Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
File: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft (raw, json)
Hash identifier: 63OakQaoEooIsCyXHOEYWkt3DlamqQyJKRV9yN3bM3s=
Subject key identifier: 42:29:E5:94:8F:58:1A:EC:EF:86:A3:F9:B2:32:E0:23:74:36:94:0B
Authority key identifier: DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88
Certificate issuer: /CN=df180e0543d471dcf0d83860d6be6395c2b88888
Certificate serial: 0194BBCEA1263A10AD7CC67269507B67D23A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
Manifest number: 0786
Signing time: Fri 31 Jan 2025 10:01:08 +0000
Manifest this update: Fri 31 Jan 2025 10:01:08 +0000
Manifest next update: Sat 01 Feb 2025 10:01:08 +0000
Files and hashes: 1: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl (hash: PYfQvdBP4VUECtrmbm/mmPbbHwhME3RRSkzvN5l3XFM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a1:26:3a:10:ad:7c:c6:72:69:50:7b:67:d2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df180e0543d471dcf0d83860d6be6395c2b88888
Validity
Not Before: Jan 31 10:01:08 2025 GMT
Not After : Feb 1 10:01:08 2025 GMT
Subject: CN=4229e5948f581aecef86a3f9b232e0237436940b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:66:fe:26:b8:29:b6:99:86:a0:90:4e:24:71:
78:f3:e3:7f:45:6e:2d:bb:f1:64:37:bc:88:b1:b0:
4a:5e:1e:d6:86:12:b1:90:4f:22:0a:cb:c2:cf:eb:
d2:d1:3b:94:49:b0:83:4f:ee:ac:3b:d0:a5:e2:4b:
02:7f:61:e7:a4:9e:ec:4b:c8:58:42:67:3f:d3:af:
3b:f7:73:99:03:5f:6b:43:6e:a0:f9:02:eb:94:2f:
e5:86:94:51:4c:d7:01:f8:7d:82:00:4e:d8:e3:98:
00:18:a7:15:27:a6:99:2b:ac:f3:f5:77:2a:97:96:
87:b0:60:d2:89:38:8c:a0:06:95:c4:f8:84:c5:56:
73:c8:00:3d:6c:6d:27:2d:d2:29:ce:45:a9:bb:18:
c8:6a:95:92:07:53:6e:52:01:88:b0:22:37:d9:4c:
74:23:e0:0c:7b:0d:e5:e0:e9:b6:9f:20:98:8f:38:
57:00:83:e9:84:1b:5d:35:66:02:af:6d:55:53:2c:
9e:73:fd:40:cb:3e:79:b8:d0:71:c9:49:72:e7:d1:
2a:28:69:de:8a:28:a2:38:99:38:5e:25:1e:a5:80:
1c:c4:29:73:d1:e5:2a:7b:c8:93:67:02:6d:7f:ff:
55:4e:8d:f3:cc:34:df:94:ca:e2:f1:4e:5e:ef:53:
f4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:29:E5:94:8F:58:1A:EC:EF:86:A3:F9:B2:32:E0:23:74:36:94:0B
X509v3 Authority Key Identifier:
keyid:DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:65:b4:a2:a5:32:aa:81:cd:32:51:4d:e1:75:33:37:3f:7f:
00:5d:f1:9d:0c:34:c7:1c:8c:64:06:87:23:30:9a:10:b8:da:
77:e6:53:9a:14:e5:6a:e3:1d:ea:c6:6f:e6:23:70:56:6c:91:
7f:68:ac:22:2b:c2:68:1f:df:dd:e5:5b:f2:fb:48:1a:5a:0c:
78:b4:75:f3:9e:22:c2:ea:c6:48:0b:b5:af:90:78:6c:b7:67:
eb:b4:8c:89:7b:71:7b:f9:dd:2d:80:01:40:d9:55:24:d1:0d:
bc:59:e0:4b:5e:f8:b4:fa:e9:5f:be:7b:7c:fb:d6:0f:bd:55:
aa:49:63:50:9d:a2:90:45:ff:ed:fd:6a:6a:72:1b:f1:f0:c1:
81:03:00:ab:d5:48:9e:a6:d5:48:fe:b8:ac:d6:8e:7b:74:f2:
cb:1b:b2:07:79:fe:9f:e2:74:f2:5f:61:d2:86:ec:7f:f1:a2:
c5:63:e0:bc:0b:ac:15:cc:77:4e:a2:e9:01:a5:1e:0f:5b:e7:
dc:f7:dd:97:5b:4b:3e:93:26:65:4a:3c:01:06:63:38:4d:60:
2b:1b:74:05:cc:9f:d2:f8:9f:dc:ac:e8:4a:0e:a2:75:7b:fe:
ea:37:27:eb:1a:ef:fd:c6:7b:4a:e6:10:cb:f6:81:7a:e7:12:
9d:6e:0d:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zqEmOhCtfMZyaVB7Z9I6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMTgwZTA1NDNkNDcxZGNmMGQ4Mzg2MGQ2YmU2Mzk1YzJi
ODg4ODgwHhcNMjUwMTMxMTAwMTA4WhcNMjUwMjAxMTAwMTA4WjAzMTEwLwYDVQQD
Eyg0MjI5ZTU5NDhmNTgxYWVjZWY4NmEzZjliMjMyZTAyMzc0MzY5NDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmb+JrgptpmGoJBOJHF48+N/RW4t
u/FkN7yIsbBKXh7WhhKxkE8iCsvCz+vS0TuUSbCDT+6sO9Cl4ksCf2HnpJ7sS8hY
Qmc/068793OZA19rQ26g+QLrlC/lhpRRTNcB+H2CAE7Y45gAGKcVJ6aZK6zz9Xcq
l5aHsGDSiTiMoAaVxPiExVZzyAA9bG0nLdIpzkWpuxjIapWSB1NuUgGIsCI32Ux0
I+AMew3l4Om2nyCYjzhXAIPphBtdNWYCr21VUyyec/1Ayz55uNBxyUly59EqKGne
iiiiOJk4XiUepYAcxClz0eUqe8iTZwJtf/9VTo3zzDTflMri8U5e71P0TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIp5ZSPWBrs74aj+bIy4CN0NpQLMB8GA1UdIwQY
MBaAFN8YDgVD1HHc8Ng4YNa+Y5XCuIiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3hnT0JVUFVjZHp3MkRoZzFyNWpsY0s0aUlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8zMGY0MTAtODJiYi00MTFhLWIyYmMt
YzRiMTQ0NmMwZDhiLzEvM3hnT0JVUFVjZHp3MkRoZzFyNWpsY0s0aUlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8zMGY0MTAtODJiYi00MTFhLWIyYmMtYzRiMTQ0NmMwZDhi
LzEvM3hnT0JVUFVjZHp3MkRoZzFyNWpsY0s0aUlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2W0oqUy
qoHNMlFN4XUzNz9/AF3xnQw0xxyMZAaHIzCaELjad+ZTmhTlauMd6sZv5iNwVmyR
f2isIivCaB/f3eVb8vtIGloMeLR1854iwurGSAu1r5B4bLdn67SMiXtxe/ndLYAB
QNlVJNENvFngS174tPrpX757fPvWD71VqkljUJ2ikEX/7f1qanIb8fDBgQMAq9VI
nqbVSP64rNaOe3TyyxuyB3n+n+J08l9h0obsf/GixWPgvAusFcx3TqLpAaUeD1vn
3Pfdl1tLPpMmZUo8AQZjOE1gKxt0Bcyf0vif3KzoSg6idXv+6jcn6xrv/cZ7SuYQ
y/aBeucSnW4Niw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:39 2025 by rpki-client