Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
File: METmC7lxMuqEmlP8VUu7xjlIsBY.mft (raw, json)
Hash identifier: s6F+yNbBf+TRsFTAmm+lho/HNghhnUOKy0cangSQmYA=
Subject key identifier: 3C:E3:B1:F3:81:10:B8:25:D3:28:25:65:B0:DA:86:93:C7:C4:88:E3
Authority key identifier: 30:44:E6:0B:B9:71:32:EA:84:9A:53:FC:55:4B:BB:C6:39:48:B0:16
Certificate issuer: /CN=3044e60bb97132ea849a53fc554bbbc63948b016
Certificate serial: 0194BC051183D27D0E422B278E0F2489338B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
Manifest number: 0EAD
Signing time: Fri 31 Jan 2025 11:00:36 +0000
Manifest this update: Fri 31 Jan 2025 11:00:36 +0000
Manifest next update: Sat 01 Feb 2025 11:00:36 +0000
Files and hashes: 1: METmC7lxMuqEmlP8VUu7xjlIsBY.crl (hash: 5NbO0O2sdcOjnjBHlGCpvYtBM0jRc5X7YkyF4c4r62Y=)
2: iSTM7V9FE-bUzbrQTSi6w3GvF8M.roa (hash: YbbyUOZzyme9AkFEQT1yyfiS1x2+GwCoOxsJ23F9SW8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:11:83:d2:7d:0e:42:2b:27:8e:0f:24:89:33:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3044e60bb97132ea849a53fc554bbbc63948b016
Validity
Not Before: Jan 31 11:00:36 2025 GMT
Not After : Feb 1 11:00:36 2025 GMT
Subject: CN=3ce3b1f38110b825d3282565b0da8693c7c488e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c4:c1:90:ed:e3:de:6a:6a:9e:08:f4:3d:cb:
54:d3:bc:8e:c3:79:f0:3b:15:7b:52:e8:f6:fe:e1:
03:a5:ae:78:f3:ec:9d:c9:22:41:3a:a3:c1:d6:d2:
41:d2:de:4f:47:fa:2d:72:4c:8a:3d:4a:f6:18:54:
f3:e1:7a:83:0c:9d:83:cb:8a:0b:c9:5c:4e:51:92:
22:72:0a:a5:ff:ce:79:2a:e1:90:e2:38:b8:7d:c7:
ed:88:af:0b:18:84:4a:72:f6:05:d7:67:eb:75:ce:
86:5f:0f:e8:a5:84:d9:7a:5f:53:e0:54:70:49:74:
51:17:ac:22:7f:b9:ee:55:a5:fe:06:e7:a9:8c:25:
0d:65:aa:5a:70:c6:a7:74:f7:2c:c8:82:b7:f9:ec:
b8:75:a7:97:37:cd:57:0c:b7:ba:e5:6f:37:5a:67:
84:2f:df:b4:1e:03:5a:8c:c3:9e:18:76:c9:3d:1f:
1b:d9:e2:37:f0:c8:5a:a2:5d:04:ca:30:36:b4:1e:
f6:1d:c0:ab:4a:ed:ce:fe:c1:f7:60:99:b9:90:14:
d6:ee:c6:e3:f8:55:52:fd:86:ce:86:fd:54:8b:df:
0e:07:bf:a8:ed:c6:e5:d4:b3:cf:66:a2:84:b0:bf:
08:51:1e:2d:d9:61:a9:06:01:6c:8a:ee:82:d6:60:
a2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E3:B1:F3:81:10:B8:25:D3:28:25:65:B0:DA:86:93:C7:C4:88:E3
X509v3 Authority Key Identifier:
keyid:30:44:E6:0B:B9:71:32:EA:84:9A:53:FC:55:4B:BB:C6:39:48:B0:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:31:68:d8:96:ce:33:88:4f:f1:25:b4:56:2a:72:dc:a9:1f:
14:e4:69:35:d9:f6:61:5c:90:45:9a:f8:e7:5b:8b:7c:88:83:
e2:94:ca:76:8f:ef:ca:d3:c0:fd:77:7e:65:12:df:79:67:65:
bd:f6:15:67:19:33:5e:a7:59:be:a4:80:0f:1e:fc:e4:0e:9f:
80:0c:74:c2:9a:84:4b:4c:e8:0f:dd:73:30:e6:af:34:4c:d6:
36:03:1c:55:03:17:ea:99:00:e3:6f:a6:0a:2a:28:51:36:d7:
cf:ba:a6:e3:a9:54:f1:a5:5b:d4:64:7a:67:2d:5f:3e:9d:67:
37:16:5f:08:1d:0b:98:c8:5c:d0:59:b5:32:53:d7:85:d1:85:
b6:a8:73:bf:06:01:26:61:2c:30:63:e0:36:58:45:df:a0:52:
f3:00:79:a5:0c:93:d2:f4:3f:cc:77:57:62:ca:c9:41:45:ff:
2f:1f:ba:6d:1e:1b:94:4a:84:e1:16:67:22:1a:43:e6:65:60:
4a:59:d9:0b:85:43:fe:30:25:d1:90:59:28:6a:64:d9:f9:e5:
1f:6f:fd:b3:9b:08:c4:e9:77:a0:21:b1:b2:ca:1e:07:26:18:
5d:79:5f:92:24:27:17:40:8c:64:6e:7c:6f:48:eb:06:51:b8:
72:64:ea:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BRGD0n0OQisnjg8kiTOLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNDRlNjBiYjk3MTMyZWE4NDlhNTNmYzU1NGJiYmM2Mzk0
OGIwMTYwHhcNMjUwMTMxMTEwMDM2WhcNMjUwMjAxMTEwMDM2WjAzMTEwLwYDVQQD
EygzY2UzYjFmMzgxMTBiODI1ZDMyODI1NjViMGRhODY5M2M3YzQ4OGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48TBkO3j3mpqngj0PctU07yOw3nw
OxV7Uuj2/uEDpa548+ydySJBOqPB1tJB0t5PR/otckyKPUr2GFTz4XqDDJ2Dy4oL
yVxOUZIicgql/855KuGQ4ji4fcftiK8LGIRKcvYF12frdc6GXw/opYTZel9T4FRw
SXRRF6wif7nuVaX+BuepjCUNZapacMandPcsyIK3+ey4daeXN81XDLe65W83WmeE
L9+0HgNajMOeGHbJPR8b2eI38Mhaol0EyjA2tB72HcCrSu3O/sH3YJm5kBTW7sbj
+FVS/YbOhv1Ui98OB7+o7cbl1LPPZqKEsL8IUR4t2WGpBgFsiu6C1mCiBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzjsfOBELgl0yglZbDahpPHxIjjMB8GA1UdIwQY
MBaAFDBE5gu5cTLqhJpT/FVLu8Y5SLAWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUVUbUM3bHhNdXFFbWxQOFZVdTd4amxJc0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lZWY3MGUtODIwYy00NWIxLWFiMTkt
NDMxZjkxZGE0ZTI4LzEvTUVUbUM3bHhNdXFFbWxQOFZVdTd4amxJc0JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9lZWY3MGUtODIwYy00NWIxLWFiMTktNDMxZjkxZGE0ZTI4
LzEvTUVUbUM3bHhNdXFFbWxQOFZVdTd4amxJc0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzFo2JbO
M4hP8SW0Vipy3KkfFORpNdn2YVyQRZr451uLfIiD4pTKdo/vytPA/Xd+ZRLfeWdl
vfYVZxkzXqdZvqSADx785A6fgAx0wpqES0zoD91zMOavNEzWNgMcVQMX6pkA42+m
CiooUTbXz7qm46lU8aVb1GR6Zy1fPp1nNxZfCB0LmMhc0Fm1MlPXhdGFtqhzvwYB
JmEsMGPgNlhF36BS8wB5pQyT0vQ/zHdXYsrJQUX/Lx+6bR4blEqE4RZnIhpD5mVg
SlnZC4VD/jAl0ZBZKGpk2fnlH2/9s5sIxOl3oCGxssoeByYYXXlfkiQnF0CMZG58
b0jrBlG4cmTqmw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:04 2025 by rpki-client