Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
File: 3ihtA6NzvWie8EYQocithHPr3a0.mft (raw, json)
Hash identifier: wRx1DyYlmlbvTQewXNJC9/TWSOivscJL/iWYNIkm4KU=
Subject key identifier: D6:F2:C4:F8:19:03:3A:21:FD:7D:F1:70:BF:92:0F:CC:5B:73:D6:04
Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
Certificate issuer: /CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Certificate serial: 0194BCE0AA0E2E56A73695264A275B5F47A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
Manifest number: 0F6B
Signing time: Fri 31 Jan 2025 15:00:27 +0000
Manifest this update: Fri 31 Jan 2025 15:00:27 +0000
Manifest next update: Sat 01 Feb 2025 15:00:27 +0000
Files and hashes: 1: 3ihtA6NzvWie8EYQocithHPr3a0.crl (hash: aawHvJO/ldcqQyHT3ZpiSt4596721IQOWR8CcYE2nMY=)
2: _Sn3RhfY--fiVliyrSpcw_Dpx8U.roa (hash: 0DlsX3tbgemelzimR5EC4gu2Xnu0fF/hzb1n4QMYZI8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:aa:0e:2e:56:a7:36:95:26:4a:27:5b:5f:47:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Validity
Not Before: Jan 31 15:00:27 2025 GMT
Not After : Feb 1 15:00:27 2025 GMT
Subject: CN=d6f2c4f819033a21fd7df170bf920fcc5b73d604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e2:00:76:3c:e4:d6:c2:b1:d6:d3:76:cb:57:
7d:c1:d7:bb:fc:de:c0:fb:ae:5c:89:4a:29:8d:e1:
c8:97:f5:c4:22:fd:8e:0a:57:04:d9:22:7d:90:b5:
a4:7c:e1:6f:1f:83:50:3f:ed:9d:0e:5b:96:a4:76:
28:32:0c:d4:78:e9:fa:ed:9d:eb:35:db:0f:a3:ac:
c0:da:5d:6e:ab:a0:fb:14:b3:e8:33:36:9b:58:d5:
4e:94:69:af:e5:ab:3a:db:f5:12:a6:63:8c:2f:e7:
f0:bf:d2:05:35:26:0c:43:d7:ee:48:53:1a:38:24:
a0:dd:75:72:fb:b1:0f:15:ed:76:1f:9f:d7:f8:8e:
82:d7:c5:26:47:42:50:e1:02:7e:94:b2:a9:9d:fc:
57:3a:34:8b:e9:c0:29:b0:31:21:3e:6e:2c:e5:ca:
cb:16:41:75:05:13:9d:89:84:32:b2:97:b2:1f:c3:
1a:79:54:2a:73:27:d1:3a:fc:05:a9:91:7a:c6:00:
cf:0b:a7:95:f1:b4:0d:6b:b9:47:2f:36:a2:9a:d2:
6f:20:ed:54:ff:7d:74:02:f0:f6:ae:6c:e2:41:c9:
5d:4d:85:55:c9:1b:39:5e:4f:5d:e3:f4:be:be:54:
a8:d1:62:88:43:14:87:57:df:1b:4c:92:00:42:21:
4f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F2:C4:F8:19:03:3A:21:FD:7D:F1:70:BF:92:0F:CC:5B:73:D6:04
X509v3 Authority Key Identifier:
keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:4f:16:96:a1:67:2c:22:94:ad:42:1d:99:f0:12:76:eb:21:
80:9e:b5:f0:9b:88:63:5e:c5:21:c0:b8:98:85:13:40:a1:07:
0a:8a:8d:fa:68:42:c1:63:fc:3a:2f:d5:7a:1f:d8:2d:cf:61:
50:23:ea:3e:83:32:8d:eb:1a:6d:2f:30:f8:7d:6e:20:83:c8:
53:d1:57:ac:c6:46:48:77:c4:92:f0:7c:75:8f:8e:06:9d:38:
d6:8b:8b:c1:6f:24:65:b4:69:83:44:ba:c7:b6:6d:15:26:c7:
76:38:4e:b6:ec:c5:ac:a7:d4:fd:45:d9:27:f3:14:0d:3b:b0:
11:79:c0:55:35:8e:d9:96:15:92:25:19:bb:4d:26:3f:2d:81:
f7:55:68:75:59:d4:a2:ad:ea:ab:4a:7a:9f:e1:79:92:2a:d0:
4f:4f:d0:ba:70:be:36:42:5e:d7:cd:7c:b8:4b:bf:4a:c7:99:
06:37:a6:4a:33:92:0e:8c:a2:82:dc:59:92:c4:99:27:98:89:
15:36:2c:01:12:4e:32:a5:b7:5c:28:b1:87:16:21:82:be:ea:
6d:40:e6:75:c4:7d:3f:43:a5:3e:7e:20:98:6d:c5:ea:50:b1:
34:1f:dd:b2:f7:88:e8:b0:f5:78:f1:81:3d:49:05:cf:95:a8:
14:ed:cd:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84KoOLlanNpUmSidbX0egMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMjg2ZDAzYTM3M2JkNjg5ZWYwNDYxMGExYzhhZDg0NzNl
YmRkYWQwHhcNMjUwMTMxMTUwMDI3WhcNMjUwMjAxMTUwMDI3WjAzMTEwLwYDVQQD
EyhkNmYyYzRmODE5MDMzYTIxZmQ3ZGYxNzBiZjkyMGZjYzViNzNkNjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeIAdjzk1sKx1tN2y1d9wde7/N7A
+65ciUopjeHIl/XEIv2OClcE2SJ9kLWkfOFvH4NQP+2dDluWpHYoMgzUeOn67Z3r
NdsPo6zA2l1uq6D7FLPoMzabWNVOlGmv5as62/USpmOML+fwv9IFNSYMQ9fuSFMa
OCSg3XVy+7EPFe12H5/X+I6C18UmR0JQ4QJ+lLKpnfxXOjSL6cApsDEhPm4s5crL
FkF1BROdiYQyspeyH8MaeVQqcyfROvwFqZF6xgDPC6eV8bQNa7lHLzaimtJvIO1U
/310AvD2rmziQcldTYVVyRs5Xk9d4/S+vlSo0WKIQxSHV98bTJIAQiFPbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbyxPgZAzoh/X3xcL+SD8xbc9YEMB8GA1UdIwQY
MBaAFN4obQOjc71onvBGEKHIrYRz692tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2lodEE2Tnp2V2llOEVZUW9jaXRoSFByM2EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kYmVmMTctOWJiOC00NmJjLTkzNDMt
Y2FkZjBjYTFkZDBkLzEvM2lodEE2Tnp2V2llOEVZUW9jaXRoSFByM2EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9kYmVmMTctOWJiOC00NmJjLTkzNDMtY2FkZjBjYTFkZDBk
LzEvM2lodEE2Tnp2V2llOEVZUW9jaXRoSFByM2EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY08WlqFn
LCKUrUIdmfASdushgJ618JuIY17FIcC4mIUTQKEHCoqN+mhCwWP8Oi/Veh/YLc9h
UCPqPoMyjesabS8w+H1uIIPIU9FXrMZGSHfEkvB8dY+OBp041ouLwW8kZbRpg0S6
x7ZtFSbHdjhOtuzFrKfU/UXZJ/MUDTuwEXnAVTWO2ZYVkiUZu00mPy2B91VodVnU
oq3qq0p6n+F5kirQT0/QunC+NkJe1818uEu/SseZBjemSjOSDoyigtxZksSZJ5iJ
FTYsARJOMqW3XCixhxYhgr7qbUDmdcR9P0OlPn4gmG3F6lCxNB/dsveI6LD1ePGB
PUkFz5WoFO3NAw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:03 2025 by rpki-client