Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
File: Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft (raw, json)
Hash identifier: 6ptxa3BME2vWS4UDpLbtanGbnWqdnWb5zv1RiPqS2dU=
Subject key identifier: 3B:3F:A7:F8:24:9F:67:C8:D5:B0:99:C9:59:92:B8:60:88:8E:37:03
Authority key identifier: 32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
Certificate issuer: /CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Certificate serial: 0194BCA9BBD7F8D436F6A964A08F7A71D0A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
Manifest number: 0C44
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: D1ApEIwb1kjfyIq9DKRzPBBfvvY.roa (hash: xg03oxBmRY8/OHWbSAoqzOUqsR3adUdWhS3XjYzzmwE=)
2: Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl (hash: qVxLrJ78+GVl4Fx0NHKMNeTbtc7rqF3kBjltcJ7WMsI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:bb:d7:f8:d4:36:f6:a9:64:a0:8f:7a:71:d0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=3b3fa7f8249f67c8d5b099c95992b860888e3703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ee:f0:e0:5b:62:e9:9d:4b:02:4e:63:e2:c9:
24:52:62:3a:ad:7f:79:2a:c7:e2:55:18:84:b7:22:
42:6f:6f:40:6b:15:cc:f4:30:ee:08:e1:18:53:f0:
a4:61:78:72:f3:ef:b2:b6:9d:54:4c:d4:a1:53:e2:
a6:9c:a3:d0:0b:32:2e:05:92:5a:58:0c:f6:51:09:
a1:44:44:49:3e:f5:92:2a:90:fa:0e:9f:a0:84:34:
34:d1:31:0a:2b:13:99:70:81:f0:30:14:8f:f6:c7:
91:dc:49:b2:79:28:85:76:35:11:92:b2:3b:87:52:
2a:14:c4:25:47:bc:fb:be:9c:b8:46:7a:22:aa:e3:
8e:43:60:85:bf:1b:79:60:f0:ee:a6:d9:61:14:ac:
3d:22:a4:d2:dd:9d:85:a1:8a:87:fe:f6:76:a1:53:
67:fc:41:c5:ac:f5:c9:25:b1:27:d8:fd:fa:28:f7:
c5:f7:dc:9a:5e:b4:dd:93:02:93:39:95:db:2c:cc:
d6:4a:b2:0e:d1:4a:d0:cd:5e:2f:63:06:1f:94:7f:
54:18:c3:dd:7b:5c:77:70:f1:6d:24:bb:34:08:fb:
47:75:23:fe:9d:5b:76:32:ba:e0:ba:15:d3:c4:ce:
61:5f:18:fd:3a:90:13:86:f5:69:98:d6:54:a2:c9:
57:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3F:A7:F8:24:9F:67:C8:D5:B0:99:C9:59:92:B8:60:88:8E:37:03
X509v3 Authority Key Identifier:
keyid:32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b0:85:77:37:e7:ad:e3:e4:62:5f:c1:00:11:15:84:7e:95:
50:07:2a:cd:f4:31:fc:cc:05:13:5b:57:37:b1:0e:85:19:70:
e7:1d:40:e7:52:c6:9e:5c:b7:e0:3c:d3:1a:d1:d5:b2:5b:3a:
c3:21:30:37:3c:ca:0c:93:71:22:67:dd:3a:8e:d4:02:dc:70:
55:2d:44:15:01:91:10:0b:91:f4:5f:19:76:ae:a8:ea:76:fa:
e0:ae:ff:0d:d2:98:7f:91:f3:ad:44:ee:10:68:63:94:8e:6f:
f1:a1:e0:f0:98:6d:ab:0c:c7:e5:13:9a:e5:12:3f:9b:51:e2:
0a:8f:48:b6:07:27:18:7b:66:38:ff:1b:82:b4:60:3b:7a:79:
13:fb:f4:e5:62:4e:50:28:8c:73:13:57:32:a5:82:d7:a4:9e:
55:01:fb:a2:0a:30:18:b0:8f:ad:9d:a0:8c:9c:48:20:6d:80:
e3:66:d5:12:87:b5:7f:96:04:a8:5e:eb:eb:20:38:bf:7c:18:
1d:61:69:b4:08:d1:6b:98:71:b6:29:44:97:6f:b2:ec:5f:66:
ad:15:33:84:04:0d:19:8a:f1:40:c1:81:b0:17:a0:9e:58:a6:
b2:5c:7b:35:48:2c:16:05:ca:7d:97:52:6a:c1:26:ea:99:08:
cf:94:15:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qbvX+NQ29qlkoI96cdCoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYmRlY2YyYjFhNDEwZjY1MjNjMjBlNjMwODI2NzA5Y2I2
ZGFjMTkwHhcNMjUwMTMxMTQwMDI3WhcNMjUwMjAxMTQwMDI3WjAzMTEwLwYDVQQD
EygzYjNmYTdmODI0OWY2N2M4ZDViMDk5Yzk1OTkyYjg2MDg4OGUzNzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO7w4Fti6Z1LAk5j4skkUmI6rX95
KsfiVRiEtyJCb29AaxXM9DDuCOEYU/CkYXhy8++ytp1UTNShU+KmnKPQCzIuBZJa
WAz2UQmhRERJPvWSKpD6Dp+ghDQ00TEKKxOZcIHwMBSP9seR3EmyeSiFdjURkrI7
h1IqFMQlR7z7vpy4RnoiquOOQ2CFvxt5YPDuptlhFKw9IqTS3Z2FoYqH/vZ2oVNn
/EHFrPXJJbEn2P36KPfF99yaXrTdkwKTOZXbLMzWSrIO0UrQzV4vYwYflH9UGMPd
e1x3cPFtJLs0CPtHdSP+nVt2MrrguhXTxM5hXxj9OpAThvVpmNZUoslXvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDs/p/gkn2fI1bCZyVmSuGCIjjcDMB8GA1UdIwQY
MBaAFDK97PKxpBD2Ujwg5jCCZwnLbawZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXIzczhyR2tFUFpTUENEbU1JSm5DY3R0ckJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9lMTU0NGItMWIyYy00ZWJkLTg2NTgt
Nzc4MzllYjVmODIwLzEvTXIzczhyR2tFUFpTUENEbU1JSm5DY3R0ckJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9lMTU0NGItMWIyYy00ZWJkLTg2NTgtNzc4MzllYjVmODIw
LzEvTXIzczhyR2tFUFpTUENEbU1JSm5DY3R0ckJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7CFdzfn
rePkYl/BABEVhH6VUAcqzfQx/MwFE1tXN7EOhRlw5x1A51LGnly34DzTGtHVsls6
wyEwNzzKDJNxImfdOo7UAtxwVS1EFQGREAuR9F8Zdq6o6nb64K7/DdKYf5HzrUTu
EGhjlI5v8aHg8JhtqwzH5ROa5RI/m1HiCo9ItgcnGHtmOP8bgrRgO3p5E/v05WJO
UCiMcxNXMqWC16SeVQH7ogowGLCPrZ2gjJxIIG2A42bVEoe1f5YEqF7r6yA4v3wY
HWFptAjRa5hxtilEl2+y7F9mrRUzhAQNGYrxQMGBsBegnlimslx7NUgsFgXKfZdS
asEm6pkIz5QVqQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:44 2025 by rpki-client