Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
File: P3cnpBMI2bn25j3xsg6LnNgjgSA.mft (raw, json)
Hash identifier: ILJPQx+LKAlAjIoIYIepuJ32+aL0jAUXQLQiRo+xHqc=
Subject key identifier: CA:61:DF:D4:51:C3:3C:49:B4:F8:8F:6C:41:4C:58:3A:FA:1D:30:37
Authority key identifier: 3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
Certificate issuer: /CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Certificate serial: 0194BC3C32FC161B82BD191B16398B33CEE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
Manifest number: 0521
Signing time: Fri 31 Jan 2025 12:00:49 +0000
Manifest this update: Fri 31 Jan 2025 12:00:49 +0000
Manifest next update: Sat 01 Feb 2025 12:00:49 +0000
Files and hashes: 1: P3cnpBMI2bn25j3xsg6LnNgjgSA.crl (hash: jKl1lUNZH1DrH2mjAlfRLD/BBuLIEHcj4Bt5W7aF9X0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:32:fc:16:1b:82:bd:19:1b:16:39:8b:33:ce:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Validity
Not Before: Jan 31 12:00:49 2025 GMT
Not After : Feb 1 12:00:49 2025 GMT
Subject: CN=ca61dfd451c33c49b4f88f6c414c583afa1d3037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e1:88:77:cb:01:75:63:3e:3f:d8:e1:a5:bd:
cc:7c:0e:36:90:3a:09:0c:e1:5a:91:73:93:c5:5a:
d3:95:57:99:78:e1:4e:83:b3:ac:1d:29:d4:a3:80:
cb:a1:d6:a8:92:69:7a:4c:c7:a1:ce:ec:8a:37:f3:
fc:73:d8:a8:12:a1:f0:48:29:4d:bf:6d:41:a1:24:
02:1d:17:59:01:dd:a6:b9:98:a7:f8:b8:6a:c8:b7:
61:09:96:04:2f:34:b3:7d:2c:47:6e:8c:03:a8:5d:
8b:dc:7d:d1:e0:3b:0c:90:cd:02:4b:41:ed:d5:45:
06:5d:f7:09:16:65:98:81:d7:7a:2e:23:28:35:cd:
6f:13:99:d6:ce:a5:45:9e:ec:9d:db:8b:75:87:ee:
8a:eb:35:0c:04:51:54:cd:44:75:1e:5b:05:e7:0b:
48:35:6b:4c:6a:e0:ad:0f:d8:54:80:b5:b4:95:85:
29:40:b4:dd:18:65:5c:ce:95:e2:c5:7f:2d:be:59:
bd:38:08:c8:05:62:4c:83:6b:d7:87:cb:89:f8:e4:
b4:7d:1b:5a:df:81:4a:93:fd:43:a0:f6:0e:c4:02:
fa:e0:8f:ec:54:d0:59:cc:da:ee:59:4e:e6:32:6e:
97:73:07:84:cb:46:3f:e2:01:2f:3c:94:9d:9d:9b:
42:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:61:DF:D4:51:C3:3C:49:B4:F8:8F:6C:41:4C:58:3A:FA:1D:30:37
X509v3 Authority Key Identifier:
keyid:3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:60:70:b7:cd:3f:44:95:80:2d:20:b0:14:09:b6:dc:b1:26:
84:52:10:36:0b:94:c2:b6:99:12:a5:1e:80:76:a9:1e:f7:07:
7a:81:bc:5c:8c:a7:40:1a:b8:87:ca:d6:4a:67:8a:6c:65:69:
13:aa:36:e3:3d:7a:b7:bb:cf:9b:59:15:d6:af:8e:f0:49:51:
5b:d8:38:fc:9b:62:26:4d:5e:48:82:34:da:0c:72:b0:e8:1e:
e8:d6:64:d6:d0:9b:5a:61:f0:b2:10:f0:4e:be:98:9f:61:87:
35:ed:b8:ae:19:52:b9:6c:d9:57:e4:23:c1:31:f2:46:56:f9:
37:a6:1c:3c:02:ee:93:fb:80:84:64:c6:f2:c7:dc:47:99:b2:
e9:0f:fd:83:27:2c:cc:65:ee:c2:95:c2:95:46:00:5d:23:3c:
a7:b8:e5:ba:24:64:fa:aa:b6:55:7d:15:2d:23:7b:0b:ce:ae:
4a:49:88:c3:90:33:e9:9c:73:26:38:72:7d:51:1e:9a:e5:53:
82:e2:c2:d3:8b:8a:25:72:75:be:21:7c:e5:42:1e:b4:a8:58:
e7:db:e6:a5:d1:e5:04:42:f6:b1:a8:9a:9b:8e:33:1f:aa:ac:
b8:52:4c:db:34:b3:15:48:85:9a:ef:60:5a:59:43:1f:26:03:
ee:1a:71:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PDL8FhuCvRkbFjmLM87kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNzcyN2E0MTMwOGQ5YjlmNmU2M2RmMWIyMGU4YjljZDgy
MzgxMjAwHhcNMjUwMTMxMTIwMDQ5WhcNMjUwMjAxMTIwMDQ5WjAzMTEwLwYDVQQD
EyhjYTYxZGZkNDUxYzMzYzQ5YjRmODhmNmM0MTRjNTgzYWZhMWQzMDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+GId8sBdWM+P9jhpb3MfA42kDoJ
DOFakXOTxVrTlVeZeOFOg7OsHSnUo4DLodaokml6TMehzuyKN/P8c9ioEqHwSClN
v21BoSQCHRdZAd2muZin+LhqyLdhCZYELzSzfSxHbowDqF2L3H3R4DsMkM0CS0Ht
1UUGXfcJFmWYgdd6LiMoNc1vE5nWzqVFnuyd24t1h+6K6zUMBFFUzUR1HlsF5wtI
NWtMauCtD9hUgLW0lYUpQLTdGGVczpXixX8tvlm9OAjIBWJMg2vXh8uJ+OS0fRta
34FKk/1DoPYOxAL64I/sVNBZzNruWU7mMm6XcweEy0Y/4gEvPJSdnZtCiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMph39RRwzxJtPiPbEFMWDr6HTA3MB8GA1UdIwQY
MBaAFD93J6QTCNm59uY98bIOi5zYI4EgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDNjbnBCTUkyYm4yNWozeHNnNkxuTmdqZ1NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hODhmMzAtNmUxYy00YzI4LWIwNzkt
OTdlY2MwNzA2YmYwLzEvUDNjbnBCTUkyYm4yNWozeHNnNkxuTmdqZ1NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hODhmMzAtNmUxYy00YzI4LWIwNzktOTdlY2MwNzA2YmYw
LzEvUDNjbnBCTUkyYm4yNWozeHNnNkxuTmdqZ1NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmBwt80/
RJWALSCwFAm23LEmhFIQNguUwraZEqUegHapHvcHeoG8XIynQBq4h8rWSmeKbGVp
E6o24z16t7vPm1kV1q+O8ElRW9g4/JtiJk1eSII02gxysOge6NZk1tCbWmHwshDw
Tr6Yn2GHNe24rhlSuWzZV+QjwTHyRlb5N6YcPALuk/uAhGTG8sfcR5my6Q/9gycs
zGXuwpXClUYAXSM8p7jluiRk+qq2VX0VLSN7C86uSkmIw5Az6ZxzJjhyfVEemuVT
guLC04uKJXJ1viF85UIetKhY59vmpdHlBEL2saiam44zH6qsuFJM2zSzFUiFmu9g
WllDHyYD7hpxcw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:42:28 2025 by rpki-client