Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
File: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft (raw, json)
Hash identifier: 719FS6FtdEMPrxWYJn+KbJrBai2mfPpnbh9P5PJ4R5A=
Subject key identifier: 8F:6F:81:CA:56:D4:E2:F9:75:37:BC:04:54:43:71:9F:83:B5:57:99
Authority key identifier: DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
Certificate issuer: /CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Certificate serial: 0194BD4E6746B02225229386078A974FD373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
Manifest number: 0342
Signing time: Fri 31 Jan 2025 17:00:19 +0000
Manifest this update: Fri 31 Jan 2025 17:00:19 +0000
Manifest next update: Sat 01 Feb 2025 17:00:19 +0000
Files and hashes: 1: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl (hash: XxHIu014Q2YLHCSlqH4imc5H/DivTF5fguHHQJHwzzY=)
2: qqGYhZyQ1Jf2yBiQTxnFZklY3mQ.roa (hash: c+EtOwZcoNbafxYOwYXLqi8yAdjVCzKcxk3fMjvNuoc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:67:46:b0:22:25:22:93:86:07:8a:97:4f:d3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Validity
Not Before: Jan 31 17:00:19 2025 GMT
Not After : Feb 1 17:00:19 2025 GMT
Subject: CN=8f6f81ca56d4e2f97537bc045443719f83b55799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:c5:fe:bc:01:39:5d:6f:1d:87:a9:56:9f:
f0:03:1e:08:47:53:1c:4d:6c:e1:0b:1b:0f:68:d9:
e7:3a:3b:e4:8e:a8:69:cb:8b:52:ad:d5:0d:5d:94:
d4:e8:3d:1b:e8:38:e5:cd:9f:3c:c9:9f:f8:1c:5e:
a4:ad:42:18:8a:e9:51:17:9d:7c:cf:6c:22:fd:d2:
33:a5:2a:1b:eb:09:ee:82:65:26:08:6c:92:ac:36:
1b:5a:08:2f:94:08:06:7b:62:d8:f5:b1:86:06:6d:
ca:33:5f:85:36:8a:54:66:8e:55:80:eb:97:c2:57:
ca:d2:15:94:1f:c4:9f:86:7e:cf:ba:6f:99:8a:08:
e0:59:d6:a2:52:c4:9b:0c:e7:58:cd:f1:03:29:32:
28:89:a1:e3:a8:46:88:f8:10:30:dd:a9:3b:af:e5:
a2:48:b8:f6:04:73:ab:3a:bd:25:b6:bd:8e:a6:fc:
f8:12:3e:59:27:3f:c8:87:da:62:f4:d5:0c:04:9b:
6d:a4:51:ac:eb:1c:3d:34:6c:6c:19:92:6e:0d:be:
38:a2:b5:34:0e:2b:28:64:63:52:ca:3a:24:d3:4b:
46:9a:44:e3:33:fa:c4:56:d5:ad:9d:d5:95:86:04:
fd:38:51:42:0b:c4:97:76:70:97:a6:2f:ae:36:88:
3f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6F:81:CA:56:D4:E2:F9:75:37:BC:04:54:43:71:9F:83:B5:57:99
X509v3 Authority Key Identifier:
keyid:DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:48:35:2d:21:ba:e9:9d:61:c6:be:f2:b4:b3:23:aa:2f:9b:
8e:b0:c3:9e:b7:04:06:97:ce:b4:4b:6e:ca:1c:ed:15:ab:b3:
d4:0c:a8:f2:69:98:b5:4b:db:06:df:9d:6c:53:4a:4b:06:f6:
81:56:87:2c:75:f3:26:5d:0c:a9:fe:c5:6e:18:93:48:59:bf:
8a:a9:e4:c9:e2:08:58:82:74:0d:0f:07:25:75:e4:50:e3:b3:
d2:9d:cf:d1:3c:61:01:15:3b:9c:26:b7:ce:fa:e9:15:00:fa:
1b:93:13:35:01:c2:ca:5e:68:7f:2e:f3:39:44:7e:6c:3f:3b:
40:c9:ec:c2:a7:84:31:14:0f:bc:84:6c:41:f8:64:78:57:38:
dc:8e:27:16:60:07:f8:00:87:92:06:d9:dc:d6:fe:92:c6:99:
33:a2:8d:b3:26:fc:ff:b0:d1:ab:b3:cd:63:76:ed:63:3b:8d:
5c:06:15:fa:28:88:0a:60:be:e3:74:f5:e8:b4:9d:78:8d:02:
2d:0c:83:e3:7c:39:40:33:1d:fd:84:97:6e:9d:75:f5:e9:ba:
3d:42:7d:e6:54:38:d7:50:1a:81:43:ae:98:cb:eb:d8:ba:4c:
a0:54:1e:38:06:76:3d:51:23:a0:6a:32:96:3b:7e:0b:74:96:
21:3a:66:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TmdGsCIlIpOGB4qXT9NzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOGFlNGQ5YWQ4NjNkZGExNDAxYjQ5MGMyOGNmZjgyZDk5
OGUzYjUwHhcNMjUwMTMxMTcwMDE5WhcNMjUwMjAxMTcwMDE5WjAzMTEwLwYDVQQD
Eyg4ZjZmODFjYTU2ZDRlMmY5NzUzN2JjMDQ1NDQzNzE5ZjgzYjU1Nzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj/F/rwBOV1vHYepVp/wAx4IR1Mc
TWzhCxsPaNnnOjvkjqhpy4tSrdUNXZTU6D0b6DjlzZ88yZ/4HF6krUIYiulRF518
z2wi/dIzpSob6wnugmUmCGySrDYbWggvlAgGe2LY9bGGBm3KM1+FNopUZo5VgOuX
wlfK0hWUH8Sfhn7Pum+ZigjgWdaiUsSbDOdYzfEDKTIoiaHjqEaI+BAw3ak7r+Wi
SLj2BHOrOr0ltr2Opvz4Ej5ZJz/Ih9pi9NUMBJttpFGs6xw9NGxsGZJuDb44orU0
DisoZGNSyjok00tGmkTjM/rEVtWtndWVhgT9OFFCC8SXdnCXpi+uNog/4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9vgcpW1OL5dTe8BFRDcZ+DtVeZMB8GA1UdIwQY
MBaAFN2K5Nmthj3aFAG0kMKM/4LZmOO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1lyazJhMkdQZG9VQWJTUXdvel9ndG1ZNDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zNDdkNzEtZmY3OC00YjNhLWE1ZGIt
NGRlOTM0NWM4M2JmLzEvM1lyazJhMkdQZG9VQWJTUXdvel9ndG1ZNDdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8zNDdkNzEtZmY3OC00YjNhLWE1ZGItNGRlOTM0NWM4M2Jm
LzEvM1lyazJhMkdQZG9VQWJTUXdvel9ndG1ZNDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUg1LSG6
6Z1hxr7ytLMjqi+bjrDDnrcEBpfOtEtuyhztFauz1Ayo8mmYtUvbBt+dbFNKSwb2
gVaHLHXzJl0Mqf7FbhiTSFm/iqnkyeIIWIJ0DQ8HJXXkUOOz0p3P0TxhARU7nCa3
zvrpFQD6G5MTNQHCyl5ofy7zOUR+bD87QMnswqeEMRQPvIRsQfhkeFc43I4nFmAH
+ACHkgbZ3Nb+ksaZM6KNsyb8/7DRq7PNY3btYzuNXAYV+iiICmC+43T16LSdeI0C
LQyD43w5QDMd/YSXbp119em6PUJ95lQ411AagUOumMvr2LpMoFQeOAZ2PVEjoGoy
ljt+C3SWITpmVw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:34:46 2025 by rpki-client