Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
File: 3A-eoEY21-cUGLkwkczQ5XAVvkk.mft (raw, json)
Hash identifier: Hq4fzxrFDjeLWI+lHA1SDLUVClNlUJRhQBZSjulKMb0=
Subject key identifier: AB:00:EC:4D:85:43:DA:CB:D8:BC:5F:EF:F3:02:F3:B2:4C:BC:7B:CA
Authority key identifier: DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49
Certificate issuer: /CN=dc0f9ea04636d7e71418b93091ccd0e57015be49
Certificate serial: 0194BC3C793FDA0A95F02EA642B46BA530A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:07 +0000
Manifest this update: Fri 31 Jan 2025 12:01:07 +0000
Manifest next update: Sat 01 Feb 2025 12:01:07 +0000
Files and hashes: 1: 3A-eoEY21-cUGLkwkczQ5XAVvkk.crl (hash: /a4MGq7sribFPNaWc0qm8b0euHl9Pszbwb6umXuaYS0=)
2: L9o7KQxJPRJhzeZqHSfbm_7F0-s.roa (hash: nN3JagCFrpyGEb5Wr7V9qHCmIBDIlF1ypYg9dy1tB3c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:79:3f:da:0a:95:f0:2e:a6:42:b4:6b:a5:30:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0f9ea04636d7e71418b93091ccd0e57015be49
Validity
Not Before: Jan 31 12:01:07 2025 GMT
Not After : Feb 1 12:01:07 2025 GMT
Subject: CN=ab00ec4d8543dacbd8bc5feff302f3b24cbc7bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f6:62:5a:23:a4:b8:7c:db:d9:96:76:b5:c9:
bb:44:7f:82:63:67:04:ea:45:f0:91:48:b5:90:54:
e1:14:b0:d6:ee:00:2a:49:53:f4:19:b3:06:08:bb:
9a:43:db:b6:28:85:3f:2b:58:c3:d2:77:bd:fc:3e:
3e:f6:b6:ad:7c:da:2a:fd:a7:e2:6c:36:fa:27:cb:
3a:05:78:91:8c:1f:9a:f2:4c:ab:e9:7a:b6:40:c1:
9a:a9:ee:d6:65:6d:4b:bd:18:99:7a:76:87:c9:45:
2e:ce:14:83:f6:d4:98:ff:18:67:97:71:f7:9a:cf:
62:e6:a7:45:23:32:6e:0e:e3:ae:71:c3:5b:14:84:
40:25:52:0a:e4:b1:4b:0e:3c:80:a5:64:e2:f4:4b:
48:25:f2:32:bd:28:b0:a2:a2:86:b7:bd:44:fb:63:
4b:53:a5:80:bb:0f:aa:de:f9:14:4d:7a:6a:22:21:
e8:c2:41:bd:1f:b8:d5:15:21:98:4c:e1:91:a5:0a:
31:ee:95:cb:f4:2d:b1:b3:c5:4c:74:5d:da:54:5f:
90:32:dd:10:1b:3b:77:3a:7e:2b:e8:73:0f:9c:1a:
84:fb:5a:c2:08:18:7b:4a:8b:a9:7d:ff:a5:6c:71:
4a:ef:b2:1b:98:db:68:18:c3:b2:d1:09:6a:3f:e0:
08:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:00:EC:4D:85:43:DA:CB:D8:BC:5F:EF:F3:02:F3:B2:4C:BC:7B:CA
X509v3 Authority Key Identifier:
keyid:DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:23:bd:1a:5e:e0:3e:41:27:1f:cf:bf:15:61:93:95:9d:ab:
78:25:43:75:15:14:3d:dc:6c:be:2a:b6:bb:5e:c7:0b:94:31:
a0:9c:cd:6e:cd:bc:2a:8e:69:69:80:b1:97:45:03:25:7b:f5:
71:b9:ab:6d:62:ef:bb:51:c3:ab:e5:48:1f:02:9f:a4:c1:b3:
c5:74:e6:aa:9e:dc:67:4f:c1:65:59:02:59:36:ff:be:f5:7c:
e7:1f:ce:74:87:16:e6:19:ba:1f:ba:f3:93:7b:50:c8:05:4f:
b2:be:01:d1:7e:1d:31:93:7d:fe:90:e2:ab:4f:bf:8a:90:a0:
ce:a7:8f:55:99:8e:01:4f:6d:49:b3:5d:0f:2a:c2:44:88:2a:
5c:26:89:6a:c4:ff:35:56:7d:8c:2d:2d:18:2a:b9:bb:f3:35:
bc:04:8f:81:a5:90:c4:09:c1:ec:58:a5:2d:f8:58:6e:c9:fc:
6c:fb:ed:fb:2a:a3:87:ab:44:7c:bd:02:b3:9a:a2:32:8f:2e:
df:df:3c:30:f3:72:e5:11:80:76:02:4e:bb:e8:cb:23:e4:e7:
10:b2:e4:75:1e:0a:a7:ef:ab:f8:53:64:39:32:f4:5a:ce:ae:
40:6a:4a:ed:1e:44:f5:dd:38:b8:6e:8a:b0:96:8d:14:15:17:
ae:cc:a4:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PHk/2gqV8C6mQrRrpTChMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMGY5ZWEwNDYzNmQ3ZTcxNDE4YjkzMDkxY2NkMGU1NzAx
NWJlNDkwHhcNMjUwMTMxMTIwMTA3WhcNMjUwMjAxMTIwMTA3WjAzMTEwLwYDVQQD
EyhhYjAwZWM0ZDg1NDNkYWNiZDhiYzVmZWZmMzAyZjNiMjRjYmM3YmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvZiWiOkuHzb2ZZ2tcm7RH+CY2cE
6kXwkUi1kFThFLDW7gAqSVP0GbMGCLuaQ9u2KIU/K1jD0ne9/D4+9ratfNoq/afi
bDb6J8s6BXiRjB+a8kyr6Xq2QMGaqe7WZW1LvRiZenaHyUUuzhSD9tSY/xhnl3H3
ms9i5qdFIzJuDuOuccNbFIRAJVIK5LFLDjyApWTi9EtIJfIyvSiwoqKGt71E+2NL
U6WAuw+q3vkUTXpqIiHowkG9H7jVFSGYTOGRpQox7pXL9C2xs8VMdF3aVF+QMt0Q
Gzt3On4r6HMPnBqE+1rCCBh7Soupff+lbHFK77IbmNtoGMOy0QlqP+AInwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsA7E2FQ9rL2Lxf7/MC87JMvHvKMB8GA1UdIwQY
MBaAFNwPnqBGNtfnFBi5MJHM0OVwFb5JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0EtZW9FWTIxLWNVR0xrd2tjelE1WEFWdmtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8wMWJmOTYtODFiNi00ZTRjLWFiODAt
ZTBiYzQxMDc4NDI2LzEvM0EtZW9FWTIxLWNVR0xrd2tjelE1WEFWdmtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8wMWJmOTYtODFiNi00ZTRjLWFiODAtZTBiYzQxMDc4NDI2
LzEvM0EtZW9FWTIxLWNVR0xrd2tjelE1WEFWdmtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqiO9Gl7g
PkEnH8+/FWGTlZ2reCVDdRUUPdxsviq2u17HC5QxoJzNbs28Ko5paYCxl0UDJXv1
cbmrbWLvu1HDq+VIHwKfpMGzxXTmqp7cZ0/BZVkCWTb/vvV85x/OdIcW5hm6H7rz
k3tQyAVPsr4B0X4dMZN9/pDiq0+/ipCgzqePVZmOAU9tSbNdDyrCRIgqXCaJasT/
NVZ9jC0tGCq5u/M1vASPgaWQxAnB7FilLfhYbsn8bPvt+yqjh6tEfL0Cs5qiMo8u
3988MPNy5RGAdgJOu+jLI+TnELLkdR4Kp++r+FNkOTL0Ws6uQGpK7R5E9d04uG6K
sJaNFBUXrsyk7A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:50 2025 by rpki-client