Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
File: A3tIRJuhyuFb3iwvCG2UIY4HILs.mft (raw, json)
Hash identifier: /Dk1FrusUD6ows5GP6DMpZoysaQCMYO9UTX6EAUK/+I=
Subject key identifier: C8:B3:35:CC:6B:4E:1F:94:9F:54:22:42:AC:CB:0B:96:DE:B8:1B:81
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Certificate issuer: /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial: 0194BC3BE282FD07C2FC6EB3E6A1AB5B77B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
Manifest number: 066F
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: A3tIRJuhyuFb3iwvCG2UIY4HILs.crl (hash: HKBwsoHgTC/vZbfz6BryWsqW2++PRVJIE0nSH/6hNL0=)
2: H2LJIb4B49ETkYp7y9cYxyJfgPY.roa (hash: kWssb3wWwFDGlvM/fa1CVc4KBp96H0DKhZVnCXZOjQY=)
3: lVXMGaXCeYAS9UTzuCTj9xPIgOs.roa (hash: ACZLuIV4fCglmS12ajGiBEyZ0FBoWBDoJRm4zWyNSbY=)
4: x-3D4SyWxTWtE8fU6h7K761mso0.roa (hash: KVo2GWCkNTOgM8bW+F4avHQXlq7DnsAvg8lQU9Oqt1E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e2:82:fd:07:c2:fc:6e:b3:e6:a1:ab:5b:77:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=c8b335cc6b4e1f949f542242accb0b96deb81b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3e:ed:ee:14:c4:1a:2e:5b:89:41:7a:11:9d:
31:11:cd:4f:25:7a:3a:db:b1:b6:48:cb:9a:9a:4a:
be:ce:c0:81:c2:bc:11:d8:6c:c7:15:03:c6:56:c4:
ba:24:3e:bf:2b:05:61:16:53:ee:0a:f0:5e:3d:43:
a8:cf:f8:5f:e6:11:d3:41:14:66:07:ec:af:e5:33:
58:4f:d8:2a:c9:92:6c:48:fa:3c:40:13:11:d0:a6:
4b:0c:47:ee:b7:44:2f:78:99:db:98:72:5a:1e:43:
1c:e5:5a:48:28:5e:9c:1c:99:a9:70:09:dd:66:90:
78:fc:29:5a:44:98:09:3e:50:44:02:bd:eb:c1:88:
fd:2f:78:62:c9:b1:bb:51:20:2b:b3:84:e3:cc:20:
fc:fa:48:20:b9:59:82:62:15:95:79:89:8b:cd:20:
ef:32:27:7a:67:63:54:31:5b:b2:61:a6:cb:db:e1:
dd:dc:4e:a4:e0:96:7a:86:35:e8:b6:f6:79:9c:b3:
a9:f4:89:97:b3:67:39:bc:16:a6:bb:2d:8d:51:82:
be:eb:b1:67:6f:7b:5c:26:05:87:99:a6:0e:da:60:
7c:6a:92:26:83:93:5f:b1:1d:52:bf:b7:24:7c:df:
22:e9:e0:6c:75:a6:fa:2c:11:a4:d5:92:4a:73:f6:
bd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B3:35:CC:6B:4E:1F:94:9F:54:22:42:AC:CB:0B:96:DE:B8:1B:81
X509v3 Authority Key Identifier:
keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d7:c5:9b:eb:f7:e0:4d:82:22:b7:fc:25:f6:07:79:d7:a5:
1b:b1:e7:61:a2:74:5f:be:43:5b:c9:e8:df:6a:53:33:c0:73:
71:af:35:d5:a6:25:25:47:96:59:94:a7:c5:16:6c:4e:43:c3:
f6:bc:f3:6a:6e:8e:ab:08:60:8d:d6:0a:f2:a1:87:bd:6a:e1:
95:b7:d0:07:6c:70:29:7d:79:f3:42:9f:c8:49:86:96:b3:6d:
83:a3:2f:73:82:81:66:f2:0a:ac:7d:f2:ef:aa:9f:7b:68:d2:
08:b8:a8:69:91:6d:cc:1c:3c:d8:18:4a:5a:20:b7:64:d1:22:
3b:24:78:fe:ec:e3:6b:51:45:47:7f:10:c2:6f:fc:5f:1b:b1:
60:5a:95:ec:be:8b:46:0d:33:a3:25:e5:64:e5:cd:1c:15:85:
f8:26:6d:96:79:fe:39:44:12:13:99:1d:0d:b7:2a:91:81:82:
64:f5:a9:9c:d3:5d:76:5b:28:59:57:03:33:98:a5:32:77:b6:
ae:c4:6f:74:70:ae:0f:81:cf:31:49:97:0f:d0:3b:e4:4a:c8:
ca:eb:e4:f5:46:cc:e0:40:24:d1:5e:f2:5f:b8:7d:4d:09:a3:
7f:d3:0c:32:cd:40:78:ad:fd:b2:6d:13:e1:9b:6d:7c:21:38:
1a:fe:da:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O+KC/QfC/G6z5qGrW3e0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzN2I0ODQ0OWJhMWNhZTE1YmRlMmMyZjA4NmQ5NDIxOGUw
NzIwYmIwHhcNMjUwMTMxMTIwMDI4WhcNMjUwMjAxMTIwMDI4WjAzMTEwLwYDVQQD
EyhjOGIzMzVjYzZiNGUxZjk0OWY1NDIyNDJhY2NiMGI5NmRlYjgxYjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnz7t7hTEGi5biUF6EZ0xEc1PJXo6
27G2SMuamkq+zsCBwrwR2GzHFQPGVsS6JD6/KwVhFlPuCvBePUOoz/hf5hHTQRRm
B+yv5TNYT9gqyZJsSPo8QBMR0KZLDEfut0QveJnbmHJaHkMc5VpIKF6cHJmpcAnd
ZpB4/ClaRJgJPlBEAr3rwYj9L3hiybG7USArs4TjzCD8+kgguVmCYhWVeYmLzSDv
Mid6Z2NUMVuyYabL2+Hd3E6k4JZ6hjXotvZ5nLOp9ImXs2c5vBamuy2NUYK+67Fn
b3tcJgWHmaYO2mB8apImg5NfsR1Sv7ckfN8i6eBsdab6LBGk1ZJKc/a9VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMizNcxrTh+Un1QiQqzLC5beuBuBMB8GA1UdIwQY
MBaAFAN7SESbocrhW94sLwhtlCGOByC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81ZmY3OGUtZGIxNC00YjA1LTljYzYt
NzQwM2UxMzY3NWFiLzEvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS81ZmY3OGUtZGIxNC00YjA1LTljYzYtNzQwM2UxMzY3NWFi
LzEvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp9fFm+v3
4E2CIrf8JfYHedelG7HnYaJ0X75DW8no32pTM8Bzca811aYlJUeWWZSnxRZsTkPD
9rzzam6OqwhgjdYK8qGHvWrhlbfQB2xwKX1580KfyEmGlrNtg6Mvc4KBZvIKrH3y
76qfe2jSCLioaZFtzBw82BhKWiC3ZNEiOyR4/uzja1FFR38Qwm/8XxuxYFqV7L6L
Rg0zoyXlZOXNHBWF+CZtlnn+OUQSE5kdDbcqkYGCZPWpnNNddlsoWVcDM5ilMne2
rsRvdHCuD4HPMUmXD9A75ErIyuvk9UbM4EAk0V7yX7h9TQmjf9MMMs1AeK39sm0T
4ZttfCE4Gv7awA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:24 2025 by rpki-client