Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
File: 3MpSIZb9CbrnOba9IyLl65DaT7k.mft (raw, json)
Hash identifier: 3eVA11s5RHxyD4M1aukn/cIorp1ZrkISsvKuJSE8/4Y=
Subject key identifier: E0:E0:70:6F:40:D8:1F:BB:40:12:48:D8:6A:75:CE:57:12:62:93:C4
Authority key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Certificate issuer: /CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Certificate serial: 0194BD17609A645205D00A585C440CA1EC54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
Manifest number: 0DE6
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: 3MpSIZb9CbrnOba9IyLl65DaT7k.crl (hash: 7i0OGmkn/UKY8Y1e0KVvCNi4T7gsmpfYB5nBj3lVP5s=)
2: 6f05f7w22zRcUpz28tjM6XCdsYk.roa (hash: kl4KaLs8etslFAKNgVQw6su1C8PWL6O+HJhYp1T4Tak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:60:9a:64:52:05:d0:0a:58:5c:44:0c:a1:ec:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=e0e0706f40d81fbb401248d86a75ce57126293c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ea:08:cd:5d:d6:01:c0:fc:51:f6:e5:82:57:
6f:f7:50:7a:0f:d0:fd:85:1f:fd:74:7b:30:fa:ec:
af:70:13:f7:42:c4:b6:cd:58:37:3c:8a:3a:a9:93:
57:0d:1a:f1:57:f1:45:19:10:d3:b0:72:47:d0:55:
32:ea:5e:e4:36:81:27:86:a3:f7:ed:62:33:e4:a3:
f9:b1:95:af:ff:35:c4:10:13:a0:64:99:66:fd:af:
3c:0b:e1:aa:79:bc:52:d8:12:6e:07:a7:76:19:d6:
14:fe:0c:85:b8:d2:23:b0:a4:8d:54:c3:1f:63:25:
c9:c4:54:4f:2e:b4:77:15:af:3a:74:e5:43:a9:ce:
c5:28:5c:ed:70:fb:9b:b4:27:3e:26:e0:85:41:55:
51:7d:e1:6a:99:e4:30:4e:5b:5b:3b:49:71:98:fb:
84:c6:70:b9:8d:25:7f:bf:1d:37:98:a9:69:e0:78:
86:1e:fd:31:d4:8b:ba:c2:08:0a:fd:fd:46:36:3b:
91:99:2b:b2:8f:11:b7:ab:41:9d:62:bd:cd:10:9f:
00:94:5e:74:d4:cf:85:23:d9:59:a8:cd:8e:a5:08:
fa:c9:2c:86:77:86:d8:c6:1d:32:e1:32:2e:5f:15:
6f:46:5f:44:41:30:1b:dc:cc:22:b2:86:c7:7f:e0:
13:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E0:70:6F:40:D8:1F:BB:40:12:48:D8:6A:75:CE:57:12:62:93:C4
X509v3 Authority Key Identifier:
keyid:DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a3:cb:c5:72:b3:49:59:af:18:ee:1f:51:be:f6:ba:20:8e:
fa:66:cd:d8:62:08:c5:11:ae:7f:0b:5e:79:b9:97:27:6d:6b:
24:e9:28:2d:9c:d3:be:37:8a:a6:ba:1f:96:20:ce:32:dd:bc:
41:e3:06:77:ff:19:b6:6a:fd:72:46:34:21:a3:67:99:03:a3:
2b:f5:b8:35:af:59:63:7e:91:fb:77:cc:de:18:a6:4e:90:05:
a4:86:66:57:30:fa:1c:d7:df:f0:6c:ba:e9:c6:f0:63:b4:e2:
6c:52:9b:e4:23:15:65:71:fa:62:b8:15:81:b5:d5:f2:e7:da:
8c:ff:bb:eb:77:38:41:2e:6f:89:5b:6e:9a:98:d2:2a:7f:e6:
e6:bd:15:6b:3a:9c:f8:cc:aa:12:eb:1f:81:f2:89:01:64:59:
a7:c6:21:6c:d1:f1:fb:c1:c5:73:58:f4:3e:a2:1d:ca:92:e1:
0e:ec:0b:47:27:d4:e7:9a:b1:1d:3a:1b:24:f8:2b:1d:a9:2e:
69:fc:f6:df:52:29:13:b3:bd:4f:9f:fa:8f:45:fd:1e:24:ca:
61:d2:ad:45:82:dc:e7:5c:b7:0e:86:6c:ee:3c:4d:96:4e:57:
62:10:54:1f:2e:6c:6f:48:db:ce:1e:d4:41:46:3a:5e:72:f2:
af:a0:ee:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F2CaZFIF0ApYXEQMoexUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjY2E1MjIxOTZmZDA5YmFlNzM5YjZiZDIzMjJlNWViOTBk
YTRmYjkwHhcNMjUwMTMxMTYwMDEzWhcNMjUwMjAxMTYwMDEzWjAzMTEwLwYDVQQD
EyhlMGUwNzA2ZjQwZDgxZmJiNDAxMjQ4ZDg2YTc1Y2U1NzEyNjI5M2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+oIzV3WAcD8Ufblgldv91B6D9D9
hR/9dHsw+uyvcBP3QsS2zVg3PIo6qZNXDRrxV/FFGRDTsHJH0FUy6l7kNoEnhqP3
7WIz5KP5sZWv/zXEEBOgZJlm/a88C+GqebxS2BJuB6d2GdYU/gyFuNIjsKSNVMMf
YyXJxFRPLrR3Fa86dOVDqc7FKFztcPubtCc+JuCFQVVRfeFqmeQwTltbO0lxmPuE
xnC5jSV/vx03mKlp4HiGHv0x1Iu6wggK/f1GNjuRmSuyjxG3q0GdYr3NEJ8AlF50
1M+FI9lZqM2OpQj6ySyGd4bYxh0y4TIuXxVvRl9EQTAb3MwisobHf+ATfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODgcG9A2B+7QBJI2Gp1zlcSYpPEMB8GA1UdIwQY
MBaAFNzKUiGW/Qm65zm2vSMi5euQ2k+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82NDlhZjAtMTMyYy00NTMzLTlmYmMt
M2IyNTBhZTE4OTM2LzEvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi82NDlhZjAtMTMyYy00NTMzLTlmYmMtM2IyNTBhZTE4OTM2
LzEvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs6PLxXKz
SVmvGO4fUb72uiCO+mbN2GIIxRGufwteebmXJ21rJOkoLZzTvjeKprofliDOMt28
QeMGd/8Ztmr9ckY0IaNnmQOjK/W4Na9ZY36R+3fM3himTpAFpIZmVzD6HNff8Gy6
6cbwY7TibFKb5CMVZXH6YrgVgbXV8ufajP+763c4QS5viVtumpjSKn/m5r0Vazqc
+MyqEusfgfKJAWRZp8YhbNHx+8HFc1j0PqIdypLhDuwLRyfU55qxHTobJPgrHaku
afz231IpE7O9T5/6j0X9HiTKYdKtRYLc51y3DoZs7jxNlk5XYhBUHy5sb0jbzh7U
QUY6XnLyr6DugQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:54 2025 by rpki-client