Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
File: 3_XMSEiUO0_onSznH9weT_fX8-M.mft (raw, json)
Hash identifier: rcuvCEmICYIrKQuHnuN6fo+Tzu2IkYD7NE6hbvep5e0=
Subject key identifier: 14:B0:8A:30:54:86:27:6C:A5:E8:A4:7A:A8:A5:CC:F3:2E:07:61:C0
Authority key identifier: DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
Certificate issuer: /CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Certificate serial: 0194BC051738E99DD1EB5EF483084A4B8259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
Manifest number: 1406
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: 3_XMSEiUO0_onSznH9weT_fX8-M.crl (hash: O3nEBmNFdJhHvObJ5QQnji5eX+W4RPEYeSESWngql5g=)
2: EsL5vRvD6Hsz2Ac1BO5dG0iZtiE.roa (hash: 6YJicTgp9qVMpWAlIAbPHHma7brtZhgeBhN6tMg/gfQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:17:38:e9:9d:d1:eb:5e:f4:83:08:4a:4b:82:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=14b08a305486276ca5e8a47aa8a5ccf32e0761c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:19:0b:93:2a:8b:33:8c:bc:6a:1c:bb:b5:d1:
1d:25:31:37:1c:8b:b0:57:f9:0f:98:0d:8c:46:44:
4c:ee:db:19:5e:06:1a:22:20:c9:c5:d5:3b:50:88:
f3:bf:44:49:cd:9d:e6:e0:b5:c8:e9:bb:58:35:23:
91:c2:31:c2:a5:7d:83:13:9a:25:de:f3:4a:0d:40:
0b:b3:42:64:ca:81:15:c8:b9:70:a2:25:4f:84:f2:
8f:63:15:ef:e3:54:d2:c0:80:5c:0d:7e:db:fe:2a:
2b:1d:73:d5:c3:8e:37:47:54:5d:ec:d6:63:a8:9e:
4f:d9:7f:68:3e:71:57:9a:5d:45:f6:4c:49:8f:73:
f5:9b:a1:3e:ba:5c:56:3a:13:94:eb:5d:7b:d0:97:
9f:44:e3:e8:d7:fa:cc:f9:80:01:03:c0:62:1b:b8:
4e:f5:cb:f1:36:a9:14:43:53:c0:19:7b:2f:40:5b:
b7:18:ec:94:bb:a8:04:42:60:8f:56:de:54:ed:0f:
7c:cc:30:a0:5e:1a:62:45:3a:49:ac:6d:3f:50:fb:
93:40:a2:27:ef:0b:cb:39:e6:58:57:93:38:19:7a:
16:29:e7:3b:4e:a2:69:06:b5:e8:fa:c4:1c:9c:70:
79:4f:e7:92:3d:70:c4:59:7a:8a:fc:7b:b5:3b:c7:
3b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B0:8A:30:54:86:27:6C:A5:E8:A4:7A:A8:A5:CC:F3:2E:07:61:C0
X509v3 Authority Key Identifier:
keyid:DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:9d:b5:55:a2:f0:16:46:4a:fb:3d:15:ef:20:21:6c:17:6d:
84:1c:58:99:41:8e:11:8c:c6:63:5f:1d:f9:04:0a:a9:ec:06:
41:68:ba:54:73:e9:a2:d2:ac:66:66:c5:4a:83:05:58:e9:99:
f2:e3:ff:3c:ee:dc:9a:fe:9c:e7:13:15:5b:96:71:fa:8b:20:
5d:a5:99:e6:fb:a6:a9:fd:52:2e:b5:1c:40:6f:90:1b:2d:62:
16:76:6b:08:e5:48:07:b6:26:72:d3:d5:00:27:94:8f:28:08:
4b:e3:5c:03:d7:cf:9f:9e:74:a8:e6:e8:58:f4:21:d2:21:31:
ed:15:e3:38:ba:e3:5c:8e:32:92:f2:4f:5c:3a:1e:29:54:7f:
4b:94:72:fa:da:2a:a9:ee:6d:9a:ee:b8:88:9b:bc:5f:26:0f:
1a:33:0e:58:9e:46:94:5d:63:95:7d:b3:97:08:a3:31:33:44:
80:b9:22:12:40:4b:d9:70:ea:5f:5b:bf:9d:bd:d8:e0:9d:d1:
c9:e3:88:9e:f6:ce:5b:3f:04:35:db:4c:d6:2f:bf:3c:82:e8:
d0:e1:d6:84:47:5c:c7:4b:7b:94:11:04:af:ab:c0:27:93:43:
af:cd:b1:43:07:10:96:48:6a:a5:20:f9:c4:11:66:c6:16:05:
8e:b3:3d:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BRc46Z3R6170gwhKS4JZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZjVjYzQ4NDg5NDNiNGZlODlkMmNlNzFmZGMxZTRmZjdk
N2YzZTMwHhcNMjUwMTMxMTEwMDM3WhcNMjUwMjAxMTEwMDM3WjAzMTEwLwYDVQQD
EygxNGIwOGEzMDU0ODYyNzZjYTVlOGE0N2FhOGE1Y2NmMzJlMDc2MWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRkLkyqLM4y8ahy7tdEdJTE3HIuw
V/kPmA2MRkRM7tsZXgYaIiDJxdU7UIjzv0RJzZ3m4LXI6btYNSORwjHCpX2DE5ol
3vNKDUALs0JkyoEVyLlwoiVPhPKPYxXv41TSwIBcDX7b/iorHXPVw443R1Rd7NZj
qJ5P2X9oPnFXml1F9kxJj3P1m6E+ulxWOhOU61170JefROPo1/rM+YABA8BiG7hO
9cvxNqkUQ1PAGXsvQFu3GOyUu6gEQmCPVt5U7Q98zDCgXhpiRTpJrG0/UPuTQKIn
7wvLOeZYV5M4GXoWKec7TqJpBrXo+sQcnHB5T+eSPXDEWXqK/Hu1O8c7ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSwijBUhidspeikeqilzPMuB2HAMB8GA1UdIwQY
MBaAFN/1zEhIlDtP6J0s5x/cHk/31/PjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM19YTVNFaVVPMF9vblN6bkg5d2VUX2ZYOC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNDE5ZWItMjMzMS00YmM3LThmMWIt
MjY4OWM4NTg3OGFkLzEvM19YTVNFaVVPMF9vblN6bkg5d2VUX2ZYOC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mNDE5ZWItMjMzMS00YmM3LThmMWItMjY4OWM4NTg3OGFk
LzEvM19YTVNFaVVPMF9vblN6bkg5d2VUX2ZYOC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZ21VaLw
FkZK+z0V7yAhbBdthBxYmUGOEYzGY18d+QQKqewGQWi6VHPpotKsZmbFSoMFWOmZ
8uP/PO7cmv6c5xMVW5Zx+osgXaWZ5vumqf1SLrUcQG+QGy1iFnZrCOVIB7YmctPV
ACeUjygIS+NcA9fPn550qOboWPQh0iEx7RXjOLrjXI4ykvJPXDoeKVR/S5Ry+toq
qe5tmu64iJu8XyYPGjMOWJ5GlF1jlX2zlwijMTNEgLkiEkBL2XDqX1u/nb3Y4J3R
yeOInvbOWz8ENdtM1i+/PILo0OHWhEdcx0t7lBEEr6vAJ5NDr82xQwcQlkhqpSD5
xBFmxhYFjrM9Ag==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:11:51 2025 by rpki-client