Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.mft
File: 3VP2PxOgyVKgefRXihDtv246pYs.mft (raw, json)
Hash identifier: TqjyO6T/niGl7az93rejjK77umCnWlIbBT1qzKar8kg=
Subject key identifier: 3B:87:79:D1:01:EF:77:71:FE:D1:C6:42:D9:E8:12:5A:9C:A3:AF:01
Authority key identifier: DD:53:F6:3F:13:A0:C9:52:A0:79:F4:57:8A:10:ED:BF:6E:3A:A5:8B
Certificate issuer: /CN=dd53f63f13a0c952a079f4578a10edbf6e3aa58b
Certificate serial: 0194BC7319EC9F4D745A87B4CA9221551395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VP2PxOgyVKgefRXihDtv246pYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.mft
Manifest number: 1399
Signing time: Fri 31 Jan 2025 13:00:47 +0000
Manifest this update: Fri 31 Jan 2025 13:00:47 +0000
Manifest next update: Sat 01 Feb 2025 13:00:47 +0000
Files and hashes: 1: 3VP2PxOgyVKgefRXihDtv246pYs.crl (hash: hZNX87yVzFqg6pTNzIkn1QVBmXLSNZtSZYlvlvg0Di8=)
2: 42kA1PGA8no_1otOl8ofpG12v3U.roa (hash: xUXq/2K3klfSiQDOaLNutcuHJyhv84PrwrhgM3PQUAM=)
3: LkJec_DKJKY3truWJ2sI8NcpsVM.roa (hash: b6Bvufz+fttjZflFNHVPDFRMwRxNIOBdrZIhpdVt6mI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:19:ec:9f:4d:74:5a:87:b4:ca:92:21:55:13:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd53f63f13a0c952a079f4578a10edbf6e3aa58b
Validity
Not Before: Jan 31 13:00:47 2025 GMT
Not After : Feb 1 13:00:47 2025 GMT
Subject: CN=3b8779d101ef7771fed1c642d9e8125a9ca3af01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7e:fc:90:ed:08:a1:7e:64:09:e6:de:bf:40:
92:e7:de:34:56:df:2d:87:77:4a:21:58:d2:a0:6f:
0a:e3:98:0a:fe:2d:a0:91:98:95:68:ca:a3:3f:e2:
70:fa:3e:88:bc:9f:d5:fc:c1:33:84:57:ba:d5:a3:
67:3b:3a:26:ca:6c:63:ca:ef:24:99:00:0f:76:90:
eb:e5:7d:c1:97:d3:e9:53:ef:3e:f3:be:79:a2:b9:
aa:9d:73:b3:12:6f:ce:0d:b4:11:cd:9c:75:d5:95:
39:c2:a2:3d:f7:4d:15:f9:16:e5:23:fb:3e:47:38:
be:0a:42:b4:ce:f2:3a:f7:f4:bb:91:d7:86:4d:78:
3b:d3:9e:28:aa:c6:dc:1d:23:46:47:56:83:f0:2e:
4a:98:c7:a8:70:72:66:d3:05:fa:18:6a:37:56:f4:
1f:01:d4:41:31:be:40:00:e8:38:b3:02:6e:95:fb:
91:a9:ef:ea:1a:9d:51:79:48:1b:14:c1:df:a1:a2:
a1:4e:62:1f:ad:d0:20:dc:0d:67:e9:79:fd:91:a1:
14:c5:9a:37:b7:10:6e:d7:d0:d7:16:77:3f:a0:01:
d7:74:4c:7b:f9:64:ed:86:27:eb:e2:ec:f3:11:42:
77:2f:b8:e2:a0:18:12:a3:78:84:24:9b:00:65:22:
15:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:87:79:D1:01:EF:77:71:FE:D1:C6:42:D9:E8:12:5A:9C:A3:AF:01
X509v3 Authority Key Identifier:
keyid:DD:53:F6:3F:13:A0:C9:52:A0:79:F4:57:8A:10:ED:BF:6E:3A:A5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VP2PxOgyVKgefRXihDtv246pYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ac:d6:9d:bf:43:a9:c6:19:63:1e:df:8e:f8:0a:30:c4:a0:
32:c2:0d:9e:4e:f7:25:f8:76:64:19:28:5b:64:89:2d:bd:8e:
a2:d2:cc:da:07:af:20:0d:5b:14:4f:27:e0:64:86:24:9d:e9:
5c:73:0b:58:28:ab:0e:7d:76:ec:b8:e7:fc:a1:08:dd:1b:d8:
ab:99:11:16:31:f3:ae:3f:55:4a:aa:27:17:c5:60:bc:ed:f1:
52:36:c4:87:6c:01:03:f9:23:48:37:b3:5f:bc:f4:47:9a:fd:
15:11:4c:9f:2f:aa:c0:e2:60:85:e3:28:2b:0e:75:1a:4d:bd:
aa:4c:39:f0:72:9d:5b:db:73:1d:c8:ce:cd:57:83:4c:6f:43:
36:ea:ea:05:1c:82:a0:76:99:56:9d:00:89:44:ea:77:f0:69:
18:2e:9f:eb:ae:17:70:94:27:b3:d6:fe:12:62:52:a1:95:01:
81:17:4a:af:26:11:be:7a:ea:4c:fd:11:22:95:d9:6e:fe:ea:
fb:f8:92:7d:fc:50:b6:08:fa:35:cc:d9:71:db:ae:fb:a4:16:
7e:be:a1:3a:1f:dd:31:ef:44:8c:f8:d1:83:97:b1:4a:6b:55:
23:fd:9b:dd:12:87:a4:3a:ff:45:35:f0:37:c7:7a:b0:4d:ca:
d3:52:21:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cxnsn010Woe0ypIhVROVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNTNmNjNmMTNhMGM5NTJhMDc5ZjQ1NzhhMTBlZGJmNmUz
YWE1OGIwHhcNMjUwMTMxMTMwMDQ3WhcNMjUwMjAxMTMwMDQ3WjAzMTEwLwYDVQQD
EygzYjg3NzlkMTAxZWY3NzcxZmVkMWM2NDJkOWU4MTI1YTljYTNhZjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn378kO0IoX5kCebev0CS5940Vt8t
h3dKIVjSoG8K45gK/i2gkZiVaMqjP+Jw+j6IvJ/V/MEzhFe61aNnOzomymxjyu8k
mQAPdpDr5X3Bl9PpU+8+8755ormqnXOzEm/ODbQRzZx11ZU5wqI9900V+RblI/s+
Rzi+CkK0zvI69/S7kdeGTXg7054oqsbcHSNGR1aD8C5KmMeocHJm0wX6GGo3VvQf
AdRBMb5AAOg4swJulfuRqe/qGp1ReUgbFMHfoaKhTmIfrdAg3A1n6Xn9kaEUxZo3
txBu19DXFnc/oAHXdEx7+WTthifr4uzzEUJ3L7jioBgSo3iEJJsAZSIV6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDuHedEB73dx/tHGQtnoElqco68BMB8GA1UdIwQY
MBaAFN1T9j8ToMlSoHn0V4oQ7b9uOqWLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1ZQMlB4T2d5VktnZWZSWGloRHR2MjQ2cFlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xYzQ0NGQtMDU4ZC00NzVjLWFiZmYt
NWNkZmExMTdhZWM2LzEvM1ZQMlB4T2d5VktnZWZSWGloRHR2MjQ2cFlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xYzQ0NGQtMDU4ZC00NzVjLWFiZmYtNWNkZmExMTdhZWM2
LzEvM1ZQMlB4T2d5VktnZWZSWGloRHR2MjQ2cFlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa6zWnb9D
qcYZYx7fjvgKMMSgMsINnk73Jfh2ZBkoW2SJLb2OotLM2gevIA1bFE8n4GSGJJ3p
XHMLWCirDn127Ljn/KEI3RvYq5kRFjHzrj9VSqonF8VgvO3xUjbEh2wBA/kjSDez
X7z0R5r9FRFMny+qwOJgheMoKw51Gk29qkw58HKdW9tzHcjOzVeDTG9DNurqBRyC
oHaZVp0AiUTqd/BpGC6f664XcJQns9b+EmJSoZUBgRdKryYRvnrqTP0RIpXZbv7q
+/iSffxQtgj6NczZcduu+6QWfr6hOh/dMe9EjPjRg5exSmtVI/2b3RKHpDr/RTXw
N8d6sE3K01Ihqg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:03 2025 by rpki-client