Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
File: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft (raw, json)
Hash identifier: /XmpHuvWKem5YtcV9bwGiZGwkWv9hQj64qV4JkLYMxQ=
Subject key identifier: F2:BA:5D:65:92:BF:81:6D:66:F8:26:30:37:9D:A5:8E:76:93:39:E6
Authority key identifier: DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
Certificate issuer: /CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Certificate serial: 0194BC3C4F793AB3A47F82E2690485F32E90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
Manifest number: 1385
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: 1-7jWzqH7wT1n-L8XkfK1kEabKfA.roa (hash: qrQpcX8LTv3WT8M/1yXwPjm8/udCR9jmZNcZtjA7oMg=)
2: 1ciAIP4p2-wqjGWDrjgweJTl63I.roa (hash: RB/2tnRmdGmG5VvdVWN1ncpG5RZ12mQa5BkOl0WIoTA=)
3: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl (hash: j57TER+/wmA5QUaX4VZE5G9ndUZUSL27u0Wp9+p5IZM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4f:79:3a:b3:a4:7f:82:e2:69:04:85:f3:2e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=f2ba5d6592bf816d66f82630379da58e769339e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6e:2f:14:ce:0d:68:8a:12:1c:48:c2:88:6e:
96:c9:97:7b:68:d0:ff:28:ec:00:ec:01:72:4b:40:
36:40:a6:4f:ec:b9:fc:ab:fb:98:11:4b:29:17:80:
8e:d6:a3:ec:e4:86:bc:80:50:3b:3c:b7:50:d9:c1:
f3:88:a8:d5:0f:f7:7e:74:80:d8:dc:a1:3f:05:33:
3e:3e:e5:b6:bd:79:12:8d:1e:ad:e8:62:6e:9b:16:
86:6f:44:75:9d:11:7a:e3:b2:c5:07:93:24:21:69:
f7:0c:36:8f:3d:04:ad:0f:95:d7:74:84:a7:bc:22:
c7:1d:67:33:9f:72:63:41:48:92:d3:ca:7b:83:e7:
e2:7f:11:01:17:1c:85:03:3b:56:e2:5d:3d:26:3a:
9b:c1:2d:4f:57:6b:39:43:80:c2:d2:32:0a:dd:c8:
98:11:07:76:f8:3f:ee:a7:6a:49:40:34:0c:fa:5a:
c7:1c:f9:c7:f7:a6:58:db:19:7d:a2:65:e5:97:88:
d0:3e:8f:ae:e5:46:4d:50:47:a8:1b:38:6d:01:b0:
ae:fc:d4:2c:1c:84:26:82:94:e6:48:3b:c2:d6:86:
6f:3a:48:62:2c:76:98:01:c6:99:a5:61:e2:2f:18:
7c:66:b8:15:b5:3f:3c:9f:26:46:7c:aa:02:62:1f:
be:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BA:5D:65:92:BF:81:6D:66:F8:26:30:37:9D:A5:8E:76:93:39:E6
X509v3 Authority Key Identifier:
keyid:DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:14:14:55:4f:ae:4c:c9:ee:05:fc:f9:de:06:74:f2:87:19:
f0:b8:0f:cf:54:d7:3f:10:6f:06:0d:ae:8d:58:94:71:31:27:
a4:5e:27:bb:3c:22:07:1e:d6:83:c5:e6:5d:0e:68:60:d6:40:
50:ec:b9:18:63:8d:4e:ba:85:a5:0f:d6:ac:37:78:24:15:3e:
19:e5:60:4d:2a:77:d9:22:99:e6:36:7d:57:44:b3:2b:13:0c:
1e:14:41:ef:76:45:f7:16:c2:dc:ed:5e:5b:35:a6:9b:8c:b2:
53:a6:b4:2d:44:56:2b:4c:f1:9b:e3:83:ce:c7:5b:1b:e9:c3:
20:f1:ac:a0:86:7b:b7:73:d3:26:b4:51:b9:6e:b3:0d:23:40:
94:99:bd:65:4f:50:1c:12:58:5b:41:54:f0:46:95:b8:34:30:
a6:cc:a8:9c:4a:24:28:d0:36:bf:ac:b9:fb:16:59:04:1d:80:
8f:39:5c:75:07:2a:ad:9e:d4:c4:20:57:08:11:11:04:62:c8:
62:83:4d:84:f6:86:2f:80:7e:f8:b4:9c:e5:f8:e3:f1:7f:59:
47:de:14:9c:40:6f:6a:2d:c8:a9:df:06:40:a1:9d:81:a6:b2:
df:6f:d0:13:8d:fd:e2:1a:76:bf:99:c0:d2:09:d6:10:e3:ae:
7f:e1:ae:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PE95OrOkf4LiaQSF8y6QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYmNhYjQ4NTk1MzZjZjk5NjU5NmVmMTlkMmE2NDYxMWQw
MzZmZTQwHhcNMjUwMTMxMTIwMDU2WhcNMjUwMjAxMTIwMDU2WjAzMTEwLwYDVQQD
EyhmMmJhNWQ2NTkyYmY4MTZkNjZmODI2MzAzNzlkYTU4ZTc2OTMzOWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6W4vFM4NaIoSHEjCiG6WyZd7aND/
KOwA7AFyS0A2QKZP7Ln8q/uYEUspF4CO1qPs5Ia8gFA7PLdQ2cHziKjVD/d+dIDY
3KE/BTM+PuW2vXkSjR6t6GJumxaGb0R1nRF647LFB5MkIWn3DDaPPQStD5XXdISn
vCLHHWczn3JjQUiS08p7g+fifxEBFxyFAztW4l09JjqbwS1PV2s5Q4DC0jIK3ciY
EQd2+D/up2pJQDQM+lrHHPnH96ZY2xl9omXll4jQPo+u5UZNUEeoGzhtAbCu/NQs
HIQmgpTmSDvC1oZvOkhiLHaYAcaZpWHiLxh8ZrgVtT88nyZGfKoCYh++0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPK6XWWSv4FtZvgmMDedpY52kznmMB8GA1UdIwQY
MBaAFNy8q0hZU2z5lllu8Z0qZGEdA2/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0x5clNGbFRiUG1XV1c3eG5TcGtZUjBEYi1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jYTkyNzQtM2E5NC00ZjFhLWJlZTIt
MjY2ZmUyNzM3YjhmLzEvM0x5clNGbFRiUG1XV1c3eG5TcGtZUjBEYi1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9jYTkyNzQtM2E5NC00ZjFhLWJlZTItMjY2ZmUyNzM3Yjhm
LzEvM0x5clNGbFRiUG1XV1c3eG5TcGtZUjBEYi1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBQUVU+u
TMnuBfz53gZ08ocZ8LgPz1TXPxBvBg2ujViUcTEnpF4nuzwiBx7Wg8XmXQ5oYNZA
UOy5GGONTrqFpQ/WrDd4JBU+GeVgTSp32SKZ5jZ9V0SzKxMMHhRB73ZF9xbC3O1e
WzWmm4yyU6a0LURWK0zxm+ODzsdbG+nDIPGsoIZ7t3PTJrRRuW6zDSNAlJm9ZU9Q
HBJYW0FU8EaVuDQwpsyonEokKNA2v6y5+xZZBB2AjzlcdQcqrZ7UxCBXCBERBGLI
YoNNhPaGL4B++LSc5fjj8X9ZR94UnEBvai3Iqd8GQKGdgaay32/QE4394hp2v5nA
0gnWEOOuf+Gu8A==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:24 2025 by rpki-client