Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
File: 3t-aZxvPF4nBtaw2MMdBvlYNraA.mft (raw, json)
Hash identifier: CnBdnZftPs7dKZD8autuW4uj6qREtclhE75GeBzykWg=
Subject key identifier: B7:C5:5B:66:83:19:9C:70:DB:86:78:8D:D0:2C:9A:04:A1:7F:20:C4
Authority key identifier: DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
Certificate issuer: /CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Certificate serial: 0194BD174DA5647288CE4384E4CB14B4ADAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
Manifest number: 0FA1
Signing time: Fri 31 Jan 2025 16:00:08 +0000
Manifest this update: Fri 31 Jan 2025 16:00:08 +0000
Manifest next update: Sat 01 Feb 2025 16:00:08 +0000
Files and hashes: 1: 3t-aZxvPF4nBtaw2MMdBvlYNraA.crl (hash: js8eDkP/tPuQroxtPkYyQ5Xcx6aJ49Sn9B51DcKJ1wA=)
2: RNkRhX3yK-TkHlh9YWWsykby_Dc.roa (hash: vp+4Wych+XwTPbr9Bjf9hawO/Jnhv86eVFw3KntPsww=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4d:a5:64:72:88:ce:43:84:e4:cb:14:b4:ad:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Validity
Not Before: Jan 31 16:00:08 2025 GMT
Not After : Feb 1 16:00:08 2025 GMT
Subject: CN=b7c55b6683199c70db86788dd02c9a04a17f20c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:de:a1:62:56:80:ab:be:09:48:15:fa:62:14:
58:2e:1a:4d:d8:4b:04:c9:62:ed:98:ee:1f:60:2a:
12:14:7f:df:89:0e:ad:c6:8d:dc:26:7a:6a:9a:25:
fd:92:0e:a8:75:f9:6c:d3:96:04:23:66:99:80:20:
1a:bf:8e:ed:5d:e8:32:52:ec:fd:e4:39:7d:25:6d:
8f:f7:2d:72:04:24:ee:cb:5c:08:fa:f4:3e:e9:a5:
30:a1:77:57:ec:7d:60:16:9a:85:70:50:06:84:42:
97:fc:13:d3:a2:6f:da:92:1e:60:be:3b:4d:4d:d2:
ce:7e:c5:e8:87:de:c2:03:d7:88:73:7a:6b:44:f8:
3b:02:d3:8a:de:26:6f:3e:06:55:76:d5:f0:0e:56:
7e:21:06:70:1b:4f:6b:20:e3:71:c3:03:69:4d:91:
1b:20:27:a4:a1:2c:0f:26:7c:ff:6d:d3:31:bb:66:
0b:2a:f9:4b:43:c9:c9:6a:20:46:20:02:52:b5:1a:
a9:57:37:24:9e:a3:9d:09:b8:f6:41:8d:bf:29:16:
ee:9d:1c:28:e9:ff:90:9d:8a:dd:a0:71:05:ee:6a:
ae:ce:a6:91:46:7e:1e:87:56:5a:2c:cf:f5:1e:f8:
fd:da:46:ff:82:a4:58:ca:27:90:b5:39:da:1a:ae:
ca:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C5:5B:66:83:19:9C:70:DB:86:78:8D:D0:2C:9A:04:A1:7F:20:C4
X509v3 Authority Key Identifier:
keyid:DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:78:2b:db:eb:8a:17:20:5e:8b:45:ca:33:15:62:7d:d4:dd:
96:1d:e2:e8:1b:4d:cf:92:83:08:d1:03:37:7c:79:97:98:59:
30:bb:f1:6f:3d:be:c6:a3:85:7b:99:f2:3d:21:9d:07:07:10:
ae:88:fb:1e:b4:cb:7c:a1:da:3b:b3:11:f0:8c:f3:9a:fc:97:
a7:2b:87:ed:0c:6c:7e:fe:00:cb:92:2d:dd:7f:6c:cf:8b:7e:
b0:30:e1:ce:ca:dd:f5:0b:c4:54:43:40:2f:11:1f:c1:54:ce:
20:26:c2:a3:fa:84:25:88:a3:f1:18:15:7f:1a:5d:f7:48:50:
d2:27:2b:a1:d3:4d:54:82:cd:95:7f:4f:7e:08:d0:5b:77:b8:
f9:dd:fe:45:69:a1:4c:d2:45:a0:d4:f6:f6:9b:d7:94:74:ed:
f2:6a:ae:a0:96:51:48:77:40:09:4b:45:71:2d:5e:e7:d6:fc:
bb:92:90:1c:14:b4:ed:d0:f3:df:41:50:d6:90:74:21:64:02:
9d:2f:5b:d0:9b:88:60:12:1d:ee:48:d1:5e:5c:3d:23:3b:20:
46:d6:0a:5c:66:20:03:4f:80:e4:61:ae:6d:d6:6b:66:0c:4c:
52:0f:8d:21:c5:9b:1c:a1:7f:63:7b:1e:d6:37:ab:5f:11:98:
0e:c7:9b:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F02lZHKIzkOE5MsUtK2rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZGY5YTY3MWJjZjE3ODljMWI1YWMzNjMwYzc0MWJlNTYw
ZGFkYTAwHhcNMjUwMTMxMTYwMDA4WhcNMjUwMjAxMTYwMDA4WjAzMTEwLwYDVQQD
EyhiN2M1NWI2NjgzMTk5YzcwZGI4Njc4OGRkMDJjOWEwNGExN2YyMGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0N6hYlaAq74JSBX6YhRYLhpN2EsE
yWLtmO4fYCoSFH/fiQ6txo3cJnpqmiX9kg6odfls05YEI2aZgCAav47tXegyUuz9
5Dl9JW2P9y1yBCTuy1wI+vQ+6aUwoXdX7H1gFpqFcFAGhEKX/BPTom/akh5gvjtN
TdLOfsXoh97CA9eIc3prRPg7AtOK3iZvPgZVdtXwDlZ+IQZwG09rIONxwwNpTZEb
ICekoSwPJnz/bdMxu2YLKvlLQ8nJaiBGIAJStRqpVzcknqOdCbj2QY2/KRbunRwo
6f+QnYrdoHEF7mquzqaRRn4eh1ZaLM/1Hvj92kb/gqRYyieQtTnaGq7KBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfFW2aDGZxw24Z4jdAsmgShfyDEMB8GA1UdIwQY
MBaAFN7fmmcbzxeJwbWsNjDHQb5WDa2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3QtYVp4dlBGNG5CdGF3Mk1NZEJ2bFlOcmFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iYjEzOTYtOWMwNS00ZTE3LWJiYzUt
Nzc2NjA1MDFjNDc4LzEvM3QtYVp4dlBGNG5CdGF3Mk1NZEJ2bFlOcmFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iYjEzOTYtOWMwNS00ZTE3LWJiYzUtNzc2NjA1MDFjNDc4
LzEvM3QtYVp4dlBGNG5CdGF3Mk1NZEJ2bFlOcmFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhXgr2+uK
FyBei0XKMxVifdTdlh3i6BtNz5KDCNEDN3x5l5hZMLvxbz2+xqOFe5nyPSGdBwcQ
roj7HrTLfKHaO7MR8IzzmvyXpyuH7Qxsfv4Ay5It3X9sz4t+sDDhzsrd9QvEVENA
LxEfwVTOICbCo/qEJYij8RgVfxpd90hQ0icrodNNVILNlX9PfgjQW3e4+d3+RWmh
TNJFoNT29pvXlHTt8mquoJZRSHdACUtFcS1e59b8u5KQHBS07dDz30FQ1pB0IWQC
nS9b0JuIYBId7kjRXlw9IzsgRtYKXGYgA0+A5GGubdZrZgxMUg+NIcWbHKF/Y3se
1jerXxGYDsebKg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:54 2025 by rpki-client