Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
File: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft (raw, json)
Hash identifier: B/LY8IcrMV60pb4VxrP2dDhGzslnuVM6T3n0x9LjkE4=
Subject key identifier: 36:99:9D:C8:3E:C7:E3:64:42:9F:B7:33:BA:79:E0:73:FF:46:12:15
Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee
Certificate serial: 0194BBCDE2F16323F016583F4E9B7E20577B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
Manifest number: 0ABE
Signing time: Fri 31 Jan 2025 10:00:19 +0000
Manifest this update: Fri 31 Jan 2025 10:00:19 +0000
Manifest next update: Sat 01 Feb 2025 10:00:19 +0000
Files and hashes: 1: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl (hash: AS+cdYBuV/R0TF0I8pxk7C2IIP/MepVA9qIJieWDrR0=)
2: 8miIDeBQxB0aKJY-TlsIuuJ2hww.roa (hash: mQmM8Cjnfx5WSvhPSj11m+hm6JvBiNUtIRExWbof9J8=)
3: IRGnT1eQmUBmgR6_xtusELr-83s.roa (hash: dJ3+bDwzY4UO43kbNXGDeFrUEwRtOB0R3J1TQjuxqCQ=)
4: aw3P8V17V992wZUulFnFkkVrMmo.roa (hash: O9AIELr13JUWTjKqPnJ8lbjYgl5+VRQqDU69j3HTMwo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e2:f1:63:23:f0:16:58:3f:4e:9b:7e:20:57:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee
Validity
Not Before: Jan 31 10:00:19 2025 GMT
Not After : Feb 1 10:00:19 2025 GMT
Subject: CN=36999dc83ec7e364429fb733ba79e073ff461215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:be:60:7b:94:0d:3e:ca:b6:66:eb:5e:45:f9:
ed:6a:37:3f:12:cf:83:49:27:e6:01:ff:0c:5f:7a:
72:c6:f1:9a:25:93:44:ce:3f:52:1d:3a:3c:71:83:
6b:46:17:50:0d:76:2e:ef:4f:07:1d:4c:5e:72:fc:
23:ae:c0:0b:76:5a:04:8c:f4:08:df:65:5c:ce:de:
7a:b6:56:4c:6e:09:9c:db:a1:ca:17:94:ff:63:9b:
7e:70:0e:16:9a:d0:41:35:c7:64:7d:6e:bd:9a:11:
e7:3b:4f:eb:37:29:65:36:97:4e:34:df:f4:4e:1a:
14:7e:f6:ba:db:8c:68:14:a0:75:10:58:37:d3:40:
9e:fb:82:5e:67:90:95:e1:a3:fd:7c:1a:e9:3a:90:
4b:28:a6:a6:b8:96:68:84:52:4d:bd:ef:02:54:ba:
50:65:ff:5b:0c:06:00:86:64:15:34:43:30:b0:84:
0c:d3:0f:a9:d8:78:d1:dc:eb:d5:3a:00:f0:b5:dc:
8b:3b:ec:c0:61:d5:af:1e:a7:83:f6:9a:0d:e8:07:
ea:87:08:33:36:93:23:ba:1a:9a:c0:fd:0c:fb:0a:
40:2a:c5:a0:e0:18:cf:42:8a:ba:57:96:bb:59:03:
8c:34:84:c5:6e:73:77:17:5a:48:f4:85:19:33:57:
bd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:99:9D:C8:3E:C7:E3:64:42:9F:B7:33:BA:79:E0:73:FF:46:12:15
X509v3 Authority Key Identifier:
keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:7e:e3:23:c6:8a:b7:ba:7f:d0:98:a4:5d:41:3e:71:56:38:
fe:74:c3:02:eb:83:c0:1d:39:d7:90:5e:5e:aa:4e:43:46:34:
d7:57:c0:22:65:32:09:bd:39:e2:39:5b:9a:a0:59:87:e5:b4:
44:2d:41:84:55:3d:1b:65:98:1d:18:23:c8:09:b3:56:18:e0:
cb:1a:5e:ab:a6:73:1b:eb:39:c8:94:55:bf:92:85:22:ba:c9:
14:16:7e:db:4c:7d:a0:53:fd:c5:37:1e:3f:fe:c8:43:cd:1c:
b7:04:b9:17:f8:b1:a6:de:be:44:48:2d:d5:55:7a:34:c0:bd:
4c:fe:00:88:80:24:47:c1:76:91:03:ff:48:c6:a2:b2:51:1e:
1f:e6:77:2f:cf:82:06:0e:3e:dd:31:59:60:e0:68:12:6b:bf:
2b:e0:39:14:eb:26:84:a1:d1:b0:9c:54:69:d4:a5:db:ea:40:
21:95:24:05:58:79:e0:78:1d:81:79:c7:d7:92:ec:2c:d1:55:
0d:15:75:f9:a2:1c:f2:3a:ed:dc:45:4a:96:91:15:63:14:c6:
93:a4:4c:40:89:2f:f5:5e:97:11:fb:0d:a4:d4:88:c0:3e:4b:
82:47:e6:01:10:e0:4a:4c:40:ca:72:43:9e:b3:5c:35:9b:6c:
d0:53:6e:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zeLxYyPwFlg/Tpt+IFd7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYjcxNDcxMzczYmIwNjAzYzM1NmVlZGVkNGI5MTgyOTJi
NWJlZWUwHhcNMjUwMTMxMTAwMDE5WhcNMjUwMjAxMTAwMDE5WjAzMTEwLwYDVQQD
EygzNjk5OWRjODNlYzdlMzY0NDI5ZmI3MzNiYTc5ZTA3M2ZmNDYxMjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb5ge5QNPsq2ZuteRfntajc/Es+D
SSfmAf8MX3pyxvGaJZNEzj9SHTo8cYNrRhdQDXYu708HHUxecvwjrsALdloEjPQI
32Vczt56tlZMbgmc26HKF5T/Y5t+cA4WmtBBNcdkfW69mhHnO0/rNyllNpdONN/0
ThoUfva624xoFKB1EFg300Ce+4JeZ5CV4aP9fBrpOpBLKKamuJZohFJNve8CVLpQ
Zf9bDAYAhmQVNEMwsIQM0w+p2HjR3OvVOgDwtdyLO+zAYdWvHqeD9poN6Afqhwgz
NpMjuhqawP0M+wpAKsWg4BjPQoq6V5a7WQOMNITFbnN3F1pI9IUZM1e9ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaZncg+x+NkQp+3M7p54HP/RhIVMB8GA1UdIwQY
MBaAFN23FHE3O7BgPDVu7e1LkYKStb7uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80YmNiMWItZmY0MS00OGUwLThkYjgt
NjIxMmFjNDljYTNiLzEvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy80YmNiMWItZmY0MS00OGUwLThkYjgtNjIxMmFjNDljYTNi
LzEvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAn7jI8aK
t7p/0JikXUE+cVY4/nTDAuuDwB0515BeXqpOQ0Y011fAImUyCb054jlbmqBZh+W0
RC1BhFU9G2WYHRgjyAmzVhjgyxpeq6ZzG+s5yJRVv5KFIrrJFBZ+20x9oFP9xTce
P/7IQ80ctwS5F/ixpt6+REgt1VV6NMC9TP4AiIAkR8F2kQP/SMaislEeH+Z3L8+C
Bg4+3TFZYOBoEmu/K+A5FOsmhKHRsJxUadSl2+pAIZUkBVh54HgdgXnH15LsLNFV
DRV1+aIc8jrt3EVKlpEVYxTGk6RMQIkv9V6XEfsNpNSIwD5LgkfmARDgSkxAynJD
nrNcNZts0FNueA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:57:30 2025 by rpki-client