Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76104c-42cb-4670-88f2-c6f0c1942bdb/1/3xLi7UO1qTbCwi6aG3KOEGoZBe0.mft
File: 3xLi7UO1qTbCwi6aG3KOEGoZBe0.mft (raw, json)
Hash identifier: boKcy2aMd8q8/6HITq9/GoSkdBwNlPbxD9H8jQf8Wfc=
Subject key identifier: BA:05:0D:0A:D3:D1:BD:7C:A1:D6:17:46:EE:9F:1D:A2:87:31:4E:6C
Authority key identifier: DF:12:E2:ED:43:B5:A9:36:C2:C2:2E:9A:1B:72:8E:10:6A:19:05:ED
Certificate issuer: /CN=df12e2ed43b5a936c2c22e9a1b728e106a1905ed
Certificate serial: 018513B0257B98AF3BCEBD1E2AF7A976E91F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xLi7UO1qTbCwi6aG3KOEGoZBe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76104c-42cb-4670-88f2-c6f0c1942bdb/1/3xLi7UO1qTbCwi6aG3KOEGoZBe0.mft
Manifest number: 0583
Signing time: Thu 15 Dec 2022 02:49:48 +0000
Manifest this update: Thu 15 Dec 2022 02:49:48 +0000
Manifest next update: Fri 16 Dec 2022 02:49:48 +0000
Files and hashes: 1: 3xLi7UO1qTbCwi6aG3KOEGoZBe0.crl (hash: GH6BUwne969fLVhjb52GGP1xHznb9j9YhD2LYl30H10=)
2: _jeKyVaGamr5MhRnGZ5g_GzfZbU.roa (hash: 8XPDcw9QP4/+XOdmDEh1AtFgo2lymuK0KGN4U9xu9zQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:13:b0:25:7b:98:af:3b:ce:bd:1e:2a:f7:a9:76:e9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df12e2ed43b5a936c2c22e9a1b728e106a1905ed
Validity
Not Before: Dec 15 02:49:48 2022 GMT
Not After : Dec 16 02:49:48 2022 GMT
Subject: CN=ba050d0ad3d1bd7ca1d61746ee9f1da287314e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1e:f2:7f:a9:bc:3c:c7:60:62:b9:fa:43:c9:
ad:de:88:2c:4f:8e:0d:36:62:1f:9c:4c:ab:83:67:
62:54:6b:ab:71:1b:e7:e8:fd:f7:55:17:9c:a9:83:
80:c6:34:73:90:9c:d5:85:31:75:5c:f6:86:e1:c0:
08:29:ff:33:9f:89:ff:88:ad:fb:c8:86:0b:0e:f3:
9b:e6:21:85:f6:c5:37:c3:62:cb:5d:da:99:45:45:
ef:b7:69:07:09:07:8c:91:23:82:13:d0:93:d5:20:
5f:85:65:6a:5a:cd:23:05:fd:49:a8:35:bc:41:88:
7d:7b:c7:2a:62:de:8b:e4:03:a8:74:42:15:99:94:
78:d3:c3:9c:1c:5c:9c:66:1b:8a:2e:2d:65:04:50:
cd:67:71:76:99:71:b4:47:f4:af:f6:d5:e2:3e:64:
4f:38:23:57:8e:dd:a4:2e:7d:18:ba:0b:08:50:5b:
c4:1d:f4:0b:c9:4c:06:b2:72:6d:8a:35:e9:fa:93:
84:3f:50:d4:6b:20:b6:e8:14:3d:78:9e:0b:82:af:
78:73:6f:7e:e6:22:0d:49:82:28:8f:a1:00:09:3e:
e3:5d:21:46:8a:74:4d:eb:20:4a:24:7f:57:83:c9:
ab:38:51:d4:ef:ac:32:1f:e1:e1:da:b2:28:f7:43:
d1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:05:0D:0A:D3:D1:BD:7C:A1:D6:17:46:EE:9F:1D:A2:87:31:4E:6C
X509v3 Authority Key Identifier:
keyid:DF:12:E2:ED:43:B5:A9:36:C2:C2:2E:9A:1B:72:8E:10:6A:19:05:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xLi7UO1qTbCwi6aG3KOEGoZBe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76104c-42cb-4670-88f2-c6f0c1942bdb/1/3xLi7UO1qTbCwi6aG3KOEGoZBe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76104c-42cb-4670-88f2-c6f0c1942bdb/1/3xLi7UO1qTbCwi6aG3KOEGoZBe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f3:2f:8a:d2:49:df:b7:2b:95:ba:01:41:18:e1:bd:3b:9e:
01:d6:2d:f6:4d:8e:52:cf:a8:43:57:f3:b5:8e:ff:36:22:18:
c3:1c:62:e2:1b:1c:54:8b:9a:af:24:66:7b:5b:10:d0:7e:96:
25:a0:01:9e:a6:49:6b:dc:19:f7:0d:f3:78:de:06:5d:13:4c:
63:b1:85:a0:cc:2d:e2:4c:30:83:d8:06:ac:3a:52:d3:98:e7:
6b:56:c5:e3:7a:8c:0d:53:1a:e4:2d:87:6b:fa:fa:9b:20:6c:
9b:c6:46:fd:9b:43:2e:6f:40:29:f3:ea:15:cd:eb:0b:d3:3a:
c5:47:e0:21:31:f9:73:31:d6:46:00:1c:fe:4e:54:b6:95:c2:
b4:e6:42:30:ed:1c:13:94:fa:f9:a1:fa:7c:de:81:af:df:07:
42:7b:53:2c:e9:96:47:f4:5e:22:26:10:8e:09:13:01:74:38:
49:38:16:89:05:d4:3a:32:97:75:59:9d:fc:85:1a:13:81:b8:
08:d0:32:11:cf:d3:c4:71:f8:f1:aa:91:46:24:8f:82:67:f3:
99:b3:d9:2e:04:52:ee:5a:f6:c1:62:8d:65:63:88:36:27:6a:
42:79:53:06:b8:0e:28:13:85:9f:12:41:8d:bc:6f:07:09:25:
2f:cf:fb:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYUTsCV7mK87zr0eKvepdukfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMTJlMmVkNDNiNWE5MzZjMmMyMmU5YTFiNzI4ZTEwNmEx
OTA1ZWQwHhcNMjIxMjE1MDI0OTQ4WhcNMjIxMjE2MDI0OTQ4WjAzMTEwLwYDVQQD
EyhiYTA1MGQwYWQzZDFiZDdjYTFkNjE3NDZlZTlmMWRhMjg3MzE0ZTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx7yf6m8PMdgYrn6Q8mt3ogsT44N
NmIfnEyrg2diVGurcRvn6P33VRecqYOAxjRzkJzVhTF1XPaG4cAIKf8zn4n/iK37
yIYLDvOb5iGF9sU3w2LLXdqZRUXvt2kHCQeMkSOCE9CT1SBfhWVqWs0jBf1JqDW8
QYh9e8cqYt6L5AOodEIVmZR408OcHFycZhuKLi1lBFDNZ3F2mXG0R/Sv9tXiPmRP
OCNXjt2kLn0YugsIUFvEHfQLyUwGsnJtijXp+pOEP1DUayC26BQ9eJ4Lgq94c29+
5iINSYIoj6EACT7jXSFGinRN6yBKJH9Xg8mrOFHU76wyH+Hh2rIo90PR4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoFDQrT0b18odYXRu6fHaKHMU5sMB8GA1UdIwQY
MBaAFN8S4u1Dtak2wsIumhtyjhBqGQXtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3hMaTdVTzFxVGJDd2k2YUczS09FR29aQmUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83NjEwNGMtNDJjYi00NjcwLTg4ZjIt
YzZmMGMxOTQyYmRiLzEvM3hMaTdVTzFxVGJDd2k2YUczS09FR29aQmUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83NjEwNGMtNDJjYi00NjcwLTg4ZjItYzZmMGMxOTQyYmRi
LzEvM3hMaTdVTzFxVGJDd2k2YUczS09FR29aQmUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffMvitJJ
37crlboBQRjhvTueAdYt9k2OUs+oQ1fztY7/NiIYwxxi4hscVIuaryRme1sQ0H6W
JaABnqZJa9wZ9w3zeN4GXRNMY7GFoMwt4kwwg9gGrDpS05jna1bF43qMDVMa5C2H
a/r6myBsm8ZG/ZtDLm9AKfPqFc3rC9M6xUfgITH5czHWRgAc/k5UtpXCtOZCMO0c
E5T6+aH6fN6Br98HQntTLOmWR/ReIiYQjgkTAXQ4STgWiQXUOjKXdVmd/IUaE4G4
CNAyEc/TxHH48aqRRiSPgmfzmbPZLgRS7lr2wWKNZWOINidqQnlTBrgOKBOFnxJB
jbxvBwklL8/7ow==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:34 2025 by rpki-client