Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft
File: 3x4tS9NitiuARQIdw1CxIOVTAmU.mft (raw, json)
Hash identifier: ha2Vz8iB2ki8Gd+iJ1mPdXnPRjuGes3sqLxjh2bNPBs=
Subject key identifier: E3:6E:8F:A1:65:EF:6A:C5:C4:88:99:C9:BF:88:F3:F5:8E:B1:B0:04
Authority key identifier: DF:1E:2D:4B:D3:62:B6:2B:80:45:02:1D:C3:50:B1:20:E5:53:02:65
Certificate issuer: /CN=df1e2d4bd362b62b8045021dc350b120e5530265
Certificate serial: 0194BD8562374ACA5EE81F3C7299994F8610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3x4tS9NitiuARQIdw1CxIOVTAmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft
Manifest number: 120A
Signing time: Fri 31 Jan 2025 18:00:22 +0000
Manifest this update: Fri 31 Jan 2025 18:00:22 +0000
Manifest next update: Sat 01 Feb 2025 18:00:22 +0000
Files and hashes: 1: 3x4tS9NitiuARQIdw1CxIOVTAmU.crl (hash: 82dq1a59qLUuKeBGsEsaiI/Z3VdAV+PXk5loDTiItIo=)
2: MYuqoMzDVi1acZcNDb9FA7d3gCM.roa (hash: tUaun7mhti9TK8aJqqe0a+bLVD50ReQW/RjSFMudsMM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:62:37:4a:ca:5e:e8:1f:3c:72:99:99:4f:86:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df1e2d4bd362b62b8045021dc350b120e5530265
Validity
Not Before: Jan 31 18:00:22 2025 GMT
Not After : Feb 1 18:00:22 2025 GMT
Subject: CN=e36e8fa165ef6ac5c48899c9bf88f3f58eb1b004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8f:40:bd:3e:e7:26:74:cd:48:68:cf:3a:28:
01:a6:8c:7b:b7:b3:46:55:9c:9a:14:e4:24:19:59:
dd:44:8a:4a:7b:43:60:1d:02:aa:2e:de:1a:90:1d:
ae:fa:c6:a3:5b:51:ad:12:5d:fe:05:be:e2:41:71:
91:b8:be:ce:fb:6f:4b:bd:4c:0e:8e:7b:79:d5:49:
02:0a:6d:bd:59:81:36:49:97:7f:17:3d:bd:f7:8b:
6c:7c:e5:33:60:82:bd:38:76:ea:6f:7d:02:8d:69:
20:e1:ac:0c:27:9a:9d:dc:12:3d:cb:26:0d:11:e3:
94:ea:0f:a1:67:34:ca:4c:6e:57:2d:cd:8d:c6:c8:
69:84:f7:14:34:26:f6:5d:5e:03:24:66:97:d7:83:
45:35:d1:c2:db:0e:81:3c:da:a5:5f:44:bd:57:ec:
6a:2c:83:f4:0c:97:19:ce:8e:60:d4:94:24:65:0f:
db:e1:cf:ce:ef:9d:26:e1:7a:8d:24:5e:06:22:fd:
a8:86:6f:a5:ff:ba:d9:dd:18:36:61:b1:46:e2:53:
4e:79:9b:26:93:c2:c9:fb:bc:19:10:5d:aa:c5:35:
62:96:fb:26:eb:f0:f6:af:4f:69:39:4c:b4:34:65:
f1:95:92:d7:10:21:19:c2:6f:89:4c:78:35:ff:8b:
60:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6E:8F:A1:65:EF:6A:C5:C4:88:99:C9:BF:88:F3:F5:8E:B1:B0:04
X509v3 Authority Key Identifier:
keyid:DF:1E:2D:4B:D3:62:B6:2B:80:45:02:1D:C3:50:B1:20:E5:53:02:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3x4tS9NitiuARQIdw1CxIOVTAmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:65:de:3e:fc:f8:76:c9:b1:b7:ce:ea:18:0d:6f:2a:b4:b4:
0d:be:13:38:df:a0:10:58:b6:7a:ec:f6:f1:99:01:db:15:d8:
c8:ac:52:4a:41:65:8f:5b:e9:5f:1c:92:c9:9d:e1:75:a4:01:
09:70:12:25:67:75:55:2d:24:19:a3:58:57:81:08:08:c1:e1:
b8:56:ea:cd:0d:d0:65:7d:00:0f:87:40:fc:80:a6:f5:00:3b:
9c:dc:af:66:fc:92:16:28:04:5b:5d:dd:50:b8:64:7a:2a:8c:
ec:3f:ec:a3:85:46:72:87:4e:97:a5:e6:46:58:0a:05:2d:ab:
89:06:8f:b0:93:42:52:f9:ed:6d:6c:2d:79:df:08:48:99:48:
d1:19:b3:bd:4d:56:18:1e:36:db:e0:e3:cc:fd:2e:de:fa:ff:
89:69:55:17:b7:00:51:b8:eb:0d:b8:bf:74:45:6a:41:dd:e6:
b8:90:c6:c6:44:f3:59:06:57:0d:f3:6a:3c:15:ac:3f:8f:d3:
28:82:06:47:f6:96:cd:6a:86:00:cb:35:bb:6f:bb:00:03:d5:
06:07:c5:d3:7b:bd:5a:90:cf:aa:00:02:3d:82:f7:42:33:84:
0a:bb:11:e7:37:8d:0c:e3:c3:08:4e:84:36:1f:80:6a:09:26:
8e:68:72:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hWI3Sspe6B88cpmZT4YQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMWUyZDRiZDM2MmI2MmI4MDQ1MDIxZGMzNTBiMTIwZTU1
MzAyNjUwHhcNMjUwMTMxMTgwMDIyWhcNMjUwMjAxMTgwMDIyWjAzMTEwLwYDVQQD
EyhlMzZlOGZhMTY1ZWY2YWM1YzQ4ODk5YzliZjg4ZjNmNThlYjFiMDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI9AvT7nJnTNSGjPOigBpox7t7NG
VZyaFOQkGVndRIpKe0NgHQKqLt4akB2u+sajW1GtEl3+Bb7iQXGRuL7O+29LvUwO
jnt51UkCCm29WYE2SZd/Fz2994tsfOUzYIK9OHbqb30CjWkg4awMJ5qd3BI9yyYN
EeOU6g+hZzTKTG5XLc2NxshphPcUNCb2XV4DJGaX14NFNdHC2w6BPNqlX0S9V+xq
LIP0DJcZzo5g1JQkZQ/b4c/O750m4XqNJF4GIv2ohm+l/7rZ3Rg2YbFG4lNOeZsm
k8LJ+7wZEF2qxTVilvsm6/D2r09pOUy0NGXxlZLXECEZwm+JTHg1/4tgJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONuj6Fl72rFxIiZyb+I8/WOsbAEMB8GA1UdIwQY
MBaAFN8eLUvTYrYrgEUCHcNQsSDlUwJlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3g0dFM5Tml0aXVBUlFJZHcxQ3hJT1ZUQW1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8yODc5ZmItNjI5Yy00YWJmLWEzNWYt
MDNhZmFlNjg4NjU3LzEvM3g0dFM5Tml0aXVBUlFJZHcxQ3hJT1ZUQW1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8yODc5ZmItNjI5Yy00YWJmLWEzNWYtMDNhZmFlNjg4NjU3
LzEvM3g0dFM5Tml0aXVBUlFJZHcxQ3hJT1ZUQW1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2XePvz4
dsmxt87qGA1vKrS0Db4TON+gEFi2euz28ZkB2xXYyKxSSkFlj1vpXxySyZ3hdaQB
CXASJWd1VS0kGaNYV4EICMHhuFbqzQ3QZX0AD4dA/ICm9QA7nNyvZvySFigEW13d
ULhkeiqM7D/so4VGcodOl6XmRlgKBS2riQaPsJNCUvntbWwted8ISJlI0RmzvU1W
GB422+DjzP0u3vr/iWlVF7cAUbjrDbi/dEVqQd3muJDGxkTzWQZXDfNqPBWsP4/T
KIIGR/aWzWqGAMs1u2+7AAPVBgfF03u9WpDPqgACPYL3QjOECrsR5zeNDOPDCE6E
Nh+AagkmjmhyuA==
-----END CERTIFICATE-----
Generated at Thu May 1 10:27:59 2025 by rpki-client