Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
File: x3oRzK0S5FUob10OswQOhj8wyZM.mft (raw, json)
Hash identifier: eItswzoHyRGdNlAzOXi7ezNsGB6+F2kFfE/pzDVlxYk=
Subject key identifier: 3E:6A:07:FF:88:EB:17:BE:A1:EF:83:58:45:8F:48:B3:DA:E4:86:85
Authority key identifier: C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
Certificate issuer: /CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Certificate serial: 0194BC3C2F55CD337484CA6B37A3A934CAB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
Manifest number: 0459
Signing time: Fri 31 Jan 2025 12:00:48 +0000
Manifest this update: Fri 31 Jan 2025 12:00:48 +0000
Manifest next update: Sat 01 Feb 2025 12:00:48 +0000
Files and hashes: 1: bpJaNyuRoeNygXab7GKwiGTrmYw.roa (hash: ffBzNxihOHhGjmbYdQ7gFGqXeGCQ0x6ARcmv1ly/R9w=)
2: x3oRzK0S5FUob10OswQOhj8wyZM.crl (hash: UOVOg+HEY7lSfOgVd9OyM+c/zgAE0dfj9CmqnOvCMfE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2f:55:cd:33:74:84:ca:6b:37:a3:a9:34:ca:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Validity
Not Before: Jan 31 12:00:48 2025 GMT
Not After : Feb 1 12:00:48 2025 GMT
Subject: CN=3e6a07ff88eb17bea1ef8358458f48b3dae48685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ea:f4:89:2e:4c:04:4f:da:72:56:b8:5b:5a:
00:d8:d4:fc:38:ca:c6:20:c8:37:52:0f:92:36:ff:
a7:1e:f6:74:97:99:49:01:32:e5:1d:6b:8b:49:bd:
7e:d8:39:67:5e:74:4e:d6:89:e9:98:98:b9:02:df:
8d:7d:30:80:b7:e8:d0:af:54:21:4b:1e:bc:cf:14:
af:77:bb:e1:55:34:0e:de:46:59:b6:d6:ce:a0:d0:
be:be:9a:b0:2a:36:48:93:8e:fb:a5:67:22:fc:62:
fd:9b:90:8a:df:48:7c:c6:34:72:4e:01:ee:70:79:
78:2c:7e:40:99:c2:e4:7c:b7:7d:db:59:85:70:df:
db:64:41:8f:eb:91:ed:86:63:c0:e4:ea:ca:21:9c:
ba:2a:01:be:c7:aa:b0:71:2c:39:60:33:20:27:9c:
55:e7:dc:04:9d:b3:49:a7:ce:15:8a:b2:29:7b:8e:
d6:65:8a:b0:b1:d4:71:18:05:ca:d9:e5:e7:3d:e5:
f7:4f:1b:07:35:5e:0f:14:82:32:61:e8:bb:dc:f6:
3f:c2:1a:7a:7f:a8:de:b4:cf:e9:04:73:25:b3:9d:
fb:3f:2e:f2:0b:3a:15:35:d7:21:75:2a:50:71:f9:
b3:ea:81:55:81:25:ae:e0:cc:0d:6c:0e:1e:57:ef:
59:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6A:07:FF:88:EB:17:BE:A1:EF:83:58:45:8F:48:B3:DA:E4:86:85
X509v3 Authority Key Identifier:
keyid:C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:66:c3:69:19:55:9f:44:3b:80:22:e3:14:bf:0f:d9:4c:c7:
05:15:8f:96:3b:6e:ee:08:76:4c:cb:f9:de:7e:b6:b0:a0:ac:
ef:3a:54:8f:e2:50:84:a9:7f:b6:0b:12:96:1b:85:9f:b5:9c:
b8:93:6b:6a:a9:c8:11:bf:ed:c0:70:69:eb:c0:fc:26:28:13:
c6:b6:ac:80:cf:a1:d3:ec:9f:e6:af:63:4a:bb:8a:82:59:4c:
37:68:1a:ef:63:67:76:99:d4:69:c2:88:7d:ce:a3:5e:1c:0e:
84:26:5f:27:16:6a:b7:c2:90:fa:92:83:45:5e:f9:d7:62:99:
4a:60:95:f7:69:7a:df:c7:da:a7:cf:dc:78:48:54:ee:ad:25:
d0:17:32:9e:c3:c1:c8:b2:18:2c:6f:3d:20:71:c4:21:9b:fe:
d7:44:e8:51:62:14:71:96:45:6e:bf:55:db:42:98:17:6f:a7:
47:b9:88:8b:86:94:00:43:08:a8:f9:6b:48:53:75:fd:10:06:
34:0a:a3:5a:68:c5:9c:35:15:06:33:aa:2c:2d:d1:44:61:79:
34:37:9c:7c:9f:60:42:28:d1:c5:0c:e2:95:47:9a:c3:d4:62:
1e:1a:28:1e:91:58:8f:77:ae:67:92:21:52:1d:48:28:3f:88:
fa:a5:04:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PC9VzTN0hMprN6OpNMq3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3N2ExMWNjYWQxMmU0NTUyODZmNWQwZWIzMDQwZTg2M2Yz
MGM5OTMwHhcNMjUwMTMxMTIwMDQ4WhcNMjUwMjAxMTIwMDQ4WjAzMTEwLwYDVQQD
EygzZTZhMDdmZjg4ZWIxN2JlYTFlZjgzNTg0NThmNDhiM2RhZTQ4Njg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmer0iS5MBE/acla4W1oA2NT8OMrG
IMg3Ug+SNv+nHvZ0l5lJATLlHWuLSb1+2DlnXnRO1onpmJi5At+NfTCAt+jQr1Qh
Sx68zxSvd7vhVTQO3kZZttbOoNC+vpqwKjZIk477pWci/GL9m5CK30h8xjRyTgHu
cHl4LH5AmcLkfLd921mFcN/bZEGP65HthmPA5OrKIZy6KgG+x6qwcSw5YDMgJ5xV
59wEnbNJp84VirIpe47WZYqwsdRxGAXK2eXnPeX3TxsHNV4PFIIyYei73PY/whp6
f6jetM/pBHMls537Py7yCzoVNdchdSpQcfmz6oFVgSWu4MwNbA4eV+9ZawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5qB/+I6xe+oe+DWEWPSLPa5IaFMB8GA1UdIwQY
MBaAFMd6EcytEuRVKG9dDrMEDoY/MMmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNvUnpLMFM1RlVvYjEwT3N3UU9oajh3eVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iNjY0Y2ItMzQ5YS00ZmZiLWIyNjgt
MDkwZTViZDU4MGIzLzEveDNvUnpLMFM1RlVvYjEwT3N3UU9oajh3eVpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9iNjY0Y2ItMzQ5YS00ZmZiLWIyNjgtMDkwZTViZDU4MGIz
LzEveDNvUnpLMFM1RlVvYjEwT3N3UU9oajh3eVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmbDaRlV
n0Q7gCLjFL8P2UzHBRWPljtu7gh2TMv53n62sKCs7zpUj+JQhKl/tgsSlhuFn7Wc
uJNraqnIEb/twHBp68D8JigTxrasgM+h0+yf5q9jSruKgllMN2ga72NndpnUacKI
fc6jXhwOhCZfJxZqt8KQ+pKDRV7512KZSmCV92l638fap8/ceEhU7q0l0BcynsPB
yLIYLG89IHHEIZv+10ToUWIUcZZFbr9V20KYF2+nR7mIi4aUAEMIqPlrSFN1/RAG
NAqjWmjFnDUVBjOqLC3RRGF5NDecfJ9gQijRxQzilUeaw9RiHhooHpFYj3euZ5Ih
Uh1IKD+I+qUE4Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:54:30 2025 by rpki-client