Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.mft
File: w3P66Z1lEpiEXSL4nY0rLh0TvAQ.mft (raw, json)
Hash identifier: sL3GhYk/SBhZZ94sdg/2jdXUxFaP62ixME8Vt4A89Pw=
Subject key identifier: 52:1C:1E:D4:2E:14:6A:E1:E5:17:B9:2B:DD:BA:BA:2D:2D:BA:7C:74
Authority key identifier: C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
Certificate issuer: /CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Certificate serial: 0195DFD889FAF04B99B0C9B1336CE0826D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.mft
Manifest number: 0768
Signing time: Sat 29 Mar 2025 03:01:05 +0000
Manifest this update: Sat 29 Mar 2025 03:01:05 +0000
Manifest next update: Sun 30 Mar 2025 03:01:05 +0000
Files and hashes: 1: 1-lvK1BgwcNHjtpfnLdG3UaLjqn4.roa (hash: hB5Mx+mQ6y7CKmWEvcE4cdS1DxjfdWVYD7EJHEQbkT8=)
2: etpEu1cj7-R5VUN9lVCy1f6R_us.roa (hash: YZEZp2TGlFEUPFteuruD5i0s6l1fSCZqW08CfFGNqPU=)
3: w3P66Z1lEpiEXSL4nY0rLh0TvAQ.crl (hash: CInTpkvTLQZP9z83VI1I+oBy5N2PuAsLBvoD5lFAa8g=)
4: ymt9m8t916HfzE2dDMrSbVzjGNQ.roa (hash: RKU18Ug3MIC4PR8xDDXo0qG3ZhoSZmVX9c0pIDSEpi8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:89:fa:f0:4b:99:b0:c9:b1:33:6c:e0:82:6d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Validity
Not Before: Mar 29 03:01:05 2025 GMT
Not After : Mar 30 03:01:05 2025 GMT
Subject: CN=521c1ed42e146ae1e517b92bddbaba2d2dba7c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:70:13:da:18:67:f7:fc:e0:3d:e3:2f:66:f4:
61:66:60:97:67:06:c8:15:c2:ca:dc:84:ed:a9:ab:
dc:c6:60:d5:a2:e1:f3:06:99:e7:4d:31:6f:4d:d2:
46:59:e4:b8:c3:03:79:c4:21:fb:fa:76:7c:c2:28:
06:0e:d0:47:36:8b:5e:da:f4:78:37:2b:57:b6:2b:
07:20:eb:af:b6:93:38:42:8d:cc:80:83:ed:aa:a8:
05:03:24:03:43:77:31:b9:85:21:37:c1:26:28:9f:
49:4d:9b:42:05:cb:40:cd:0f:f2:86:0d:ec:d6:b2:
bb:ee:d3:35:09:73:0c:63:7e:31:bb:4a:34:17:37:
9e:a4:1b:7c:75:a3:f3:6c:f1:0a:c0:e2:81:c6:5c:
a3:5e:09:91:02:5d:11:f3:c5:81:4b:5f:86:26:db:
cf:e1:64:be:3f:d0:d7:5a:13:3e:6c:7d:42:9b:ca:
e7:dc:db:4b:ad:fc:02:62:27:95:54:ce:1a:6e:0b:
0a:4d:4e:92:ba:a6:54:71:f3:d4:2b:53:b9:0d:63:
89:15:46:35:60:97:59:47:d8:01:42:1f:a4:d7:2f:
7c:49:53:5f:34:5e:25:fc:f5:44:c0:67:2b:bd:15:
10:be:88:57:8c:1a:dd:61:66:86:a0:a9:fa:79:ca:
fd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1C:1E:D4:2E:14:6A:E1:E5:17:B9:2B:DD:BA:BA:2D:2D:BA:7C:74
X509v3 Authority Key Identifier:
keyid:C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:fc:1f:fa:0b:f4:72:9b:1d:bb:82:10:97:19:89:87:26:dc:
4c:04:6f:38:14:00:65:99:29:66:d6:c4:b1:1d:25:32:02:e1:
5a:b0:97:63:b9:e6:4d:7c:60:c0:3c:b1:c9:8e:85:c9:03:20:
1c:13:89:85:15:c8:47:be:fd:05:2d:88:95:53:19:27:54:81:
83:88:68:1f:af:3c:f1:4f:fd:d4:42:03:0a:1b:ce:9f:f3:a7:
2d:31:18:e6:af:50:c5:a8:e0:55:59:3e:c8:52:5d:07:9f:ca:
82:1e:7c:d8:5b:aa:42:2a:0b:1a:ff:ea:9e:62:11:c3:0f:3a:
12:9a:e1:8b:5c:e2:10:2a:a8:98:27:63:ac:df:81:d1:e7:5d:
f5:f1:79:27:15:83:0e:4a:90:7d:5d:b7:07:39:4a:9a:66:b4:
fc:ea:f2:2b:5c:32:14:ea:cd:94:18:9f:f6:b1:5b:09:3e:bc:
6b:d6:09:8e:0a:e5:b0:52:1a:54:70:dc:2e:1d:24:e3:fc:c3:
31:99:9f:20:ce:eb:9d:46:bf:01:ec:42:45:8a:75:b9:66:f6:
a1:e9:01:0f:f0:20:70:cd:2b:a3:ed:bb:56:d3:21:f9:ce:69:
22:ec:ec:b2:39:6f:03:9f:ba:47:65:47:3b:22:c2:12:8f:5a:
b3:4c:c0:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXf2In68EuZsMmxM2zggm04MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNzNmYWU5OWQ2NTEyOTg4NDVkMjJmODlkOGQyYjJlMWQx
M2JjMDQwHhcNMjUwMzI5MDMwMTA1WhcNMjUwMzMwMDMwMTA1WjAzMTEwLwYDVQQD
Eyg1MjFjMWVkNDJlMTQ2YWUxZTUxN2I5MmJkZGJhYmEyZDJkYmE3Yzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+nAT2hhn9/zgPeMvZvRhZmCXZwbI
FcLK3ITtqavcxmDVouHzBpnnTTFvTdJGWeS4wwN5xCH7+nZ8wigGDtBHNote2vR4
NytXtisHIOuvtpM4Qo3MgIPtqqgFAyQDQ3cxuYUhN8EmKJ9JTZtCBctAzQ/yhg3s
1rK77tM1CXMMY34xu0o0FzeepBt8daPzbPEKwOKBxlyjXgmRAl0R88WBS1+GJtvP
4WS+P9DXWhM+bH1Cm8rn3NtLrfwCYieVVM4abgsKTU6SuqZUcfPUK1O5DWOJFUY1
YJdZR9gBQh+k1y98SVNfNF4l/PVEwGcrvRUQvohXjBrdYWaGoKn6ecr9bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIcHtQuFGrh5Re5K926ui0tunx0MB8GA1UdIwQY
MBaAFMNz+umdZRKYhF0i+J2NKy4dE7wEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNQNjZaMWxFcGlFWFNMNG5ZMHJMaDBUdkFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84Y2U3OTUtM2ZhOS00Y2I3LTgzMWEt
MWRlNTZlNDc1ZmJmLzEvdzNQNjZaMWxFcGlFWFNMNG5ZMHJMaDBUdkFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC84Y2U3OTUtM2ZhOS00Y2I3LTgzMWEtMWRlNTZlNDc1ZmJm
LzEvdzNQNjZaMWxFcGlFWFNMNG5ZMHJMaDBUdkFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcfwf+gv0
cpsdu4IQlxmJhybcTARvOBQAZZkpZtbEsR0lMgLhWrCXY7nmTXxgwDyxyY6FyQMg
HBOJhRXIR779BS2IlVMZJ1SBg4hoH6888U/91EIDChvOn/OnLTEY5q9QxajgVVk+
yFJdB5/Kgh582FuqQioLGv/qnmIRww86Eprhi1ziECqomCdjrN+B0edd9fF5JxWD
DkqQfV23BzlKmma0/OryK1wyFOrNlBif9rFbCT68a9YJjgrlsFIaVHDcLh0k4/zD
MZmfIM7rnUa/AexCRYp1uWb2oekBD/AgcM0ro+27VtMh+c5pIuzssjlvA5+6R2VH
OyLCEo9as0zAFQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:05:39 2025 by rpki-client