Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
File: 3iuimqARP6_TcNhl-0REmHtHMIo.mft (raw, json)
Hash identifier: lC7mk5PnVxU7AeaVrjvSBcjV39TzTb2YFYuDAyeuSoc=
Subject key identifier: F7:6D:1F:E9:33:57:81:22:6D:72:E6:46:22:71:B0:58:9A:82:10:35
Authority key identifier: DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A
Certificate issuer: /CN=de2ba29aa0113fafd370d865fb4444987b47308a
Certificate serial: 0194BCE06A123E2EFE17968C7423C8EBF655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
Manifest number: 0896
Signing time: Fri 31 Jan 2025 15:00:11 +0000
Manifest this update: Fri 31 Jan 2025 15:00:11 +0000
Manifest next update: Sat 01 Feb 2025 15:00:11 +0000
Files and hashes: 1: 3iuimqARP6_TcNhl-0REmHtHMIo.crl (hash: kg/MpRnkkbS3nELA1HEy3OZVMXomkyzzryCNpcpnanc=)
2: PMD1GlDLGk7gMbwF-9_w1YlsV4M.roa (hash: yxn0bsBf+yoGp2ebzQpXlOvhqAaQoPdbhmTGHyH8IaM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6a:12:3e:2e:fe:17:96:8c:74:23:c8:eb:f6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2ba29aa0113fafd370d865fb4444987b47308a
Validity
Not Before: Jan 31 15:00:11 2025 GMT
Not After : Feb 1 15:00:11 2025 GMT
Subject: CN=f76d1fe9335781226d72e6462271b0589a821035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b8:95:8d:5d:70:8a:5b:a4:3d:ae:eb:67:e9:
fa:01:2e:42:8b:be:be:5f:03:75:4c:1b:cf:55:83:
76:bd:bb:da:0d:6c:78:37:0d:90:26:e3:d8:5c:3a:
7a:95:1e:67:e0:2e:58:7b:26:15:9e:aa:8c:31:c9:
57:76:a8:c0:6c:95:cb:ab:b2:41:7e:91:12:0a:4a:
33:d1:58:38:32:5e:cf:e6:08:c8:3c:6e:09:b4:f6:
6e:5e:69:ef:d5:4d:1e:4e:51:93:1d:8b:29:48:5c:
c7:88:d8:37:35:c0:4a:02:8c:c5:14:4c:ac:0f:01:
1f:e2:c7:b4:c4:f6:90:c6:ab:25:19:aa:7c:1e:0d:
a7:1b:95:fe:0c:4a:1b:38:f3:cb:e9:51:ac:c5:f7:
ce:ab:a6:f3:7e:01:35:26:60:f0:6a:d0:aa:e2:95:
1b:21:43:bf:11:58:74:03:1c:c5:34:fd:3a:31:e1:
7b:35:45:e5:b4:1d:f0:d7:07:38:57:99:15:39:08:
a3:5f:f6:20:fd:b1:11:b6:98:1f:21:f3:0e:76:17:
35:2a:07:c9:1d:0d:5b:23:ba:28:48:16:f0:18:25:
cb:8a:04:5d:b2:78:1e:50:79:38:15:66:a7:a7:ba:
87:aa:48:48:ec:3e:bf:05:db:15:7e:3c:f6:83:ef:
87:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6D:1F:E9:33:57:81:22:6D:72:E6:46:22:71:B0:58:9A:82:10:35
X509v3 Authority Key Identifier:
keyid:DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:42:80:af:16:a5:7d:da:c3:c9:e3:a7:64:57:c5:66:2b:bf:
4d:ab:e8:34:3e:29:c3:c4:87:79:fb:cc:64:2f:85:8d:49:f8:
6d:ba:e2:a7:43:a9:72:f5:04:a1:d7:5a:1f:64:55:e1:11:43:
39:a7:6c:60:36:19:5c:ce:66:4d:02:bb:c3:2b:3c:ee:d7:0b:
94:f7:b0:99:54:0f:ec:86:41:3f:6a:2d:e1:69:96:1f:ff:94:
f1:8f:08:49:c7:53:fc:76:10:28:af:62:cd:03:31:53:39:99:
43:15:36:15:3b:7f:b8:35:77:5b:1e:21:c7:ff:28:c7:a1:f9:
b1:b2:53:93:77:42:1a:2d:88:f2:9c:20:ce:4c:48:31:7d:58:
29:7f:08:e2:cb:ce:83:08:6a:e5:c0:4f:03:16:be:8f:8e:3b:
73:d4:f9:82:06:06:4a:11:7d:20:22:21:6f:ea:23:2d:59:5f:
72:d9:6f:7a:3e:a8:b4:80:c4:47:35:ce:fd:a2:73:1d:99:e0:
dd:69:18:44:49:e6:4e:67:5f:f1:fc:fe:5e:3c:9d:8e:a9:5d:
2b:7f:37:95:c5:8c:6f:44:d7:dc:01:49:ff:b9:52:34:6e:6a:
58:14:2f:db:31:f0:31:d2:a8:a9:ae:e4:2b:ec:be:4b:c1:5c:
a5:5d:a4:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84GoSPi7+F5aMdCPI6/ZVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMmJhMjlhYTAxMTNmYWZkMzcwZDg2NWZiNDQ0NDk4N2I0
NzMwOGEwHhcNMjUwMTMxMTUwMDExWhcNMjUwMjAxMTUwMDExWjAzMTEwLwYDVQQD
EyhmNzZkMWZlOTMzNTc4MTIyNmQ3MmU2NDYyMjcxYjA1ODlhODIxMDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3riVjV1wilukPa7rZ+n6AS5Ci76+
XwN1TBvPVYN2vbvaDWx4Nw2QJuPYXDp6lR5n4C5YeyYVnqqMMclXdqjAbJXLq7JB
fpESCkoz0Vg4Ml7P5gjIPG4JtPZuXmnv1U0eTlGTHYspSFzHiNg3NcBKAozFFEys
DwEf4se0xPaQxqslGap8Hg2nG5X+DEobOPPL6VGsxffOq6bzfgE1JmDwatCq4pUb
IUO/EVh0AxzFNP06MeF7NUXltB3w1wc4V5kVOQijX/Yg/bERtpgfIfMOdhc1KgfJ
HQ1bI7ooSBbwGCXLigRdsngeUHk4FWanp7qHqkhI7D6/BdsVfjz2g++HOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdtH+kzV4EibXLmRiJxsFiaghA1MB8GA1UdIwQY
MBaAFN4ropqgET+v03DYZftERJh7RzCKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2l1aW1xQVJQNl9UY05obC0wUkVtSHRITUlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85NzAwNGItYjY3MS00ZjNkLThkNTAt
ZDFhNGE0NWZhZmJjLzEvM2l1aW1xQVJQNl9UY05obC0wUkVtSHRITUlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS85NzAwNGItYjY3MS00ZjNkLThkNTAtZDFhNGE0NWZhZmJj
LzEvM2l1aW1xQVJQNl9UY05obC0wUkVtSHRITUlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0KArxal
fdrDyeOnZFfFZiu/TavoND4pw8SHefvMZC+FjUn4bbrip0OpcvUEoddaH2RV4RFD
OadsYDYZXM5mTQK7wys87tcLlPewmVQP7IZBP2ot4WmWH/+U8Y8IScdT/HYQKK9i
zQMxUzmZQxU2FTt/uDV3Wx4hx/8ox6H5sbJTk3dCGi2I8pwgzkxIMX1YKX8I4svO
gwhq5cBPAxa+j447c9T5ggYGShF9ICIhb+ojLVlfctlvej6otIDERzXO/aJzHZng
3WkYREnmTmdf8fz+XjydjqldK383lcWMb0TX3AFJ/7lSNG5qWBQv2zHwMdKoqa7k
K+y+S8FcpV2kFg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:08 2025 by rpki-client