Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
File: 83T3NMNpXmeQanAy6y5Z-z60GyI.mft (raw, json)
Hash identifier: iK4Ubqx13rXRZ502EIj15drtiVtwjOLwDDwAzxKyKRI=
Subject key identifier: 96:82:7B:C7:2F:B8:FA:4B:13:C6:26:17:84:96:5D:93:1C:72:59:EF
Authority key identifier: F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22
Certificate issuer: /CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
Certificate serial: 0194BC04A333D7981AFD8A4684766D99DA0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
Manifest number: 06FA
Signing time: Fri 31 Jan 2025 11:00:07 +0000
Manifest this update: Fri 31 Jan 2025 11:00:07 +0000
Manifest next update: Sat 01 Feb 2025 11:00:07 +0000
Files and hashes: 1: 5PZ3g6OP7Xkkh7yPx23u6neBrAE.roa (hash: Oeq+7unGkdcn5PZadl5yUb8yi+1t207kSQ+K6DCv118=)
2: 83T3NMNpXmeQanAy6y5Z-z60GyI.crl (hash: zPOnFoTp+UDjbRdeUhVYTY3XDhOxfFKpiq/oeDo2CKQ=)
3: TNt6qas3cJ89n8wxiGWzg9MyX8w.roa (hash: rrMidK0OGIBtvobdrSZyglIiGj8pyxF47ABU/7yhc+8=)
4: WPt8oKr1EmQOIK0I7qnH9DYPvJE.roa (hash: OJHjZqCH0qPl8+MzdYjyp7NApYVYsO9hRYT6Cvd6y2Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a3:33:d7:98:1a:fd:8a:46:84:76:6d:99:da:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
Validity
Not Before: Jan 31 11:00:07 2025 GMT
Not After : Feb 1 11:00:07 2025 GMT
Subject: CN=96827bc72fb8fa4b13c6261784965d931c7259ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:57:83:1f:9d:67:6c:b4:ea:b7:a2:a5:83:aa:
73:cf:43:d4:ac:85:b2:0e:80:ae:28:73:63:42:d8:
e1:69:14:c5:fe:b4:fc:56:0b:48:b2:0b:bc:61:86:
2b:2c:02:8a:66:a7:87:83:04:7e:27:7a:3b:1c:4e:
e1:44:01:ce:7c:74:d9:4b:0c:53:97:94:69:fc:26:
01:fe:1a:a1:9f:11:1b:a8:71:7e:85:29:d2:a7:87:
9a:51:38:a1:f3:fa:57:f4:1b:f4:33:ae:16:a8:86:
82:8a:d8:c9:49:0a:0a:ec:23:97:ce:a2:b8:82:f5:
b5:ff:ab:e1:7b:55:01:0e:bf:3f:14:04:ca:a2:b3:
81:1e:2a:bf:14:35:d1:72:22:00:5f:5d:5a:05:5b:
48:fe:04:4d:aa:19:d4:20:bf:2b:0f:19:5b:c5:5a:
41:1a:bd:27:62:45:d8:93:fa:57:1a:c7:ef:9a:1e:
f7:69:e1:22:b0:63:ba:84:2b:f7:04:06:c3:e8:13:
ce:94:ab:4b:7a:b8:34:e8:48:c7:c5:06:84:92:62:
ac:b7:62:82:2f:8f:47:12:de:7b:5f:a7:c5:88:63:
e6:02:99:da:85:af:71:57:57:58:75:ff:a2:c4:d2:
0c:cf:6f:b9:9b:15:98:ba:89:42:70:a8:ec:1f:37:
6f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:82:7B:C7:2F:B8:FA:4B:13:C6:26:17:84:96:5D:93:1C:72:59:EF
X509v3 Authority Key Identifier:
keyid:F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:59:ee:e1:8d:0d:42:cb:aa:0d:1e:3b:33:8d:da:d7:a0:eb:
fd:14:b3:a1:dc:29:21:ad:77:37:03:9d:d4:bd:b1:32:93:34:
a8:bf:8e:5e:c2:07:41:00:39:70:d0:af:ce:d6:9c:a5:7d:70:
bb:a6:02:8d:37:dd:06:7a:a5:1b:36:e3:64:2f:ec:65:4e:60:
93:75:a2:13:70:41:12:14:44:e5:73:07:16:a8:2f:f8:9f:53:
1c:c8:44:c4:a7:67:35:63:28:a9:25:19:71:71:30:38:3d:a2:
1a:ec:02:90:ea:43:7d:ae:39:14:26:a0:d3:b5:28:fe:9e:57:
c0:15:5e:58:20:4e:d4:d1:68:44:40:61:4e:ab:1f:df:65:80:
c9:33:32:c6:0a:6a:bb:d6:71:93:ff:e8:e9:a6:da:6e:83:fe:
ac:21:77:ce:b9:82:3d:94:8d:b1:80:39:34:fe:91:8a:96:0a:
be:f3:d9:b5:68:7b:66:81:61:8a:20:c8:f5:70:80:c6:e7:bc:
90:6f:64:c3:6b:2e:d4:6a:99:88:72:a6:c6:75:7f:2f:34:ce:
f3:63:63:c9:cb:c7:bd:35:54:c4:bd:4b:bd:fc:d2:c9:2b:90:
0d:99:f1:24:bd:56:91:48:50:11:66:4d:bb:dd:93:19:da:21:
c8:38:28:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BKMz15ga/YpGhHZtmdoOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNzRmNzM0YzM2OTVlNjc5MDZhNzAzMmViMmU1OWZiM2Vi
NDFiMjIwHhcNMjUwMTMxMTEwMDA3WhcNMjUwMjAxMTEwMDA3WjAzMTEwLwYDVQQD
Eyg5NjgyN2JjNzJmYjhmYTRiMTNjNjI2MTc4NDk2NWQ5MzFjNzI1OWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FeDH51nbLTqt6Klg6pzz0PUrIWy
DoCuKHNjQtjhaRTF/rT8VgtIsgu8YYYrLAKKZqeHgwR+J3o7HE7hRAHOfHTZSwxT
l5Rp/CYB/hqhnxEbqHF+hSnSp4eaUTih8/pX9Bv0M64WqIaCitjJSQoK7COXzqK4
gvW1/6vhe1UBDr8/FATKorOBHiq/FDXRciIAX11aBVtI/gRNqhnUIL8rDxlbxVpB
Gr0nYkXYk/pXGsfvmh73aeEisGO6hCv3BAbD6BPOlKtLerg06EjHxQaEkmKst2KC
L49HEt57X6fFiGPmApnaha9xV1dYdf+ixNIMz2+5mxWYuolCcKjsHzdvqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaCe8cvuPpLE8YmF4SWXZMcclnvMB8GA1UdIwQY
MBaAFPN09zTDaV5nkGpwMusuWfs+tBsiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODNUM05NTnBYbWVRYW5BeTZ5NVotejYwR3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNzQ5MTQtZGRhOC00ZDQ1LTk5OTIt
NGJlZjgzMjhhYWFiLzEvODNUM05NTnBYbWVRYW5BeTZ5NVotejYwR3lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mNzQ5MTQtZGRhOC00ZDQ1LTk5OTItNGJlZjgzMjhhYWFi
LzEvODNUM05NTnBYbWVRYW5BeTZ5NVotejYwR3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVnu4Y0N
QsuqDR47M43a16Dr/RSzodwpIa13NwOd1L2xMpM0qL+OXsIHQQA5cNCvztacpX1w
u6YCjTfdBnqlGzbjZC/sZU5gk3WiE3BBEhRE5XMHFqgv+J9THMhExKdnNWMoqSUZ
cXEwOD2iGuwCkOpDfa45FCag07Uo/p5XwBVeWCBO1NFoREBhTqsf32WAyTMyxgpq
u9Zxk//o6ababoP+rCF3zrmCPZSNsYA5NP6RipYKvvPZtWh7ZoFhiiDI9XCAxue8
kG9kw2su1GqZiHKmxnV/LzTO82NjycvHvTVUxL1LvfzSySuQDZnxJL1WkUhQEWZN
u92TGdohyDgouQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:02:15 2025 by rpki-client