Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
File: 3ucsj67LcFLIQSAbJfagGOR3scI.mft (raw, json)
Hash identifier: nbO8/Lw6t0bSp2Vb1NHVbdP0mv6GayrgqwhOBQ7rXVs=
Subject key identifier: 0B:1A:55:00:F7:20:C2:F5:D8:C5:E9:E4:54:C4:8A:A7:D9:CE:1A:49
Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
Certificate issuer: /CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Certificate serial: 0194BD4E9ED8550AEE266AA902CCADCE417A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
Manifest number: 0AB8
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: 3ucsj67LcFLIQSAbJfagGOR3scI.crl (hash: zWM7IrCzEMaN3DY8lmOoPRZGRwtndDL1ITGZ9j2Kcrw=)
2: zxXrJCgqT81AO-d4vpKnqCQPEGE.roa (hash: WugT5zcayhMYDSTA/kF2PldTCBDPYZiQht5Wqh3j65Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9e:d8:55:0a:ee:26:6a:a9:02:cc:ad:ce:41:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=0b1a5500f720c2f5d8c5e9e454c48aa7d9ce1a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:1d:71:5d:f8:b8:e6:14:a9:18:99:f1:4f:
a3:e7:ac:6a:d0:ca:fd:21:6a:ff:da:e7:ee:65:8f:
25:f5:94:87:61:08:a8:73:63:c4:ee:6e:1b:2d:59:
90:2c:c0:60:e6:77:e0:6c:80:63:0b:e4:90:b0:6c:
5b:21:cc:64:fb:4f:04:71:a2:96:93:51:d1:2d:97:
71:84:15:13:35:a4:56:e7:3f:db:e4:e3:9a:bd:39:
3a:38:48:5b:c3:68:b8:0d:91:1b:65:de:76:32:86:
7e:24:0e:2f:59:6e:34:ad:54:1e:bd:4d:e6:21:98:
88:d9:3c:7e:df:69:7c:40:13:92:3b:48:5b:a0:a1:
a8:8d:de:17:fa:fd:a1:cc:ee:7a:0f:e9:eb:a1:6e:
36:71:fd:d1:a0:b2:06:81:48:47:5c:bd:94:af:e0:
4e:2e:92:63:c1:67:9c:12:25:97:86:d5:bd:50:4d:
7c:c6:55:50:02:a5:56:d0:c4:87:41:95:cb:ff:41:
f6:2d:fa:54:3a:dc:73:15:22:14:33:5a:b2:be:42:
b8:59:0b:8e:bc:97:ea:86:6b:b7:a1:1a:2c:d5:22:
4f:a8:21:4c:82:c2:6f:10:b0:b1:89:60:91:cd:fc:
da:cc:0c:a8:3d:cc:8d:51:fd:cb:3e:b3:ba:ef:e2:
5a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1A:55:00:F7:20:C2:F5:D8:C5:E9:E4:54:C4:8A:A7:D9:CE:1A:49
X509v3 Authority Key Identifier:
keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b3:1f:50:b5:ab:e1:7a:f5:f2:3b:9d:b4:15:dd:8e:e9:ee:
8d:5f:e2:53:b2:51:b1:ee:cd:46:69:39:ca:02:9d:69:16:30:
ab:de:74:2f:02:f7:8b:cc:1f:e6:1f:72:93:65:a4:79:b8:36:
40:dd:43:34:4b:10:ab:e3:94:0e:04:c1:af:b0:01:f6:68:de:
b3:0b:c9:46:0b:1a:db:e2:ef:e6:a3:a6:a1:69:3f:e5:42:8b:
cf:ac:29:73:12:e8:03:df:88:e0:50:de:b2:ac:49:32:03:41:
1f:5b:3d:8c:bd:14:9c:15:3f:90:26:be:01:2a:27:12:3f:86:
1d:ab:93:df:89:8e:30:84:f0:11:35:a2:c3:1e:1b:af:38:3b:
86:0d:37:51:7e:fe:f9:01:40:fb:57:2e:2f:1c:8a:20:b3:72:
f1:e2:d6:e9:96:20:38:f3:e3:23:58:f5:9d:6f:93:1a:62:ca:
94:d4:d8:6b:ff:64:bd:58:17:5c:82:d1:f4:1e:b0:83:29:1f:
2d:9d:73:64:c6:c4:14:b7:89:0d:dd:6d:7b:61:59:be:59:1d:
f4:21:9b:93:e6:40:fc:c4:8a:7e:9c:8c:e6:bd:d9:97:9a:9a:
c7:44:d6:d4:be:66:1c:82:f0:9e:dc:51:32:2c:9d:1b:8a:52:
b8:db:9e:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tp7YVQruJmqpAsytzkF6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZTcyYzhmYWVjYjcwNTJjODQxMjAxYjI1ZjZhMDE4ZTQ3
N2IxYzIwHhcNMjUwMTMxMTcwMDMzWhcNMjUwMjAxMTcwMDMzWjAzMTEwLwYDVQQD
EygwYjFhNTUwMGY3MjBjMmY1ZDhjNWU5ZTQ1NGM0OGFhN2Q5Y2UxYTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlwdcV34uOYUqRiZ8U+j56xq0Mr9
IWr/2ufuZY8l9ZSHYQioc2PE7m4bLVmQLMBg5nfgbIBjC+SQsGxbIcxk+08EcaKW
k1HRLZdxhBUTNaRW5z/b5OOavTk6OEhbw2i4DZEbZd52MoZ+JA4vWW40rVQevU3m
IZiI2Tx+32l8QBOSO0hboKGojd4X+v2hzO56D+nroW42cf3RoLIGgUhHXL2Ur+BO
LpJjwWecEiWXhtW9UE18xlVQAqVW0MSHQZXL/0H2LfpUOtxzFSIUM1qyvkK4WQuO
vJfqhmu3oRos1SJPqCFMgsJvELCxiWCRzfzazAyoPcyNUf3LPrO67+JavQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsaVQD3IML12MXp5FTEiqfZzhpJMB8GA1UdIwQY
MBaAFN7nLI+uy3BSyEEgGyX2oBjkd7HCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3Vjc2o2N0xjRkxJUVNBYkpmYWdHT1Izc2NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lZjgyOWEtYWNmYy00NDAyLTk1Y2Ut
MzgzZmIyYjk1NGQ5LzEvM3Vjc2o2N0xjRkxJUVNBYkpmYWdHT1Izc2NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9lZjgyOWEtYWNmYy00NDAyLTk1Y2UtMzgzZmIyYjk1NGQ5
LzEvM3Vjc2o2N0xjRkxJUVNBYkpmYWdHT1Izc2NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACrMfULWr
4Xr18judtBXdjunujV/iU7JRse7NRmk5ygKdaRYwq950LwL3i8wf5h9yk2Wkebg2
QN1DNEsQq+OUDgTBr7AB9mjeswvJRgsa2+Lv5qOmoWk/5UKLz6wpcxLoA9+I4FDe
sqxJMgNBH1s9jL0UnBU/kCa+ASonEj+GHauT34mOMITwETWiwx4brzg7hg03UX7+
+QFA+1cuLxyKILNy8eLW6ZYgOPPjI1j1nW+TGmLKlNTYa/9kvVgXXILR9B6wgykf
LZ1zZMbEFLeJDd1te2FZvlkd9CGbk+ZA/MSKfpyM5r3Zl5qax0TW1L5mHILwntxR
MiydG4pSuNueXw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:17:23 2025 by rpki-client