Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/43334f-3ff2-424b-8b33-a5fff9095d8e/1/M3SaPCzREJZkQBHb8I7W2DmHLgc.mft
File: M3SaPCzREJZkQBHb8I7W2DmHLgc.mft (raw, json)
Hash identifier: LkzxHNYgPseuuqDUklgcvvTy/5OC2G0vibViTHJacz0=
Subject key identifier: 3F:A9:14:3F:27:4A:97:F9:E1:7D:AB:86:2C:A7:67:78:91:3F:F6:D5
Authority key identifier: 33:74:9A:3C:2C:D1:10:96:64:40:11:DB:F0:8E:D6:D8:39:87:2E:07
Certificate issuer: /CN=33749a3c2cd11096644011dbf08ed6d839872e07
Certificate serial: 01957FB68FC1135AA83CB6A9AD31E6353542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3SaPCzREJZkQBHb8I7W2DmHLgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/43334f-3ff2-424b-8b33-a5fff9095d8e/1/M3SaPCzREJZkQBHb8I7W2DmHLgc.mft
Manifest number: 1134
Signing time: Mon 10 Mar 2025 11:00:25 +0000
Manifest this update: Mon 10 Mar 2025 11:00:25 +0000
Manifest next update: Tue 11 Mar 2025 11:00:25 +0000
Files and hashes: 1: M3SaPCzREJZkQBHb8I7W2DmHLgc.crl (hash: S8LPR/66C6F99Fuzv1n6ncY+i9ceIrbhC+xxTfGXfbE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7f:b6:8f:c1:13:5a:a8:3c:b6:a9:ad:31:e6:35:35:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33749a3c2cd11096644011dbf08ed6d839872e07
Validity
Not Before: Mar 10 11:00:25 2025 GMT
Not After : Mar 11 11:00:25 2025 GMT
Subject: CN=3fa9143f274a97f9e17dab862ca76778913ff6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:42:f4:c5:9a:9b:94:6e:48:65:09:17:21:
f7:a2:d5:66:47:ab:7a:f8:61:f5:5b:eb:db:38:eb:
4b:26:76:b0:5e:e7:56:9b:6c:a7:11:14:2e:f4:c8:
5d:91:e0:1d:84:a0:d0:1c:80:c2:68:58:2d:25:50:
44:cd:d5:ee:d4:45:b1:38:38:16:30:60:1d:b4:d5:
fb:94:41:2d:20:2b:20:04:f9:9c:6d:e0:1c:ad:89:
2d:a1:25:a2:20:54:d1:4e:72:0b:a9:dc:33:b6:d2:
c2:ff:36:b5:04:5a:64:7e:9e:42:5c:e3:70:22:d5:
6f:98:33:54:56:51:84:9f:0a:c8:31:1c:8a:42:9b:
e9:f5:2e:e5:be:f0:59:3b:f9:51:02:e9:66:60:4f:
89:6c:4e:3f:6d:f7:8e:58:49:b9:50:5f:fe:b3:95:
93:4d:fb:f1:22:e3:70:84:3c:54:11:f7:82:f7:ac:
5a:0a:4d:56:c3:1f:42:a5:4e:e3:7b:6d:c7:2b:89:
cc:7b:e0:c5:0f:0c:90:3b:e7:99:e0:4c:75:4e:d2:
c8:d5:45:ce:59:ac:b0:0e:dd:f8:52:d3:f5:56:08:
fe:24:84:9b:23:ca:46:ee:15:99:c0:e0:8c:57:8c:
78:32:56:d8:2d:3d:cb:12:dd:2e:b5:d3:fd:14:c1:
90:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A9:14:3F:27:4A:97:F9:E1:7D:AB:86:2C:A7:67:78:91:3F:F6:D5
X509v3 Authority Key Identifier:
keyid:33:74:9A:3C:2C:D1:10:96:64:40:11:DB:F0:8E:D6:D8:39:87:2E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3SaPCzREJZkQBHb8I7W2DmHLgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/43334f-3ff2-424b-8b33-a5fff9095d8e/1/M3SaPCzREJZkQBHb8I7W2DmHLgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/43334f-3ff2-424b-8b33-a5fff9095d8e/1/M3SaPCzREJZkQBHb8I7W2DmHLgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:0c:97:e4:6a:7f:b0:e8:eb:27:cc:48:66:1a:98:5e:bf:93:
ce:35:4a:2e:b9:9b:a2:8a:fb:01:25:6b:b6:8f:f8:a8:61:0f:
8b:e9:8a:bc:9c:93:dc:01:1d:8d:2c:b7:65:43:75:3b:ad:fb:
f5:1c:20:b3:18:f6:7a:94:6c:ac:c1:1a:6e:28:20:c1:9a:f9:
7c:af:45:3d:4d:70:b7:9e:c9:50:05:1b:3e:c8:2c:5b:50:0c:
b6:5c:8a:9e:58:89:c3:54:95:d2:39:fb:6c:a4:72:e4:2b:07:
e1:9c:48:63:87:bd:5b:7c:5c:fa:ba:97:6d:b3:38:b2:30:c6:
02:17:2a:42:ee:d6:ee:58:25:4e:1c:1b:b6:0e:70:b0:24:4d:
bc:ff:c1:2a:18:a8:b6:03:5a:29:23:d7:4f:a1:8c:3a:32:4c:
e4:1c:a8:1e:45:56:51:d4:0c:56:e5:59:2a:09:c2:db:1d:92:
b8:58:6c:67:b8:2d:08:65:89:e9:bf:24:88:f8:13:92:3c:52:
67:d1:a9:c6:3e:9e:43:9b:39:97:c6:c9:ad:1d:8b:8f:4c:a2:
24:cd:a9:18:e2:2e:18:5e:99:65:07:27:ca:20:15:74:b2:77:
2b:3e:7a:76:f3:0f:b1:66:84:2e:0b:24:fd:cc:29:d7:64:f3:
a3:e4:fa:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZV/to/BE1qoPLaprTHmNTVCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNzQ5YTNjMmNkMTEwOTY2NDQwMTFkYmYwOGVkNmQ4Mzk4
NzJlMDcwHhcNMjUwMzEwMTEwMDI1WhcNMjUwMzExMTEwMDI1WjAzMTEwLwYDVQQD
EygzZmE5MTQzZjI3NGE5N2Y5ZTE3ZGFiODYyY2E3Njc3ODkxM2ZmNmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukFC9MWam5RuSGUJFyH3otVmR6t6
+GH1W+vbOOtLJnawXudWm2ynERQu9MhdkeAdhKDQHIDCaFgtJVBEzdXu1EWxODgW
MGAdtNX7lEEtICsgBPmcbeAcrYktoSWiIFTRTnILqdwzttLC/za1BFpkfp5CXONw
ItVvmDNUVlGEnwrIMRyKQpvp9S7lvvBZO/lRAulmYE+JbE4/bfeOWEm5UF/+s5WT
TfvxIuNwhDxUEfeC96xaCk1Wwx9CpU7je23HK4nMe+DFDwyQO+eZ4Ex1TtLI1UXO
WaywDt34UtP1Vgj+JISbI8pG7hWZwOCMV4x4MlbYLT3LEt0utdP9FMGQFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+pFD8nSpf54X2rhiynZ3iRP/bVMB8GA1UdIwQY
MBaAFDN0mjws0RCWZEAR2/CO1tg5hy4HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTNTYVBDelJFSlprUUJIYjhJN1cyRG1ITGdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80MzMzNGYtM2ZmMi00MjRiLThiMzMt
YTVmZmY5MDk1ZDhlLzEvTTNTYVBDelJFSlprUUJIYjhJN1cyRG1ITGdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS80MzMzNGYtM2ZmMi00MjRiLThiMzMtYTVmZmY5MDk1ZDhl
LzEvTTNTYVBDelJFSlprUUJIYjhJN1cyRG1ITGdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQyX5Gp/
sOjrJ8xIZhqYXr+TzjVKLrmboor7ASVrto/4qGEPi+mKvJyT3AEdjSy3ZUN1O637
9Rwgsxj2epRsrMEabiggwZr5fK9FPU1wt57JUAUbPsgsW1AMtlyKnliJw1SV0jn7
bKRy5CsH4ZxIY4e9W3xc+rqXbbM4sjDGAhcqQu7W7lglThwbtg5wsCRNvP/BKhio
tgNaKSPXT6GMOjJM5ByoHkVWUdQMVuVZKgnC2x2SuFhsZ7gtCGWJ6b8kiPgTkjxS
Z9Gpxj6eQ5s5l8bJrR2Lj0yiJM2pGOIuGF6ZZQcnyiAVdLJ3Kz56dvMPsWaELgsk
/cwp12Tzo+T6oA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:55 2025 by rpki-client