Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5cc4d6-42fd-4406-84ae-480fd84a841f/1/3W2WGgYrcca_r9m6jqaf3R-mOAI.mft
File: 3W2WGgYrcca_r9m6jqaf3R-mOAI.mft (raw, json)
Hash identifier: /yhYmrXCcNvVC5xBhqiGGcQzK21yFwO16Dj0FjEnVtU=
Subject key identifier: 3B:F1:0C:39:C7:2B:1A:8E:F1:04:76:40:C1:69:54:9E:78:6A:15:AD
Authority key identifier: DD:6D:96:1A:06:2B:71:C6:BF:AF:D9:BA:8E:A6:9F:DD:1F:A6:38:02
Certificate issuer: /CN=dd6d961a062b71c6bfafd9ba8ea69fdd1fa63802
Certificate serial: 0194BD4E6171BBFD67EC9EFDD825E5B2022C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W2WGgYrcca_r9m6jqaf3R-mOAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5cc4d6-42fd-4406-84ae-480fd84a841f/1/3W2WGgYrcca_r9m6jqaf3R-mOAI.mft
Manifest number: 04
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: 3W2WGgYrcca_r9m6jqaf3R-mOAI.crl (hash: 7ItJAYcqlYyc0VXn7ObF6E2vhd5rK1C/s9yacwBFQYw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:61:71:bb:fd:67:ec:9e:fd:d8:25:e5:b2:02:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6d961a062b71c6bfafd9ba8ea69fdd1fa63802
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=3bf10c39c72b1a8ef1047640c169549e786a15ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:14:f7:bb:95:82:db:9f:07:57:17:a7:0a:50:
6e:14:3a:0e:2e:7f:ac:d1:bf:57:3f:97:5b:98:66:
c8:8f:2a:37:58:c4:f8:b3:07:75:ec:75:c9:9a:44:
8d:a9:42:4c:8f:19:46:75:c6:2e:6e:22:dd:33:17:
64:ed:a5:58:75:97:17:b5:12:83:5b:66:aa:7b:e1:
5b:64:a8:97:7c:30:07:70:48:f8:40:ea:0d:77:bc:
c7:87:73:9a:cd:ae:be:1a:e8:f9:ce:b3:29:42:17:
bb:1c:dd:3b:5f:cd:f7:8e:cc:5c:2e:66:74:1f:55:
97:f3:22:7b:cb:7f:d8:1a:dd:7a:0b:53:a8:07:68:
5a:ad:7b:e0:5b:49:be:16:33:f1:d1:ba:f0:0f:49:
b1:1f:14:fc:c2:f5:07:d9:ca:4d:ab:36:00:87:51:
95:83:75:3c:06:ac:f4:67:68:b9:32:3c:e1:fe:54:
83:d3:97:23:2d:35:f0:cd:c9:c7:23:29:4e:ee:8a:
db:61:78:67:7c:89:9e:22:74:8b:98:bc:d8:27:60:
51:df:8f:75:e7:f6:ff:f9:6d:67:4c:1b:10:cb:f2:
39:9b:ff:b7:04:3b:18:b9:8b:7c:84:ba:ae:a2:33:
9f:60:70:80:1e:d2:24:b4:be:94:91:cc:52:bb:ad:
e1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F1:0C:39:C7:2B:1A:8E:F1:04:76:40:C1:69:54:9E:78:6A:15:AD
X509v3 Authority Key Identifier:
keyid:DD:6D:96:1A:06:2B:71:C6:BF:AF:D9:BA:8E:A6:9F:DD:1F:A6:38:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W2WGgYrcca_r9m6jqaf3R-mOAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5cc4d6-42fd-4406-84ae-480fd84a841f/1/3W2WGgYrcca_r9m6jqaf3R-mOAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5cc4d6-42fd-4406-84ae-480fd84a841f/1/3W2WGgYrcca_r9m6jqaf3R-mOAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:bc:f0:ee:8b:c5:b0:f6:d4:3a:a2:f4:38:a6:69:e6:04:b8:
af:6f:16:0b:b6:97:c0:54:c5:54:38:f5:4b:36:be:61:c3:42:
54:30:fb:d9:7e:a5:dc:3f:ef:09:b8:c7:2d:88:27:29:1d:8c:
cc:9d:5e:85:dd:1f:45:79:2e:70:90:d7:d8:0d:a0:ca:65:af:
46:ad:76:14:0b:ac:fc:0b:52:b7:38:f1:52:f2:15:ce:f6:9f:
15:c7:8e:69:e3:69:80:d5:a1:cd:d2:d6:35:e7:6a:e3:b9:66:
46:bc:9a:fb:22:cf:4b:9e:13:d4:5c:f5:73:83:fb:a3:84:57:
22:ae:49:ea:d0:47:18:d3:93:10:fa:43:f1:6b:b3:06:61:88:
28:3a:88:46:80:d9:12:4f:b4:5b:3d:c0:da:47:80:f6:2f:db:
c1:4f:07:38:9f:0b:50:3f:2d:f0:8f:dd:56:48:b6:57:40:9d:
30:a5:de:c0:d2:19:0f:25:e3:3e:3b:27:ba:51:53:49:b5:23:
b6:24:d1:f5:a6:ba:2c:9d:83:c9:d8:fa:20:f7:8d:60:79:93:
d0:71:e8:46:81:95:55:06:59:43:50:81:ef:36:c8:76:62:40:
1f:08:68:cd:55:ba:32:a8:71:7c:af:c8:19:28:29:23:54:71:
fc:3f:31:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TmFxu/1n7J792CXlsgIsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNmQ5NjFhMDYyYjcxYzZiZmFmZDliYThlYTY5ZmRkMWZh
NjM4MDIwHhcNMjUwMTMxMTcwMDE4WhcNMjUwMjAxMTcwMDE4WjAzMTEwLwYDVQQD
EygzYmYxMGMzOWM3MmIxYThlZjEwNDc2NDBjMTY5NTQ5ZTc4NmExNWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRT3u5WC258HVxenClBuFDoOLn+s
0b9XP5dbmGbIjyo3WMT4swd17HXJmkSNqUJMjxlGdcYubiLdMxdk7aVYdZcXtRKD
W2aqe+FbZKiXfDAHcEj4QOoNd7zHh3Oaza6+Guj5zrMpQhe7HN07X833jsxcLmZ0
H1WX8yJ7y3/YGt16C1OoB2harXvgW0m+FjPx0brwD0mxHxT8wvUH2cpNqzYAh1GV
g3U8Bqz0Z2i5Mjzh/lSD05cjLTXwzcnHIylO7orbYXhnfImeInSLmLzYJ2BR3491
5/b/+W1nTBsQy/I5m/+3BDsYuYt8hLquojOfYHCAHtIktL6UkcxSu63hrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvxDDnHKxqO8QR2QMFpVJ54ahWtMB8GA1UdIwQY
MBaAFN1tlhoGK3HGv6/Zuo6mn90fpjgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1cyV0dnWXJjY2FfcjltNmpxYWYzUi1tT0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81Y2M0ZDYtNDJmZC00NDA2LTg0YWUt
NDgwZmQ4NGE4NDFmLzEvM1cyV0dnWXJjY2FfcjltNmpxYWYzUi1tT0FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS81Y2M0ZDYtNDJmZC00NDA2LTg0YWUtNDgwZmQ4NGE4NDFm
LzEvM1cyV0dnWXJjY2FfcjltNmpxYWYzUi1tT0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr7zw7ovF
sPbUOqL0OKZp5gS4r28WC7aXwFTFVDj1Sza+YcNCVDD72X6l3D/vCbjHLYgnKR2M
zJ1ehd0fRXkucJDX2A2gymWvRq12FAus/AtStzjxUvIVzvafFceOaeNpgNWhzdLW
Nedq47lmRrya+yLPS54T1Fz1c4P7o4RXIq5J6tBHGNOTEPpD8WuzBmGIKDqIRoDZ
Ek+0Wz3A2keA9i/bwU8HOJ8LUD8t8I/dVki2V0CdMKXewNIZDyXjPjsnulFTSbUj
tiTR9aa6LJ2Dydj6IPeNYHmT0HHoRoGVVQZZQ1CB7zbIdmJAHwhozVW6MqhxfK/I
GSgpI1Rx/D8xVw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:41 2025 by rpki-client