Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
File: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft (raw, json)
Hash identifier: Qveh6V8//FMX/rthhvY3SiVcyRqvqZIRBFukgvlGWlU=
Subject key identifier: F9:9B:86:86:70:87:3B:AC:DF:EF:41:DF:97:F4:BB:60:89:9B:60:DD
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial: 0194BCE0EB57577BDC6120FA078D4A4A76B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
Manifest number: 0417
Signing time: Fri 31 Jan 2025 15:00:44 +0000
Manifest this update: Fri 31 Jan 2025 15:00:44 +0000
Manifest next update: Sat 01 Feb 2025 15:00:44 +0000
Files and hashes: 1: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl (hash: Dxiua5X9cSpHNpWngOYu4UYlyj3rIem7DM41/HrdqIg=)
2: w0q3VjpYAA26KoKS-OoF_EY4OL8.roa (hash: NjcgvyEw+m9zGeB1dD1onCDET/1Ymu7yU7l0wd7sHLg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:eb:57:57:7b:dc:61:20:fa:07:8d:4a:4a:76:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Validity
Not Before: Jan 31 15:00:44 2025 GMT
Not After : Feb 1 15:00:44 2025 GMT
Subject: CN=f99b868670873bacdfef41df97f4bb60899b60dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:dc:93:02:41:a7:4f:3f:46:aa:0c:ab:77:e7:
78:06:3b:40:46:34:19:6f:28:82:d3:e8:34:b6:8f:
ce:6c:bd:6e:ba:09:14:27:20:8d:e3:b0:bb:68:16:
b7:a8:e3:c4:bd:1d:fb:b7:66:ed:f0:f2:ae:e4:f3:
68:cf:c5:21:0c:5a:ce:93:26:0b:e4:0c:1a:8f:65:
27:31:8a:19:66:85:7a:37:93:51:5d:f2:8d:4d:1a:
97:48:9b:ed:e3:3e:3b:62:07:a2:02:30:c5:7e:6c:
c6:b5:fc:6d:9a:d1:71:81:bc:47:f1:1d:35:20:49:
29:9c:35:d2:0e:28:ef:9e:db:6e:0c:41:64:5f:bd:
f3:84:77:7a:24:1a:27:6a:48:cf:92:04:28:8f:92:
ac:63:7e:63:8f:1c:18:56:a8:1b:23:37:4f:e4:86:
95:f8:bc:e1:4f:23:d4:a6:fa:6d:44:35:2f:8a:a0:
38:c0:16:c0:77:88:14:f1:7e:1d:9b:bc:d2:83:e2:
61:13:49:4b:cd:27:ff:6c:14:7c:78:17:87:25:da:
47:4f:85:86:67:79:f7:ee:0d:e6:72:43:b1:5a:27:
64:25:af:41:a8:7c:a6:72:b1:27:d1:f5:5d:f6:c5:
28:ee:f7:8d:65:19:ef:4d:e6:55:6d:17:d3:33:fd:
41:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9B:86:86:70:87:3B:AC:DF:EF:41:DF:97:F4:BB:60:89:9B:60:DD
X509v3 Authority Key Identifier:
keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:51:1c:29:d0:a7:35:2d:51:14:9f:4f:24:5a:01:ed:7b:89:
56:eb:e5:16:f1:9a:d4:6d:75:19:e2:50:e0:13:77:c5:a6:1c:
eb:9d:80:d2:c6:98:95:7e:b9:a9:8c:a1:04:a3:b5:d2:f6:fe:
8d:88:90:d7:16:ea:d9:85:e8:16:7e:78:e5:af:42:4b:26:58:
2c:92:d6:55:bb:4c:17:0a:ad:c2:f7:2d:45:e9:2a:6b:4b:73:
63:09:d4:ae:7f:b0:44:b3:7c:9a:6d:ac:bb:99:5d:6b:72:c4:
b3:b2:c5:11:47:b8:62:22:2e:0a:2b:53:25:07:3c:0b:b9:41:
62:74:b2:6a:46:96:c9:f6:3e:09:09:82:4f:b2:d8:05:a4:40:
34:3b:d8:4e:45:db:95:79:86:28:db:3c:3b:5b:33:ad:39:ea:
c0:b8:8d:c9:b8:a2:7f:b2:90:cf:35:25:91:b8:11:d5:17:fc:
aa:59:b2:fc:e3:69:9f:cc:1b:83:c0:7b:d0:c5:40:ea:f6:97:
55:c7:2d:c9:ba:c4:66:77:75:cf:a7:41:4f:17:1c:24:f1:70:
16:7e:a6:a8:5a:27:fd:f6:49:6d:03:95:5f:d7:e3:3c:b4:fd:
39:5e:e3:0b:35:bd:af:5a:9a:a1:d2:5d:8c:cf:51:b8:03:39:
bb:a2:9c:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84OtXV3vcYSD6B41KSna4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjN2ZiZDY3NzQ0MWNiYjVjMGJkNDdiY2QyZjM4YmExOTJh
MzM2YTYwHhcNMjUwMTMxMTUwMDQ0WhcNMjUwMjAxMTUwMDQ0WjAzMTEwLwYDVQQD
EyhmOTliODY4NjcwODczYmFjZGZlZjQxZGY5N2Y0YmI2MDg5OWI2MGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNyTAkGnTz9Gqgyrd+d4BjtARjQZ
byiC0+g0to/ObL1uugkUJyCN47C7aBa3qOPEvR37t2bt8PKu5PNoz8UhDFrOkyYL
5Awaj2UnMYoZZoV6N5NRXfKNTRqXSJvt4z47YgeiAjDFfmzGtfxtmtFxgbxH8R01
IEkpnDXSDijvnttuDEFkX73zhHd6JBonakjPkgQoj5KsY35jjxwYVqgbIzdP5IaV
+LzhTyPUpvptRDUviqA4wBbAd4gU8X4dm7zSg+JhE0lLzSf/bBR8eBeHJdpHT4WG
Z3n37g3mckOxWidkJa9BqHymcrEn0fVd9sUo7veNZRnvTeZVbRfTM/1BkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmbhoZwhzus3+9B35f0u2CJm2DdMB8GA1UdIwQY
MBaAFNx/vWd0Qcu1wL1HvNLzi6GSozamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iMjVjM2EtMGMwYi00ZDRlLTk4MTMt
NzZkM2Q0ODBmYTY4LzEvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iMjVjM2EtMGMwYi00ZDRlLTk4MTMtNzZkM2Q0ODBmYTY4
LzEvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFEcKdCn
NS1RFJ9PJFoB7XuJVuvlFvGa1G11GeJQ4BN3xaYc652A0saYlX65qYyhBKO10vb+
jYiQ1xbq2YXoFn545a9CSyZYLJLWVbtMFwqtwvctRekqa0tzYwnUrn+wRLN8mm2s
u5lda3LEs7LFEUe4YiIuCitTJQc8C7lBYnSyakaWyfY+CQmCT7LYBaRANDvYTkXb
lXmGKNs8O1szrTnqwLiNybiif7KQzzUlkbgR1Rf8qlmy/ONpn8wbg8B70MVA6vaX
VcctybrEZnd1z6dBTxccJPFwFn6mqFon/fZJbQOVX9fjPLT9OV7jCzW9r1qaodJd
jM9RuAM5u6Kccg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:34 2025 by rpki-client