Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft
File: 3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft (raw, json)
Hash identifier: lhWeVkGW7+5afkLwNo/0MRHR6ci4a+Tds9n4ouzKum4=
Subject key identifier: 6A:9F:4F:20:09:3D:13:BD:50:B4:22:33:C1:86:59:AB:10:14:88:45
Authority key identifier: DD:5B:22:4B:65:93:E5:58:03:8A:9E:40:E6:60:C7:71:42:75:5C:1B
Certificate issuer: /CN=dd5b224b6593e558038a9e40e660c77142755c1b
Certificate serial: 0194BD4EC32AC4E8184D0EA39E7252F61C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VsiS2WT5VgDip5A5mDHcUJ1XBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft
Manifest number: 083C
Signing time: Fri 31 Jan 2025 17:00:43 +0000
Manifest this update: Fri 31 Jan 2025 17:00:43 +0000
Manifest next update: Sat 01 Feb 2025 17:00:43 +0000
Files and hashes: 1: 3VsiS2WT5VgDip5A5mDHcUJ1XBs.crl (hash: 7oksmsl+gNvw7aS2PkzuR1YtuZv5JN9HzBzkRx/TvBY=)
2: jU0yi7PHweJFHYaEaX0jg-4Q_RU.roa (hash: 8PA9xbvSb0ZvYzYhTOCmIzBIyrP4FgGrFueLXskDR54=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c3:2a:c4:e8:18:4d:0e:a3:9e:72:52:f6:1c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5b224b6593e558038a9e40e660c77142755c1b
Validity
Not Before: Jan 31 17:00:43 2025 GMT
Not After : Feb 1 17:00:43 2025 GMT
Subject: CN=6a9f4f20093d13bd50b42233c18659ab10148845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:70:1e:25:18:a4:81:a7:3f:2f:56:f4:fd:53:
2c:c8:f3:96:12:09:91:c9:39:4f:13:d6:d4:16:57:
3f:57:0b:c4:8a:df:34:5d:0f:bb:80:ed:04:58:4d:
2c:04:b7:16:52:cc:05:a8:cc:f2:4a:13:04:95:bc:
2e:7a:b7:5d:b5:3c:f4:4a:94:1f:f2:53:65:30:dc:
bd:9b:f8:92:3b:ee:cd:86:cd:cb:ed:15:90:63:88:
41:06:da:91:13:23:0f:17:a6:5b:60:ce:f3:a6:c4:
30:44:8d:d7:9e:36:b0:83:99:b0:ea:53:6a:b9:f9:
9e:67:82:0f:5a:69:2a:a0:d7:ed:7e:bf:9e:8e:72:
d0:90:73:76:3d:80:22:60:4e:6c:1d:59:57:01:be:
83:b0:50:cc:a3:14:17:b4:ff:7a:24:64:aa:a4:41:
96:4b:f4:15:4a:75:a6:11:56:56:2d:92:42:20:ac:
57:d3:b4:0a:5f:25:a8:f3:9b:58:ad:a3:62:08:fd:
26:d6:19:11:42:bc:89:73:a7:70:2e:25:70:9a:55:
6e:e2:1a:2c:8b:89:63:cf:8c:c6:f1:2f:72:72:a9:
9a:d3:b6:90:fb:b8:ae:41:82:2e:ad:c7:2e:1c:0e:
49:8f:c3:92:cb:f7:e9:a9:a4:4c:19:20:d8:2b:b1:
a7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9F:4F:20:09:3D:13:BD:50:B4:22:33:C1:86:59:AB:10:14:88:45
X509v3 Authority Key Identifier:
keyid:DD:5B:22:4B:65:93:E5:58:03:8A:9E:40:E6:60:C7:71:42:75:5C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VsiS2WT5VgDip5A5mDHcUJ1XBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:1d:b8:01:48:ce:cb:e5:e8:51:dc:97:ad:e7:f4:fc:6b:1e:
be:da:33:a5:fc:ee:07:52:e8:1e:1f:e7:1d:07:f1:78:17:59:
e6:99:dc:bd:02:62:1e:42:49:ca:f9:86:4e:9b:1a:d4:af:cc:
b1:c5:b0:b8:b7:18:99:64:ed:c3:5e:58:4b:01:a3:8d:41:aa:
59:70:1a:aa:fe:c0:ce:d1:e1:e6:cf:19:10:16:50:ed:b5:cb:
75:f7:1a:2e:aa:e6:ff:9a:d9:c2:48:e9:f5:21:cc:48:66:13:
c1:ba:85:2d:26:6e:8a:fc:26:24:28:35:bc:e5:13:9a:b9:00:
c4:df:10:3b:69:b0:62:26:49:1a:dc:b3:0b:f2:f9:ba:76:df:
e0:01:f7:8c:a7:4a:7a:0d:e7:90:6a:6d:12:36:87:fe:ec:06:
50:16:12:eb:e6:c4:f0:40:24:f1:4e:e2:23:e6:a3:25:df:5d:
62:81:78:96:86:da:7c:d8:74:91:9a:b1:81:b9:51:91:a7:a9:
36:4f:27:1b:07:bf:9e:83:f3:0c:11:9c:a4:17:fd:e2:0d:82:
40:5e:e6:d8:e8:8f:41:ac:e5:c9:ba:16:ac:c3:2f:0a:0a:eb:
94:fa:76:19:77:ad:2a:68:32:dc:13:a0:ac:62:0c:44:71:7e:
ca:3e:cf:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TsMqxOgYTQ6jnnJS9hyLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNWIyMjRiNjU5M2U1NTgwMzhhOWU0MGU2NjBjNzcxNDI3
NTVjMWIwHhcNMjUwMTMxMTcwMDQzWhcNMjUwMjAxMTcwMDQzWjAzMTEwLwYDVQQD
Eyg2YTlmNGYyMDA5M2QxM2JkNTBiNDIyMzNjMTg2NTlhYjEwMTQ4ODQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3AeJRikgac/L1b0/VMsyPOWEgmR
yTlPE9bUFlc/VwvEit80XQ+7gO0EWE0sBLcWUswFqMzyShMElbwuerddtTz0SpQf
8lNlMNy9m/iSO+7Nhs3L7RWQY4hBBtqREyMPF6ZbYM7zpsQwRI3Xnjawg5mw6lNq
ufmeZ4IPWmkqoNftfr+ejnLQkHN2PYAiYE5sHVlXAb6DsFDMoxQXtP96JGSqpEGW
S/QVSnWmEVZWLZJCIKxX07QKXyWo85tYraNiCP0m1hkRQryJc6dwLiVwmlVu4hos
i4ljz4zG8S9ycqma07aQ+7iuQYIurccuHA5Jj8OSy/fpqaRMGSDYK7Gn+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqfTyAJPRO9ULQiM8GGWasQFIhFMB8GA1UdIwQY
MBaAFN1bIktlk+VYA4qeQOZgx3FCdVwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1ZzaVMyV1Q1VmdEaXA1QTVtREhjVUoxWEJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi82NTJkZmUtYWNhZS00MjQzLWJmMzMt
MzBiYmZjMDg1NWU0LzEvM1ZzaVMyV1Q1VmdEaXA1QTVtREhjVUoxWEJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi82NTJkZmUtYWNhZS00MjQzLWJmMzMtMzBiYmZjMDg1NWU0
LzEvM1ZzaVMyV1Q1VmdEaXA1QTVtREhjVUoxWEJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZB24AUjO
y+XoUdyXref0/GsevtozpfzuB1LoHh/nHQfxeBdZ5pncvQJiHkJJyvmGTpsa1K/M
scWwuLcYmWTtw15YSwGjjUGqWXAaqv7AztHh5s8ZEBZQ7bXLdfcaLqrm/5rZwkjp
9SHMSGYTwbqFLSZuivwmJCg1vOUTmrkAxN8QO2mwYiZJGtyzC/L5unbf4AH3jKdK
eg3nkGptEjaH/uwGUBYS6+bE8EAk8U7iI+ajJd9dYoF4lobafNh0kZqxgblRkaep
Nk8nGwe/noPzDBGcpBf94g2CQF7m2OiPQazlyboWrMMvCgrrlPp2GXetKmgy3BOg
rGIMRHF+yj7PIA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:55 2025 by rpki-client