Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
File: s2dOgi84dtJ96u1fZtvpwaQi6xY.mft (raw, json)
Hash identifier: qcH9bAMKyKplSQMQeOQeOOKOSTUfaH1ybipuYShdeas=
Subject key identifier: BE:CE:DA:9B:4D:3D:FF:BB:7E:58:C6:1D:D6:85:0C:40:A3:32:13:E9
Authority key identifier: B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
Certificate issuer: /CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Certificate serial: 0194BD85743D0567FCA6B310ABFA717D042C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
Manifest number: 03FB
Signing time: Fri 31 Jan 2025 18:00:27 +0000
Manifest this update: Fri 31 Jan 2025 18:00:27 +0000
Manifest next update: Sat 01 Feb 2025 18:00:27 +0000
Files and hashes: 1: Hp67PMrclU6Oy8HoEk9-JZtx1cc.roa (hash: li29o2DTl2tNGox92xw6fMg+8v2QWgjsqdhJ8rxpiwA=)
2: qUlLIE5OvssPved2_GU9Z8GFglU.roa (hash: S7bFZ1rRYB+JTmrHRfuu5cY821Jfik9JjzyPO/AFRnM=)
3: s2dOgi84dtJ96u1fZtvpwaQi6xY.crl (hash: 1CyEEvMvUKMSkgyPSfCCnl1v6zHdVhggwq0V/D4WPRc=)
4: uYiiAg8Ud-0oiDfgxqXqon1wC9o.roa (hash: rUWimPluoRLQyYZlx7uTTf4NkeDJ7x9s+vizFEzBobk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:74:3d:05:67:fc:a6:b3:10:ab:fa:71:7d:04:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Validity
Not Before: Jan 31 18:00:27 2025 GMT
Not After : Feb 1 18:00:27 2025 GMT
Subject: CN=beceda9b4d3dffbb7e58c61dd6850c40a33213e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c4:32:b6:b8:29:1a:de:87:4c:44:19:6d:80:
ec:9d:fc:81:1b:5e:04:bf:54:f9:0f:d5:7f:39:e1:
37:1b:cd:3a:0a:7e:a6:cb:a1:a0:ed:79:a7:56:8a:
99:f3:9d:32:34:85:b6:04:1f:cf:ba:0b:d1:ef:77:
25:5c:33:7f:e6:cd:df:89:2d:7b:88:f5:52:d3:5b:
ba:12:db:85:42:e1:ca:a5:fc:8b:9a:37:95:47:7c:
6c:83:da:06:ae:06:cc:c6:1b:3d:2b:c3:ec:3d:05:
2a:de:e1:c2:71:53:c5:4a:9a:fa:5d:1b:01:0a:a0:
64:38:e3:14:ad:5e:24:a1:47:90:87:7b:dd:46:ad:
59:45:11:e2:dd:25:64:34:9a:4d:04:fe:ea:cb:de:
a1:ea:0f:3f:00:d8:29:99:6a:79:29:ae:ce:c6:40:
0f:32:90:d5:17:17:84:83:34:2e:9e:62:b8:34:d5:
3b:a0:be:83:f2:6c:7e:4f:73:c1:a8:6e:cd:52:ba:
85:7f:31:dc:67:97:fd:cb:c3:2b:d4:c3:b3:88:0f:
af:22:4c:98:f7:31:3f:10:b5:57:db:02:23:55:2f:
8c:cc:01:c1:32:e1:8a:12:0b:bc:37:9a:61:7a:95:
5b:cd:61:e9:79:f0:98:ae:1c:d2:e6:19:e7:76:e5:
6a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CE:DA:9B:4D:3D:FF:BB:7E:58:C6:1D:D6:85:0C:40:A3:32:13:E9
X509v3 Authority Key Identifier:
keyid:B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:43:9e:76:a4:fb:a9:ea:eb:7a:c6:1d:c6:71:b0:87:56:43:
bd:5e:d0:84:c0:e6:22:ed:91:df:fd:85:ff:6e:dd:fe:61:85:
24:ac:af:46:da:43:19:f9:06:12:9f:36:f8:c8:dc:73:d3:ca:
e3:5e:70:fa:83:2c:dc:ac:7f:d3:94:c9:8f:d7:7b:65:4d:ad:
d4:f7:75:cf:bf:4c:46:b5:9a:71:ef:f8:cc:b6:09:6e:2a:cb:
81:c3:c6:c9:6d:22:84:4a:19:2b:aa:b2:7d:24:a6:ee:92:b6:
65:d6:37:f1:ef:6e:c2:2d:a2:ad:64:d5:cc:41:af:ff:37:17:
1f:9c:d7:8e:46:92:d1:74:21:99:a2:f7:ae:34:1b:48:2e:ff:
47:90:e5:5c:e2:7d:c4:64:a8:a1:17:fc:f1:53:77:0a:a6:26:
b4:a7:e5:d3:fc:af:12:20:8b:7e:78:24:e1:5c:a7:99:9b:91:
c8:e2:65:c3:1b:1d:09:51:af:0c:d6:3b:17:81:6a:77:ca:0f:
fd:f8:f5:a4:cb:00:44:0f:50:28:db:71:30:33:fa:93:ff:57:
c1:5b:ff:6f:06:81:32:9a:e4:d4:d9:cd:77:2d:47:72:87:cc:
e2:5e:00:fd:a2:73:aa:87:9d:fd:67:21:49:09:eb:d4:83:ad:
61:e1:e5:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hXQ9BWf8prMQq/pxfQQsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNjc0ZTgyMmYzODc2ZDI3ZGVhZWQ1ZjY2ZGJlOWMxYTQy
MmViMTYwHhcNMjUwMTMxMTgwMDI3WhcNMjUwMjAxMTgwMDI3WjAzMTEwLwYDVQQD
EyhiZWNlZGE5YjRkM2RmZmJiN2U1OGM2MWRkNjg1MGM0MGEzMzIxM2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8QytrgpGt6HTEQZbYDsnfyBG14E
v1T5D9V/OeE3G806Cn6my6Gg7XmnVoqZ850yNIW2BB/PugvR73clXDN/5s3fiS17
iPVS01u6EtuFQuHKpfyLmjeVR3xsg9oGrgbMxhs9K8PsPQUq3uHCcVPFSpr6XRsB
CqBkOOMUrV4koUeQh3vdRq1ZRRHi3SVkNJpNBP7qy96h6g8/ANgpmWp5Ka7OxkAP
MpDVFxeEgzQunmK4NNU7oL6D8mx+T3PBqG7NUrqFfzHcZ5f9y8Mr1MOziA+vIkyY
9zE/ELVX2wIjVS+MzAHBMuGKEgu8N5phepVbzWHpefCYrhzS5hnnduVqIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7O2ptNPf+7fljGHdaFDECjMhPpMB8GA1UdIwQY
MBaAFLNnToIvOHbSfertX2bb6cGkIusWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczJkT2dpODRkdEo5NnUxZlp0dnB3YVFpNnhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zOTMyNTEtYjQ4OC00MGQzLWJlMzkt
ZjhmMDhmZTY0ODM4LzEvczJkT2dpODRkdEo5NnUxZlp0dnB3YVFpNnhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8zOTMyNTEtYjQ4OC00MGQzLWJlMzktZjhmMDhmZTY0ODM4
LzEvczJkT2dpODRkdEo5NnUxZlp0dnB3YVFpNnhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUUOedqT7
qerresYdxnGwh1ZDvV7QhMDmIu2R3/2F/27d/mGFJKyvRtpDGfkGEp82+Mjcc9PK
415w+oMs3Kx/05TJj9d7ZU2t1Pd1z79MRrWace/4zLYJbirLgcPGyW0ihEoZK6qy
fSSm7pK2ZdY38e9uwi2irWTVzEGv/zcXH5zXjkaS0XQhmaL3rjQbSC7/R5DlXOJ9
xGSooRf88VN3CqYmtKfl0/yvEiCLfngk4VynmZuRyOJlwxsdCVGvDNY7F4Fqd8oP
/fj1pMsARA9QKNtxMDP6k/9XwVv/bwaBMprk1NnNdy1HcofM4l4A/aJzqoed/Wch
SQnr1IOtYeHlag==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:30 2025 by rpki-client