Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.mft
File: 3IiUXIhnpyYro3mzpphACRpPGQQ.mft (raw, json)
Hash identifier: hk6DrqDCxzuy1gFzy8Wi7HFv8siANuIpPpmjnhXUDms=
Subject key identifier: A6:FC:7D:49:A3:EC:43:47:2C:D2:4D:28:C6:57:AE:4E:E1:0E:96:F1
Authority key identifier: DC:88:94:5C:88:67:A7:26:2B:A3:79:B3:A6:98:40:09:1A:4F:19:04
Certificate issuer: /CN=dc88945c8867a7262ba379b3a69840091a4f1904
Certificate serial: 0194BC72A23F26544DBEB168C96FDCB53800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3IiUXIhnpyYro3mzpphACRpPGQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.mft
Manifest number: 07FC
Signing time: Fri 31 Jan 2025 13:00:16 +0000
Manifest this update: Fri 31 Jan 2025 13:00:16 +0000
Manifest next update: Sat 01 Feb 2025 13:00:16 +0000
Files and hashes: 1: 3IiUXIhnpyYro3mzpphACRpPGQQ.crl (hash: ihzHlQbj2OoA7W9eMnjPhTojjUK7aqx9fXAevJDlViU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a2:3f:26:54:4d:be:b1:68:c9:6f:dc:b5:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc88945c8867a7262ba379b3a69840091a4f1904
Validity
Not Before: Jan 31 13:00:16 2025 GMT
Not After : Feb 1 13:00:16 2025 GMT
Subject: CN=a6fc7d49a3ec43472cd24d28c657ae4ee10e96f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:72:0c:43:3a:5f:aa:c6:2c:f2:b0:c1:58:7e:
8c:a1:7c:bd:ad:4a:71:0a:6b:71:b1:5f:fd:bb:b1:
3b:ab:24:79:9d:0e:b0:f3:09:fa:42:e7:d5:3c:6c:
2d:d6:4e:8c:8e:2e:95:c1:61:b8:39:63:32:08:ec:
59:f7:4f:c6:42:10:8b:93:27:ba:1c:9f:89:2a:4e:
44:eb:a8:cc:f0:52:92:43:e6:36:00:2a:b4:36:68:
1c:ba:9c:64:3e:f2:18:5b:60:90:ba:1d:01:dd:ed:
25:40:05:9d:3b:35:5a:cf:ab:2f:0c:29:6f:e0:8c:
30:a2:c0:46:cb:3a:2a:8a:9c:68:53:59:4f:b3:76:
d8:ed:eb:62:fd:65:08:bc:2b:83:22:d8:3f:d1:5b:
59:d0:af:5a:d2:23:a9:4b:11:63:72:df:e0:8f:a6:
9e:5e:1e:a3:92:d7:a0:4e:2d:19:a9:e5:05:4f:3a:
10:fd:e0:2c:8f:a7:7b:54:fa:51:15:8f:69:58:89:
83:da:f8:9a:74:d0:3e:06:02:0a:fd:8e:39:ac:80:
b0:73:2c:e2:25:81:03:61:9f:f2:46:93:d8:3f:eb:
42:46:22:a2:1e:fb:25:3c:a8:13:40:15:79:38:b6:
b5:5e:9c:08:c5:da:ec:9f:43:ff:5e:dc:da:f0:2e:
55:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FC:7D:49:A3:EC:43:47:2C:D2:4D:28:C6:57:AE:4E:E1:0E:96:F1
X509v3 Authority Key Identifier:
keyid:DC:88:94:5C:88:67:A7:26:2B:A3:79:B3:A6:98:40:09:1A:4F:19:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IiUXIhnpyYro3mzpphACRpPGQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1e:d1:e8:42:66:eb:6d:1a:16:c6:6a:46:2f:3e:56:90:17:
df:f8:48:b2:17:5d:1b:c8:d0:f8:0f:9d:25:d9:99:7d:c5:d7:
e5:d1:38:5a:1f:fa:09:56:ae:da:54:34:cb:05:cc:22:67:cf:
d8:ae:bd:32:0f:58:72:ab:eb:07:49:ae:4e:38:f2:e3:35:a2:
f4:df:d2:6e:b8:7f:f2:62:4a:c8:c2:e0:62:3e:93:54:07:22:
cc:9a:79:5a:89:a9:2e:a0:3a:e0:85:4e:2d:57:41:3e:4c:69:
63:66:83:56:0d:04:fa:65:0b:de:37:ed:6d:9b:a9:b8:16:ad:
b1:cc:38:ef:f5:93:76:9e:a3:06:ab:04:0f:2f:5a:6b:94:50:
59:18:93:c7:e5:5e:1e:58:3f:62:4c:4c:7b:b2:11:87:f7:20:
5d:f7:66:c9:5d:bd:c8:ed:e4:05:59:17:6a:3d:a7:5a:73:bb:
d5:cb:fa:82:13:ee:47:fa:a2:d2:d8:99:03:0f:f6:3c:32:37:
a1:82:2f:15:b1:9e:76:2d:81:f7:4e:91:bb:e0:ac:4b:0b:22:
69:a5:c4:67:9f:bb:54:74:6b:dc:e2:9b:20:72:d9:63:aa:f0:
df:49:e5:fe:cb:6e:05:84:34:f4:fd:bd:51:d7:e7:bd:c2:53:
d0:1d:fd:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cqI/JlRNvrFoyW/ctTgAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjODg5NDVjODg2N2E3MjYyYmEzNzliM2E2OTg0MDA5MWE0
ZjE5MDQwHhcNMjUwMTMxMTMwMDE2WhcNMjUwMjAxMTMwMDE2WjAzMTEwLwYDVQQD
EyhhNmZjN2Q0OWEzZWM0MzQ3MmNkMjRkMjhjNjU3YWU0ZWUxMGU5NmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HIMQzpfqsYs8rDBWH6MoXy9rUpx
CmtxsV/9u7E7qyR5nQ6w8wn6QufVPGwt1k6Mji6VwWG4OWMyCOxZ90/GQhCLkye6
HJ+JKk5E66jM8FKSQ+Y2ACq0NmgcupxkPvIYW2CQuh0B3e0lQAWdOzVaz6svDClv
4IwwosBGyzoqipxoU1lPs3bY7eti/WUIvCuDItg/0VtZ0K9a0iOpSxFjct/gj6ae
Xh6jktegTi0ZqeUFTzoQ/eAsj6d7VPpRFY9pWImD2viadNA+BgIK/Y45rICwcyzi
JYEDYZ/yRpPYP+tCRiKiHvslPKgTQBV5OLa1XpwIxdrsn0P/Xtza8C5V0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKb8fUmj7ENHLNJNKMZXrk7hDpbxMB8GA1UdIwQY
MBaAFNyIlFyIZ6cmK6N5s6aYQAkaTxkEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0lpVVhJaG5weVlybzNtenBwaEFDUnBQR1FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82MjEwMjItNDM1MC00MTlmLTk0N2Et
OWNmZjFhZWUyYjBjLzEvM0lpVVhJaG5weVlybzNtenBwaEFDUnBQR1FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS82MjEwMjItNDM1MC00MTlmLTk0N2EtOWNmZjFhZWUyYjBj
LzEvM0lpVVhJaG5weVlybzNtenBwaEFDUnBQR1FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWR7R6EJm
620aFsZqRi8+VpAX3/hIshddG8jQ+A+dJdmZfcXX5dE4Wh/6CVau2lQ0ywXMImfP
2K69Mg9YcqvrB0muTjjy4zWi9N/Sbrh/8mJKyMLgYj6TVAcizJp5WompLqA64IVO
LVdBPkxpY2aDVg0E+mUL3jftbZupuBatscw47/WTdp6jBqsEDy9aa5RQWRiTx+Ve
Hlg/YkxMe7IRh/cgXfdmyV29yO3kBVkXaj2nWnO71cv6ghPuR/qi0tiZAw/2PDI3
oYIvFbGedi2B906Ru+CsSwsiaaXEZ5+7VHRr3OKbIHLZY6rw30nl/stuBYQ09P29
UdfnvcJT0B39Rg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:58:57 2025 by rpki-client