Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
File: 3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft (raw, json)
Hash identifier: jOrQTmNIsK8A61MLgo9trwsftCWyPR5ZlBnukYfPdvQ=
Subject key identifier: 6C:B1:CF:9B:3E:C0:C7:68:34:12:CC:FF:21:2A:F8:06:48:F2:27:FC
Authority key identifier: DE:16:99:52:F9:7F:49:4C:FE:0F:6B:54:27:CA:56:E8:10:C0:5C:E0
Certificate issuer: /CN=de169952f97f494cfe0f6b5427ca56e810c05ce0
Certificate serial: 0194BC3C3E7BF948F127888A4A4E9BBC9CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: 3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl (hash: FviPOFZZCfSeaqnSdaWiAHPOwH1f6ZibTnADJXinvls=)
2: RZ4xmYAJVpVRLfuQVLFQGXgbrQE.roa (hash: aFDGOW4Qu6MNo6mtPQc9Lw/jPxt+lcHM9Vl2lskSnz8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3e:7b:f9:48:f1:27:88:8a:4a:4e:9b:bc:9c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de169952f97f494cfe0f6b5427ca56e810c05ce0
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=6cb1cf9b3ec0c7683412ccff212af80648f227fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6b:c2:d1:44:28:1c:23:c0:6a:fb:3d:7e:61:
4e:89:ce:6e:56:70:c4:4b:93:83:5d:88:90:87:08:
b9:25:18:da:c2:81:cd:41:eb:bc:56:65:fc:f7:8b:
6f:38:f0:5e:39:e3:26:1a:70:5f:68:4e:31:47:eb:
d3:7b:2d:eb:fb:78:92:15:98:f2:eb:39:9a:04:e0:
e1:14:37:81:80:d8:a8:d4:ac:c8:f8:2f:d5:38:66:
a1:9a:c0:45:b0:95:a7:08:29:cd:f5:d7:07:77:4d:
ee:11:99:91:68:c5:70:91:5e:5a:a4:6e:dd:cd:9a:
27:39:aa:0f:79:1a:71:79:d3:80:08:7e:23:b1:dd:
3c:df:fc:35:89:6c:ae:93:e2:45:ed:11:9e:87:1b:
58:f4:f9:ec:cf:9d:98:cc:50:72:20:b5:ed:c2:ea:
e7:3d:a3:e6:93:af:b5:b0:ca:10:24:56:66:13:f4:
d8:48:0b:df:a6:00:96:51:67:cc:22:9b:d9:79:7c:
dd:17:7f:b3:cc:24:79:07:d0:85:5f:85:5c:8f:b6:
25:16:d1:a8:ed:ff:4a:5c:29:4b:42:ac:18:e1:1d:
9e:ff:0c:05:de:7a:c7:3b:0b:17:94:cb:ae:e3:37:
5a:6d:28:3b:76:f2:a2:90:dc:d0:ef:8b:8a:42:ae:
b2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B1:CF:9B:3E:C0:C7:68:34:12:CC:FF:21:2A:F8:06:48:F2:27:FC
X509v3 Authority Key Identifier:
keyid:DE:16:99:52:F9:7F:49:4C:FE:0F:6B:54:27:CA:56:E8:10:C0:5C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:cb:86:d0:e9:c8:8f:1a:e5:ec:33:c0:43:31:34:8e:96:21:
80:f9:e6:60:32:d9:3a:b8:5e:31:86:83:89:9d:88:97:da:59:
c3:05:ae:75:2f:f7:20:b8:3e:9c:51:c7:59:41:b8:d5:ff:3d:
95:bc:30:46:d4:f8:30:ae:b3:8f:1f:2c:90:e3:d2:85:1b:27:
3b:bf:d5:57:b7:af:51:ea:92:db:e9:8b:4a:ac:1d:9f:5c:f4:
ec:0f:65:3a:f0:6e:99:16:27:88:66:29:81:05:02:ff:b5:23:
28:cb:99:66:39:e4:ce:5d:da:5f:68:ff:04:51:72:f5:c3:e6:
7f:8c:a1:f9:7e:9d:65:e1:2b:d8:1c:2d:29:3c:22:14:f9:ad:
17:20:6e:45:ee:c3:30:45:f1:f9:ba:93:eb:cb:25:dd:1c:40:
5b:a1:6c:c6:8a:c7:9b:f8:96:cd:08:85:c1:b8:f2:0b:72:4a:
26:34:40:8b:25:1c:e4:2f:2b:f7:35:15:91:dd:28:70:d1:52:
9e:26:87:4e:2e:20:20:2a:09:fc:94:b4:b8:11:8b:42:75:17:
f6:0f:5c:5f:b1:1e:45:2c:0b:c5:30:96:29:ee:4b:58:fc:18:
d7:d0:3d:b8:42:cf:f0:c0:ef:79:c1:2d:c8:0d:5b:1e:57:db:
13:7d:6f:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PD57+UjxJ4iKSk6bvJz0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTY5OTUyZjk3ZjQ5NGNmZTBmNmI1NDI3Y2E1NmU4MTBj
MDVjZTAwHhcNMjUwMTMxMTIwMDUyWhcNMjUwMjAxMTIwMDUyWjAzMTEwLwYDVQQD
Eyg2Y2IxY2Y5YjNlYzBjNzY4MzQxMmNjZmYyMTJhZjgwNjQ4ZjIyN2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGvC0UQoHCPAavs9fmFOic5uVnDE
S5ODXYiQhwi5JRjawoHNQeu8VmX894tvOPBeOeMmGnBfaE4xR+vTey3r+3iSFZjy
6zmaBODhFDeBgNio1KzI+C/VOGahmsBFsJWnCCnN9dcHd03uEZmRaMVwkV5apG7d
zZonOaoPeRpxedOACH4jsd083/w1iWyuk+JF7RGehxtY9Pnsz52YzFByILXtwurn
PaPmk6+1sMoQJFZmE/TYSAvfpgCWUWfMIpvZeXzdF3+zzCR5B9CFX4Vcj7YlFtGo
7f9KXClLQqwY4R2e/wwF3nrHOwsXlMuu4zdabSg7dvKikNzQ74uKQq6ynwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGyxz5s+wMdoNBLM/yEq+AZI8if8MB8GA1UdIwQY
MBaAFN4WmVL5f0lM/g9rVCfKVugQwFzgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hhWlV2bF9TVXotRDJ0VUo4cFc2QkRBWE9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lNzg5NTQtMzFmZC00ZmQwLTlmYzEt
MGY0YjI4Yjg4NmY3LzEvM2hhWlV2bF9TVXotRDJ0VUo4cFc2QkRBWE9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9lNzg5NTQtMzFmZC00ZmQwLTlmYzEtMGY0YjI4Yjg4NmY3
LzEvM2hhWlV2bF9TVXotRDJ0VUo4cFc2QkRBWE9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcuG0OnI
jxrl7DPAQzE0jpYhgPnmYDLZOrheMYaDiZ2Il9pZwwWudS/3ILg+nFHHWUG41f89
lbwwRtT4MK6zjx8skOPShRsnO7/VV7evUeqS2+mLSqwdn1z07A9lOvBumRYniGYp
gQUC/7UjKMuZZjnkzl3aX2j/BFFy9cPmf4yh+X6dZeEr2BwtKTwiFPmtFyBuRe7D
MEXx+bqT68sl3RxAW6FsxorHm/iWzQiFwbjyC3JKJjRAiyUc5C8r9zUVkd0ocNFS
niaHTi4gICoJ/JS0uBGLQnUX9g9cX7EeRSwLxTCWKe5LWPwY19A9uELP8MDvecEt
yA1bHlfbE31vfw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 17:05:13 2025 by rpki-client