Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
File: 3mPrYxm6RU05dkWUXOVDlXb6x0E.mft (raw, json)
Hash identifier: WiduPxi4+43fHJtE5kcmZOwVnGL6aFJ7FDtOBf+4qwo=
Subject key identifier: 87:08:25:62:1C:6E:BF:7B:66:84:FF:9E:4E:23:BD:3C:85:BD:C5:95
Authority key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
Certificate issuer: /CN=de63eb6319ba454d397645945ce5439576fac741
Certificate serial: 0194BD4E65E2E8EB6F29F0F9353007BC81DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:19 +0000
Manifest this update: Fri 31 Jan 2025 17:00:19 +0000
Manifest next update: Sat 01 Feb 2025 17:00:19 +0000
Files and hashes: 1: 3mPrYxm6RU05dkWUXOVDlXb6x0E.crl (hash: hz3SsvoGt+rA5cWis4lxcWFOULhd7fIWjoKGpL0N1lk=)
2: L9b4ducPYyR6qc5uaeOni9YJQHA.roa (hash: vaOymUj3eUPmbh7xiKllx8KgzftTh5qvMK+aeen3RXg=)
3: kpbrBAbvkEz7iwjj9qvNJnx2KAI.roa (hash: EaUeR1cKI29E16jF0XdNnwUwftG+vurlmN50dR3srjM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:65:e2:e8:eb:6f:29:f0:f9:35:30:07:bc:81:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de63eb6319ba454d397645945ce5439576fac741
Validity
Not Before: Jan 31 17:00:19 2025 GMT
Not After : Feb 1 17:00:19 2025 GMT
Subject: CN=870825621c6ebf7b6684ff9e4e23bd3c85bdc595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:aa:82:7f:4e:83:8f:8b:c8:e4:da:5b:e7:3d:
7b:05:b8:1d:cd:a9:a7:71:6e:5e:d3:42:40:f9:cb:
b1:d4:b8:21:4d:75:0e:6d:f8:00:9c:b0:9f:9b:04:
2b:ba:b8:72:17:31:45:5f:43:3d:f2:7b:10:aa:31:
c7:1e:88:62:dc:9d:cc:a4:27:23:d6:6c:0b:b1:33:
3f:1c:3d:b9:38:6a:23:58:ff:1e:58:5f:12:44:f8:
6f:cc:9c:a7:3b:ce:97:f5:6b:5c:aa:54:ab:4c:00:
3b:e8:34:e6:fa:85:4c:7e:62:71:67:bd:33:1c:97:
73:39:08:b2:e1:74:c9:02:22:4d:32:ee:e8:f1:d9:
d4:a4:46:58:1f:ef:15:f8:9e:95:f9:09:bd:30:03:
7d:91:1e:20:a2:09:eb:c8:a5:c3:3b:e1:35:d3:f1:
a9:00:e5:40:cd:95:30:62:bb:70:5b:63:0d:2c:79:
7b:4e:ea:91:bd:f7:3d:f8:e0:9f:6c:33:64:6a:57:
a8:11:62:8b:7d:5c:f4:ae:5e:b9:ea:d5:87:2a:f8:
e7:31:fb:39:b5:19:ae:f2:13:e1:dc:e5:ff:ad:be:
44:dd:30:54:ae:42:05:46:93:14:52:23:1b:cc:d3:
41:80:97:c9:c4:97:de:7c:37:52:21:fe:b8:ca:89:
9a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:08:25:62:1C:6E:BF:7B:66:84:FF:9E:4E:23:BD:3C:85:BD:C5:95
X509v3 Authority Key Identifier:
keyid:DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:9b:96:d2:ea:0c:3e:41:87:f2:d2:b6:ad:3a:14:17:75:6d:
f7:aa:30:c7:b1:11:89:5c:e4:1e:38:ac:49:cb:62:f4:38:bc:
26:3d:1d:82:c2:ff:9e:d0:d7:38:33:ee:ca:4a:7b:7b:18:a8:
be:a6:8c:f4:db:ec:00:43:09:07:47:ad:31:46:93:36:61:23:
a6:b9:b1:8b:c4:55:04:dc:95:c4:c7:e1:77:71:dd:f7:36:ea:
6e:d5:0b:f9:17:67:ed:63:2d:a8:f2:4f:fa:a8:76:48:63:a0:
87:2a:e9:3e:e3:82:b2:16:3b:b6:aa:15:57:3e:ac:da:44:c3:
39:ab:a5:57:62:14:b3:e9:c6:93:c9:49:b2:59:fc:e1:be:33:
2a:5f:37:69:14:a4:46:79:60:b2:ea:74:d3:73:28:59:ad:9c:
72:26:f8:93:e0:b7:01:0a:c3:4a:c4:40:ce:5b:6b:87:08:2e:
22:ff:23:d8:91:c5:4e:8c:07:dd:f3:f5:37:12:21:4b:f8:a1:
2b:c8:3c:e9:e1:a0:c7:7d:10:2e:fa:b6:7e:ec:df:3a:de:db:
4e:17:98:2c:a3:20:6a:d9:60:53:db:70:d8:7b:57:ec:27:78:
cb:d7:31:c7:82:5f:56:42:91:0c:f1:57:00:a0:31:63:db:d8:
6a:bf:b7:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TmXi6OtvKfD5NTAHvIHdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNjNlYjYzMTliYTQ1NGQzOTc2NDU5NDVjZTU0Mzk1NzZm
YWM3NDEwHhcNMjUwMTMxMTcwMDE5WhcNMjUwMjAxMTcwMDE5WjAzMTEwLwYDVQQD
Eyg4NzA4MjU2MjFjNmViZjdiNjY4NGZmOWU0ZTIzYmQzYzg1YmRjNTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6qCf06Dj4vI5Npb5z17Bbgdzamn
cW5e00JA+cux1LghTXUObfgAnLCfmwQrurhyFzFFX0M98nsQqjHHHohi3J3MpCcj
1mwLsTM/HD25OGojWP8eWF8SRPhvzJynO86X9WtcqlSrTAA76DTm+oVMfmJxZ70z
HJdzOQiy4XTJAiJNMu7o8dnUpEZYH+8V+J6V+Qm9MAN9kR4gognryKXDO+E10/Gp
AOVAzZUwYrtwW2MNLHl7TuqRvfc9+OCfbDNkaleoEWKLfVz0rl656tWHKvjnMfs5
tRmu8hPh3OX/rb5E3TBUrkIFRpMUUiMbzNNBgJfJxJfefDdSIf64yoma5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcIJWIcbr97ZoT/nk4jvTyFvcWVMB8GA1UdIwQY
MBaAFN5j62MZukVNOXZFlFzlQ5V2+sdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85MzI3YTctODFiZi00ZjdkLTlmNWMt
MWUxOGY1YjQ5MDVkLzEvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS85MzI3YTctODFiZi00ZjdkLTlmNWMtMWUxOGY1YjQ5MDVk
LzEvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlpuW0uoM
PkGH8tK2rToUF3Vt96owx7ERiVzkHjisScti9Di8Jj0dgsL/ntDXODPuykp7exio
vqaM9NvsAEMJB0etMUaTNmEjprmxi8RVBNyVxMfhd3Hd9zbqbtUL+Rdn7WMtqPJP
+qh2SGOghyrpPuOCshY7tqoVVz6s2kTDOaulV2IUs+nGk8lJsln84b4zKl83aRSk
Rnlgsup003MoWa2ccib4k+C3AQrDSsRAzltrhwguIv8j2JHFTowH3fP1NxIhS/ih
K8g86eGgx30QLvq2fuzfOt7bTheYLKMgatlgU9tw2HtX7Cd4y9cxx4JfVkKRDPFX
AKAxY9vYar+3fA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:38 2025 by rpki-client