Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/564dc5-1793-4014-b412-2adf907d08b6/1/s3eaPY0qRXPAphWmVTrWMgpTuLM.mft
File: s3eaPY0qRXPAphWmVTrWMgpTuLM.mft (raw, json)
Hash identifier: NybNRZth6A3JpYTLn8G0vwDgFFiaPfOIFykA+uCNVqY=
Subject key identifier: E4:BD:6B:40:3F:11:30:AF:FD:53:63:AE:31:48:47:97:2B:2A:2D:65
Authority key identifier: B3:77:9A:3D:8D:2A:45:73:C0:A6:15:A6:55:3A:D6:32:0A:53:B8:B3
Certificate issuer: /CN=b3779a3d8d2a4573c0a615a6553ad6320a53b8b3
Certificate serial: 018C588991E231537BAC6B7F26FB8EABB813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3eaPY0qRXPAphWmVTrWMgpTuLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/564dc5-1793-4014-b412-2adf907d08b6/1/s3eaPY0qRXPAphWmVTrWMgpTuLM.mft
Manifest number: 0206
Signing time: Mon 11 Dec 2023 11:00:59 +0000
Manifest this update: Mon 11 Dec 2023 11:00:59 +0000
Manifest next update: Tue 12 Dec 2023 11:00:59 +0000
Files and hashes: 1: s3eaPY0qRXPAphWmVTrWMgpTuLM.crl (hash: UBTrVp39YHb0hat5TvdZjjioaLZh5yk7rci+aqQCHBs=)
2: s7ZR1XwliJ_800ynLzamHCc7j9E.roa (hash: o2275A4pLxM+Mz6Uft1SpCb0w4g/QO2bdryZNiS96ds=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:58:89:91:e2:31:53:7b:ac:6b:7f:26:fb:8e:ab:b8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3779a3d8d2a4573c0a615a6553ad6320a53b8b3
Validity
Not Before: Dec 11 11:00:59 2023 GMT
Not After : Dec 12 11:00:59 2023 GMT
Subject: CN=e4bd6b403f1130affd5363ae314847972b2a2d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:30:4d:fb:cb:90:81:47:30:22:a9:9e:c0:9f:
05:0a:fc:6f:eb:44:02:9a:39:b3:a2:07:3b:44:ce:
2a:ca:4d:23:4f:99:17:be:85:e7:fe:70:14:2c:04:
de:e7:2b:90:77:c9:00:60:8f:03:58:8d:23:1e:43:
b3:8d:65:b5:c5:02:12:27:00:c7:07:96:16:70:ed:
a3:a6:c0:f0:f6:23:70:5b:55:65:cf:52:9f:3d:26:
e7:87:5c:dc:3b:79:91:8c:d1:ce:32:da:33:1c:ce:
14:9e:24:98:54:04:db:05:ef:e3:8a:ea:76:45:d0:
f6:9a:24:6e:60:fd:c2:3c:b8:e8:b8:25:71:f2:53:
5b:02:ce:a2:15:94:45:3b:71:ae:25:be:7e:b3:df:
1a:7e:93:ab:39:62:ec:95:aa:4f:82:91:f0:23:ab:
b2:ff:eb:d9:ea:4d:5f:43:4b:57:24:24:ce:9f:4d:
88:b4:3b:c2:4b:6f:90:e7:c0:15:29:57:ef:fa:dd:
30:e7:54:38:9c:c9:a8:2a:e7:cd:a8:31:c6:50:94:
77:5a:0d:86:52:f2:2b:10:ce:d5:37:0d:90:ea:12:
c4:45:c3:68:b5:3d:51:24:34:8e:f3:54:ee:e6:4d:
ea:4f:94:a6:32:58:3c:ce:26:91:14:07:16:26:b9:
48:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BD:6B:40:3F:11:30:AF:FD:53:63:AE:31:48:47:97:2B:2A:2D:65
X509v3 Authority Key Identifier:
keyid:B3:77:9A:3D:8D:2A:45:73:C0:A6:15:A6:55:3A:D6:32:0A:53:B8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3eaPY0qRXPAphWmVTrWMgpTuLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/564dc5-1793-4014-b412-2adf907d08b6/1/s3eaPY0qRXPAphWmVTrWMgpTuLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/564dc5-1793-4014-b412-2adf907d08b6/1/s3eaPY0qRXPAphWmVTrWMgpTuLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:67:32:4c:6b:d7:46:f9:b6:5d:eb:27:17:aa:20:2f:2b:43:
fa:36:5b:77:15:8b:d3:b5:8e:ff:96:97:a3:1e:7e:89:9e:01:
a6:73:4a:fa:7d:cd:30:cc:d6:4e:84:f7:3b:b2:24:72:65:4c:
4d:fb:63:3f:c0:cd:a2:a1:00:89:fa:a9:c3:57:c1:8e:1a:43:
01:19:5c:87:e8:45:cf:4a:a2:48:f1:21:9e:4c:85:ca:b8:c4:
86:19:86:d6:b1:2b:65:49:5c:ec:23:db:45:e4:62:d5:d0:8a:
3f:f7:c0:e5:ec:10:a7:16:fb:90:b4:ad:77:2d:36:c4:cf:4e:
ef:64:a2:24:cf:45:34:93:0b:7a:ad:94:9e:c6:4e:40:bb:99:
6a:be:14:03:a0:08:ae:66:82:45:dd:75:03:68:74:a9:ad:6c:
50:5e:06:07:4b:d9:53:93:fb:73:e0:d6:9c:af:92:b5:e8:bc:
0a:db:14:ac:5d:cb:1e:a5:8c:2e:f6:67:ef:d9:f3:b2:9e:a9:
54:65:f7:eb:9c:8b:8f:ce:32:4a:25:e9:69:a8:3d:e5:c4:24:
49:62:43:ba:44:e7:dd:c4:15:96:37:8d:ad:17:6d:6f:35:35:
44:15:ee:71:5e:8e:78:82:1a:ec:f1:68:3b:c8:79:ca:d6:3a:
9d:ab:7b:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYxYiZHiMVN7rGt/JvuOq7gTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNzc5YTNkOGQyYTQ1NzNjMGE2MTVhNjU1M2FkNjMyMGE1
M2I4YjMwHhcNMjMxMjExMTEwMDU5WhcNMjMxMjEyMTEwMDU5WjAzMTEwLwYDVQQD
EyhlNGJkNmI0MDNmMTEzMGFmZmQ1MzYzYWUzMTQ4NDc5NzJiMmEyZDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljBN+8uQgUcwIqmewJ8FCvxv60QC
mjmzogc7RM4qyk0jT5kXvoXn/nAULATe5yuQd8kAYI8DWI0jHkOzjWW1xQISJwDH
B5YWcO2jpsDw9iNwW1Vlz1KfPSbnh1zcO3mRjNHOMtozHM4UniSYVATbBe/jiup2
RdD2miRuYP3CPLjouCVx8lNbAs6iFZRFO3GuJb5+s98afpOrOWLslapPgpHwI6uy
/+vZ6k1fQ0tXJCTOn02ItDvCS2+Q58AVKVfv+t0w51Q4nMmoKufNqDHGUJR3Wg2G
UvIrEM7VNw2Q6hLERcNotT1RJDSO81Tu5k3qT5SmMlg8ziaRFAcWJrlIcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOS9a0A/ETCv/VNjrjFIR5crKi1lMB8GA1UdIwQY
MBaAFLN3mj2NKkVzwKYVplU61jIKU7izMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczNlYVBZMHFSWFBBcGhXbVZUcldNZ3BUdUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81NjRkYzUtMTc5My00MDE0LWI0MTIt
MmFkZjkwN2QwOGI2LzEvczNlYVBZMHFSWFBBcGhXbVZUcldNZ3BUdUxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC81NjRkYzUtMTc5My00MDE0LWI0MTItMmFkZjkwN2QwOGI2
LzEvczNlYVBZMHFSWFBBcGhXbVZUcldNZ3BUdUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmcyTGvX
Rvm2XesnF6ogLytD+jZbdxWL07WO/5aXox5+iZ4BpnNK+n3NMMzWToT3O7IkcmVM
TftjP8DNoqEAifqpw1fBjhpDARlch+hFz0qiSPEhnkyFyrjEhhmG1rErZUlc7CPb
ReRi1dCKP/fA5ewQpxb7kLStdy02xM9O72SiJM9FNJMLeq2UnsZOQLuZar4UA6AI
rmaCRd11A2h0qa1sUF4GB0vZU5P7c+DWnK+Stei8CtsUrF3LHqWMLvZn79nzsp6p
VGX365yLj84ySiXpaag95cQkSWJDukTn3cQVljeNrRdtbzU1RBXucV6OeIIa7PFo
O8h5ytY6nat7NQ==
-----END CERTIFICATE-----
Generated at Sun May 11 05:22:36 2025 by rpki-client