Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
File: 3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft (raw, json)
Hash identifier: q8A/yPOzhtpVQzr5Rx6P9HVfDUXzETLjqoYuklMmQjE=
Subject key identifier: 4C:E9:5A:5D:A2:16:FD:ED:8E:1F:6D:38:FD:20:52:4E:F9:5E:D0:5F
Authority key identifier: DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
Certificate issuer: /CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Certificate serial: 0195DFD8A7CC2133ED6C7A58A875CF2F5805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
Manifest number: 0D42
Signing time: Sat 29 Mar 2025 03:01:12 +0000
Manifest this update: Sat 29 Mar 2025 03:01:12 +0000
Manifest next update: Sun 30 Mar 2025 03:01:12 +0000
Files and hashes: 1: 3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl (hash: BN7lYWZYNNWknX+OmlN+Om6A0G/dNrCCSUyxeOGDey4=)
2: Kw550ydpOki0PWOYy-6z5BR-VIE.roa (hash: DJKKlAPQ1FQMVESwtaTdBMt71sNwkspOh/dlMgsjkTY=)
3: fcEpjbgKYOO71SWou3_dCE-kLKk.roa (hash: zROet63WRPPKV6TiwIGdua33aTn4W6zOjjUbs9hhWRs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:a7:cc:21:33:ed:6c:7a:58:a8:75:cf:2f:58:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Validity
Not Before: Mar 29 03:01:12 2025 GMT
Not After : Mar 30 03:01:12 2025 GMT
Subject: CN=4ce95a5da216fded8e1f6d38fd20524ef95ed05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:77:03:0d:dd:ec:c2:a6:85:b7:18:90:aa:7b:
70:4e:c5:69:1d:fa:9a:e5:ef:63:3d:32:09:ae:4f:
43:8c:55:c2:ac:28:35:43:61:fd:71:67:d7:b1:39:
a8:a8:d2:c4:35:70:a3:5e:7e:4a:ed:7f:d1:29:b9:
44:1a:66:55:6d:bd:c2:82:4b:9e:03:61:f1:68:2c:
0d:fb:1a:0d:40:51:f1:c4:57:76:7c:e4:5d:9a:96:
10:c7:23:54:bc:82:c6:a5:ea:67:33:f0:fb:cc:74:
e6:b2:84:da:9f:c5:c4:a2:64:c4:30:28:b5:bf:96:
b4:0e:2f:91:15:81:ba:d9:cd:58:ad:79:71:bc:0d:
79:88:bf:5c:44:e3:41:47:e2:f4:d0:9b:5f:5e:6d:
b1:80:b4:ab:5d:a6:b8:f3:ee:26:cc:7a:d6:39:b9:
c4:4c:64:4c:ef:23:3e:bb:ab:99:a6:c3:05:49:e0:
a1:f2:7f:71:43:53:dd:ae:45:34:d0:f4:bd:53:0a:
62:93:33:8e:fe:a4:90:8a:1c:3a:07:b0:20:1b:08:
2f:ba:77:a2:52:20:17:6b:23:0b:40:d1:cf:8f:4e:
92:2c:e0:b8:df:be:44:b9:5b:b5:a6:40:e5:f2:c6:
2e:9c:34:6b:65:19:65:34:6d:1c:55:b6:8d:fd:cd:
e0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E9:5A:5D:A2:16:FD:ED:8E:1F:6D:38:FD:20:52:4E:F9:5E:D0:5F
X509v3 Authority Key Identifier:
keyid:DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:07:ff:39:d1:d4:28:5f:f8:df:d5:93:64:93:3d:38:7a:cb:
77:0f:75:ce:e7:80:b3:d4:38:b1:87:d4:dc:28:19:41:11:4d:
43:5c:9e:1d:26:be:6f:85:35:c4:00:27:1a:ee:ea:da:e8:9e:
0d:88:17:55:9a:a5:f6:67:29:9a:48:73:b2:00:96:c4:64:72:
a0:83:7f:dd:76:4a:db:3e:e2:63:69:e2:b4:e1:40:78:2e:22:
99:95:96:c6:52:ee:af:63:a5:11:ac:64:00:15:45:d0:fc:51:
f2:97:d5:ac:1f:de:3a:f2:a1:37:cf:93:30:7f:29:44:48:ba:
3d:ab:83:0c:75:7b:4d:96:05:92:8a:e4:ce:62:66:ce:b1:8c:
0a:c7:70:f2:b5:6e:8a:a0:35:ac:8a:f6:64:7a:fe:66:e2:4d:
73:4c:a0:22:d8:78:58:00:4d:68:7e:46:c4:ae:6c:60:09:16:
04:fb:32:54:00:69:e3:65:59:21:90:30:4c:34:97:4a:16:a3:
37:e5:1e:ee:fe:60:fd:21:a7:13:6d:8b:4f:b5:c0:b8:28:b3:
87:0c:3e:d9:0d:3b:ee:12:a3:3e:ef:a9:84:2a:a4:ce:e3:90:
bd:1e:5a:21:33:bb:df:f9:04:26:22:f8:21:7e:de:4c:2f:82:
0b:f9:3c:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXf2KfMITPtbHpYqHXPL1gFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZWE0ZTliZmYyOTRlMjBiZDc0OWVkMmVlYjkxODRmMjA4
YmM5ZDYwHhcNMjUwMzI5MDMwMTEyWhcNMjUwMzMwMDMwMTEyWjAzMTEwLwYDVQQD
Eyg0Y2U5NWE1ZGEyMTZmZGVkOGUxZjZkMzhmZDIwNTI0ZWY5NWVkMDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnncDDd3swqaFtxiQqntwTsVpHfqa
5e9jPTIJrk9DjFXCrCg1Q2H9cWfXsTmoqNLENXCjXn5K7X/RKblEGmZVbb3Cgkue
A2HxaCwN+xoNQFHxxFd2fORdmpYQxyNUvILGpepnM/D7zHTmsoTan8XEomTEMCi1
v5a0Di+RFYG62c1YrXlxvA15iL9cRONBR+L00JtfXm2xgLSrXaa48+4mzHrWObnE
TGRM7yM+u6uZpsMFSeCh8n9xQ1PdrkU00PS9UwpikzOO/qSQihw6B7AgGwgvunei
UiAXayMLQNHPj06SLOC4375EuVu1pkDl8sYunDRrZRllNG0cVbaN/c3g0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzpWl2iFv3tjh9tOP0gUk75XtBfMB8GA1UdIwQY
MBaAFN/qTpv/KU4gvXSe0u65GE8gi8nWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMy1wT21fOHBUaUM5ZEo3Uzdya1lUeUNMeWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83M2Y0YWItYjNlNi00MjZkLWIyODQt
NjliZmM5MjU5NzlkLzEvMy1wT21fOHBUaUM5ZEo3Uzdya1lUeUNMeWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS83M2Y0YWItYjNlNi00MjZkLWIyODQtNjliZmM5MjU5Nzlk
LzEvMy1wT21fOHBUaUM5ZEo3Uzdya1lUeUNMeWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQf/OdHU
KF/439WTZJM9OHrLdw91zueAs9Q4sYfU3CgZQRFNQ1yeHSa+b4U1xAAnGu7q2uie
DYgXVZql9mcpmkhzsgCWxGRyoIN/3XZK2z7iY2nitOFAeC4imZWWxlLur2OlEaxk
ABVF0PxR8pfVrB/eOvKhN8+TMH8pREi6PauDDHV7TZYFkorkzmJmzrGMCsdw8rVu
iqA1rIr2ZHr+ZuJNc0ygIth4WABNaH5GxK5sYAkWBPsyVABp42VZIZAwTDSXShaj
N+Ue7v5g/SGnE22LT7XAuCizhww+2Q077hKjPu+phCqkzuOQvR5aITO73/kEJiL4
IX7eTC+CC/k8tw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:17:10 2025 by rpki-client