Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
File: 3y4c6U6IoT84_n-UO3lBa8B6HfA.mft (raw, json)
Hash identifier: Qghwm6ASxqkGUTh1h0ln1HkfQaWRK0IpKZ048DFylYM=
Subject key identifier: 7C:5F:DD:92:DF:3F:1C:48:5C:39:A1:05:EF:FC:80:2D:08:5C:F8:A8
Authority key identifier: DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0
Certificate issuer: /CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0
Certificate serial: 0194BC3BEC88ED46D13196C41795A51D6D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: 3y4c6U6IoT84_n-UO3lBa8B6HfA.crl (hash: YijLYCbNRtdnChNqIjUqZfVj/wOOEJICOF+huc01ozk=)
2: cssion0g3PJ3Xd3t2jaSsbUDiLU.roa (hash: n63LUbsK0+15N0vAETIk0kewzsiQZdMNrmzn6fJSfQI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ec:88:ed:46:d1:31:96:c4:17:95:a5:1d:6d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=7c5fdd92df3f1c485c39a105effc802d085cf8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ed:0a:da:8b:02:71:f6:b2:3f:1f:f5:b6:1f:
b7:7e:f4:db:ed:a1:ef:76:63:7d:10:86:63:8e:1a:
de:a8:69:16:25:69:ca:94:58:ab:c4:a1:3d:2f:36:
de:ce:73:ac:e9:30:e5:47:fb:16:4c:e0:f1:2c:20:
6d:29:a3:cb:49:0f:04:c3:57:95:a3:15:45:39:63:
e2:0a:94:c0:2c:73:71:db:0b:92:5d:94:3f:6e:6d:
8d:5c:84:97:12:e1:cc:db:34:4e:32:c5:7a:b7:39:
de:ee:15:d0:6c:a6:fa:91:69:10:16:9c:92:3e:08:
ea:33:20:0e:00:d0:d4:8a:06:12:71:e2:08:c6:39:
35:ca:08:8c:98:fd:30:e2:58:21:d8:74:36:e6:0b:
d5:59:d5:12:18:31:a8:76:10:3b:5f:8e:53:20:c8:
6c:c2:a9:15:84:7c:3f:96:cc:2e:07:27:75:af:ba:
61:26:8d:16:22:1a:f7:cb:a5:e6:4b:1e:38:d0:72:
b5:f6:c7:c6:b2:00:61:14:2e:a9:a4:2b:d7:09:e5:
89:71:8a:8a:75:2e:18:b8:bf:25:b7:df:ee:fe:34:
c4:8f:68:df:b5:12:d2:e4:06:80:2f:af:54:6b:74:
c6:60:de:29:28:7b:72:b4:b6:00:77:cb:80:fa:5f:
9b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5F:DD:92:DF:3F:1C:48:5C:39:A1:05:EF:FC:80:2D:08:5C:F8:A8
X509v3 Authority Key Identifier:
keyid:DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:80:a7:d6:ca:57:1c:60:b4:d2:10:eb:19:d3:58:38:e7:75:
59:7e:3f:30:d7:1c:55:7b:ac:92:4d:05:88:06:b3:93:17:71:
22:9f:35:83:65:df:29:63:f5:5b:7b:96:4f:6c:90:e9:8d:b4:
08:5b:ec:2d:f2:71:03:d8:49:95:7b:fd:71:9b:dc:78:14:f2:
14:6c:a0:8d:a5:06:d5:b6:7f:df:6e:c3:73:87:c5:93:07:51:
00:22:0b:96:59:d8:87:53:5e:55:00:5f:24:b0:b6:8c:c9:5a:
9b:43:4b:44:c1:e3:75:f0:56:79:b6:27:99:40:ed:4e:fe:a4:
8a:cb:89:e5:df:35:36:69:10:de:38:8d:bc:ef:27:43:d9:41:
3c:9b:b4:24:ce:50:6c:ff:33:c7:53:36:ea:8a:d1:51:51:07:
14:eb:99:65:4e:e7:89:c7:9e:98:3c:8d:e4:06:90:e2:b2:85:
c3:a5:45:80:48:cf:19:66:a1:6f:cc:e7:a7:6e:a6:13:8f:24:
4d:98:50:47:fd:29:c4:bb:9c:3a:5a:72:f2:d1:e6:06:5a:c2:
57:b9:50:b7:e8:81:0b:72:26:ed:44:5d:48:7c:e3:62:d2:7c:
ba:26:b5:39:91:24:1e:1d:24:3e:9c:52:97:52:2f:53:51:f0:
a7:45:64:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O+yI7UbRMZbEF5WlHW1BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMmUxY2U5NGU4OGExM2YzOGZlN2Y5NDNiNzk0MTZiYzA3
YTFkZjAwHhcNMjUwMTMxMTIwMDMxWhcNMjUwMjAxMTIwMDMxWjAzMTEwLwYDVQQD
Eyg3YzVmZGQ5MmRmM2YxYzQ4NWMzOWExMDVlZmZjODAyZDA4NWNmOGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO0K2osCcfayPx/1th+3fvTb7aHv
dmN9EIZjjhreqGkWJWnKlFirxKE9LzbeznOs6TDlR/sWTODxLCBtKaPLSQ8Ew1eV
oxVFOWPiCpTALHNx2wuSXZQ/bm2NXISXEuHM2zROMsV6tzne7hXQbKb6kWkQFpyS
PgjqMyAOANDUigYSceIIxjk1ygiMmP0w4lgh2HQ25gvVWdUSGDGodhA7X45TIMhs
wqkVhHw/lswuByd1r7phJo0WIhr3y6XmSx440HK19sfGsgBhFC6ppCvXCeWJcYqK
dS4YuL8lt9/u/jTEj2jftRLS5AaAL69Ua3TGYN4pKHtytLYAd8uA+l+bfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxf3ZLfPxxIXDmhBe/8gC0IXPioMB8GA1UdIwQY
MBaAFN8uHOlOiKE/OP5/lDt5QWvAeh3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3k0YzZVNklvVDg0X24tVU8zbEJhOEI2SGZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83OGQ4ZjQtM2UwZi00YmJlLTkyMTQt
NTM3NGM3ZTBmZmExLzEvM3k0YzZVNklvVDg0X24tVU8zbEJhOEI2SGZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi83OGQ4ZjQtM2UwZi00YmJlLTkyMTQtNTM3NGM3ZTBmZmEx
LzEvM3k0YzZVNklvVDg0X24tVU8zbEJhOEI2SGZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADICn1spX
HGC00hDrGdNYOOd1WX4/MNccVXuskk0FiAazkxdxIp81g2XfKWP1W3uWT2yQ6Y20
CFvsLfJxA9hJlXv9cZvceBTyFGygjaUG1bZ/327Dc4fFkwdRACILllnYh1NeVQBf
JLC2jMlam0NLRMHjdfBWebYnmUDtTv6kisuJ5d81NmkQ3jiNvO8nQ9lBPJu0JM5Q
bP8zx1M26orRUVEHFOuZZU7niceemDyN5AaQ4rKFw6VFgEjPGWahb8znp26mE48k
TZhQR/0pxLucOlpy8tHmBlrCV7lQt+iBC3Im7URdSHzjYtJ8uia1OZEkHh0kPpxS
l1IvU1Hwp0Vk7A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:17:57 2025 by rpki-client