Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/89c1fe-d2cb-4a9a-b091-7079bb51a70e/1/3Zgqcp-jKvxTCWYyI0iFYLztPD4.mft
File: 3Zgqcp-jKvxTCWYyI0iFYLztPD4.mft (raw, json)
Hash identifier: SBcbNpllfbXgGp+jj7+QtMSty3qg9fdU9fkhfyHdcNQ=
Subject key identifier: 50:65:0B:DB:A7:F1:F4:C5:A9:C2:DC:5D:70:AA:A3:A5:D7:85:F2:35
Authority key identifier: DD:98:2A:72:9F:A3:2A:FC:53:09:66:32:23:48:85:60:BC:ED:3C:3E
Certificate issuer: /CN=dd982a729fa32afc5309663223488560bced3c3e
Certificate serial: 01931A3CFBB4635B5598C9A8D706101C66EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Zgqcp-jKvxTCWYyI0iFYLztPD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/89c1fe-d2cb-4a9a-b091-7079bb51a70e/1/3Zgqcp-jKvxTCWYyI0iFYLztPD4.mft
Manifest number: 0250
Signing time: Mon 11 Nov 2024 08:00:24 +0000
Manifest this update: Mon 11 Nov 2024 08:00:24 +0000
Manifest next update: Tue 12 Nov 2024 08:00:24 +0000
Files and hashes: 1: 3Zgqcp-jKvxTCWYyI0iFYLztPD4.crl (hash: 22yslq6eTPre4ZAcmyf/hNMTnjdsXMCePKdM7AqsN6g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1a:3c:fb:b4:63:5b:55:98:c9:a8:d7:06:10:1c:66:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd982a729fa32afc5309663223488560bced3c3e
Validity
Not Before: Nov 11 08:00:24 2024 GMT
Not After : Nov 12 08:00:24 2024 GMT
Subject: CN=50650bdba7f1f4c5a9c2dc5d70aaa3a5d785f235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7b:73:d9:8f:49:26:60:22:52:16:f1:46:3f:
2f:99:c4:36:2c:a0:ab:0b:ce:5a:ba:d6:63:34:3a:
6f:1c:64:19:ed:b2:8e:f4:2b:ea:69:e6:ee:34:cc:
85:0a:53:43:e6:c3:4a:8b:44:82:ee:fc:96:d7:ab:
0d:cf:9d:ff:ba:1c:eb:fc:05:c3:1e:88:e2:ba:17:
0d:85:38:d1:60:3e:dd:07:7a:5d:66:eb:e5:83:41:
02:1d:a1:ba:b4:76:83:4a:03:2f:c3:70:92:05:40:
16:cc:f6:a7:d6:73:62:85:74:d8:a8:c1:93:23:5e:
8a:1d:68:08:f7:43:e3:dc:fc:12:ff:19:95:c1:36:
a7:0d:c9:fc:f5:0d:1e:92:5a:3e:96:3b:ad:13:95:
b7:05:57:44:a0:e2:50:bb:46:a1:9d:88:89:93:29:
7f:8a:e4:f0:28:11:41:ca:a6:3b:87:c1:fd:1d:da:
62:7a:d7:4b:12:b3:98:ab:67:23:fc:52:0c:9c:1d:
e3:e3:be:28:d5:90:2a:65:12:db:51:c2:44:35:e0:
71:00:3d:e7:fd:08:8e:fb:4f:38:f6:bd:dc:f0:05:
67:5a:34:c4:74:9f:6f:5d:81:d4:8f:fc:07:0f:fc:
96:af:bf:ed:b4:73:f9:a1:46:f2:a3:5a:c8:61:81:
27:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:65:0B:DB:A7:F1:F4:C5:A9:C2:DC:5D:70:AA:A3:A5:D7:85:F2:35
X509v3 Authority Key Identifier:
keyid:DD:98:2A:72:9F:A3:2A:FC:53:09:66:32:23:48:85:60:BC:ED:3C:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Zgqcp-jKvxTCWYyI0iFYLztPD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/89c1fe-d2cb-4a9a-b091-7079bb51a70e/1/3Zgqcp-jKvxTCWYyI0iFYLztPD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/89c1fe-d2cb-4a9a-b091-7079bb51a70e/1/3Zgqcp-jKvxTCWYyI0iFYLztPD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ff:45:ea:93:82:82:fc:e2:4e:b8:19:4e:ac:bf:07:b5:2c:
f7:9a:4f:41:90:98:f2:d5:97:a7:62:1c:7d:c1:d2:fa:7c:0c:
b3:39:2a:ed:12:39:2f:02:75:7c:e8:76:2f:66:3f:cb:f4:c2:
36:ad:f3:b2:89:d2:a4:3e:53:69:ef:00:41:5a:08:55:56:5d:
97:1f:ae:22:29:66:b2:92:47:3e:ec:15:2d:21:47:fa:71:58:
e7:e2:af:ea:ba:20:0f:e0:4d:8d:c1:f5:6e:6c:64:3f:81:f8:
1c:44:34:5b:9f:5b:03:1c:19:1e:bc:a4:ce:4a:4b:75:0c:3f:
e6:6e:66:d7:cc:8a:aa:06:a7:81:f2:25:da:23:6c:34:ad:8d:
2a:d8:ff:52:36:8f:bf:6e:79:89:c3:98:0c:db:6e:b6:10:bf:
a1:01:8b:34:2a:7c:9e:47:09:46:2e:c6:5c:6f:1c:2a:ef:6e:
36:f9:b2:14:a6:42:6a:a9:f2:8a:a1:cb:dd:0c:24:09:e7:8e:
54:8f:d8:81:57:2a:74:76:96:5b:99:a8:41:00:1a:9d:ad:dc:
4c:e4:a7:2e:99:9d:45:17:1e:80:11:94:ea:37:4a:ec:90:2f:
d7:05:62:03:1c:e8:c3:3a:b9:7e:75:56:1b:be:da:24:df:6a:
a9:ba:c7:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZMaPPu0Y1tVmMmo1wYQHGbqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOTgyYTcyOWZhMzJhZmM1MzA5NjYzMjIzNDg4NTYwYmNl
ZDNjM2UwHhcNMjQxMTExMDgwMDI0WhcNMjQxMTEyMDgwMDI0WjAzMTEwLwYDVQQD
Eyg1MDY1MGJkYmE3ZjFmNGM1YTljMmRjNWQ3MGFhYTNhNWQ3ODVmMjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXtz2Y9JJmAiUhbxRj8vmcQ2LKCr
C85autZjNDpvHGQZ7bKO9CvqaebuNMyFClND5sNKi0SC7vyW16sNz53/uhzr/AXD
HojiuhcNhTjRYD7dB3pdZuvlg0ECHaG6tHaDSgMvw3CSBUAWzPan1nNihXTYqMGT
I16KHWgI90Pj3PwS/xmVwTanDcn89Q0eklo+ljutE5W3BVdEoOJQu0ahnYiJkyl/
iuTwKBFByqY7h8H9HdpietdLErOYq2cj/FIMnB3j474o1ZAqZRLbUcJENeBxAD3n
/QiO+0849r3c8AVnWjTEdJ9vXYHUj/wHD/yWr7/ttHP5oUbyo1rIYYEnKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBlC9un8fTFqcLcXXCqo6XXhfI1MB8GA1UdIwQY
MBaAFN2YKnKfoyr8UwlmMiNIhWC87Tw+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1pncWNwLWpLdnhUQ1dZeUkwaUZZTHp0UEQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS84OWMxZmUtZDJjYi00YTlhLWIwOTEt
NzA3OWJiNTFhNzBlLzEvM1pncWNwLWpLdnhUQ1dZeUkwaUZZTHp0UEQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS84OWMxZmUtZDJjYi00YTlhLWIwOTEtNzA3OWJiNTFhNzBl
LzEvM1pncWNwLWpLdnhUQ1dZeUkwaUZZTHp0UEQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABf9F6pOC
gvziTrgZTqy/B7Us95pPQZCY8tWXp2IcfcHS+nwMszkq7RI5LwJ1fOh2L2Y/y/TC
Nq3zsonSpD5Tae8AQVoIVVZdlx+uIilmspJHPuwVLSFH+nFY5+Kv6rogD+BNjcH1
bmxkP4H4HEQ0W59bAxwZHrykzkpLdQw/5m5m18yKqgangfIl2iNsNK2NKtj/UjaP
v255icOYDNtuthC/oQGLNCp8nkcJRi7GXG8cKu9uNvmyFKZCaqnyiqHL3QwkCeeO
VI/YgVcqdHaWW5moQQAana3cTOSnLpmdRRcegBGU6jdK7JAv1wViAxzowzq5fnVW
G77aJN9qqbrHIw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:54 2025 by rpki-client