Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
File: 3SBri9IhV0yWWSRDGVuQBXacck0.mft (raw, json)
Hash identifier: XrjTUUFgTqhTcattMLNFctdaG4cSvpJ8f2wqcmHihdw=
Subject key identifier: A0:59:EE:0B:6B:B0:CE:50:8C:85:22:F0:EC:DF:34:27:B6:26:7C:9A
Authority key identifier: DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
Certificate issuer: /CN=dd206b8bd221574c96592443195b9005769c724d
Certificate serial: 0194BC7309932103415FDE7522E460CB69F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 13:00:43 +0000
Manifest this update: Fri 31 Jan 2025 13:00:43 +0000
Manifest next update: Sat 01 Feb 2025 13:00:43 +0000
Files and hashes: 1: 3SBri9IhV0yWWSRDGVuQBXacck0.crl (hash: lALksWgTObTH1h9tiAEUDzO5pXRSuA9DIgxIQjBU7Yc=)
2: 5cvTQhZb21i8dsjZHSMpM2dxt9k.roa (hash: Jg1xw/OZvnd1OLClxYEzrvwZ5HBLqquVy880Rp6Vr+E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:09:93:21:03:41:5f:de:75:22:e4:60:cb:69:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd206b8bd221574c96592443195b9005769c724d
Validity
Not Before: Jan 31 13:00:43 2025 GMT
Not After : Feb 1 13:00:43 2025 GMT
Subject: CN=a059ee0b6bb0ce508c8522f0ecdf3427b6267c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:f5:7b:07:03:0b:8e:3b:d5:37:6e:0a:f5:
9b:e8:5d:4c:07:cf:88:71:c8:1b:28:85:bf:8b:3f:
a2:57:e7:93:c8:77:d6:3e:b4:da:a2:0f:27:cf:87:
83:18:19:a9:84:ac:17:8e:1e:14:1f:e9:9b:a1:80:
46:38:45:3e:4d:f9:70:8d:08:c3:94:a9:76:d1:24:
3e:e5:73:5a:4d:31:52:84:d5:9d:46:2d:52:5a:23:
99:19:86:fb:6d:4c:e7:3e:b5:9a:bf:10:9a:ec:6f:
b8:e6:93:78:3c:a8:c3:27:0e:44:fe:b5:49:3a:c2:
63:a0:1b:81:26:4d:16:80:e5:c4:d9:0a:89:7a:d4:
69:97:67:92:17:05:3f:70:29:80:d9:cb:c3:03:6f:
d1:97:f0:0d:83:5d:8c:02:5b:7f:58:03:e0:41:69:
17:d8:3d:eb:a3:24:97:de:9a:e2:3e:86:6a:cd:ab:
10:79:7a:3b:bf:37:3e:a8:b1:b2:c3:e8:7a:61:a6:
a0:ec:5a:b8:0c:e7:4b:67:0d:a2:25:a5:ad:5a:b1:
31:83:d3:2d:5e:84:95:7a:7b:fc:62:05:cd:86:b8:
ae:af:54:77:87:11:f1:8d:19:c8:4f:41:2b:52:29:
e6:27:28:b0:7a:1c:e3:86:34:cb:60:ae:5a:33:ad:
ac:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:59:EE:0B:6B:B0:CE:50:8C:85:22:F0:EC:DF:34:27:B6:26:7C:9A
X509v3 Authority Key Identifier:
keyid:DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d6:d7:db:e9:44:00:6c:59:f9:9f:48:76:bb:3d:c1:9e:2f:
83:c9:ae:55:01:80:b2:de:c8:d6:96:d6:5d:d7:7a:47:fd:9d:
c4:99:c3:8b:da:51:27:6a:d9:b5:e7:ca:5f:94:99:48:5f:90:
81:4a:ee:a8:5e:ca:b3:e2:23:cb:d3:94:47:a4:46:80:5e:79:
83:03:34:22:19:8f:c9:bf:2f:5c:03:99:96:0a:e1:f9:64:d1:
1e:df:c5:18:58:5e:14:6f:b8:f6:19:02:3a:f5:20:ee:42:c0:
cc:ba:8d:cd:7d:a2:2a:a1:81:f7:4c:b4:29:dd:96:47:2d:ae:
fd:65:35:32:7e:e8:dc:1a:2d:12:fb:e3:a2:22:c0:6e:c9:91:
f9:0c:f9:bb:73:7c:e5:be:13:10:be:6b:e2:60:01:6d:5b:f9:
37:d9:10:49:3d:47:dc:1f:f9:0e:46:f5:d2:f5:c5:c4:37:79:
f9:1b:e6:98:5d:98:66:d0:f5:88:bf:e0:94:dd:e6:49:9c:25:
df:6b:4f:15:04:98:e6:e6:6e:eb:bd:c3:30:64:a3:ff:85:6f:
d5:b8:ea:0b:1c:be:40:01:f2:37:18:7f:cd:ba:e4:4b:ea:56:
74:6d:b7:80:54:7d:df:e9:c4:ea:47:eb:af:3d:4a:09:52:9f:
ba:45:14:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cwmTIQNBX951IuRgy2nwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMjA2YjhiZDIyMTU3NGM5NjU5MjQ0MzE5NWI5MDA1NzY5
YzcyNGQwHhcNMjUwMTMxMTMwMDQzWhcNMjUwMjAxMTMwMDQzWjAzMTEwLwYDVQQD
EyhhMDU5ZWUwYjZiYjBjZTUwOGM4NTIyZjBlY2RmMzQyN2I2MjY3YzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR71ewcDC4471TduCvWb6F1MB8+I
ccgbKIW/iz+iV+eTyHfWPrTaog8nz4eDGBmphKwXjh4UH+mboYBGOEU+TflwjQjD
lKl20SQ+5XNaTTFShNWdRi1SWiOZGYb7bUznPrWavxCa7G+45pN4PKjDJw5E/rVJ
OsJjoBuBJk0WgOXE2QqJetRpl2eSFwU/cCmA2cvDA2/Rl/ANg12MAlt/WAPgQWkX
2D3roySX3priPoZqzasQeXo7vzc+qLGyw+h6Yaag7Fq4DOdLZw2iJaWtWrExg9Mt
XoSVenv8YgXNhriur1R3hxHxjRnIT0ErUinmJyiwehzjhjTLYK5aM62s0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBZ7gtrsM5QjIUi8OzfNCe2JnyaMB8GA1UdIwQY
MBaAFN0ga4vSIVdMllkkQxlbkAV2nHJNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1NCcmk5SWhWMHlXV1NSREdWdVFCWGFjY2swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lYmM3OGItNTc4Yy00YTRmLTlhNGUt
ZTI5MTU3Njc5NjA0LzEvM1NCcmk5SWhWMHlXV1NSREdWdVFCWGFjY2swLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9lYmM3OGItNTc4Yy00YTRmLTlhNGUtZTI5MTU3Njc5NjA0
LzEvM1NCcmk5SWhWMHlXV1NSREdWdVFCWGFjY2swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtbX2+lE
AGxZ+Z9Idrs9wZ4vg8muVQGAst7I1pbWXdd6R/2dxJnDi9pRJ2rZtefKX5SZSF+Q
gUruqF7Ks+Ijy9OUR6RGgF55gwM0IhmPyb8vXAOZlgrh+WTRHt/FGFheFG+49hkC
OvUg7kLAzLqNzX2iKqGB90y0Kd2WRy2u/WU1Mn7o3BotEvvjoiLAbsmR+Qz5u3N8
5b4TEL5r4mABbVv5N9kQST1H3B/5Dkb10vXFxDd5+RvmmF2YZtD1iL/glN3mSZwl
32tPFQSY5uZu673DMGSj/4Vv1bjqCxy+QAHyNxh/zbrkS+pWdG23gFR93+nE6kfr
rz1KCVKfukUU4g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:34:32 2025 by rpki-client