Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
File: 3erZGbhaEwUdAgi34o3cyzmLFNY.mft (raw, json)
Hash identifier: Ut1iloainc+CkU3eYdBSiABQu5GfP71S13PlCr9rNC8=
Subject key identifier: E8:80:9A:A0:29:74:49:F8:DE:C0:1A:5A:18:7D:1E:78:1A:EA:80:CB
Authority key identifier: DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
Certificate issuer: /CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Certificate serial: 0194BCE083C130A70CBBA2281CD03A779213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 15:00:17 +0000
Manifest this update: Fri 31 Jan 2025 15:00:17 +0000
Manifest next update: Sat 01 Feb 2025 15:00:17 +0000
Files and hashes: 1: 3erZGbhaEwUdAgi34o3cyzmLFNY.crl (hash: Gblr/I3S5tGQyQYK10TBBPlMh99ZwpLP4hyAEt/xDu0=)
2: gyBGqWNKS8K0vTNBAA3GKNL77Vo.roa (hash: BXXbMCiaPDwWpKluJbMJNiQFpxOCWm/ZXx0AVN6V8Ew=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:83:c1:30:a7:0c:bb:a2:28:1c:d0:3a:77:92:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Validity
Not Before: Jan 31 15:00:17 2025 GMT
Not After : Feb 1 15:00:17 2025 GMT
Subject: CN=e8809aa0297449f8dec01a5a187d1e781aea80cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:20:da:4a:d6:39:67:f5:8c:f3:2b:c3:b8:
5c:de:b2:7a:65:3e:18:d5:c4:9b:c4:27:6f:d0:8f:
de:34:68:8f:35:f0:f6:e9:af:79:94:b5:81:4a:76:
99:0a:0d:b9:1b:71:6f:85:13:83:63:e3:7c:9b:64:
30:b2:3a:1c:c7:87:20:c8:a5:34:f7:58:de:e5:c4:
94:3e:af:f1:3e:74:e8:ab:2b:55:4e:6b:d9:74:04:
47:c9:9f:9b:0d:2c:d8:8a:ff:5a:a2:1d:09:99:5a:
5d:de:de:fd:4b:d8:04:43:4c:25:88:1b:d5:2a:ea:
64:fd:ef:9a:78:00:9d:b1:70:f7:c7:05:57:9b:ec:
84:3e:ea:dc:2d:2f:d2:43:31:a8:4f:3c:30:41:28:
2c:0f:02:a7:8a:31:f4:06:bb:ed:46:af:9b:2e:70:
f4:40:f4:12:85:e3:f4:6e:77:f8:a7:07:e7:dd:2c:
d1:46:a1:37:b1:c4:2d:c9:67:5f:ee:63:d1:ab:96:
27:4b:af:03:40:d1:10:14:75:13:fe:96:84:d8:a0:
86:52:8e:2f:aa:48:eb:eb:20:c9:e6:0b:5d:b7:81:
49:8c:ae:20:78:f2:27:5f:d8:da:9d:76:ab:6b:4e:
56:18:2d:6c:aa:5f:a9:03:2b:f5:02:a1:13:40:69:
8c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:80:9A:A0:29:74:49:F8:DE:C0:1A:5A:18:7D:1E:78:1A:EA:80:CB
X509v3 Authority Key Identifier:
keyid:DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f2:78:42:1c:24:de:61:34:96:87:06:ea:e6:58:5e:94:1f:
ed:a6:11:ff:ca:06:b5:b2:e0:59:a8:9f:3c:f3:15:15:12:a7:
0b:41:3a:62:01:e9:6b:fa:9c:29:93:ef:9c:c0:e5:46:ba:aa:
fb:40:1a:8b:0f:c9:bf:43:fc:51:4e:d7:96:f6:10:8f:23:bd:
78:72:f4:2a:2a:e8:d0:45:c6:0c:c5:f9:64:21:35:58:2d:fa:
46:40:05:de:11:d0:59:d0:db:07:f8:bd:14:43:d2:25:90:b8:
bb:7a:c2:b8:56:cf:e6:ad:5c:e5:77:2a:34:eb:88:f6:77:ce:
3e:ff:6f:6d:03:9a:52:ab:87:e3:0f:40:03:f6:9a:26:6b:99:
e4:b3:62:41:2c:37:c4:bd:d1:87:01:df:81:0f:24:45:3e:76:
64:b3:c3:e8:0a:f0:92:fa:e7:64:e0:25:13:87:d2:1e:49:0c:
79:3e:c6:79:25:91:35:6e:4e:cc:c4:fe:ef:74:0f:17:73:5b:
46:7b:2f:22:c2:71:6c:e1:ae:30:68:42:a5:f9:f9:0d:9f:2d:
41:a6:9f:63:03:f3:d9:7a:87:b3:a8:78:1d:fa:92:8c:37:c1:
da:1c:7a:c2:b9:15:a0:95:05:fc:45:72:6f:71:26:17:29:93:
78:bb:c6:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84IPBMKcMu6IoHNA6d5ITMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZWFkOTE5Yjg1YTEzMDUxZDAyMDhiN2UyOGRkY2NiMzk4
YjE0ZDYwHhcNMjUwMTMxMTUwMDE3WhcNMjUwMjAxMTUwMDE3WjAzMTEwLwYDVQQD
EyhlODgwOWFhMDI5NzQ0OWY4ZGVjMDFhNWExODdkMWU3ODFhZWE4MGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxcg2krWOWf1jPMrw7hc3rJ6ZT4Y
1cSbxCdv0I/eNGiPNfD26a95lLWBSnaZCg25G3FvhRODY+N8m2Qwsjocx4cgyKU0
91je5cSUPq/xPnToqytVTmvZdARHyZ+bDSzYiv9aoh0JmVpd3t79S9gEQ0wliBvV
Kupk/e+aeACdsXD3xwVXm+yEPurcLS/SQzGoTzwwQSgsDwKnijH0BrvtRq+bLnD0
QPQSheP0bnf4pwfn3SzRRqE3scQtyWdf7mPRq5YnS68DQNEQFHUT/paE2KCGUo4v
qkjr6yDJ5gtdt4FJjK4gePInX9janXara05WGC1sql+pAyv1AqETQGmMoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiAmqApdEn43sAaWhh9Hnga6oDLMB8GA1UdIwQY
MBaAFN3q2Rm4WhMFHQIIt+KN3Ms5ixTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2VyWkdiaGFFd1VkQWdpMzRvM2N5em1MRk5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS84ZWZmZTQtZWRiYi00ZGQ0LTg1ZDQt
NDhiOGI1YTliNDExLzEvM2VyWkdiaGFFd1VkQWdpMzRvM2N5em1MRk5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS84ZWZmZTQtZWRiYi00ZGQ0LTg1ZDQtNDhiOGI1YTliNDEx
LzEvM2VyWkdiaGFFd1VkQWdpMzRvM2N5em1MRk5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvJ4Qhwk
3mE0locG6uZYXpQf7aYR/8oGtbLgWaifPPMVFRKnC0E6YgHpa/qcKZPvnMDlRrqq
+0Aaiw/Jv0P8UU7XlvYQjyO9eHL0Kiro0EXGDMX5ZCE1WC36RkAF3hHQWdDbB/i9
FEPSJZC4u3rCuFbP5q1c5XcqNOuI9nfOPv9vbQOaUquH4w9AA/aaJmuZ5LNiQSw3
xL3RhwHfgQ8kRT52ZLPD6ArwkvrnZOAlE4fSHkkMeT7GeSWRNW5OzMT+73QPF3Nb
RnsvIsJxbOGuMGhCpfn5DZ8tQaafYwPz2XqHs6h4HfqSjDfB2hx6wrkVoJUF/EVy
b3EmFymTeLvGQQ==
-----END CERTIFICATE-----
Generated at Tue May 13 15:28:19 2025 by rpki-client