Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
File: 3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft (raw, json)
Hash identifier: bEjL9HTWsYMW+DHVB0HHz/dn1Ysrqz4CDkGCpSnZdpc=
Subject key identifier: 44:CB:A7:EA:D4:7C:50:84:89:E5:44:F9:09:24:E2:D5:57:07:BC:86
Authority key identifier: DD:B7:B0:01:9E:19:F1:12:F4:D2:BC:FD:6E:A1:2D:90:81:FC:58:7E
Certificate issuer: /CN=ddb7b0019e19f112f4d2bcfd6ea12d9081fc587e
Certificate serial: 0194BC3C39E395162280F8EDF4AB1A00CB11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: 3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl (hash: bXPxeuGMNFjhbQZ7abQdBY0T1oZhPcJjcXiog0s0b1g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:39:e3:95:16:22:80:f8:ed:f4:ab:1a:00:cb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb7b0019e19f112f4d2bcfd6ea12d9081fc587e
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=44cba7ead47c508489e544f90924e2d55707bc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:d9:c4:c8:87:9e:b9:16:57:36:83:fe:2a:
0e:ce:1e:d6:01:d8:4c:91:db:87:2d:0a:85:46:27:
57:6c:17:57:11:5d:4b:a6:99:a8:34:4e:a2:04:60:
d8:af:b7:4f:0e:4c:54:70:53:e1:0a:09:4f:f5:c8:
cd:78:94:c4:06:30:73:ee:f8:24:b2:ed:ff:3c:5d:
0a:fb:18:82:0b:31:7d:66:c0:2c:a2:44:0e:a8:44:
dc:a7:56:6d:6e:f1:86:c8:6f:b3:4a:41:dd:dc:f0:
5e:fa:38:0c:7c:92:1a:f1:5f:ec:b9:9d:8c:68:fc:
92:88:0b:c4:51:a7:e1:3f:39:8f:cf:38:85:fc:82:
e1:98:63:a5:ac:dc:d8:cc:67:2b:8d:db:27:aa:cc:
8e:9a:05:6f:5b:87:f0:60:e6:bf:64:74:d4:28:c3:
6a:75:cc:bd:82:e8:65:93:91:48:00:23:b6:ce:60:
fd:af:3d:93:55:e4:0e:8f:fd:89:a6:a1:c0:27:e5:
01:bb:5f:d8:32:21:26:18:74:51:86:d0:8d:66:0f:
e8:89:2c:97:92:4e:69:b4:64:3b:d1:b0:87:cd:3f:
92:4c:fc:00:5e:78:f1:97:f3:e6:8c:3e:d2:cc:cc:
2b:df:cc:2d:bb:a8:c0:8c:7d:e4:8c:7b:2e:74:ee:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CB:A7:EA:D4:7C:50:84:89:E5:44:F9:09:24:E2:D5:57:07:BC:86
X509v3 Authority Key Identifier:
keyid:DD:B7:B0:01:9E:19:F1:12:F4:D2:BC:FD:6E:A1:2D:90:81:FC:58:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:9c:99:df:d5:bc:11:24:45:43:7d:04:37:84:4d:72:dc:d5:
44:27:c0:a5:df:b7:0a:c7:6a:4e:e8:b1:e7:56:16:ed:5c:a5:
2d:4a:f5:10:9a:48:9b:26:ec:d6:fa:58:6b:f0:e9:4f:18:fc:
d3:d5:a1:bd:de:57:f7:53:96:b2:5f:d7:09:69:6d:a0:f0:11:
aa:03:a1:ec:cc:e8:3c:36:0c:4e:d6:3e:5e:be:de:a0:a6:e8:
e9:23:1c:72:d3:79:82:8f:cf:70:89:0d:77:13:a1:84:15:86:
f1:52:63:48:26:1b:75:4e:a5:c0:8f:f4:5c:bb:37:98:ef:0f:
0b:29:d5:eb:7d:1e:11:0b:2c:e9:86:8d:e7:c2:fa:4a:33:96:
49:f9:4a:d8:93:85:22:75:f2:d1:58:97:38:ec:14:39:e9:b5:
9a:e6:ae:90:f0:e1:f6:dd:7c:37:4c:23:92:d9:e0:a0:3f:ea:
72:b1:8d:85:07:aa:fe:ae:cb:ed:e3:0e:15:5f:95:52:9e:b6:
36:e9:2f:a5:4a:82:d2:90:62:58:75:d8:38:3e:19:51:68:45:
8e:7f:2f:69:8f:af:17:40:af:95:10:3d:46:12:c3:c1:81:fe:
81:95:17:2c:7d:45:e4:33:9b:3e:20:5b:90:01:d0:fd:6c:19:
94:3f:3c:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PDnjlRYigPjt9KsaAMsRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYjdiMDAxOWUxOWYxMTJmNGQyYmNmZDZlYTEyZDkwODFm
YzU4N2UwHhcNMjUwMTMxMTIwMDUxWhcNMjUwMjAxMTIwMDUxWjAzMTEwLwYDVQQD
Eyg0NGNiYTdlYWQ0N2M1MDg0ODllNTQ0ZjkwOTI0ZTJkNTU3MDdiYzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzfZxMiHnrkWVzaD/ioOzh7WAdhM
kduHLQqFRidXbBdXEV1LppmoNE6iBGDYr7dPDkxUcFPhCglP9cjNeJTEBjBz7vgk
su3/PF0K+xiCCzF9ZsAsokQOqETcp1ZtbvGGyG+zSkHd3PBe+jgMfJIa8V/suZ2M
aPySiAvEUafhPzmPzziF/ILhmGOlrNzYzGcrjdsnqsyOmgVvW4fwYOa/ZHTUKMNq
dcy9guhlk5FIACO2zmD9rz2TVeQOj/2JpqHAJ+UBu1/YMiEmGHRRhtCNZg/oiSyX
kk5ptGQ70bCHzT+STPwAXnjxl/PmjD7SzMwr38wtu6jAjH3kjHsudO5oLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETLp+rUfFCEieVE+Qkk4tVXB7yGMB8GA1UdIwQY
MBaAFN23sAGeGfES9NK8/W6hLZCB/Fh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2Jld0FaNFo4UkwwMHJ6OWJxRXRrSUg4V0g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9lZmEzZjEtNzY3MS00Y2UzLTlmZTEt
YTg2ZGY5ODNhNzRjLzEvM2Jld0FaNFo4UkwwMHJ6OWJxRXRrSUg4V0g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9lZmEzZjEtNzY3MS00Y2UzLTlmZTEtYTg2ZGY5ODNhNzRj
LzEvM2Jld0FaNFo4UkwwMHJ6OWJxRXRrSUg4V0g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwpyZ39W8
ESRFQ30EN4RNctzVRCfApd+3CsdqTuix51YW7VylLUr1EJpImybs1vpYa/DpTxj8
09Whvd5X91OWsl/XCWltoPARqgOh7MzoPDYMTtY+Xr7eoKbo6SMcctN5go/PcIkN
dxOhhBWG8VJjSCYbdU6lwI/0XLs3mO8PCynV630eEQss6YaN58L6SjOWSflK2JOF
InXy0ViXOOwUOem1muaukPDh9t18N0wjktngoD/qcrGNhQeq/q7L7eMOFV+VUp62
NukvpUqC0pBiWHXYOD4ZUWhFjn8vaY+vF0CvlRA9RhLDwYH+gZUXLH1F5DObPiBb
kAHQ/WwZlD88vA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:52:06 2025 by rpki-client