Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft
File: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft (raw, json)
Hash identifier: x1p3BhyqIU4JJi7RiZHkO/f9/W6C5yAtgGxaFoBirdA=
Subject key identifier: 4C:03:87:27:9F:67:D7:4E:2F:AE:89:8B:EA:78:FB:3E:18:31:0F:00
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 0194BD4EA5228D45F06B7554603169C8624A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft
Manifest number: 139C
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl (hash: AnLWuXJselCh0xygPwVdMkzufq2UiPaeSZ8Vg3hZ81A=)
2: 41fVJkrPbHKQA079D4QVuoSoMHA.roa (hash: sr+TybZqUtIImaDgTqztSGD1XE6oloq4BZ2M4Xpg+u0=)
3: 4pf6JhZ2ZrbzDs3KIhxGjElBlaw.roa (hash: vXT1uBYUu9e7P+u/IiXkrVdl2Zw3UbzSeW2UWFK34Jw=)
4: 6klSWkjjUTbGuPtDfN8cALab9cs.roa (hash: sdgQjkXScGhQKnR4al8+skMwfxtoqagBTslhZkfSKNY=)
5: B3w7E9gvZEzFwMrG99Xq-T1MEBw.roa (hash: X2c/+qNKKXp5+FBng9aKxlFFZbDBWHiqkfhHgQbP6bg=)
6: C2H1BSmYMIrZggVB3V-MZ8CR5SY.roa (hash: MAmDjDLmFQyW+O4vZbG4q4tWTwrvQlayeoQlXr+Fu/8=)
7: DJ2HKm_1c1O48zC-cc12FURV1-w.roa (hash: odPYR1sTJx4nskAcxBKfAydZplTxWpbfAnjmQhPzJX8=)
8: H2lVKMz_X46KFKjX_6x9tvmH1uE.roa (hash: RB7IG/Ldoyl84GgxDa9yMrGgoraAfien6HZCweyoCaw=)
9: RZCNuFYkMVfet6khSeCWtqT4r3s.roa (hash: bz5sfARWaL0oWhzQTAMOexVtHrjfBeAF+vBi8eYpl/U=)
10: Sn1YHf-JTelJa8AbFEu9eCrJc-Y.roa (hash: 4RQ4/nSSdbUjaSMtOe+F2ienAydzSYTXwrbRmuUcEJY=)
11: UE3TFsD19f6wQr0gTHDaiwhGdqA.roa (hash: h9a9K3MMF0WQfDnzSvLb5P+n54cp7dIKew88pGDYldk=)
12: VicyF_0e_bvvcn0fKM8q40zu1n8.roa (hash: C5AQCG/2PEYP519Z6IOs4YDYOnLl0s41qulpvbJvJ4g=)
13: _HxOSGDLp42EFmYvwzkWMgsUDRc.roa (hash: ld3Ed4rdMoSUbT+R2+5BJt8zZUTSFFBqMJ22iFdBG+s=)
14: cHLxjuzlgoGDINIVaFsru4PZ9BE.roa (hash: o3eUI2kqgbIKISwJ6D+XZ6uUN50wRiiahX5yY1sTPn4=)
15: mdB3D_zcc3ZMQewiv3J0UZ_sUlo.roa (hash: NsB59ITpkzoeK9pRuPozIMWrvt6Lae+60ChrUSCRg50=)
16: mjTSWLEuvIRJ-mDUVhSblHWE7N4.roa (hash: rmzWSKN3Yb/xA6p/q8UxEXQjDhun2rkoNnE76zOjZHo=)
17: pi0xtN89Ai_w_4OOYZyZ0Yjp31k.roa (hash: YbRVf7s0d5LwyzIIbywAQpK6yL/HISAdWoRmCoSs5GQ=)
18: pxtXnWk-oYZ7Qby89ddSCgu91ts.roa (hash: RB8UdezmP543bft1AFoJ1CEu6eopqGc7lCF9jSa1eTc=)
19: q74_W6xdG6goIDi1c08_8gJ6uTE.roa (hash: pxdR0KPAM6OXX14ayHaIWzZB+fjREFkJhs6uGstYGhI=)
20: r3Ck7fpoOKp57Mk1jJgw8XHWAxg.roa (hash: jDsvxvKf5uFW/4bW6b3NOwjRJy48sDgwtQTJJofZqGM=)
21: v99_kaWjoTKnpnOcBogb8Emjk4M.roa (hash: unshnZnS3tg5XPSrGj9Iy+gxnhESQoD/3z5Y8oIxogo=)
22: y38_fk_dl6De5uovg7WKuAzPolA.roa (hash: PsHTMj/SkJczqFC8znjT596YhybynG/bm1yXYsS6Cxs=)
23: z6d9djVL2RnXuevi6Ot8E8e62tc.roa (hash: o9Kh9fFp+5NbfQXFw6W0ABs1khVR+g751jXSLlxLU4c=)
24: zUeLco_9U8ifNR5PMJI3zpijW74.roa (hash: 3lduL1beP27BPGmbMBwONs6g5YeSTXx0lXyH1JulpN4=)
25: zYqhK_-lCxxHEmqpWhKtyQoq5_Q.roa (hash: AXZsvgOi3tBattJocgH+eVJ7syijTDvmECPiQPYAoAI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a5:22:8d:45:f0:6b:75:54:60:31:69:c8:62:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=4c0387279f67d74e2fae898bea78fb3e18310f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b4:ae:bd:fb:59:d6:fa:11:c8:60:7b:77:90:
49:75:1b:f1:78:e5:28:ad:92:ea:57:44:55:3c:d1:
da:54:4b:37:56:2d:4e:d9:24:0b:e5:f1:ec:1a:4c:
57:2c:46:63:8f:8b:23:d0:1f:4f:74:ab:a2:f9:a1:
ce:cc:f1:ea:48:87:b1:d8:f5:76:53:df:74:ce:8a:
b9:78:13:f0:bb:15:ab:2b:9d:e7:e5:b7:cc:e9:ef:
44:c2:f9:39:99:66:17:2a:14:f0:02:5c:b9:00:e3:
7f:5a:33:b1:b1:9c:f4:fa:70:cb:a4:29:a8:e1:12:
c7:8f:e9:0f:cc:0c:e0:f8:c5:dc:e7:d9:a5:78:c1:
8c:c2:78:82:14:15:69:0b:0c:16:a3:33:06:43:b8:
cd:d7:f6:fb:12:fe:d5:e7:a3:6e:14:33:c6:7f:b9:
91:dd:9c:48:44:6c:a1:5a:64:a6:0e:e9:f1:d0:14:
0b:37:ed:b4:e6:76:ff:8c:9a:98:91:25:48:2d:64:
23:d1:91:a0:e5:4d:05:ad:eb:22:8a:67:5f:3c:f1:
4f:05:9f:1f:a9:ec:5f:a1:75:5d:68:a0:3e:63:30:
4f:21:99:6d:5b:e7:6d:f1:b5:23:16:3d:89:f7:f5:
6d:f2:ac:e0:60:12:77:af:db:32:a9:5f:06:75:ab:
74:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:03:87:27:9F:67:D7:4E:2F:AE:89:8B:EA:78:FB:3E:18:31:0F:00
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:44:7d:7c:10:e4:94:8c:bc:73:ae:98:0d:39:71:73:7f:7f:
d8:58:0c:95:fe:14:be:d4:1e:be:44:c5:74:b4:30:84:82:b5:
c5:f1:aa:62:a6:79:93:54:f8:5e:33:f8:b9:90:0e:9a:82:3a:
da:8a:b3:30:03:a7:bf:58:2f:3e:cd:ff:3f:c7:70:2d:2b:02:
69:66:46:f4:bc:3f:3e:57:16:c9:f2:3b:1a:72:49:1b:22:90:
2f:74:35:20:a0:37:07:32:a0:e5:06:48:17:4d:95:2e:78:39:
c0:b3:4c:34:83:7d:45:ea:c9:b5:3c:c8:03:23:a2:a5:de:1d:
9a:47:36:23:fe:f9:63:8c:88:8b:ca:80:bc:81:38:e9:a6:a4:
b6:42:80:86:3f:c9:72:f1:04:9b:43:d5:46:0f:3b:81:ce:5b:
c9:e8:68:bc:f6:58:61:9a:59:ed:3a:c8:dc:5b:66:30:74:92:
0f:f1:34:9f:4c:f0:d1:af:7f:f1:0e:fa:fd:09:ed:a2:44:bf:
29:d4:32:27:c8:52:40:de:19:a5:f9:01:8d:ba:10:32:57:d8:
ba:3e:a7:f1:b2:3b:3d:6d:3d:cc:51:b0:ee:06:65:bb:72:d0:
56:d9:3f:38:c8:cb:ea:65:21:c5:4a:49:38:ae:84:f1:8b:34:
58:b8:f2:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TqUijUXwa3VUYDFpyGJKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3
YjQ1ODkwHhcNMjUwMTMxMTcwMDM1WhcNMjUwMjAxMTcwMDM1WjAzMTEwLwYDVQQD
Eyg0YzAzODcyNzlmNjdkNzRlMmZhZTg5OGJlYTc4ZmIzZTE4MzEwZjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbSuvftZ1voRyGB7d5BJdRvxeOUo
rZLqV0RVPNHaVEs3Vi1O2SQL5fHsGkxXLEZjj4sj0B9PdKui+aHOzPHqSIex2PV2
U990zoq5eBPwuxWrK53n5bfM6e9Ewvk5mWYXKhTwAly5AON/WjOxsZz0+nDLpCmo
4RLHj+kPzAzg+MXc59mleMGMwniCFBVpCwwWozMGQ7jN1/b7Ev7V56NuFDPGf7mR
3ZxIRGyhWmSmDunx0BQLN+205nb/jJqYkSVILWQj0ZGg5U0FresiimdfPPFPBZ8f
qexfoXVdaKA+YzBPIZltW+dt8bUjFj2J9/Vt8qzgYBJ3r9syqV8Gdat0SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwDhyefZ9dOL66Ji+p4+z4YMQ8AMB8GA1UdIwQY
MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt
MmVjZTA0ZTE4NWMyLzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy
LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUR9fBDk
lIy8c66YDTlxc39/2FgMlf4UvtQevkTFdLQwhIK1xfGqYqZ5k1T4XjP4uZAOmoI6
2oqzMAOnv1gvPs3/P8dwLSsCaWZG9Lw/PlcWyfI7GnJJGyKQL3Q1IKA3BzKg5QZI
F02VLng5wLNMNIN9RerJtTzIAyOipd4dmkc2I/75Y4yIi8qAvIE46aaktkKAhj/J
cvEEm0PVRg87gc5byehovPZYYZpZ7TrI3FtmMHSSD/E0n0zw0a9/8Q76/QntokS/
KdQyJ8hSQN4ZpfkBjboQMlfYuj6n8bI7PW09zFGw7gZlu3LQVtk/OMjL6mUhxUpJ
OK6E8Ys0WLjyVA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:25 2025 by rpki-client