Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft
File: a3-gXmtNilEpRAdQTZZBrT4CBD8.mft (raw, json)
Hash identifier: 7LyjoERKAyNuMKX7g4dSCBm57qSmYjOcCbcfbBUv5RE=
Subject key identifier: 04:65:18:5B:48:A6:E0:0D:7D:7A:71:0F:4E:7A:50:2A:7D:8A:74:F8
Authority key identifier: 6B:7F:A0:5E:6B:4D:8A:51:29:44:07:50:4D:96:41:AD:3E:02:04:3F
Certificate issuer: /CN=6b7fa05e6b4d8a51294407504d9641ad3e02043f
Certificate serial: 0194BC729B88C7E596496F5E987452297FB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3-gXmtNilEpRAdQTZZBrT4CBD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft
Manifest number: 0DA2
Signing time: Fri 31 Jan 2025 13:00:15 +0000
Manifest this update: Fri 31 Jan 2025 13:00:15 +0000
Manifest next update: Sat 01 Feb 2025 13:00:15 +0000
Files and hashes: 1: B2d2juf7uKwnCru3ZiDDoYOXciY.roa (hash: 82W2phd9aqBUTlWrD81GDTCzzKIr5I7VokuYsIuKW0U=)
2: a3-gXmtNilEpRAdQTZZBrT4CBD8.crl (hash: fuA0xQ2LISirB+7rvfW3nDBr6oN2qYh5xtrHv4ut6OU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9b:88:c7:e5:96:49:6f:5e:98:74:52:29:7f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7fa05e6b4d8a51294407504d9641ad3e02043f
Validity
Not Before: Jan 31 13:00:15 2025 GMT
Not After : Feb 1 13:00:15 2025 GMT
Subject: CN=0465185b48a6e00d7d7a710f4e7a502a7d8a74f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3b:be:2f:33:95:90:c0:a9:b5:6e:d8:28:11:
2b:e7:1a:c2:66:19:fd:03:7f:0a:ba:73:46:84:f4:
c6:b6:3f:7c:45:d8:36:11:72:82:5f:63:27:3f:b8:
d2:10:c1:35:da:9c:85:87:8c:7f:37:7e:06:1f:3b:
27:32:b7:3d:f2:ab:11:5b:ee:05:20:82:a9:e2:82:
9e:c9:c3:87:75:87:8d:02:c2:31:aa:17:4c:de:71:
18:b7:18:5a:72:e4:93:d1:ec:4f:5e:f8:52:36:e0:
9b:17:e7:c9:a0:d3:fd:e1:7b:32:40:cb:59:aa:60:
4e:73:82:d6:0d:c8:6d:36:6c:82:0d:f3:20:1c:9e:
ed:06:c6:16:88:5a:7a:8e:70:c0:6f:b0:ef:a1:26:
39:1b:0f:ab:d6:79:b8:d9:ab:e9:f9:0c:24:b6:ea:
22:6b:d5:33:0b:62:fa:ca:ce:d3:87:a4:3c:21:86:
cc:c2:b8:e1:b9:7e:3d:ea:ad:cf:37:43:7f:8b:09:
86:50:2e:4b:c3:cb:1c:c0:d6:7f:f4:b2:0c:00:37:
4a:57:65:e4:a9:c9:b2:ae:0f:84:c3:a5:14:69:7d:
cd:ce:65:4f:03:07:34:a5:c9:4d:15:3b:91:cf:ed:
79:7c:83:37:ed:18:e7:67:54:fe:af:a7:74:66:f3:
b6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:65:18:5B:48:A6:E0:0D:7D:7A:71:0F:4E:7A:50:2A:7D:8A:74:F8
X509v3 Authority Key Identifier:
keyid:6B:7F:A0:5E:6B:4D:8A:51:29:44:07:50:4D:96:41:AD:3E:02:04:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3-gXmtNilEpRAdQTZZBrT4CBD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:09:14:f9:86:2c:f4:0b:68:6a:d2:f9:5e:c7:df:00:f2:00:
e5:e4:e1:0a:63:d6:20:47:2b:71:7a:22:13:aa:ef:db:09:1b:
a7:d1:a3:61:ed:9b:b1:09:63:0e:69:fc:8b:73:b5:71:c9:d9:
b6:0d:46:8a:43:fa:35:48:53:26:32:35:f8:ba:4e:7e:3b:39:
19:e2:b9:85:5e:ce:13:06:ae:34:96:f0:0d:ff:e8:6a:db:86:
73:5b:30:3a:e3:55:0d:02:be:4d:99:28:db:0d:17:b9:5b:a9:
77:19:04:b7:7b:d1:08:32:f5:42:e6:06:08:19:11:21:1f:f1:
e1:61:b5:09:d3:0e:ff:4f:aa:24:05:cf:47:58:08:bf:2c:8b:
ff:b0:27:de:b2:6c:b1:42:d1:27:50:eb:81:0c:fc:a2:ad:b5:
c7:d4:8f:0d:ab:bd:86:27:5d:90:c8:87:d1:bd:17:80:b3:ce:
ac:af:da:9d:7e:73:93:a9:d7:bd:27:0c:24:3c:87:08:cf:64:
36:f9:6c:19:35:e9:d0:81:34:6c:a3:60:a9:b0:98:ff:22:78:
51:09:3e:d9:29:99:12:8d:ce:ee:8f:99:e5:da:a4:25:eb:f1:
26:89:fe:82:9c:29:65:ed:8d:c9:b2:0b:05:f5:08:12:bc:de:
70:90:75:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cpuIx+WWSW9emHRSKX+zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiN2ZhMDVlNmI0ZDhhNTEyOTQ0MDc1MDRkOTY0MWFkM2Uw
MjA0M2YwHhcNMjUwMTMxMTMwMDE1WhcNMjUwMjAxMTMwMDE1WjAzMTEwLwYDVQQD
EygwNDY1MTg1YjQ4YTZlMDBkN2Q3YTcxMGY0ZTdhNTAyYTdkOGE3NGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Tu+LzOVkMCptW7YKBEr5xrCZhn9
A38KunNGhPTGtj98Rdg2EXKCX2MnP7jSEME12pyFh4x/N34GHzsnMrc98qsRW+4F
IIKp4oKeycOHdYeNAsIxqhdM3nEYtxhacuST0exPXvhSNuCbF+fJoNP94XsyQMtZ
qmBOc4LWDchtNmyCDfMgHJ7tBsYWiFp6jnDAb7DvoSY5Gw+r1nm42avp+Qwktuoi
a9UzC2L6ys7Th6Q8IYbMwrjhuX496q3PN0N/iwmGUC5Lw8scwNZ/9LIMADdKV2Xk
qcmyrg+Ew6UUaX3NzmVPAwc0pclNFTuRz+15fIM37RjnZ1T+r6d0ZvO2+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARlGFtIpuANfXpxD056UCp9inT4MB8GA1UdIwQY
MBaAFGt/oF5rTYpRKUQHUE2WQa0+AgQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTMtZ1htdE5pbEVwUkFkUVRaWkJyVDRDQkQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85ODNhYmQtMzQ4OC00YzZlLWFkODgt
OGIxY2ZiNjgzNjZlLzEvYTMtZ1htdE5pbEVwUkFkUVRaWkJyVDRDQkQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85ODNhYmQtMzQ4OC00YzZlLWFkODgtOGIxY2ZiNjgzNjZl
LzEvYTMtZ1htdE5pbEVwUkFkUVRaWkJyVDRDQkQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwkU+YYs
9AtoatL5XsffAPIA5eThCmPWIEcrcXoiE6rv2wkbp9GjYe2bsQljDmn8i3O1ccnZ
tg1GikP6NUhTJjI1+LpOfjs5GeK5hV7OEwauNJbwDf/oatuGc1swOuNVDQK+TZko
2w0XuVupdxkEt3vRCDL1QuYGCBkRIR/x4WG1CdMO/0+qJAXPR1gIvyyL/7An3rJs
sULRJ1DrgQz8oq21x9SPDau9hiddkMiH0b0XgLPOrK/anX5zk6nXvScMJDyHCM9k
NvlsGTXp0IE0bKNgqbCY/yJ4UQk+2SmZEo3O7o+Z5dqkJevxJon+gpwpZe2NybIL
BfUIErzecJB1aA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:38:41 2025 by rpki-client