Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
File: j3iWOzxPLdGHwgQ33x19nBaMq4E.mft (raw, json)
Hash identifier: 7TIvwq7U1hClt1xPsQl8t20gEIaJvTlb+6IRO7abZyA=
Subject key identifier: 0F:7D:8C:2D:F6:9B:73:BF:B7:C8:93:87:18:AA:45:AB:4E:52:5C:06
Authority key identifier: 8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
Certificate issuer: /CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Certificate serial: 0195E07D1D6BD4F85EE7416C02F3CFE81439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
Manifest number: 14C0
Signing time: Sat 29 Mar 2025 06:00:50 +0000
Manifest this update: Sat 29 Mar 2025 06:00:50 +0000
Manifest next update: Sun 30 Mar 2025 06:00:50 +0000
Files and hashes: 1: OrMUAZWeOYOcLPd3g5LwbkMUXk8.roa (hash: gKkiytrZ0hzX5R/Kg8dR7Gdhl0r2rLxr0t9FK+F8kjA=)
2: j3iWOzxPLdGHwgQ33x19nBaMq4E.crl (hash: W5YvMkACW61vn6Mqs/Gd1fHpA9a82wlRgg+DWG0bbkA=)
3: uMipqaBEPsKFmFa7P6LE1GLvmcY.roa (hash: DeZN9WBuwTV7YL0ji91sXglOapll+9+y355iMo+VLtw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:1d:6b:d4:f8:5e:e7:41:6c:02:f3:cf:e8:14:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Validity
Not Before: Mar 29 06:00:50 2025 GMT
Not After : Mar 30 06:00:50 2025 GMT
Subject: CN=0f7d8c2df69b73bfb7c8938718aa45ab4e525c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:69:d7:c8:a1:61:df:41:84:71:2a:98:b1:22:
ea:f0:d8:e4:21:d6:df:f3:fe:f0:18:e6:51:9e:24:
cd:a6:f0:11:83:4a:94:4f:17:ae:05:aa:c0:db:90:
77:8f:13:9b:d1:63:1f:70:fc:6d:14:29:79:b1:28:
10:0e:20:b5:c9:57:ca:d4:41:ad:8e:b4:82:a0:40:
e1:47:35:5d:cb:05:0f:e4:04:e1:20:e4:85:88:d3:
f7:05:fd:77:7a:ce:74:21:29:36:53:ef:47:57:c1:
39:a5:ff:11:d8:26:59:f6:36:80:37:50:dd:ba:9c:
88:7c:e8:d9:e9:43:df:62:1d:ba:64:16:d5:1c:20:
f0:f7:1f:c6:92:10:39:b1:fc:6a:71:cc:b1:e2:98:
9d:7f:cb:53:9b:1a:8a:fd:10:8a:81:9d:37:b0:19:
57:fa:36:fb:b8:2a:63:e0:6f:53:fc:71:09:af:05:
a9:71:6b:38:e4:33:bc:5b:61:4f:d2:41:ad:40:c4:
1f:d7:10:9b:e6:58:78:d6:38:5b:c2:0c:97:f5:84:
12:96:cc:06:8b:1d:ae:db:a8:a3:77:72:85:62:93:
32:b4:7f:ca:7c:ca:ac:da:c5:a1:d0:e5:e1:7a:b2:
1d:08:29:82:22:a8:ff:db:cf:4b:84:a7:77:e6:2c:
0e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7D:8C:2D:F6:9B:73:BF:B7:C8:93:87:18:AA:45:AB:4E:52:5C:06
X509v3 Authority Key Identifier:
keyid:8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:3e:ab:7b:22:e7:4c:62:bc:61:75:30:c1:06:b9:97:41:9e:
54:42:9d:61:6c:c4:9c:a0:d7:31:6b:52:43:0d:41:b9:8d:38:
9c:a7:62:df:fa:28:b1:77:ea:95:b9:19:ff:01:29:c4:86:ed:
2b:b9:e5:8c:43:6f:22:9b:48:0e:e4:6b:a5:b0:b0:6b:ac:ce:
f2:5a:40:da:29:1f:6d:69:af:8d:c7:db:ca:d8:18:2c:89:9b:
f3:0b:82:4b:ae:31:1e:86:b9:84:72:fb:4b:f7:89:25:b3:9e:
5b:b5:03:bc:59:ac:a4:03:37:79:43:df:bc:35:32:86:69:93:
02:c9:83:5c:32:34:69:ca:0b:bf:50:ec:b9:45:6d:d7:9c:b4:
e6:ec:04:fb:d5:b1:e3:bd:b1:a2:32:6e:2e:a0:b3:e0:78:ef:
66:6e:22:7f:e6:c6:c0:6d:81:66:a5:cd:ec:72:7b:99:07:b8:
d3:d5:43:6e:7d:f6:d1:31:95:e9:0e:3e:5f:ef:e4:68:72:18:
5e:67:4c:58:68:a8:90:b3:f6:a7:85:4f:71:a9:34:12:a8:b9:
b8:06:cc:a3:e0:26:06:db:3e:00:d3:c9:f7:ad:72:d3:35:8a:
d3:52:47:68:2f:54:76:79:33:af:f2:86:d2:49:27:ed:84:e0:
53:96:f6:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgfR1r1Phe50FsAvPP6BQ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNzg5NjNiM2M0ZjJkZDE4N2MyMDQzN2RmMWQ3ZDljMTY4
Y2FiODEwHhcNMjUwMzI5MDYwMDUwWhcNMjUwMzMwMDYwMDUwWjAzMTEwLwYDVQQD
EygwZjdkOGMyZGY2OWI3M2JmYjdjODkzODcxOGFhNDVhYjRlNTI1YzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGnXyKFh30GEcSqYsSLq8NjkIdbf
8/7wGOZRniTNpvARg0qUTxeuBarA25B3jxOb0WMfcPxtFCl5sSgQDiC1yVfK1EGt
jrSCoEDhRzVdywUP5AThIOSFiNP3Bf13es50ISk2U+9HV8E5pf8R2CZZ9jaAN1Dd
upyIfOjZ6UPfYh26ZBbVHCDw9x/GkhA5sfxqccyx4pidf8tTmxqK/RCKgZ03sBlX
+jb7uCpj4G9T/HEJrwWpcWs45DO8W2FP0kGtQMQf1xCb5lh41jhbwgyX9YQSlswG
ix2u26ijd3KFYpMytH/KfMqs2sWh0OXherIdCCmCIqj/289LhKd35iwOQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA99jC32m3O/t8iThxiqRatOUlwGMB8GA1UdIwQY
MBaAFI94ljs8Ty3Rh8IEN98dfZwWjKuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajNpV096eFBMZEdId2dRMzN4MTluQmFNcTRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kYmZjYTEtMmI5NC00ZDBiLTlkZDgt
MWVmOWYyMzE5NTIyLzEvajNpV096eFBMZEdId2dRMzN4MTluQmFNcTRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9kYmZjYTEtMmI5NC00ZDBiLTlkZDgtMWVmOWYyMzE5NTIy
LzEvajNpV096eFBMZEdId2dRMzN4MTluQmFNcTRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZD6reyLn
TGK8YXUwwQa5l0GeVEKdYWzEnKDXMWtSQw1BuY04nKdi3/oosXfqlbkZ/wEpxIbt
K7nljENvIptIDuRrpbCwa6zO8lpA2ikfbWmvjcfbytgYLImb8wuCS64xHoa5hHL7
S/eJJbOeW7UDvFmspAM3eUPfvDUyhmmTAsmDXDI0acoLv1DsuUVt15y05uwE+9Wx
472xojJuLqCz4HjvZm4if+bGwG2BZqXN7HJ7mQe409VDbn320TGV6Q4+X+/kaHIY
XmdMWGiokLP2p4VPcak0Eqi5uAbMo+AmBts+ANPJ961y0zWK01JHaC9Udnkzr/KG
0kkn7YTgU5b2WA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:48:27 2025 by rpki-client