Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
File: 3Feh-cEhycK2-U04p1-_3MVN8Fs.mft (raw, json)
Hash identifier: iIa5Fwkd7ZylKXApeiIEwFBqp/kD7XUOLMXlUSWPzss=
Subject key identifier: C1:B0:9D:CB:46:9A:83:D3:E3:3A:8A:D6:22:92:DE:F2:51:C9:4C:8B
Authority key identifier: DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
Certificate issuer: /CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Certificate serial: 0194BC3C03FEC3D017AB89B7E5600886137C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
Manifest number: 08A0
Signing time: Fri 31 Jan 2025 12:00:37 +0000
Manifest this update: Fri 31 Jan 2025 12:00:37 +0000
Manifest next update: Sat 01 Feb 2025 12:00:37 +0000
Files and hashes: 1: 3Feh-cEhycK2-U04p1-_3MVN8Fs.crl (hash: LXSy8KM8fwL13elLUm/KQC4d7kTG4W7KL3jaDeCGOZQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:03:fe:c3:d0:17:ab:89:b7:e5:60:08:86:13:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Validity
Not Before: Jan 31 12:00:37 2025 GMT
Not After : Feb 1 12:00:37 2025 GMT
Subject: CN=c1b09dcb469a83d3e33a8ad62292def251c94c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:85:c5:1f:33:73:4e:bc:76:12:ff:36:d5:29:
27:13:cb:73:43:bc:98:bd:3d:66:49:ee:3f:0e:ef:
73:3a:7d:44:b6:c6:b4:a7:ca:43:93:1b:8a:dc:90:
92:e9:ad:d2:fd:27:9f:d1:16:22:b3:e1:c0:6b:b7:
8e:41:d7:12:29:00:0c:b6:d2:b3:88:ce:51:4f:74:
65:fc:fc:af:9b:57:44:c8:81:1e:5c:5b:76:bb:9f:
e7:94:2e:20:75:a0:bf:15:a0:6c:f2:94:d4:5b:8d:
2d:6f:de:1a:6c:c2:ea:dd:35:f9:63:9d:8f:26:99:
ad:4b:2c:1c:f4:49:06:c9:a4:c5:42:0c:7f:cb:52:
a6:80:90:0f:53:50:d2:38:f9:3d:3c:f6:10:c3:67:
9a:e6:00:f5:81:75:8e:30:a9:41:b0:a1:f3:d8:b3:
90:31:de:52:3f:87:1f:11:bd:8f:3c:77:cd:43:de:
20:87:6e:d8:95:85:36:65:b2:3c:7e:d7:43:4d:87:
47:e0:72:e6:4a:11:83:09:40:4b:b1:28:1c:d5:20:
ec:8b:8c:e3:18:5c:e4:a2:1d:fd:a8:47:b6:7e:c9:
b7:ff:ee:40:b1:2d:76:e5:bf:73:56:95:e1:4e:3a:
80:ae:64:5b:00:ad:bd:c2:f9:cb:c5:fb:1d:8b:18:
68:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B0:9D:CB:46:9A:83:D3:E3:3A:8A:D6:22:92:DE:F2:51:C9:4C:8B
X509v3 Authority Key Identifier:
keyid:DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b3:4b:d6:9c:20:0a:05:74:bf:c5:b3:b0:6f:24:46:73:11:
f0:52:dc:10:80:05:1b:47:f8:e0:37:51:06:1a:22:32:55:93:
e9:cd:0a:d6:38:e0:98:9e:4e:25:5e:e7:4b:97:57:e8:1f:2c:
d3:2b:3f:2e:83:8e:8e:61:da:ee:9a:43:84:44:33:89:49:e3:
8a:d8:f4:83:ae:93:5b:71:7e:dd:50:35:3b:46:14:09:a0:f7:
60:b1:e6:7f:c7:58:df:0e:f6:84:7e:da:1e:c4:ba:ea:03:73:
bd:e9:b0:5d:5f:7a:7f:ad:c2:68:b7:c1:69:21:06:b7:74:55:
15:b3:d9:42:1d:dd:02:de:9e:c8:bc:a7:19:15:d2:44:4d:dd:
1f:1c:c0:fb:a3:28:30:55:a7:88:5a:b0:11:5b:8c:c4:c0:49:
a5:6d:f4:49:a5:05:61:bd:4b:09:65:b0:d4:63:c7:e3:3a:d7:
6e:f6:af:a9:03:2c:62:47:3a:e0:31:21:2a:04:5b:70:2f:34:
42:5d:d8:2a:4f:29:ac:23:b9:47:c7:3a:27:55:f5:f7:77:41:
fd:57:91:43:e0:fa:54:42:f0:0a:78:2c:af:d3:9a:37:e5:7d:
8b:5c:4d:07:df:8a:4b:e0:3f:c4:ff:78:76:19:3b:5e:77:35:
0e:ec:ad:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PAP+w9AXq4m35WAIhhN8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNTdhMWY5YzEyMWM5YzJiNmY5NGQzOGE3NWZiZmRjYzU0
ZGYwNWIwHhcNMjUwMTMxMTIwMDM3WhcNMjUwMjAxMTIwMDM3WjAzMTEwLwYDVQQD
EyhjMWIwOWRjYjQ2OWE4M2QzZTMzYThhZDYyMjkyZGVmMjUxYzk0YzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYXFHzNzTrx2Ev821SknE8tzQ7yY
vT1mSe4/Du9zOn1Etsa0p8pDkxuK3JCS6a3S/Sef0RYis+HAa7eOQdcSKQAMttKz
iM5RT3Rl/Pyvm1dEyIEeXFt2u5/nlC4gdaC/FaBs8pTUW40tb94abMLq3TX5Y52P
JpmtSywc9EkGyaTFQgx/y1KmgJAPU1DSOPk9PPYQw2ea5gD1gXWOMKlBsKHz2LOQ
Md5SP4cfEb2PPHfNQ94gh27YlYU2ZbI8ftdDTYdH4HLmShGDCUBLsSgc1SDsi4zj
GFzkoh39qEe2fsm3/+5AsS125b9zVpXhTjqArmRbAK29wvnLxfsdixhogwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGwnctGmoPT4zqK1iKS3vJRyUyLMB8GA1UdIwQY
MBaAFNxXofnBIcnCtvlNOKdfv9zFTfBbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0ZlaC1jRWh5Y0syLVUwNHAxLV8zTVZOOEZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wZTY3NjUtODZlMi00MDEwLThmOGUt
ZGQxMTNjNjk4ZDEyLzEvM0ZlaC1jRWh5Y0syLVUwNHAxLV8zTVZOOEZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wZTY3NjUtODZlMi00MDEwLThmOGUtZGQxMTNjNjk4ZDEy
LzEvM0ZlaC1jRWh5Y0syLVUwNHAxLV8zTVZOOEZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLNL1pwg
CgV0v8WzsG8kRnMR8FLcEIAFG0f44DdRBhoiMlWT6c0K1jjgmJ5OJV7nS5dX6B8s
0ys/LoOOjmHa7ppDhEQziUnjitj0g66TW3F+3VA1O0YUCaD3YLHmf8dY3w72hH7a
HsS66gNzvemwXV96f63CaLfBaSEGt3RVFbPZQh3dAt6eyLynGRXSRE3dHxzA+6Mo
MFWniFqwEVuMxMBJpW30SaUFYb1LCWWw1GPH4zrXbvavqQMsYkc64DEhKgRbcC80
Ql3YKk8prCO5R8c6J1X193dB/VeRQ+D6VELwCngsr9OaN+V9i1xNB9+KS+A/xP94
dhk7Xnc1DuytEA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:18 2025 by rpki-client