Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
File: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft (raw, json)
Hash identifier: 5MdiVKzTS7OS6+hzf/GI/o81Ufl8xcm8nD+JDcYasaw=
Subject key identifier: 94:D7:FC:DF:57:90:15:E5:8B:EA:76:92:1C:73:5D:02:10:B0:50:B4
Authority key identifier: DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
Certificate issuer: /CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Certificate serial: 0194BC3C770E661EB22A1E057C99E52DFB6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
Manifest number: 0D40
Signing time: Fri 31 Jan 2025 12:01:06 +0000
Manifest this update: Fri 31 Jan 2025 12:01:06 +0000
Manifest next update: Sat 01 Feb 2025 12:01:06 +0000
Files and hashes: 1: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl (hash: 3KjvQLX4XVSJkVTSg2LyqIry6oxrAJ5zzCvWOJ4PH4M=)
2: f98-QGGyvPNag3NBWDooTVrQ2vI.roa (hash: HJhPbHQVg92t7q01K4xm1xNnj11AYPaciJd3bC3Ng+4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:77:0e:66:1e:b2:2a:1e:05:7c:99:e5:2d:fb:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Validity
Not Before: Jan 31 12:01:06 2025 GMT
Not After : Feb 1 12:01:06 2025 GMT
Subject: CN=94d7fcdf579015e58bea76921c735d0210b050b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bc:48:c6:eb:56:76:e1:36:f7:fa:83:ba:2f:
af:07:28:32:65:55:2f:19:bc:ae:0d:5f:ac:cb:02:
9d:d7:15:ea:23:15:a0:86:d6:bc:79:cd:c2:04:89:
32:52:fa:cd:6c:b7:73:47:17:55:a6:14:fe:5e:6c:
20:07:0f:a2:6f:2f:07:17:2f:da:6c:b3:a5:23:17:
b2:7a:5e:e5:df:30:b4:e3:bd:8e:5f:cc:c9:69:a3:
fc:d6:b3:5d:b1:35:ec:e7:3a:e9:04:06:60:0f:61:
b5:79:5d:f4:12:f7:9d:c4:b1:2d:8e:85:e4:4e:27:
d3:49:24:31:94:36:d3:d2:30:d6:4f:21:f2:20:cb:
b0:c7:8e:0a:6f:f6:4b:5f:7e:64:97:70:dd:fe:02:
af:ad:e9:35:b0:2b:b7:56:40:5c:0b:4c:67:59:45:
36:a5:38:aa:5b:89:ec:5d:04:0c:82:80:f8:70:e3:
f4:36:02:82:2d:2a:42:e4:a6:7f:3f:49:47:c2:45:
e5:e1:29:e2:10:96:21:f5:9e:de:5d:89:ef:8b:4c:
18:4f:c0:e0:29:31:3e:82:7d:be:c9:b2:bc:18:73:
37:fd:d4:87:22:cb:f8:0f:fc:21:ae:3a:ab:0a:1e:
61:20:f6:06:ba:ce:38:e6:66:b5:19:1b:4b:f0:01:
70:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D7:FC:DF:57:90:15:E5:8B:EA:76:92:1C:73:5D:02:10:B0:50:B4
X509v3 Authority Key Identifier:
keyid:DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a7:01:20:73:ec:94:c4:bd:6f:44:b6:07:15:09:d6:4c:b2:
6e:e9:e6:4a:e6:b7:ff:c9:7c:ce:2c:d1:a9:0f:26:4b:6c:99:
06:75:65:6a:36:40:a6:b5:9d:20:92:55:7c:c9:9d:a7:2b:53:
39:b6:91:d4:e1:90:34:1f:b9:88:9d:43:dc:3f:7b:d9:bb:04:
ad:ff:26:65:c9:b3:7c:d7:4b:6c:14:21:26:95:14:1d:44:17:
12:fc:f1:80:f0:7e:fb:0d:e3:f5:b4:72:e1:48:35:86:16:0c:
51:05:e0:92:73:a8:a9:8c:48:f9:2e:56:44:16:72:bc:4b:f1:
d1:81:1c:e5:ab:cf:40:4f:f7:8e:96:9d:d6:73:40:29:73:f1:
89:fe:f1:24:b1:7b:52:26:b8:2f:69:61:6a:32:44:79:bd:5f:
2f:91:28:55:e8:96:a5:5e:88:dc:d2:e2:0f:78:66:94:e2:23:
02:de:2e:f1:34:10:65:86:b2:ce:4f:58:e5:ca:2c:00:d9:b3:
31:91:dd:32:56:e9:0e:14:94:b8:2d:3d:7c:4c:63:74:f2:1b:
09:91:3a:05:f9:bb:94:eb:44:60:87:76:e2:41:0d:80:1d:4d:
66:b3:d0:f7:76:fe:fd:90:e1:b4:67:cb:dd:94:c6:5f:ef:5c:
97:14:bd:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PHcOZh6yKh4FfJnlLftvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNDhkNTA4MjE1MzQwZWFjMGYxNGYwYjc0NzQ5ZDFjOGVj
OWY1NjYwHhcNMjUwMTMxMTIwMTA2WhcNMjUwMjAxMTIwMTA2WjAzMTEwLwYDVQQD
Eyg5NGQ3ZmNkZjU3OTAxNWU1OGJlYTc2OTIxYzczNWQwMjEwYjA1MGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7xIxutWduE29/qDui+vBygyZVUv
GbyuDV+sywKd1xXqIxWghta8ec3CBIkyUvrNbLdzRxdVphT+XmwgBw+iby8HFy/a
bLOlIxeyel7l3zC0472OX8zJaaP81rNdsTXs5zrpBAZgD2G1eV30EvedxLEtjoXk
TifTSSQxlDbT0jDWTyHyIMuwx44Kb/ZLX35kl3Dd/gKvrek1sCu3VkBcC0xnWUU2
pTiqW4nsXQQMgoD4cOP0NgKCLSpC5KZ/P0lHwkXl4SniEJYh9Z7eXYnvi0wYT8Dg
KTE+gn2+ybK8GHM3/dSHIsv4D/whrjqrCh5hIPYGus445ma1GRtL8AFw8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTX/N9XkBXli+p2khxzXQIQsFC0MB8GA1UdIwQY
MBaAFN1I1QghU0DqwPFPC3R0nRyOyfVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1VqVkNDRlRRT3JBOFU4TGRIU2RISTdKOVdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iYTE2YmEtYThjOC00NDJhLWJhYjkt
NDVlNDc0MDAyM2RiLzEvM1VqVkNDRlRRT3JBOFU4TGRIU2RISTdKOVdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iYTE2YmEtYThjOC00NDJhLWJhYjktNDVlNDc0MDAyM2Ri
LzEvM1VqVkNDRlRRT3JBOFU4TGRIU2RISTdKOVdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh6cBIHPs
lMS9b0S2BxUJ1kyybunmSua3/8l8zizRqQ8mS2yZBnVlajZAprWdIJJVfMmdpytT
ObaR1OGQNB+5iJ1D3D972bsErf8mZcmzfNdLbBQhJpUUHUQXEvzxgPB++w3j9bRy
4Ug1hhYMUQXgknOoqYxI+S5WRBZyvEvx0YEc5avPQE/3jpad1nNAKXPxif7xJLF7
Uia4L2lhajJEeb1fL5EoVeiWpV6I3NLiD3hmlOIjAt4u8TQQZYayzk9Y5cosANmz
MZHdMlbpDhSUuC09fExjdPIbCZE6Bfm7lOtEYId24kENgB1NZrPQ93b+/ZDhtGfL
3ZTGX+9clxS9JQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:08 2025 by rpki-client