Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json)
Hash identifier: lf+YddX8drG3M0iX2YECu+eqnZ3/q3wRxGGGXz1IIGA=
Subject key identifier: 28:F3:D7:21:33:CA:EB:5A:4A:3D:E6:CE:2C:8C:3C:6D:CB:E7:39:2F
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: 0194BCE0BE2F088CA0C5595BD0B057D33A49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
Manifest number: 0D6B
Signing time: Fri 31 Jan 2025 15:00:32 +0000
Manifest this update: Fri 31 Jan 2025 15:00:32 +0000
Manifest next update: Sat 01 Feb 2025 15:00:32 +0000
Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: zqiiy8nsVqfBdp6glINgKbdrcq1MvH+oOHHhqP1VG40=)
2: M0CEGpqdnFyhH05u6ywrw5xpjxw.roa (hash: Da8bL20Ezk/7GnIViJo/xS7eFj2lqLDIbA2oioZuSt0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:be:2f:08:8c:a0:c5:59:5b:d0:b0:57:d3:3a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: Jan 31 15:00:32 2025 GMT
Not After : Feb 1 15:00:32 2025 GMT
Subject: CN=28f3d72133caeb5a4a3de6ce2c8c3c6dcbe7392f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c1:30:7c:9c:ac:4b:ae:be:0a:32:ec:e6:28:
be:24:c6:44:56:f3:dc:a5:fa:a8:bb:20:ba:34:10:
1a:2b:97:87:9b:60:8d:4e:80:de:2c:65:3b:de:1e:
13:8c:c3:49:f5:06:71:26:d1:3d:36:84:47:62:f4:
a6:56:73:96:3a:3e:71:b3:82:dc:72:81:d2:d0:1b:
23:85:66:3f:c7:90:6a:a4:43:d8:77:3b:10:0c:30:
e0:a1:42:9d:8f:b8:ce:e0:1a:50:72:49:d1:a0:d3:
6a:18:b6:1c:49:30:ba:d3:97:72:06:16:75:cd:a7:
ac:13:7d:0f:55:d9:9a:5d:80:c4:f4:5f:fa:32:6d:
57:97:0c:cc:de:94:0f:9c:e3:6e:0a:2c:a1:c7:87:
50:2c:e3:e5:16:46:12:df:eb:e7:55:22:97:f1:6b:
8d:2a:23:92:fe:3f:77:58:bc:a9:b6:3a:4a:b8:db:
e0:b9:9b:32:19:7f:73:c2:6e:c4:a3:dc:6d:68:7f:
c4:de:f3:b5:dd:ba:81:ff:f9:cf:8b:e3:44:86:1f:
2e:e2:32:df:1e:f1:c0:e0:ca:27:7f:33:d2:2d:39:
6a:eb:db:1b:7d:10:4d:26:37:d4:5e:b6:11:e5:19:
0f:f7:81:e2:ed:1d:e2:a9:a8:0d:07:4e:b3:77:e4:
28:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F3:D7:21:33:CA:EB:5A:4A:3D:E6:CE:2C:8C:3C:6D:CB:E7:39:2F
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ee:2f:e6:c9:dc:f0:80:9f:df:9a:df:8d:d7:82:95:32:db:
86:ce:81:76:e0:f5:90:6e:66:93:40:fd:c1:02:5f:e1:3e:ff:
a7:e7:b6:a3:64:2c:15:21:a2:a8:95:ae:02:ab:8a:a2:0b:e7:
86:de:d5:2b:ee:02:20:1f:c1:64:e2:4d:d3:7c:94:0b:16:8a:
9a:5f:35:0e:2b:ea:38:42:7a:9c:17:8c:1e:76:32:95:f8:5f:
74:82:0d:81:ad:9d:a8:e2:82:c6:fe:5c:f0:d8:dd:6d:47:22:
7f:9d:12:5e:0b:ae:95:c9:86:c7:93:d0:d0:7d:66:ad:69:5c:
ca:bf:65:f9:89:83:a7:e6:15:43:25:03:75:f0:31:93:ef:40:
29:ce:58:52:91:7f:ad:2d:09:7d:c4:1b:e9:45:28:e4:f9:2a:
33:4d:3f:79:ee:d2:de:8a:c7:08:ce:bf:f1:09:51:65:14:bd:
9d:a5:85:d9:ae:49:98:a0:df:bd:07:03:97:f1:c0:42:f8:68:
f4:03:04:b0:48:74:8e:e9:ca:20:71:12:88:2a:34:c8:0f:77:
3b:89:84:91:1d:1e:8d:a7:b4:79:97:d9:7e:b3:f2:8a:7e:6a:
9e:e3:e3:7c:04:c3:70:eb:6f:98:bd:2d:dd:6c:aa:25:6e:f4:
8e:91:4c:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84L4vCIygxVlb0LBX0zpJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYjE0NTc1NjA4MGFmZjFiYjAwZjVmOTBmZDlmMmYyN2Nj
NTczMmEwHhcNMjUwMTMxMTUwMDMyWhcNMjUwMjAxMTUwMDMyWjAzMTEwLwYDVQQD
EygyOGYzZDcyMTMzY2FlYjVhNGEzZGU2Y2UyYzhjM2M2ZGNiZTczOTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsEwfJysS66+CjLs5ii+JMZEVvPc
pfqouyC6NBAaK5eHm2CNToDeLGU73h4TjMNJ9QZxJtE9NoRHYvSmVnOWOj5xs4Lc
coHS0BsjhWY/x5BqpEPYdzsQDDDgoUKdj7jO4BpQcknRoNNqGLYcSTC605dyBhZ1
zaesE30PVdmaXYDE9F/6Mm1XlwzM3pQPnONuCiyhx4dQLOPlFkYS3+vnVSKX8WuN
KiOS/j93WLyptjpKuNvguZsyGX9zwm7Eo9xtaH/E3vO13bqB//nPi+NEhh8u4jLf
HvHA4MonfzPSLTlq69sbfRBNJjfUXrYR5RkP94Hi7R3iqagNB06zd+QopQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjz1yEzyutaSj3mziyMPG3L5zkvMB8GA1UdIwQY
MBaAFN6xRXVggK/xuwD1+Q/Z8vJ8xXMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hNjVkMTQtOTM2NS00MGM5LWE1Njgt
M2ZmOTY0NTUwM2U5LzEvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9hNjVkMTQtOTM2NS00MGM5LWE1NjgtM2ZmOTY0NTUwM2U5
LzEvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+4v5snc
8ICf35rfjdeClTLbhs6BduD1kG5mk0D9wQJf4T7/p+e2o2QsFSGiqJWuAquKogvn
ht7VK+4CIB/BZOJN03yUCxaKml81DivqOEJ6nBeMHnYylfhfdIINga2dqOKCxv5c
8NjdbUcif50SXguulcmGx5PQ0H1mrWlcyr9l+YmDp+YVQyUDdfAxk+9AKc5YUpF/
rS0JfcQb6UUo5PkqM00/ee7S3orHCM6/8QlRZRS9naWF2a5JmKDfvQcDl/HAQvho
9AMEsEh0junKIHESiCo0yA93O4mEkR0ejae0eZfZfrPyin5qnuPjfATDcOtvmL0t
3WyqJW70jpFMlg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:51 2025 by rpki-client