Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
File: s-98dqs-aXHY-HMC3fksxgmISeo.mft (raw, json)
Hash identifier: oUBwayLZOHvCW0iyawoHLuoPZnszbUtqQ9ultSZ453g=
Subject key identifier: C3:6B:C3:C2:BF:62:66:2A:74:8B:AF:BC:07:5B:5D:38:6D:C8:1D:BE
Authority key identifier: B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
Certificate issuer: /CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Certificate serial: 0194BD17556A13AC544DBC823E3585624F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:10 +0000
Manifest this update: Fri 31 Jan 2025 16:00:10 +0000
Manifest next update: Sat 01 Feb 2025 16:00:10 +0000
Files and hashes: 1: s-98dqs-aXHY-HMC3fksxgmISeo.crl (hash: lxyD8FAKQVBu3tce4xixNFxasq17e2iNhuBkfOdJ55M=)
2: uvesjoVgl9NM-m1BIFM5Yl9dGPo.roa (hash: BDyqIMMKzj8ksjoDvptTiXpxyPNIyT6fdfz8Vi/kBoE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:55:6a:13:ac:54:4d:bc:82:3e:35:85:62:4f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Validity
Not Before: Jan 31 16:00:10 2025 GMT
Not After : Feb 1 16:00:10 2025 GMT
Subject: CN=c36bc3c2bf62662a748bafbc075b5d386dc81dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:32:fd:03:e7:85:e1:34:47:97:55:68:a0:88:
fa:38:df:9b:97:0c:d8:a9:01:f3:d7:c1:00:bd:fb:
1e:50:d5:5d:31:13:c5:b6:86:a9:41:66:bd:00:e4:
ec:89:93:71:cc:30:a9:dc:65:68:1e:a8:95:f0:11:
52:e9:49:4e:86:a7:05:a3:75:f6:99:2b:57:48:c2:
86:0c:9e:0b:0a:ee:78:4d:3c:7e:6a:5e:dc:7b:fa:
7c:7d:36:ef:94:7b:0a:49:c5:8f:26:9b:be:b4:80:
0b:09:a5:60:4e:75:f4:15:a9:1a:e8:12:df:3d:05:
9c:1c:69:10:3c:dd:cb:7b:ff:73:a4:65:a5:d4:22:
4b:78:3d:5d:f2:50:6b:8f:27:ed:bc:7c:6f:b9:3b:
ae:d8:79:b7:eb:e9:d1:10:68:0b:74:f9:ca:06:7b:
c3:b3:3b:9c:d8:0d:88:ef:73:9a:f1:73:b2:c2:53:
14:25:74:5e:bf:dc:95:7b:89:7a:48:b0:0d:77:38:
99:40:1a:7f:1d:4b:b3:bb:e6:55:c5:9f:04:4c:c2:
cb:db:f7:2f:8b:eb:e6:ed:12:3d:2d:89:b3:4f:d0:
f9:6f:14:1d:45:df:cd:30:bf:1d:0b:cc:07:23:72:
5c:2a:31:99:f5:7b:80:c1:90:a8:db:d8:57:c5:da:
32:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6B:C3:C2:BF:62:66:2A:74:8B:AF:BC:07:5B:5D:38:6D:C8:1D:BE
X509v3 Authority Key Identifier:
keyid:B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d9:fe:6e:71:32:4f:59:b8:3d:92:94:de:19:a9:08:d6:b1:
5e:0c:14:18:69:09:1f:ab:5a:d4:a1:55:1b:cf:97:78:c8:01:
99:77:2c:10:c9:30:40:bf:97:b8:25:7e:95:7c:49:fc:36:bc:
04:b9:65:8e:22:b1:3b:41:a5:00:cf:c5:4a:ff:82:66:db:34:
94:1d:3a:cf:85:32:5a:04:e7:09:d4:31:54:67:a0:f1:a8:cd:
08:13:ea:2e:94:f0:43:e3:24:d1:e9:09:5a:b9:d7:dd:3c:fb:
e4:ae:82:93:16:a4:2e:ee:27:13:8e:45:96:7f:58:69:cc:f9:
d6:22:38:57:a0:6f:04:2a:1f:47:84:f4:c6:b6:73:09:6e:23:
c6:17:34:83:f2:26:58:54:12:99:af:41:55:d0:b1:34:4f:f7:
ac:8f:3a:21:24:04:40:08:b6:f7:fa:fd:55:9e:9e:9f:e4:1c:
73:55:f8:1b:d8:49:33:48:18:b0:75:c3:64:10:17:23:cd:3f:
bc:4b:c9:df:71:89:27:bb:29:17:23:b2:25:ea:09:f6:6e:6c:
14:5e:7e:6b:56:49:86:3a:d2:83:33:18:31:9f:33:10:c8:8a:
60:d9:31:e3:20:11:9e:0b:c1:66:4c:3f:d0:9e:b9:ff:d3:5b:
f1:54:65:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F1VqE6xUTbyCPjWFYk8BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZWY3Yzc2YWIzZTY5NzFkOGY4NzMwMmRkZjkyY2M2MDk4
ODQ5ZWEwHhcNMjUwMTMxMTYwMDEwWhcNMjUwMjAxMTYwMDEwWjAzMTEwLwYDVQQD
EyhjMzZiYzNjMmJmNjI2NjJhNzQ4YmFmYmMwNzViNWQzODZkYzgxZGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TL9A+eF4TRHl1VooIj6ON+blwzY
qQHz18EAvfseUNVdMRPFtoapQWa9AOTsiZNxzDCp3GVoHqiV8BFS6UlOhqcFo3X2
mStXSMKGDJ4LCu54TTx+al7ce/p8fTbvlHsKScWPJpu+tIALCaVgTnX0Faka6BLf
PQWcHGkQPN3Le/9zpGWl1CJLeD1d8lBrjyftvHxvuTuu2Hm36+nREGgLdPnKBnvD
szuc2A2I73Oa8XOywlMUJXRev9yVe4l6SLANdziZQBp/HUuzu+ZVxZ8ETMLL2/cv
i+vm7RI9LYmzT9D5bxQdRd/NML8dC8wHI3JcKjGZ9XuAwZCo29hXxdoyvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNrw8K/YmYqdIuvvAdbXThtyB2+MB8GA1UdIwQY
MBaAFLPvfHarPmlx2PhzAt35LMYJiEnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcy05OGRxcy1hWEhZLUhNQzNma3N4Z21JU2VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS83NDk4MGUtNzRmOS00YjVlLTljZjIt
Njk3MTFmZTgzZDIzLzEvcy05OGRxcy1hWEhZLUhNQzNma3N4Z21JU2VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS83NDk4MGUtNzRmOS00YjVlLTljZjItNjk3MTFmZTgzZDIz
LzEvcy05OGRxcy1hWEhZLUhNQzNma3N4Z21JU2VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAadn+bnEy
T1m4PZKU3hmpCNaxXgwUGGkJH6ta1KFVG8+XeMgBmXcsEMkwQL+XuCV+lXxJ/Da8
BLlljiKxO0GlAM/FSv+CZts0lB06z4UyWgTnCdQxVGeg8ajNCBPqLpTwQ+Mk0ekJ
WrnX3Tz75K6CkxakLu4nE45Fln9Yacz51iI4V6BvBCofR4T0xrZzCW4jxhc0g/Im
WFQSma9BVdCxNE/3rI86ISQEQAi29/r9VZ6en+Qcc1X4G9hJM0gYsHXDZBAXI80/
vEvJ33GJJ7spFyOyJeoJ9m5sFF5+a1ZJhjrSgzMYMZ8zEMiKYNkx4yARngvBZkw/
0J65/9Nb8VRlyg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:27 2025 by rpki-client