Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
File: 3eNumAISZPWoBwEGeAvinUihbGc.mft (raw, json)
Hash identifier: V7YUT+gzd8yf+9LuAM8hbUzWlw+8FYCIDmLI9IdQ/wQ=
Subject key identifier: CB:5A:15:F5:1C:5D:5F:92:01:EE:E6:E5:30:65:EE:28:AD:E6:C2:98
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 0194BD4EA454E0E40C564A935CCF20384849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
Manifest number: 0D6A
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: 3eNumAISZPWoBwEGeAvinUihbGc.crl (hash: iV2YHQDvVD49TZaD8I6wnrvKXuAs9NpJasiBF4nmXGM=)
2: Byz6Wm7s02kt-qbcRg48lYFoaPs.roa (hash: qp6bZj4DT10+Vk4KOv88lsaekKFO88UDVrw+KBHz2l8=)
3: kCrnYti58ggrv3fVjdqQhiVhHsw.roa (hash: +F+P0b+2Vs6/LI+O+WCqqOkrY2FqCcnWwdEJbDldqAE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a4:54:e0:e4:0c:56:4a:93:5c:cf:20:38:48:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=cb5a15f51c5d5f9201eee6e53065ee28ade6c298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:c1:2c:91:9c:dc:fb:e7:8b:ca:85:c1:07:
75:77:c0:17:d5:1b:93:df:b2:d5:d5:1c:cf:16:2d:
f8:9a:db:c5:3c:5d:aa:81:67:f9:db:65:2f:72:e4:
f3:4d:b4:ff:72:cf:11:b2:ec:b5:07:53:26:69:a0:
76:f9:63:4f:85:2e:26:17:d9:ab:72:06:42:04:17:
c0:5c:ec:ff:c6:aa:d9:64:71:c7:94:14:45:e8:57:
b7:ed:e2:42:67:63:ac:4c:9c:8b:ff:bc:4f:0a:95:
04:44:9b:33:48:30:d2:99:1d:b9:90:98:ff:d2:aa:
61:e5:28:b1:24:e5:ba:33:69:c8:4f:62:5a:3f:6f:
cd:8b:b0:f7:01:24:6c:75:12:2c:79:27:50:ff:de:
ee:65:c9:fe:e0:29:c1:0c:25:c4:9b:95:c0:41:cf:
61:b9:a2:96:94:48:d3:bf:d2:25:1c:d6:7b:28:31:
fd:a9:91:3d:a9:22:f0:20:fe:9a:1f:68:b3:fd:d6:
5a:db:d4:bd:f9:d7:b8:33:a1:55:78:b9:82:3c:65:
d1:42:f8:6b:7c:ed:af:0b:c6:73:2b:af:3b:29:89:
65:e2:ae:8e:34:b4:01:3e:9e:aa:d2:d0:c5:fd:84:
79:38:0c:89:03:1c:f6:b3:98:ab:98:cb:ef:a5:1b:
71:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5A:15:F5:1C:5D:5F:92:01:EE:E6:E5:30:65:EE:28:AD:E6:C2:98
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:4a:ec:b3:33:7d:d7:3e:3e:a4:0f:a5:5d:aa:a0:72:e2:6c:
ab:87:d4:96:c2:78:9e:b0:10:93:49:68:25:17:4c:43:da:de:
21:3e:95:0d:92:eb:f5:06:fa:de:70:ef:97:f5:19:20:e7:5f:
16:ed:b6:84:0b:0d:35:e4:a7:01:9e:0b:4a:34:ac:d6:75:0c:
5b:74:92:c1:e3:02:39:67:3f:ab:89:de:83:8c:17:af:e4:1f:
7d:af:11:10:68:f5:52:77:9f:73:df:b5:0f:bd:72:bf:2d:e6:
ac:c7:21:5b:7d:31:92:9a:a2:46:09:f8:b1:f9:33:28:cd:80:
d8:db:89:41:9e:f8:83:88:13:2c:8f:e8:42:54:d0:1f:76:af:
30:ca:f4:54:8e:61:ac:5d:4b:f4:bd:dd:cb:90:31:d9:7b:20:
75:a4:04:74:b3:10:4e:30:95:f3:3a:3d:05:3a:65:ec:b9:d1:
38:1a:a0:5d:e5:b8:f7:8f:63:bd:09:84:50:b1:a5:b8:e4:77:
eb:71:55:98:36:47:18:7d:0b:0a:ca:3e:b3:4e:c2:fd:00:31:
6a:b0:fd:0b:b9:ed:d8:b6:bc:b6:c6:cb:31:79:bf:cd:29:34:
e6:f4:d5:2e:71:34:a7:ea:b9:79:32:48:a1:ad:41:9a:97:dd:
d1:8b:4a:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TqRU4OQMVkqTXM8gOEhJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZTM2ZTk4MDIxMjY0ZjVhODA3MDEwNjc4MGJlMjlkNDhh
MTZjNjcwHhcNMjUwMTMxMTcwMDM1WhcNMjUwMjAxMTcwMDM1WjAzMTEwLwYDVQQD
EyhjYjVhMTVmNTFjNWQ1ZjkyMDFlZWU2ZTUzMDY1ZWUyOGFkZTZjMjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg/BLJGc3Pvni8qFwQd1d8AX1RuT
37LV1RzPFi34mtvFPF2qgWf522UvcuTzTbT/cs8Rsuy1B1MmaaB2+WNPhS4mF9mr
cgZCBBfAXOz/xqrZZHHHlBRF6Fe37eJCZ2OsTJyL/7xPCpUERJszSDDSmR25kJj/
0qph5SixJOW6M2nIT2JaP2/Ni7D3ASRsdRIseSdQ/97uZcn+4CnBDCXEm5XAQc9h
uaKWlEjTv9IlHNZ7KDH9qZE9qSLwIP6aH2iz/dZa29S9+de4M6FVeLmCPGXRQvhr
fO2vC8ZzK687KYll4q6ONLQBPp6q0tDF/YR5OAyJAxz2s5irmMvvpRtxqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtaFfUcXV+SAe7m5TBl7iit5sKYMB8GA1UdIwQY
MBaAFN3jbpgCEmT1qAcBBngL4p1IoWxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2VOdW1BSVNaUFdvQndFR2VBdmluVWloYkdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83NmFlZTEtZTIyMC00ZTIyLTljYjUt
OGZlM2EwZjYxNDM3LzEvM2VOdW1BSVNaUFdvQndFR2VBdmluVWloYkdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi83NmFlZTEtZTIyMC00ZTIyLTljYjUtOGZlM2EwZjYxNDM3
LzEvM2VOdW1BSVNaUFdvQndFR2VBdmluVWloYkdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWErsszN9
1z4+pA+lXaqgcuJsq4fUlsJ4nrAQk0loJRdMQ9reIT6VDZLr9Qb63nDvl/UZIOdf
Fu22hAsNNeSnAZ4LSjSs1nUMW3SSweMCOWc/q4neg4wXr+Qffa8REGj1Unefc9+1
D71yvy3mrMchW30xkpqiRgn4sfkzKM2A2NuJQZ74g4gTLI/oQlTQH3avMMr0VI5h
rF1L9L3dy5Ax2XsgdaQEdLMQTjCV8zo9BTpl7LnROBqgXeW4949jvQmEULGluOR3
63FVmDZHGH0LCso+s07C/QAxarD9C7nt2La8tsbLMXm/zSk05vTVLnE0p+q5eTJI
oa1Bmpfd0YtKcA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:38:54 2025 by rpki-client