Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
File: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft (raw, json)
Hash identifier: ZraKkpXihR7hG9tGu3NCswSSv620J07PX0GXDIwZA4A=
Subject key identifier: D2:CA:7F:16:64:C9:EF:1E:C7:CE:F2:D1:C2:35:67:9A:FD:E3:9B:AE
Authority key identifier: DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
Certificate issuer: /CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Certificate serial: 0194BD4E3C4CC39F16BD8D889CFFB9EC6968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
Manifest number: 0B39
Signing time: Fri 31 Jan 2025 17:00:08 +0000
Manifest this update: Fri 31 Jan 2025 17:00:08 +0000
Manifest next update: Sat 01 Feb 2025 17:00:08 +0000
Files and hashes: 1: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl (hash: K2aycQnVG/qF1cZvj4guLj5s+Y1nZEbNWMbvCrbX83Y=)
2: vmqKHuLzrPkqklGr2oHlX4A5H1s.roa (hash: HWx6FXZlLIKlHVfqDThyZuNv2Ccv+hNVkaueWiNq1XE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3c:4c:c3:9f:16:bd:8d:88:9c:ff:b9:ec:69:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Validity
Not Before: Jan 31 17:00:08 2025 GMT
Not After : Feb 1 17:00:08 2025 GMT
Subject: CN=d2ca7f1664c9ef1ec7cef2d1c235679afde39bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:00:69:1a:83:10:93:f6:80:b1:c6:40:6d:0d:
0e:03:e2:2c:2f:cc:ef:c7:0f:db:3c:88:1e:e4:03:
4c:3d:31:5d:d0:1c:83:1f:83:48:c7:1a:8d:a0:51:
16:04:0b:88:76:28:99:bf:57:d0:e1:f4:3e:61:df:
a1:63:82:f9:1e:14:6d:c8:eb:f2:0d:0f:24:32:b8:
29:e5:e6:af:93:dc:bd:29:1d:44:25:00:18:62:f7:
86:2f:97:81:20:88:5d:45:ce:e5:77:6c:69:32:55:
dd:09:17:ea:6a:a2:14:41:bf:8b:96:92:5e:67:f9:
a5:a1:1f:6a:e7:0a:09:b4:ed:45:0f:ea:3c:92:3b:
f7:87:d9:93:4d:d8:9a:11:82:33:cf:2c:d9:7a:cc:
0a:cb:c0:86:c1:1c:17:c3:5a:5c:0b:f8:a3:12:8c:
72:12:fe:fa:51:1c:84:0a:5a:f1:94:b2:e5:c0:fe:
5a:3c:bb:88:24:05:64:98:fd:7c:d6:2a:d3:5a:07:
1e:3d:e4:54:f9:e1:6d:ea:6d:0d:7f:c4:e1:4f:7c:
99:aa:8d:4d:81:16:56:8d:ee:9e:83:45:8b:00:d8:
9b:57:e5:f0:6f:75:e4:df:20:8b:4d:87:02:21:1d:
94:4e:a5:43:c8:52:c2:81:ec:28:3a:fe:30:8b:a3:
3b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CA:7F:16:64:C9:EF:1E:C7:CE:F2:D1:C2:35:67:9A:FD:E3:9B:AE
X509v3 Authority Key Identifier:
keyid:DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:2c:9b:93:55:6d:c9:c2:0c:ce:ea:cc:39:53:f9:12:6b:c5:
df:94:f4:97:ff:85:69:de:35:e0:c6:0b:18:b7:7a:29:59:39:
d6:e8:5f:f9:f6:51:3c:fa:68:1a:e4:cb:f2:c6:50:77:05:6a:
13:bb:02:43:2b:9f:b6:7d:13:5e:0d:08:90:0a:2b:c6:4e:6e:
5b:80:57:33:38:11:e9:f6:a1:a8:42:cd:3e:73:67:04:47:12:
4f:02:da:93:b8:5a:4f:75:12:fc:df:35:b2:f3:cb:72:f1:8a:
94:1c:2a:38:a7:99:99:38:20:2f:11:ed:b3:af:8a:9f:8a:f7:
b3:7c:60:ec:bc:03:ab:2a:a3:f9:b4:66:dd:5c:7c:d0:d6:92:
31:0c:47:63:a0:70:79:c0:00:71:bf:b8:92:47:07:88:ac:3a:
c4:42:31:b9:b5:06:4f:7c:e1:2d:85:87:71:38:fc:9f:d0:a3:
b0:a5:6a:13:c2:ae:94:51:af:5d:1e:4f:2f:6a:19:db:a0:09:
27:9f:4d:19:0a:ff:4c:71:9c:67:b8:ed:ad:f5:e2:a7:d1:24:
f4:60:99:56:90:36:ab:0e:ef:17:02:f7:87:93:a5:48:ec:e6:
f9:73:af:18:54:9d:2e:68:2f:36:cf:c5:a4:34:71:af:ff:de:
04:d2:93:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TjxMw58WvY2InP+57GloMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNWU2YzIzMzA5MTFiYzFkYzhjODNkNDExZWY2YjEyMDhi
M2JiZDYwHhcNMjUwMTMxMTcwMDA4WhcNMjUwMjAxMTcwMDA4WjAzMTEwLwYDVQQD
EyhkMmNhN2YxNjY0YzllZjFlYzdjZWYyZDFjMjM1Njc5YWZkZTM5YmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wBpGoMQk/aAscZAbQ0OA+IsL8zv
xw/bPIge5ANMPTFd0ByDH4NIxxqNoFEWBAuIdiiZv1fQ4fQ+Yd+hY4L5HhRtyOvy
DQ8kMrgp5eavk9y9KR1EJQAYYveGL5eBIIhdRc7ld2xpMlXdCRfqaqIUQb+LlpJe
Z/mloR9q5woJtO1FD+o8kjv3h9mTTdiaEYIzzyzZeswKy8CGwRwXw1pcC/ijEoxy
Ev76URyEClrxlLLlwP5aPLuIJAVkmP181irTWgcePeRU+eFt6m0Nf8ThT3yZqo1N
gRZWje6eg0WLANibV+Xwb3Xk3yCLTYcCIR2UTqVDyFLCgewoOv4wi6M7bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLKfxZkye8ex87y0cI1Z5r945uuMB8GA1UdIwQY
MBaAFN5ebCMwkRvB3IyD1BHvaxIIs7vWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2w1c0l6Q1JHOEhjaklQVUVlOXJFZ2l6dTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kZTlkNzItZmNkNC00YzdjLTg5Y2Et
ZGU0YmE3ODZmODcyLzEvM2w1c0l6Q1JHOEhjaklQVUVlOXJFZ2l6dTlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9kZTlkNzItZmNkNC00YzdjLTg5Y2EtZGU0YmE3ODZmODcy
LzEvM2w1c0l6Q1JHOEhjaklQVUVlOXJFZ2l6dTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHiybk1Vt
ycIMzurMOVP5EmvF35T0l/+Fad414MYLGLd6KVk51uhf+fZRPPpoGuTL8sZQdwVq
E7sCQyuftn0TXg0IkAorxk5uW4BXMzgR6fahqELNPnNnBEcSTwLak7haT3US/N81
svPLcvGKlBwqOKeZmTggLxHts6+Kn4r3s3xg7LwDqyqj+bRm3Vx80NaSMQxHY6Bw
ecAAcb+4kkcHiKw6xEIxubUGT3zhLYWHcTj8n9CjsKVqE8KulFGvXR5PL2oZ26AJ
J59NGQr/THGcZ7jtrfXip9Ek9GCZVpA2qw7vFwL3h5OlSOzm+XOvGFSdLmgvNs/F
pDRxr//eBNKT+Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:46 2025 by rpki-client