Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
File: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft (raw, json)
Hash identifier: bI83NwrU6PdJkNtPtxUod/DDY6O2/hdZvXwjFsZPwD8=
Subject key identifier: 3E:16:F2:DD:0D:8D:56:92:43:61:25:6A:69:70:8B:33:17:54:91:1E
Authority key identifier: DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
Certificate issuer: /CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Certificate serial: 0194BC3C8C0E3EB4AE3398AF9BFE041BD0E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:12 +0000
Manifest this update: Fri 31 Jan 2025 12:01:12 +0000
Manifest next update: Sat 01 Feb 2025 12:01:12 +0000
Files and hashes: 1: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl (hash: tyBld5M5u/cFrILqu/Lnsk1fSnb4ELuK7RjDlPoCW/8=)
2: 6GNxdzK9UE9bHySiQzQ4c2EkGfY.roa (hash: xWTUJszNKd3dbNHz1f2JomMkK2hd4V6IPZrJaK6VjKg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8c:0e:3e:b4:ae:33:98:af:9b:fe:04:1b:d0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Validity
Not Before: Jan 31 12:01:12 2025 GMT
Not After : Feb 1 12:01:12 2025 GMT
Subject: CN=3e16f2dd0d8d56924361256a69708b331754911e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a9:95:df:46:76:8c:66:4e:98:2a:0f:3f:0d:
fa:eb:04:f1:da:87:0e:a5:75:6a:25:bb:64:c2:f3:
c1:03:8f:fb:87:76:e8:c3:ec:1e:d5:ad:ab:fa:2c:
11:3e:9c:74:8a:3b:92:54:a9:36:e7:56:40:b8:9b:
fa:3b:2e:f0:d8:bc:30:1c:ef:b1:5a:45:f1:0f:a5:
9c:3c:0a:a7:69:19:f4:c3:6a:13:82:c1:8c:e4:c5:
ab:65:ab:0e:3c:5f:cd:04:87:af:47:57:98:05:e5:
94:6a:90:b0:e9:8e:36:ab:b4:25:c7:e0:bc:9c:e9:
50:5a:71:66:f7:4f:90:97:66:4a:28:e3:52:7b:22:
24:b2:20:fb:31:15:7b:e3:ed:90:f4:fa:47:54:55:
c4:31:5a:ee:73:40:87:33:76:e4:67:74:86:09:3c:
8e:8b:2c:73:8a:c1:0a:48:12:be:33:9f:49:1d:51:
00:23:49:65:01:24:8c:cc:0c:75:f0:8b:a3:59:22:
6f:7e:99:e8:4f:de:e6:08:5e:40:11:11:35:e0:4c:
8c:ef:b7:7d:45:7c:f4:53:60:12:b4:54:eb:7e:01:
39:87:07:8d:21:86:23:f4:74:c4:be:42:4f:05:e9:
f8:b2:b1:8b:21:9d:33:3f:02:38:20:b9:7e:b1:0a:
a3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:16:F2:DD:0D:8D:56:92:43:61:25:6A:69:70:8B:33:17:54:91:1E
X509v3 Authority Key Identifier:
keyid:DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:84:6b:97:14:80:55:bb:28:21:2c:1b:db:03:95:c7:35:ee:
17:fb:45:ae:5e:78:30:a6:e3:ea:76:02:f2:f4:c8:f7:7b:e2:
f1:bb:1a:e3:39:7a:1f:bc:77:c6:dc:0b:50:8e:26:4e:f4:86:
46:30:e2:94:c2:9d:69:44:88:ed:75:88:ba:4e:ed:e3:81:d6:
ff:cc:51:08:00:81:08:16:e3:2a:b2:f1:2d:a5:92:cc:61:07:
bf:ea:59:79:64:19:60:cf:3a:10:2a:a0:de:66:eb:f1:43:21:
0f:f0:5c:1f:5b:9a:67:19:11:ae:1b:40:5a:e0:cc:4b:6d:10:
5d:e5:1a:2f:40:c7:fe:4b:e0:18:f8:0f:85:88:f9:a4:c7:95:
c1:0c:78:1e:e1:81:da:1a:c7:2e:cf:4c:92:65:57:36:0a:67:
2a:b5:a5:f0:00:04:a4:6c:b5:6d:98:e6:f9:b5:36:c2:c9:b0:
93:f6:fc:ae:f6:57:8f:f4:59:de:b8:80:f6:0c:95:da:1d:8d:
e8:cc:02:de:df:83:15:8e:36:41:ce:c3:4a:37:80:f2:65:66:
e6:e4:2f:23:50:ea:92:df:b2:a7:a7:45:8c:74:66:01:0b:cc:
34:79:a1:47:04:44:1b:bf:a0:86:a4:52:3e:75:14:d4:cb:f6:
61:b7:e4:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PIwOPrSuM5ivm/4EG9DpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMGNjZDIzOTFmYTMyYzBhZGUyOTdjNWZjODgzMDkwYjM5
OTEzOTUwHhcNMjUwMTMxMTIwMTEyWhcNMjUwMjAxMTIwMTEyWjAzMTEwLwYDVQQD
EygzZTE2ZjJkZDBkOGQ1NjkyNDM2MTI1NmE2OTcwOGIzMzE3NTQ5MTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqmV30Z2jGZOmCoPPw366wTx2ocO
pXVqJbtkwvPBA4/7h3bow+we1a2r+iwRPpx0ijuSVKk251ZAuJv6Oy7w2LwwHO+x
WkXxD6WcPAqnaRn0w2oTgsGM5MWrZasOPF/NBIevR1eYBeWUapCw6Y42q7Qlx+C8
nOlQWnFm90+Ql2ZKKONSeyIksiD7MRV74+2Q9PpHVFXEMVruc0CHM3bkZ3SGCTyO
iyxzisEKSBK+M59JHVEAI0llASSMzAx18IujWSJvfpnoT97mCF5AERE14EyM77d9
RXz0U2AStFTrfgE5hweNIYYj9HTEvkJPBen4srGLIZ0zPwI4ILl+sQqj5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4W8t0NjVaSQ2ElamlwizMXVJEeMB8GA1UdIwQY
MBaAFN4MzSOR+jLAreKXxfyIMJCzmROVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zNTI0ODctYTBjOC00ZDkxLThlOWQt
NjdjMWE2M2M1MTUwLzEvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zNTI0ODctYTBjOC00ZDkxLThlOWQtNjdjMWE2M2M1MTUw
LzEvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYRrlxSA
VbsoISwb2wOVxzXuF/tFrl54MKbj6nYC8vTI93vi8bsa4zl6H7x3xtwLUI4mTvSG
RjDilMKdaUSI7XWIuk7t44HW/8xRCACBCBbjKrLxLaWSzGEHv+pZeWQZYM86ECqg
3mbr8UMhD/BcH1uaZxkRrhtAWuDMS20QXeUaL0DH/kvgGPgPhYj5pMeVwQx4HuGB
2hrHLs9MkmVXNgpnKrWl8AAEpGy1bZjm+bU2wsmwk/b8rvZXj/RZ3riA9gyV2h2N
6MwC3t+DFY42Qc7DSjeA8mVm5uQvI1Dqkt+yp6dFjHRmAQvMNHmhRwREG7+ghqRS
PnUU1Mv2Ybfk3A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:52 2025 by rpki-client