Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
File: 3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft (raw, json)
Hash identifier: XhdNNbkmLQkkdq1VsZUw+DvxzVw+TwmAW8xlkxVt0mU=
Subject key identifier: B3:7F:40:A6:67:02:09:BD:B9:DB:95:A5:DD:77:6D:88:4C:81:A0:6D
Authority key identifier: DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2
Certificate issuer: /CN=de0b59fb68151e21dc99d62faf03589be41fbea2
Certificate serial: 01962E996E6F523FCC458C1824B52EFCA4A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
Manifest number: 08EF
Signing time: Sun 13 Apr 2025 10:02:09 +0000
Manifest this update: Sun 13 Apr 2025 10:02:09 +0000
Manifest next update: Mon 14 Apr 2025 10:02:09 +0000
Files and hashes: 1: 3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl (hash: 6oWKxfjZf/6j3sk1sa16v1sepnC3f+8MYn0hmbh7Puw=)
2: EiOjn6Cn36HWuMJFodH0EVbfYdc.roa (hash: prKCNtfilLl42pcGEF7Kjg7za6QhPHVZeIUhroTyVuU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:99:6e:6f:52:3f:cc:45:8c:18:24:b5:2e:fc:a4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0b59fb68151e21dc99d62faf03589be41fbea2
Validity
Not Before: Apr 13 10:02:09 2025 GMT
Not After : Apr 14 10:02:09 2025 GMT
Subject: CN=b37f40a6670209bdb9db95a5dd776d884c81a06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:f4:24:95:4f:9d:0d:5b:68:7c:cc:ad:77:
01:1f:79:e3:ca:8f:19:02:10:0e:6b:23:23:b7:63:
16:b9:eb:a5:e3:17:b2:4c:2b:9e:79:19:98:f7:57:
31:b1:a1:a8:22:c0:fe:e1:80:d4:66:5f:e0:fe:6b:
4d:d9:11:d6:62:0a:2f:d4:35:23:35:c1:3b:13:30:
2a:9a:db:d7:10:a8:86:e3:09:f7:ed:b2:b4:37:4e:
26:5e:1d:d4:18:a1:c8:05:4b:19:b4:8a:89:26:44:
06:cd:93:53:36:82:89:0d:77:3f:c0:a1:6b:5f:39:
02:e8:05:f7:18:2d:e5:c8:2e:cf:55:9a:24:4c:5c:
ca:08:81:90:0a:0b:36:c6:b0:1b:3a:3c:b7:90:2b:
9b:73:a8:44:5e:fc:88:8b:7b:ab:d1:69:7a:de:fd:
0c:48:ac:e5:65:35:63:09:55:47:c7:d0:19:27:31:
5c:30:79:bd:03:8d:43:f4:01:31:aa:19:bd:11:f8:
21:4d:d8:49:51:d5:45:ac:de:df:39:85:e1:24:35:
03:5e:81:62:24:ab:76:68:9c:4e:4c:25:d5:d8:a6:
59:57:6f:78:4d:3b:9e:c0:39:a9:f5:c1:47:c1:71:
c9:2f:73:9b:84:28:05:de:a6:29:ca:66:33:62:ee:
b4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7F:40:A6:67:02:09:BD:B9:DB:95:A5:DD:77:6D:88:4C:81:A0:6D
X509v3 Authority Key Identifier:
keyid:DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b1:4c:6e:57:11:3b:4a:fd:41:fc:a0:df:90:7d:4b:cf:fc:
11:48:de:18:3a:d8:17:0b:2c:25:d8:60:51:f1:d6:b4:68:cc:
cf:d3:a8:bf:28:bc:cd:a2:df:52:fe:58:66:1d:21:dd:9e:83:
f6:3d:2b:94:e1:63:af:32:59:59:7a:dd:49:d3:fd:23:81:4a:
d3:af:53:91:22:55:a0:fc:c1:67:00:93:c7:32:17:32:02:2a:
ae:da:28:12:07:45:b1:dc:41:a2:d7:97:7f:f1:dc:4c:2a:40:
fc:8b:b0:ff:5a:5e:37:8f:b2:ce:78:d6:d5:14:86:f0:8a:76:
5c:b1:18:c4:e2:e8:d1:78:9e:0a:2e:83:d5:d5:56:af:39:c3:
68:df:3f:0b:6a:ee:4a:56:1d:c2:04:85:50:f7:31:cb:b3:f2:
77:9c:50:89:47:de:10:c4:3a:55:40:51:0e:de:8a:90:3e:d5:
b1:70:b3:4a:14:7a:1b:31:6f:57:48:a5:79:85:36:fc:c0:d6:
f1:d1:53:8f:a1:86:3d:5f:02:1d:a1:15:1a:91:5c:65:e7:b1:
05:86:a7:da:a8:23:d9:69:13:c9:a4:59:62:ee:45:30:e9:6e:
0f:8a:1c:4c:a6:f9:c9:ac:18:b4:42:0e:d2:6e:17:1e:b0:b7:
fb:1c:7b:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumW5vUj/MRYwYJLUu/KSjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMGI1OWZiNjgxNTFlMjFkYzk5ZDYyZmFmMDM1ODliZTQx
ZmJlYTIwHhcNMjUwNDEzMTAwMjA5WhcNMjUwNDE0MTAwMjA5WjAzMTEwLwYDVQQD
EyhiMzdmNDBhNjY3MDIwOWJkYjlkYjk1YTVkZDc3NmQ4ODRjODFhMDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJX0JJVPnQ1baHzMrXcBH3njyo8Z
AhAOayMjt2MWueul4xeyTCueeRmY91cxsaGoIsD+4YDUZl/g/mtN2RHWYgov1DUj
NcE7EzAqmtvXEKiG4wn37bK0N04mXh3UGKHIBUsZtIqJJkQGzZNTNoKJDXc/wKFr
XzkC6AX3GC3lyC7PVZokTFzKCIGQCgs2xrAbOjy3kCubc6hEXvyIi3ur0Wl63v0M
SKzlZTVjCVVHx9AZJzFcMHm9A41D9AExqhm9EfghTdhJUdVFrN7fOYXhJDUDXoFi
JKt2aJxOTCXV2KZZV294TTuewDmp9cFHwXHJL3ObhCgF3qYpymYzYu60oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLN/QKZnAgm9uduVpd13bYhMgaBtMB8GA1UdIwQY
MBaAFN4LWftoFR4h3JnWL68DWJvkH76iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2d0Wi0yZ1ZIaUhjbWRZdnJ3TlltLVFmdnFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85YWQ1MDgtYmZjMS00YjhhLWJhZmMt
Y2QwMjQ3ODhlZDNjLzEvM2d0Wi0yZ1ZIaUhjbWRZdnJ3TlltLVFmdnFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi85YWQ1MDgtYmZjMS00YjhhLWJhZmMtY2QwMjQ3ODhlZDNj
LzEvM2d0Wi0yZ1ZIaUhjbWRZdnJ3TlltLVFmdnFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7FMblcR
O0r9Qfyg35B9S8/8EUjeGDrYFwssJdhgUfHWtGjMz9Oovyi8zaLfUv5YZh0h3Z6D
9j0rlOFjrzJZWXrdSdP9I4FK069TkSJVoPzBZwCTxzIXMgIqrtooEgdFsdxBoteX
f/HcTCpA/Iuw/1peN4+yznjW1RSG8Ip2XLEYxOLo0XieCi6D1dVWrznDaN8/C2ru
SlYdwgSFUPcxy7Pyd5xQiUfeEMQ6VUBRDt6KkD7VsXCzShR6GzFvV0ileYU2/MDW
8dFTj6GGPV8CHaEVGpFcZeexBYan2qgj2WkTyaRZYu5FMOluD4ocTKb5yawYtEIO
0m4XHrC3+xx7Kg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net