Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.mft
File: 3pKhrIkQz1yGXeWwIxsJ0E4RMvM.mft (raw, json)
Hash identifier: +aBgxPmpS5DMUmd/Ivzc1jp8lUume6k/hSR3rKDhpsY=
Subject key identifier: 4C:7D:09:04:F0:7F:AA:E8:00:5D:BD:22:48:0F:BB:3A:67:30:19:77
Authority key identifier: DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
Certificate issuer: /CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Certificate serial: 0193A925E28FEDADD922C3D58226EC36C58C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.mft
Manifest number: 0B22
Signing time: Mon 09 Dec 2024 02:00:52 +0000
Manifest this update: Mon 09 Dec 2024 02:00:52 +0000
Manifest next update: Tue 10 Dec 2024 02:00:52 +0000
Files and hashes: 1: 3pKhrIkQz1yGXeWwIxsJ0E4RMvM.crl (hash: ZCmF6Kvkwg6NRSdBQQdOHSewWT3LerL/SdKIqtty3os=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a9:25:e2:8f:ed:ad:d9:22:c3:d5:82:26:ec:36:c5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Validity
Not Before: Dec 9 02:00:52 2024 GMT
Not After : Dec 10 02:00:52 2024 GMT
Subject: CN=4c7d0904f07faae8005dbd22480fbb3a67301977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d9:47:18:39:74:95:9c:5b:61:50:b3:36:66:
dd:67:95:69:39:29:8e:ab:ff:2d:0b:b4:f4:66:41:
e0:d9:52:dc:a1:b2:2a:37:53:d5:13:97:69:8c:de:
28:0e:9a:6d:cc:08:a1:3d:16:73:f4:61:c0:70:b2:
de:af:b8:c2:f5:1f:02:7a:84:12:35:d8:09:19:9b:
a8:b3:d8:49:70:11:d6:eb:e7:62:ff:32:ee:b6:50:
64:90:8e:41:47:f8:51:e9:f2:6f:bd:0a:1c:58:5a:
e6:f0:bd:54:b3:ab:a0:aa:fe:04:20:fd:ed:c2:8d:
2a:a7:7f:d5:b6:e9:1e:62:54:0f:ec:1f:61:6b:54:
36:aa:61:08:13:14:d7:de:3f:d0:ba:a1:aa:2e:19:
cc:d1:05:66:68:2c:5c:df:b5:84:66:dc:7f:63:3d:
84:49:d7:0b:c3:0a:43:cd:e6:74:99:71:72:9c:9a:
8a:03:0b:95:c5:d6:5e:b0:8e:0c:3c:4d:ea:ea:8a:
cf:8b:09:28:57:72:bb:b2:c7:e6:58:bc:80:88:ab:
41:1a:0c:a1:6a:ae:75:e6:73:76:63:62:de:ec:18:
1e:68:c1:75:3b:71:03:72:b4:3a:2d:b1:b9:55:77:
eb:f9:f6:95:d2:b1:67:7a:e5:57:03:42:50:52:2c:
cf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7D:09:04:F0:7F:AA:E8:00:5D:BD:22:48:0F:BB:3A:67:30:19:77
X509v3 Authority Key Identifier:
keyid:DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:35:30:8e:0e:0d:8c:5e:70:71:08:47:49:d9:f6:61:ee:73:
8f:1c:d1:e3:d2:32:b3:65:7b:25:c3:ed:64:fb:61:5b:ca:58:
29:bc:51:75:9e:82:15:38:2a:c5:f3:dd:04:ad:b6:74:3f:95:
1f:d4:f3:e8:22:07:ed:c5:72:7d:de:8f:a4:81:0d:a3:3b:e8:
58:1b:9d:d6:d0:57:d9:6b:68:17:24:8e:6c:38:9a:6b:86:94:
ed:0d:c9:71:83:62:c3:6a:8d:e6:8c:cd:42:c2:06:51:30:01:
51:e4:14:d1:bc:f8:09:50:a2:ac:df:04:4a:02:18:8d:e8:8c:
c4:05:c1:2b:de:f5:13:6a:c8:e4:ba:1a:84:f5:3b:af:7e:85:
d6:eb:45:8c:9a:6f:37:df:4d:a2:12:22:86:42:c8:02:87:04:
8f:ea:2e:ba:6c:19:97:b1:f9:fc:ec:5f:ff:a4:65:7c:39:e7:
ac:bc:14:e9:ab:04:34:31:d5:03:ce:4a:74:71:53:58:02:41:
3f:d0:f8:1e:ba:71:39:dd:79:32:78:96:25:b5:89:75:cd:8b:
29:07:be:c0:41:27:d0:a0:2a:10:d2:69:39:0b:01:09:06:cf:
bf:dd:0b:11:d6:75:6a:08:99:1b:7d:68:94:78:b2:73:96:5d:
07:6f:8c:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZOpJeKP7a3ZIsPVgibsNsWMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOTJhMWFjODkxMGNmNWM4NjVkZTViMDIzMWIwOWQwNGUx
MTMyZjMwHhcNMjQxMjA5MDIwMDUyWhcNMjQxMjEwMDIwMDUyWjAzMTEwLwYDVQQD
Eyg0YzdkMDkwNGYwN2ZhYWU4MDA1ZGJkMjI0ODBmYmIzYTY3MzAxOTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltlHGDl0lZxbYVCzNmbdZ5VpOSmO
q/8tC7T0ZkHg2VLcobIqN1PVE5dpjN4oDpptzAihPRZz9GHAcLLer7jC9R8CeoQS
NdgJGZuos9hJcBHW6+di/zLutlBkkI5BR/hR6fJvvQocWFrm8L1Us6ugqv4EIP3t
wo0qp3/VtukeYlQP7B9ha1Q2qmEIExTX3j/QuqGqLhnM0QVmaCxc37WEZtx/Yz2E
SdcLwwpDzeZ0mXFynJqKAwuVxdZesI4MPE3q6orPiwkoV3K7ssfmWLyAiKtBGgyh
aq515nN2Y2Le7BgeaMF1O3EDcrQ6LbG5VXfr+faV0rFneuVXA0JQUizP8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEx9CQTwf6roAF29IkgPuzpnMBl3MB8GA1UdIwQY
MBaAFN6SoayJEM9chl3lsCMbCdBOETLzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3BLaHJJa1F6MXlHWGVXd0l4c0owRTRSTXZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80Mzc3ZDYtNTE1Yy00MjBhLTkxMzQt
NjllMzM3ODg0Y2M5LzEvM3BLaHJJa1F6MXlHWGVXd0l4c0owRTRSTXZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS80Mzc3ZDYtNTE1Yy00MjBhLTkxMzQtNjllMzM3ODg0Y2M5
LzEvM3BLaHJJa1F6MXlHWGVXd0l4c0owRTRSTXZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTUwjg4N
jF5wcQhHSdn2Ye5zjxzR49Iys2V7JcPtZPthW8pYKbxRdZ6CFTgqxfPdBK22dD+V
H9Tz6CIH7cVyfd6PpIENozvoWBud1tBX2WtoFySObDiaa4aU7Q3JcYNiw2qN5ozN
QsIGUTABUeQU0bz4CVCirN8ESgIYjeiMxAXBK971E2rI5LoahPU7r36F1utFjJpv
N99NohIihkLIAocEj+ouumwZl7H5/Oxf/6RlfDnnrLwU6asENDHVA85KdHFTWAJB
P9D4HrpxOd15MniWJbWJdc2LKQe+wEEn0KAqENJpOQsBCQbPv90LEdZ1agiZG31o
lHiyc5ZdB2+M5g==
-----END CERTIFICATE-----
Generated at Fri May 16 16:46:12 2025 by rpki-client