Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/7dc9ce-9862-4277-823f-5e090a30f4dc/1/st3QfM2do60-gKKnrDSslmbX090.mft
File: st3QfM2do60-gKKnrDSslmbX090.mft (raw, json)
Hash identifier: 0+RSWRaRoacQwVQUMFgK6Fcs0CSAvthUAldN99jgF5w=
Subject key identifier: 56:A0:FD:9F:19:26:7A:DD:E8:A7:FB:34:03:59:78:18:7B:26:80:B6
Authority key identifier: B2:DD:D0:7C:CD:9D:A3:AD:3E:80:A2:A7:AC:34:AC:96:66:D7:D3:DD
Certificate issuer: /CN=b2ddd07ccd9da3ad3e80a2a7ac34ac9666d7d3dd
Certificate serial: 018C33D84D0FD97E3C03459497730AAAC03A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st3QfM2do60-gKKnrDSslmbX090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/7dc9ce-9862-4277-823f-5e090a30f4dc/1/st3QfM2do60-gKKnrDSslmbX090.mft
Manifest number: 08CF
Signing time: Mon 04 Dec 2023 08:01:02 +0000
Manifest this update: Mon 04 Dec 2023 08:01:02 +0000
Manifest next update: Tue 05 Dec 2023 08:01:02 +0000
Files and hashes: 1: izAf02ScjqDGiqBwFWL7OVC7KjU.roa (hash: 9CD6BF9TD20tEDnNWQ5xY8iup3U+bMc4yZheuyeZi00=)
2: st3QfM2do60-gKKnrDSslmbX090.crl (hash: z0ty1QFwRPy0/4P9kLxd99gVI6OCLCYzDIgEt9N60Xs=)
3: vajUNIJNLUT6Rn74vGY2fFqsVDo.roa (hash: xrJtjx9Z9s725NWCBrp/PyBr4eaYAUg4ttfGAgX6dCU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:33:d8:4d:0f:d9:7e:3c:03:45:94:97:73:0a:aa:c0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ddd07ccd9da3ad3e80a2a7ac34ac9666d7d3dd
Validity
Not Before: Dec 4 08:01:02 2023 GMT
Not After : Dec 5 08:01:02 2023 GMT
Subject: CN=56a0fd9f19267adde8a7fb34035978187b2680b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fd:69:85:9b:89:df:79:c2:b5:c9:3f:c5:cb:
0c:05:de:62:7d:cf:94:00:a3:4a:3f:ba:72:b7:51:
6c:1f:37:fb:10:7f:be:63:66:40:21:fb:6e:e0:19:
94:06:b5:8c:1b:d0:08:21:46:66:5e:68:68:e3:cc:
2f:c1:39:e6:0b:18:fa:35:db:de:b2:57:eb:f7:52:
39:71:a0:e4:81:82:68:5c:dd:70:d1:3c:90:df:59:
c0:d9:48:db:64:e7:0b:94:c2:7e:c1:3c:ff:bb:47:
a6:81:01:73:10:ef:bc:46:e1:5e:36:14:ca:86:62:
f8:af:1d:14:0e:88:f9:e0:e0:1c:d4:00:a0:e1:d0:
12:06:d7:ab:8e:4e:4a:9e:d4:79:b1:8b:8b:b9:b8:
84:b7:5b:9f:af:ec:45:5e:86:20:38:86:e8:cd:06:
bc:b6:60:16:9a:1e:e6:20:f9:13:51:5f:4f:3b:19:
d3:1c:f6:33:ea:b2:a5:af:0c:01:1f:ec:95:4f:9b:
b3:aa:7f:66:16:ae:27:b2:f8:8e:04:37:ba:60:ea:
2c:8a:ac:ec:52:fc:d2:6c:bf:f9:41:e5:eb:7f:63:
80:11:ca:d7:e5:27:38:1a:2a:04:f5:07:72:ac:3e:
f5:5d:ee:dc:30:e2:4b:bf:02:a2:85:5e:39:e3:40:
5c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A0:FD:9F:19:26:7A:DD:E8:A7:FB:34:03:59:78:18:7B:26:80:B6
X509v3 Authority Key Identifier:
keyid:B2:DD:D0:7C:CD:9D:A3:AD:3E:80:A2:A7:AC:34:AC:96:66:D7:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st3QfM2do60-gKKnrDSslmbX090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7dc9ce-9862-4277-823f-5e090a30f4dc/1/st3QfM2do60-gKKnrDSslmbX090.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7dc9ce-9862-4277-823f-5e090a30f4dc/1/st3QfM2do60-gKKnrDSslmbX090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:62:cd:e3:96:ce:28:ac:4f:0a:4d:40:8b:19:e8:80:d4:77:
be:b8:16:07:6d:d6:02:90:06:d1:3c:47:58:9c:59:6a:0c:b9:
50:3f:29:2c:6c:dd:88:85:12:b8:af:4a:3f:95:be:8d:ab:cc:
77:a2:58:98:36:bc:55:39:fd:6c:56:8b:38:b2:0c:56:32:29:
75:62:8a:a3:00:b3:9b:71:c5:8a:2d:7b:72:0b:c8:4e:d7:f5:
e4:89:d0:c1:ba:d6:8b:82:00:75:92:b3:ba:85:b9:1a:90:61:
b1:86:74:21:f3:83:8e:40:27:51:56:7d:6e:b2:43:79:2a:7c:
74:18:78:b1:90:d4:67:42:59:80:0b:fe:4d:07:f9:f9:2e:50:
2a:3c:aa:8e:89:7e:1d:75:11:59:3e:f4:97:e0:6d:60:da:73:
4f:fd:48:df:be:18:d9:ec:ab:39:4e:e7:33:3e:a2:5b:49:6b:
01:d5:4b:de:79:84:d2:42:bb:e9:02:70:7c:f8:1a:ca:7e:dd:
dc:34:5b:66:71:22:70:11:0a:07:09:f2:5f:2d:22:c9:e2:9e:
14:fb:a4:6c:da:17:fc:1f:58:59:64:b1:27:8d:81:69:d8:a0:
ab:47:e0:5e:32:e7:25:66:d4:18:a3:d6:37:1a:dd:ae:a3:80:
4c:66:e2:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYwz2E0P2X48A0WUl3MKqsA6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZGRkMDdjY2Q5ZGEzYWQzZTgwYTJhN2FjMzRhYzk2NjZk
N2QzZGQwHhcNMjMxMjA0MDgwMTAyWhcNMjMxMjA1MDgwMTAyWjAzMTEwLwYDVQQD
Eyg1NmEwZmQ5ZjE5MjY3YWRkZThhN2ZiMzQwMzU5NzgxODdiMjY4MGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP1phZuJ33nCtck/xcsMBd5ifc+U
AKNKP7pyt1FsHzf7EH++Y2ZAIftu4BmUBrWMG9AIIUZmXmho48wvwTnmCxj6Ndve
slfr91I5caDkgYJoXN1w0TyQ31nA2UjbZOcLlMJ+wTz/u0emgQFzEO+8RuFeNhTK
hmL4rx0UDoj54OAc1ACg4dASBterjk5KntR5sYuLubiEt1ufr+xFXoYgOIbozQa8
tmAWmh7mIPkTUV9POxnTHPYz6rKlrwwBH+yVT5uzqn9mFq4nsviOBDe6YOosiqzs
UvzSbL/5QeXrf2OAEcrX5Sc4GioE9QdyrD71Xe7cMOJLvwKihV4540BcpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFag/Z8ZJnrd6Kf7NANZeBh7JoC2MB8GA1UdIwQY
MBaAFLLd0HzNnaOtPoCip6w0rJZm19PdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3QzUWZNMmRvNjAtZ0tLbnJEU3NsbWJYMDkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83ZGM5Y2UtOTg2Mi00Mjc3LTgyM2Yt
NWUwOTBhMzBmNGRjLzEvc3QzUWZNMmRvNjAtZ0tLbnJEU3NsbWJYMDkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83ZGM5Y2UtOTg2Mi00Mjc3LTgyM2YtNWUwOTBhMzBmNGRj
LzEvc3QzUWZNMmRvNjAtZ0tLbnJEU3NsbWJYMDkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmLN45bO
KKxPCk1AixnogNR3vrgWB23WApAG0TxHWJxZagy5UD8pLGzdiIUSuK9KP5W+javM
d6JYmDa8VTn9bFaLOLIMVjIpdWKKowCzm3HFii17cgvITtf15InQwbrWi4IAdZKz
uoW5GpBhsYZ0IfODjkAnUVZ9brJDeSp8dBh4sZDUZ0JZgAv+TQf5+S5QKjyqjol+
HXURWT70l+BtYNpzT/1I374Y2eyrOU7nMz6iW0lrAdVL3nmE0kK76QJwfPgayn7d
3DRbZnEicBEKBwnyXy0iyeKeFPukbNoX/B9YWWSxJ42Badigq0fgXjLnJWbUGKPW
NxrdrqOATGbiCQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 01:02:29 2025 by rpki-client