Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
File: 3H2O2YRD3mxojRdPHwBVvk3hgqE.mft (raw, json)
Hash identifier: X8s9Bv1haFicfEd7ocG3ZQMhsfkxdH79G83QMCpqxk8=
Subject key identifier: 3B:3B:3A:23:22:D3:B1:BF:18:9D:67:16:D5:D3:1A:57:27:AE:81:52
Authority key identifier: DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
Certificate issuer: /CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Certificate serial: 0194BC72AEAB163524A1612DB951784976CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
Manifest number: 0FDE
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: 3H2O2YRD3mxojRdPHwBVvk3hgqE.crl (hash: 6lEfFPbhR/3mlnjHEGFjdawxwa1k3mZeZJlqMeCI3sc=)
2: jrzKo-lt5J6MsHDsEMxREvgxfZ8.roa (hash: NadiGgxjhYXuzdbS81cV9tBbpe6k6vvKuOl8KjAS3hU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ae:ab:16:35:24:a1:61:2d:b9:51:78:49:76:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=3b3b3a2322d3b1bf189d6716d5d31a5727ae8152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:61:50:cf:84:2a:a8:56:85:f4:99:37:5f:
6c:10:5d:9d:10:b5:6c:c8:cb:0c:bc:e8:84:aa:bb:
66:56:04:63:8a:8f:7f:cd:de:9e:7a:a3:59:e1:d0:
a0:4d:13:f3:90:ca:58:c1:11:9f:26:cc:6c:43:68:
09:6b:6f:5d:57:5e:bf:99:aa:df:18:eb:6b:0b:7c:
59:f1:6a:da:6d:28:d2:fe:56:8c:c2:ae:2d:57:51:
34:1e:60:85:f9:33:59:cd:e7:3d:b0:31:c6:73:b6:
df:2c:cf:d7:96:82:f3:af:29:f4:b0:7c:a4:6f:a9:
0f:47:61:ee:13:e0:dd:f7:47:57:59:30:8f:54:28:
87:65:e3:00:e5:35:9a:56:6c:e9:2c:d5:80:a8:76:
d5:a7:c8:a3:96:67:49:e9:04:7d:a4:b3:8e:7f:02:
8a:4e:e5:1c:c7:ed:38:59:a5:9f:9c:b1:3e:3e:53:
ba:73:07:83:30:18:af:55:1f:73:bd:ca:47:4d:b1:
48:94:3e:4a:75:7e:e5:5c:d3:c0:3a:d9:4c:6e:b1:
e5:58:3e:13:13:43:04:1f:32:86:2e:96:3e:db:d6:
9a:bf:23:32:cf:1d:87:8c:ff:ab:6c:31:86:66:24:
00:29:e3:08:4d:2d:69:c8:2b:e3:11:b4:b3:f9:d2:
f6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3B:3A:23:22:D3:B1:BF:18:9D:67:16:D5:D3:1A:57:27:AE:81:52
X509v3 Authority Key Identifier:
keyid:DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c8:e3:db:c7:1f:7a:fb:e3:28:b4:0a:18:5c:dd:10:b9:c3:
95:f6:7b:8c:44:02:48:46:ed:f8:2d:f3:c5:f7:ad:0e:0b:df:
3a:31:5e:02:c7:dc:e9:b3:13:6b:a7:2c:9d:8d:f4:26:2c:03:
cb:ab:d8:95:d0:c0:64:3f:f7:83:a2:18:e5:c6:8a:60:48:87:
68:53:a8:14:e7:9e:d1:bf:42:cc:c0:1f:b8:1c:23:49:83:75:
4f:42:09:ff:96:1c:25:5a:1a:00:90:38:44:24:da:d4:de:8e:
ea:c0:f8:a5:c6:e7:fa:97:cb:13:1a:cf:45:1b:78:b3:14:3e:
c8:8e:a8:5c:f8:58:2d:af:44:95:5e:d0:6c:c4:30:48:d1:95:
46:41:3b:54:27:e7:e4:1a:29:8d:96:21:18:ba:3f:f6:2c:e8:
0f:14:3e:bb:b6:e0:3b:c2:84:73:a4:35:4f:8e:ba:47:2f:e7:
a3:88:fa:c8:6c:92:65:03:47:d5:8b:a6:1f:0e:68:8c:df:75:
d8:c4:6c:ee:2f:f9:0d:40:de:ec:a0:19:fc:bd:08:9e:8d:59:
a8:1d:08:0d:2b:92:26:c7:0d:5e:a4:7b:a6:1c:7f:5a:d9:b7:
84:3c:bf:84:b7:b8:07:e5:8d:ce:4b:f2:be:55:79:a1:ac:b5:
46:bf:eb:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cq6rFjUkoWEtuVF4SXbNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjN2Q4ZWQ5ODQ0M2RlNmM2ODhkMTc0ZjFmMDA1NWJlNGRl
MTgyYTEwHhcNMjUwMTMxMTMwMDE5WhcNMjUwMjAxMTMwMDE5WjAzMTEwLwYDVQQD
EygzYjNiM2EyMzIyZDNiMWJmMTg5ZDY3MTZkNWQzMWE1NzI3YWU4MTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAualhUM+EKqhWhfSZN19sEF2dELVs
yMsMvOiEqrtmVgRjio9/zd6eeqNZ4dCgTRPzkMpYwRGfJsxsQ2gJa29dV16/marf
GOtrC3xZ8WrabSjS/laMwq4tV1E0HmCF+TNZzec9sDHGc7bfLM/XloLzryn0sHyk
b6kPR2HuE+Dd90dXWTCPVCiHZeMA5TWaVmzpLNWAqHbVp8ijlmdJ6QR9pLOOfwKK
TuUcx+04WaWfnLE+PlO6cweDMBivVR9zvcpHTbFIlD5KdX7lXNPAOtlMbrHlWD4T
E0MEHzKGLpY+29aavyMyzx2HjP+rbDGGZiQAKeMITS1pyCvjEbSz+dL2SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDs7OiMi07G/GJ1nFtXTGlcnroFSMB8GA1UdIwQY
MBaAFNx9jtmEQ95saI0XTx8AVb5N4YKhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0gyTzJZUkQzbXhvalJkUEh3QlZ2azNoZ3FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC85YTZkODMtNWMyZi00MmJlLThkNzYt
YjgwMjA1MjgzMmNmLzEvM0gyTzJZUkQzbXhvalJkUEh3QlZ2azNoZ3FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC85YTZkODMtNWMyZi00MmJlLThkNzYtYjgwMjA1MjgzMmNm
LzEvM0gyTzJZUkQzbXhvalJkUEh3QlZ2azNoZ3FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADcjj28cf
evvjKLQKGFzdELnDlfZ7jEQCSEbt+C3zxfetDgvfOjFeAsfc6bMTa6csnY30JiwD
y6vYldDAZD/3g6IY5caKYEiHaFOoFOee0b9CzMAfuBwjSYN1T0IJ/5YcJVoaAJA4
RCTa1N6O6sD4pcbn+pfLExrPRRt4sxQ+yI6oXPhYLa9ElV7QbMQwSNGVRkE7VCfn
5BopjZYhGLo/9izoDxQ+u7bgO8KEc6Q1T466Ry/no4j6yGySZQNH1YumHw5ojN91
2MRs7i/5DUDe7KAZ/L0Ino1ZqB0IDSuSJscNXqR7phx/Wtm3hDy/hLe4B+WNzkvy
vlV5oay1Rr/rIw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:52 2025 by rpki-client