Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
File: 3kVs200UA0XD3K6_x2NNTnzcuRM.mft (raw, json)
Hash identifier: xyTa2Dh3xSQaMsgBgfq5BNP+V6vEnlLbIwEbPk+45cs=
Subject key identifier: 3D:C3:0E:A0:A6:11:66:CB:81:57:05:4D:9C:50:73:14:35:B5:06:2A
Authority key identifier: DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
Certificate issuer: /CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Certificate serial: 0194BCA9927EB65F13B01B7F5F46F096AC3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 14:00:17 +0000
Manifest this update: Fri 31 Jan 2025 14:00:17 +0000
Manifest next update: Sat 01 Feb 2025 14:00:17 +0000
Files and hashes: 1: 3kVs200UA0XD3K6_x2NNTnzcuRM.crl (hash: RaxoP8ZErQ+R+ak/GstRDCwR8bGpguKlfD9rYSVaGGE=)
2: GLJeo9OJokvwxntYXa9z6VAuKG4.roa (hash: HFGNk8CsHwNqx59cjE1x3l22X4IZlzGeQQ9JRhMno5U=)
3: JIEsiChTD9veiUWmlJ3B4QQpFuc.roa (hash: G8sz8HlJFis3zSSNKaXy4CKewTagYcW3tdUbj5SB5rw=)
4: g4ZCPviGonmRGPJlO9nSng_S-lo.roa (hash: NBfLnaWFnRjJb4HXfFDgN4fD3VeUZZnkBAnPok8zBDM=)
5: hSaGIfnDKdSKWJHlieXEwfTU6q4.roa (hash: Tlzb8RdlRarMmGqY7TfSTybKDQ3T0ImXEyxGHQXUK8s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:92:7e:b6:5f:13:b0:1b:7f:5f:46:f0:96:ac:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Validity
Not Before: Jan 31 14:00:17 2025 GMT
Not After : Feb 1 14:00:17 2025 GMT
Subject: CN=3dc30ea0a61166cb8157054d9c50731435b5062a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a9:3d:0d:e0:eb:ac:b8:90:2f:1a:01:3e:70:
33:b8:47:ee:6e:3f:49:49:ca:09:cd:9b:94:21:37:
9f:ed:c9:c5:be:bf:7d:fa:4a:18:e7:73:fb:8f:98:
4e:63:ab:62:c3:7b:aa:de:8d:38:46:af:33:13:bc:
1b:c1:ba:14:46:89:44:c5:0b:1f:69:40:48:4d:80:
72:71:fd:da:ce:60:ea:db:14:43:55:99:dc:c0:9b:
cc:52:bb:7e:a6:d0:83:ce:b5:38:a8:bc:73:f3:38:
8c:d3:76:e7:c8:66:5a:b1:fc:3f:fa:fc:10:bb:a9:
86:84:27:5a:24:f0:02:02:23:af:c3:bf:3a:92:6e:
29:fe:e0:71:aa:4f:d5:e9:c5:61:3c:eb:59:3b:01:
02:35:c8:37:27:78:db:30:e5:bb:ea:1b:b6:fe:0b:
f9:16:ac:0b:d6:24:9f:b9:fe:6b:33:20:4a:b7:2d:
27:18:99:2f:91:3c:cd:e8:1e:ee:e5:38:58:5f:70:
ee:e0:68:c3:67:2e:80:2f:69:fd:15:cf:7d:09:13:
36:24:91:b7:d1:94:b5:6c:1b:f0:3c:64:11:7a:dc:
eb:1d:19:2c:55:a1:77:9c:1c:d6:1f:af:89:e0:45:
40:db:16:32:4b:1d:1b:92:75:52:6f:d9:45:ec:a6:
56:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C3:0E:A0:A6:11:66:CB:81:57:05:4D:9C:50:73:14:35:B5:06:2A
X509v3 Authority Key Identifier:
keyid:DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:49:b5:b0:f0:d6:fc:37:f7:ad:73:9b:97:94:fc:fc:99:f5:
26:91:56:96:12:0a:80:42:b4:4a:bf:5d:55:09:09:97:13:38:
16:78:b2:4d:80:14:73:39:c9:a5:88:5e:7c:c3:fa:72:9e:cc:
00:4d:b3:92:fa:57:5c:6f:e8:b9:9b:05:ff:64:05:0d:e8:a5:
53:c1:08:57:cb:8b:b6:7b:af:26:17:0d:14:51:19:ac:65:fc:
34:e9:a7:b1:2f:d6:41:f8:91:6e:e5:bd:13:58:c3:a5:8b:0a:
61:3b:1a:be:43:88:89:11:05:f5:3f:e8:ca:2d:76:9c:97:9d:
07:d2:a6:43:63:2d:bc:3c:ed:b6:91:8c:7a:64:0c:d3:bb:b2:
16:09:9c:aa:67:e2:dc:4e:94:71:3b:86:6d:cd:ab:81:a5:c8:
fc:f2:a9:46:fb:6d:0d:7d:7d:1d:9b:87:be:cc:68:ae:1b:28:
79:dd:fd:d5:ed:2c:f1:27:c2:3f:2c:c2:d6:c0:29:b7:c9:2d:
0b:30:32:37:58:c0:74:19:2f:fd:95:c2:31:4e:e6:a7:6a:bc:
fa:24:15:f1:7f:b1:f7:18:bf:02:6a:df:15:bb:4f:45:5d:a3:
e9:c7:c5:0d:7d:9f:da:6b:bb:4e:4d:ec:e5:1a:f3:d7:5d:18:
ae:0c:8c:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qZJ+tl8TsBt/X0bwlqw/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNDU2Y2RiNGQxNDAzNDVjM2RjYWViZmM3NjM0ZDRlN2Nk
Y2I5MTMwHhcNMjUwMTMxMTQwMDE3WhcNMjUwMjAxMTQwMDE3WjAzMTEwLwYDVQQD
EygzZGMzMGVhMGE2MTE2NmNiODE1NzA1NGQ5YzUwNzMxNDM1YjUwNjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKk9DeDrrLiQLxoBPnAzuEfubj9J
ScoJzZuUITef7cnFvr99+koY53P7j5hOY6tiw3uq3o04Rq8zE7wbwboURolExQsf
aUBITYBycf3azmDq2xRDVZncwJvMUrt+ptCDzrU4qLxz8ziM03bnyGZasfw/+vwQ
u6mGhCdaJPACAiOvw786km4p/uBxqk/V6cVhPOtZOwECNcg3J3jbMOW76hu2/gv5
FqwL1iSfuf5rMyBKty0nGJkvkTzN6B7u5ThYX3Du4GjDZy6AL2n9Fc99CRM2JJG3
0ZS1bBvwPGQRetzrHRksVaF3nBzWH6+J4EVA2xYySx0bknVSb9lF7KZWyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3DDqCmEWbLgVcFTZxQcxQ1tQYqMB8GA1UdIwQY
MBaAFN5FbNtNFANFw9yuv8djTU583LkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2tWczIwMFVBMFhEM0s2X3gyTk5UbnpjdVJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yMGNiMzMtZTJiZi00NmFhLWFiZmEt
OTI4ZTdiYzY5NTcwLzEvM2tWczIwMFVBMFhEM0s2X3gyTk5UbnpjdVJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8yMGNiMzMtZTJiZi00NmFhLWFiZmEtOTI4ZTdiYzY5NTcw
LzEvM2tWczIwMFVBMFhEM0s2X3gyTk5UbnpjdVJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlEm1sPDW
/Df3rXObl5T8/Jn1JpFWlhIKgEK0Sr9dVQkJlxM4FniyTYAUcznJpYhefMP6cp7M
AE2zkvpXXG/ouZsF/2QFDeilU8EIV8uLtnuvJhcNFFEZrGX8NOmnsS/WQfiRbuW9
E1jDpYsKYTsavkOIiREF9T/oyi12nJedB9KmQ2MtvDzttpGMemQM07uyFgmcqmfi
3E6UcTuGbc2rgaXI/PKpRvttDX19HZuHvsxorhsoed391e0s8SfCPyzC1sApt8kt
CzAyN1jAdBkv/ZXCMU7mp2q8+iQV8X+x9xi/AmrfFbtPRV2j6cfFDX2f2mu7Tk3s
5Rrz110YrgyMRg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:34:16 2025 by rpki-client