Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
File: 3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft (raw, json)
Hash identifier: /K4hGg6da99KtdDViv0EwPhQL5/4gYLF2paJ9d5XRbk=
Subject key identifier: BE:03:7F:68:E3:70:66:E2:06:27:97:E7:C9:4F:49:0D:31:91:77:CF
Authority key identifier: DE:11:CC:6D:F1:33:66:FC:59:5A:6E:72:ED:03:C5:38:00:79:2B:4B
Certificate issuer: /CN=de11cc6df13366fc595a6e72ed03c53800792b4b
Certificate serial: 0194BC3C542BF7470A0FC0758DCFE5ACAAD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
Manifest number: 0B8D
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: 3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl (hash: t0XGE0mERD35++TtwuJu2M9311+3DK9nGWvydD/s/fY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:54:2b:f7:47:0a:0f:c0:75:8d:cf:e5:ac:aa:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de11cc6df13366fc595a6e72ed03c53800792b4b
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=be037f68e37066e2062797e7c94f490d319177cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2e:e0:49:42:f7:04:50:a7:97:20:47:7c:a1:
17:ff:6d:46:92:b2:2c:b7:14:10:9f:e7:c1:66:d3:
df:48:e4:1b:bf:5d:70:1c:2c:e9:80:c0:76:89:3f:
6e:c1:38:12:8e:23:46:02:cf:ff:56:43:5a:8f:03:
dd:ac:17:1f:3c:8f:ff:19:1c:4a:76:a5:84:d2:57:
1a:25:23:8d:dc:55:39:e5:97:ae:91:a8:74:47:05:
07:ae:d9:10:49:8b:57:4f:13:f9:d7:36:e5:38:76:
3b:00:e6:c0:7b:56:7c:7a:5d:5b:49:64:cc:7c:07:
15:1c:c4:f4:72:94:32:40:dd:cb:0d:b3:10:38:08:
29:b5:e3:f1:82:c5:87:55:f4:27:2b:8f:84:31:17:
54:35:9c:78:61:2c:9f:bb:bd:0b:43:0f:f1:a8:8c:
33:62:49:bd:88:fb:bb:e9:08:46:6a:b3:37:b0:30:
56:c4:b8:e8:67:2f:99:cd:89:d0:e9:79:19:5a:f9:
0a:be:c9:9a:c0:eb:b5:70:51:df:18:85:f2:aa:10:
e7:43:9e:91:ea:7e:64:a0:f8:44:0e:50:9b:df:5f:
6d:af:f5:55:fb:71:e4:03:47:b1:0d:8c:a5:72:3b:
3b:09:f3:12:1c:da:d2:fc:ba:70:60:14:85:15:62:
ce:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:03:7F:68:E3:70:66:E2:06:27:97:E7:C9:4F:49:0D:31:91:77:CF
X509v3 Authority Key Identifier:
keyid:DE:11:CC:6D:F1:33:66:FC:59:5A:6E:72:ED:03:C5:38:00:79:2B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e7:6a:8d:f9:46:39:89:3f:43:39:2f:24:1d:ce:59:f4:c7:
d4:2a:83:69:64:75:fe:1a:d9:61:db:43:6b:b4:20:06:af:c2:
12:8e:2f:21:2e:34:7a:28:24:d4:34:df:bb:15:fc:d1:92:68:
95:3a:95:04:39:5f:d6:75:d1:5d:5d:cc:bd:b1:54:56:5e:ba:
52:e7:25:ec:ba:24:7b:58:95:c7:ff:03:2f:43:8f:b2:20:4b:
bb:aa:65:2e:ab:a1:69:94:ed:4b:3a:99:6e:22:fa:09:a6:30:
22:b7:81:15:3a:e0:e0:3c:20:06:b4:12:28:7a:b4:97:46:22:
94:5f:6d:c4:f6:c9:f9:99:e2:c7:8a:c1:20:c3:b5:b2:f1:9e:
0c:57:83:50:60:1e:7d:6d:d9:e3:e5:18:ba:48:f7:d1:8f:46:
b8:e7:58:fc:ce:5f:f3:85:a5:04:0d:cf:00:4a:a6:a2:aa:14:
57:41:1e:1d:c5:f6:4e:b1:cb:52:26:7c:5d:e9:65:09:23:d2:
0e:69:de:ef:a0:e5:f3:bf:b2:7e:70:79:e8:20:07:f2:1d:4f:
60:94:6b:4e:71:e3:8d:a3:80:51:b6:e5:52:30:6f:3b:04:3c:
98:45:e0:4f:a0:6c:55:f6:a5:cd:3e:e4:77:4a:88:aa:3c:43:
f1:b0:2f:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PFQr90cKD8B1jc/lrKrTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTFjYzZkZjEzMzY2ZmM1OTVhNmU3MmVkMDNjNTM4MDA3
OTJiNGIwHhcNMjUwMTMxMTIwMDU3WhcNMjUwMjAxMTIwMDU3WjAzMTEwLwYDVQQD
EyhiZTAzN2Y2OGUzNzA2NmUyMDYyNzk3ZTdjOTRmNDkwZDMxOTE3N2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC7gSUL3BFCnlyBHfKEX/21GkrIs
txQQn+fBZtPfSOQbv11wHCzpgMB2iT9uwTgSjiNGAs//VkNajwPdrBcfPI//GRxK
dqWE0lcaJSON3FU55Zeukah0RwUHrtkQSYtXTxP51zblOHY7AObAe1Z8el1bSWTM
fAcVHMT0cpQyQN3LDbMQOAgptePxgsWHVfQnK4+EMRdUNZx4YSyfu70LQw/xqIwz
Ykm9iPu76QhGarM3sDBWxLjoZy+ZzYnQ6XkZWvkKvsmawOu1cFHfGIXyqhDnQ56R
6n5koPhEDlCb319tr/VV+3HkA0exDYylcjs7CfMSHNrS/LpwYBSFFWLO/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4Df2jjcGbiBieX58lPSQ0xkXfPMB8GA1UdIwQY
MBaAFN4RzG3xM2b8WVpucu0DxTgAeStLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hITWJmRXpadnhaV201eTdRUEZPQUI1SzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jNjQ5NGQtZmM2Ni00NTNjLWJjODMt
ZTZjNGRmNDZmMDRkLzEvM2hITWJmRXpadnhaV201eTdRUEZPQUI1SzBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9jNjQ5NGQtZmM2Ni00NTNjLWJjODMtZTZjNGRmNDZmMDRk
LzEvM2hITWJmRXpadnhaV201eTdRUEZPQUI1SzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOdqjflG
OYk/QzkvJB3OWfTH1CqDaWR1/hrZYdtDa7QgBq/CEo4vIS40eigk1DTfuxX80ZJo
lTqVBDlf1nXRXV3MvbFUVl66Uucl7Loke1iVx/8DL0OPsiBLu6plLquhaZTtSzqZ
biL6CaYwIreBFTrg4DwgBrQSKHq0l0YilF9txPbJ+Znix4rBIMO1svGeDFeDUGAe
fW3Z4+UYukj30Y9GuOdY/M5f84WlBA3PAEqmoqoUV0EeHcX2TrHLUiZ8XellCSPS
Dmne76Dl87+yfnB56CAH8h1PYJRrTnHjjaOAUbblUjBvOwQ8mEXgT6BsVfalzT7k
d0qIqjxD8bAvtQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:34 2025 by rpki-client