52:0f:e0:c9:76:d2:50:70:2a:99:
19:8d:70:59:1f:b9:15:42:41:21:ae:2d:bf:76:da:db:d5:8f:
40:c8:8b:51:89:e0:15:db:d1:9e:86:af:f5:bd:16:8d:35:5d:
e6:e9:ae:d2:1d:9f:b9:92:e6:90:c3:54:9a:ef:86:e6:d6:32:
8d:c9:a0:35:6f:9a:5b:80:f8:43:2c:65:84:28:2f:94:3d:0b:
e8:8a:8f:81:6c:d2:e7:4e:a4:0b:4d:0d:60:da:ad:d0:a4:39:
dc:33:3e:3e:29:2c:6e:a3:c0:89:c7:db:2d:56:86:f4:be:4b:
af:ef:c7:9c:d6:ab:74:fb:0f:e4:50:22:07:92:71:74:a1:2d:
db:1a:94:76:31:7d:bb:a5:93:58:47:1d:21:fd:ab:06:88:66:
5f:d8:c4:28:ca:0e:af:96:01:17:2f:a2:fa:53:c3:f2:61:33:
b5:2d:1e:28:3c:71:af:b9:c0:a5:22:0b:d6:5a:c7:4d:90:35:
2d:1a:ce:80:9a:16:5c:1e:97:58:33:05:f1:4c:a7:11:78:ea:
94:2d:54:fc:8d:27:0e:8f:72:92:41:17:31:4a:62:f8:d0:cc:
9d:9b:0e:58:de:1f:f6:4b:34:4d:c2:eb:22:dc:91:42:ec:90:
d5:37:a5:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TnentrXDUoZzJ6uOB+t/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMjQ5NmZlZmY5OTEyNzZiZDFiODUzMzZiNzY5N2E5ODAw
Zjg0YzEwHhcNMjUwMTMxMTcwMDIzWhcNMjUwMjAxMTcwMDIzWjAzMTEwLwYDVQQD
EyhjMzA1ZTg3ODVkYmNmOGM4MzQ0M2RjMmM0ZTg3MGRmNDg5Nzk4ZTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G+fIFz7IUpy9zzuaz8pOPoDPLjr
klNVzvBCIZZ3qCG+c1Ka91cPnC89NvhsGRvobH1Y2WcoQQxXRrL3kY8IitXB9SnB
Ahxm3KsP4gKKP6TGb074isS7RUC7kK5IN0GV6lXuHX+aoykHUw+S6OOPvu2vGDuR
q1B9D0lkp16ABR3rgRKEzhylNFfrNOQfgf5I31z+8fdv3sJllClSlsarAMZoLb7L
emXUYp1Q1xpm1UgDSGxqj35BFSPMNxw4yOiGOAOpWQhhqcylbnCnAAIMxgy2y92C
pORUMqbrmhq1KZ15DKkK+ART+XStr4vNSk1+6KrTpww9yDkTxJwAO1kRiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMF6HhdvPjINEPcLE6HDfSJeY5iMB8GA1UdIwQY
MBaAFN0klv7/mRJ2vRuFM2t2l6mAD4TBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1NTV192LVpFbmE5RzRVemEzYVhxWUFQaE1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS80NjQ3N2EtODcwOC00YjM3LTg3NWIt
NjcwMDMwZGNhYzMwLzEvM1NTV192LVpFbmE5RzRVemEzYVhxWUFQaE1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS80NjQ3N2EtODcwOC00YjM3LTg3NWItNjcwMDMwZGNhYzMw
LzEvM1NTV192LVpFbmE5RzRVemEzYVhxWUFQaE1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt+6/WyNN
BlVSD+DJdtJQcCqZGY1wWR+5FUJBIa4tv3ba29WPQMiLUYngFdvRnoav9b0WjTVd
5umu0h2fuZLmkMNUmu+G5tYyjcmgNW+aW4D4QyxlhCgvlD0L6IqPgWzS506kC00N
YNqt0KQ53DM+PiksbqPAicfbLVaG9L5Lr+/HnNardPsP5FAiB5JxdKEt2xqUdjF9
u6WTWEcdIf2rBohmX9jEKMoOr5YBFy+i+lPD8mEztS0eKDxxr7nApSIL1lrHTZA1
LRrOgJoWXB6XWDMF8UynEXjqlC1U/I0nDo9ykkEXMUpi+NDMnZsOWN4f9ks0TcLr
ItyRQuyQ1TelhQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:10:54 2025 by rpki-client