
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
File: 2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft (raw, json)
Hash identifier: 7S0I3V7zqkqSTHPYhCKNgFJ2rH/9drAv122/LE3bMRg=
Subject key identifier: 50:94:16:BA:E0:1C:98:3F:7F:A5:2A:FD:E0:47:2D:D0:E1:96:94:3A
Authority key identifier: DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37
Certificate issuer: /CN=daddd1b636fe3df1df3d811f644583312a651337
Certificate serial: 0194BBCEAE3DB1DE759B436FC7E81B4B191D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
Manifest number: 1091
Signing time: Fri 31 Jan 2025 10:01:11 +0000
Manifest this update: Fri 31 Jan 2025 10:01:11 +0000
Manifest next update: Sat 01 Feb 2025 10:01:11 +0000
Files and hashes: 1: 2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl (hash: SoVSyPUOWiPmF/P4pFWJ7GsBXlmtiitCmSpvVpRyI7U=)
2: Ayr05U3NKAd6mblS63pAVZbHnEI.roa (hash: PYCcEhQQfZIx55w6ukJcbUlLU5BAsDen0FIJwdgcRtk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ae:3d:b1:de:75:9b:43:6f:c7:e8:1b:4b:19:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daddd1b636fe3df1df3d811f644583312a651337
Validity
Not Before: Jan 31 10:01:11 2025 GMT
Not After : Feb 1 10:01:11 2025 GMT
Subject: CN=509416bae01c983f7fa52afde0472dd0e196943a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:b0:b4:f1:27:63:0a:30:c3:a1:7a:52:40:
ce:68:8b:99:8b:6d:74:3c:4e:41:a7:d7:72:b7:1d:
78:9d:a3:88:48:cf:7c:83:2a:5a:7b:9a:53:12:e0:
e1:d0:0f:1d:fa:73:16:cc:e7:3f:9b:29:7d:c2:77:
ba:ff:a9:ef:e6:9c:b2:ec:37:86:e3:8a:9f:f3:f9:
b3:55:4b:40:1e:d1:c8:33:9a:c0:eb:3f:87:76:7e:
5f:38:1e:56:e4:09:13:33:d7:61:58:72:6d:2d:7c:
87:e8:69:10:cc:23:a2:4b:9b:61:90:f0:56:76:0f:
a9:4d:e1:1c:7e:75:d2:47:79:f3:85:e5:8f:16:c0:
85:ac:68:9e:89:cf:63:51:b5:15:6f:eb:ed:40:00:
e4:e9:6d:3c:c4:02:88:e7:69:3d:4e:58:6d:6c:d6:
4b:85:ba:f8:d7:8b:d4:b6:23:48:cf:86:ba:1d:c2:
51:6f:b3:63:97:a5:29:8b:51:45:5e:73:28:93:fc:
c9:4d:43:e9:1f:6b:47:a5:f4:91:63:61:11:24:5b:
2a:96:d7:42:33:16:be:a7:0b:f5:e6:69:02:d1:d1:
9b:c1:c7:54:7b:97:17:27:24:d7:22:5e:54:35:22:
74:67:07:29:10:5c:4d:34:f3:b1:80:f1:f0:08:c8:
27:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:94:16:BA:E0:1C:98:3F:7F:A5:2A:FD:E0:47:2D:D0:E1:96:94:3A
X509v3 Authority Key Identifier:
keyid:DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:18:3b:cc:ef:e1:7b:45:34:2c:ec:60:61:d9:29:bd:4c:7f:
2b:42:09:dc:2e:00:1f:92:f0:a9:9a:0d:56:ae:e0:1e:c7:5f:
50:fb:0c:d9:90:05:08:b6:fc:b1:72:18:40:ab:bc:36:e8:c6:
57:14:65:79:d5:a9:c7:11:59:1d:d3:71:9c:fe:35:d9:1a:aa:
ad:69:10:aa:d5:77:0a:40:10:9c:d6:8f:b9:ec:27:4a:4a:4c:
e3:7b:0b:6f:38:bd:ba:f8:be:73:af:53:69:70:2f:48:35:35:
8f:3c:e1:42:5a:87:17:08:ca:cb:5b:3f:a6:ed:66:42:e8:14:
f6:3c:6e:61:6d:a9:99:fc:c7:13:67:01:53:7e:5c:b2:f0:2f:
5a:ca:22:b9:79:e9:0b:a8:f7:5f:58:1c:d5:a4:aa:24:c3:78:
2f:e0:a3:67:b3:9b:a8:60:e3:79:33:4b:06:1f:45:95:a1:b6:
2d:a0:91:ae:95:33:c8:fd:9b:8d:b1:dd:bd:50:20:8a:6a:67:
51:df:9a:cf:b3:64:5e:c9:18:00:7e:23:ce:9d:2c:7f:2b:d1:
1d:94:5a:32:d0:22:7c:57:dd:31:59:03:6e:af:f2:2a:c6:8c:
d4:f7:86:2b:78:ae:5b:ba:7a:a5:37:a5:f8:52:de:03:8e:0f:
fa:be:66:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zq49sd51m0Nvx+gbSxkdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZGRkMWI2MzZmZTNkZjFkZjNkODExZjY0NDU4MzMxMmE2
NTEzMzcwHhcNMjUwMTMxMTAwMTExWhcNMjUwMjAxMTAwMTExWjAzMTEwLwYDVQQD
Eyg1MDk0MTZiYWUwMWM5ODNmN2ZhNTJhZmRlMDQ3MmRkMGUxOTY5NDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkWwtPEnYwoww6F6UkDOaIuZi210
PE5Bp9dytx14naOISM98gypae5pTEuDh0A8d+nMWzOc/myl9wne6/6nv5pyy7DeG
44qf8/mzVUtAHtHIM5rA6z+Hdn5fOB5W5AkTM9dhWHJtLXyH6GkQzCOiS5thkPBW
dg+pTeEcfnXSR3nzheWPFsCFrGieic9jUbUVb+vtQADk6W08xAKI52k9TlhtbNZL
hbr414vUtiNIz4a6HcJRb7Njl6Upi1FFXnMok/zJTUPpH2tHpfSRY2ERJFsqltdC
Mxa+pwv15mkC0dGbwcdUe5cXJyTXIl5UNSJ0ZwcpEFxNNPOxgPHwCMgnOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCUFrrgHJg/f6Uq/eBHLdDhlpQ6MB8GA1UdIwQY
MBaAFNrd0bY2/j3x3z2BH2RFgzEqZRM3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnQzUnRqYi1QZkhmUFlFZlpFV0RNU3BsRXpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80NjQzZDctMzdkNy00YjNjLWExYTUt
NjMyY2U2N2MwODVhLzEvMnQzUnRqYi1QZkhmUFlFZlpFV0RNU3BsRXpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80NjQzZDctMzdkNy00YjNjLWExYTUtNjMyY2U2N2MwODVh
LzEvMnQzUnRqYi1QZkhmUFlFZlpFV0RNU3BsRXpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAxg7zO/h
e0U0LOxgYdkpvUx/K0IJ3C4AH5LwqZoNVq7gHsdfUPsM2ZAFCLb8sXIYQKu8NujG
VxRledWpxxFZHdNxnP412RqqrWkQqtV3CkAQnNaPuewnSkpM43sLbzi9uvi+c69T
aXAvSDU1jzzhQlqHFwjKy1s/pu1mQugU9jxuYW2pmfzHE2cBU35csvAvWsoiuXnp
C6j3X1gc1aSqJMN4L+CjZ7ObqGDjeTNLBh9FlaG2LaCRrpUzyP2bjbHdvVAgimpn
Ud+az7NkXskYAH4jzp0sfyvRHZRaMtAifFfdMVkDbq/yKsaM1PeGK3iuW7p6pTel
+FLeA44P+r5m8w==
-----END CERTIFICATE-----
Generated at Thu May 1 06:25:03 2025 by rpki-client