Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
File: dp1cUsMVfllF5mO5LtRALGBhbjs.mft (raw, json)
Hash identifier: NRdzAJ7/dY6FzOmkMxPbB4Bipb3YfY9Io5gnusnI8e8=
Subject key identifier: B5:A2:85:0B:54:C3:3A:84:8F:5F:A0:88:37:B4:C8:2D:4E:3E:03:33
Authority key identifier: 76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B
Certificate issuer: /CN=769d5c52c3157e5945e663b92ed4402c60616e3b
Certificate serial: 0194BC04A8D01D7E91A4AAD17012D71D3026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
Manifest number: 010E
Signing time: Fri 31 Jan 2025 11:00:09 +0000
Manifest this update: Fri 31 Jan 2025 11:00:09 +0000
Manifest next update: Sat 01 Feb 2025 11:00:09 +0000
Files and hashes: 1: 08Xj6P3LiBkWV-XyPE1sfuebHwg.roa (hash: GOb53BquANot8lO8WUgTLWPiXo2ewEYSLTJKkoVM5kk=)
2: dp1cUsMVfllF5mO5LtRALGBhbjs.crl (hash: q7ct++CfV7z0YwxefmOPYX3/f3vRAoEsz6UHo/0nIF4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a8:d0:1d:7e:91:a4:aa:d1:70:12:d7:1d:30:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=769d5c52c3157e5945e663b92ed4402c60616e3b
Validity
Not Before: Jan 31 11:00:09 2025 GMT
Not After : Feb 1 11:00:09 2025 GMT
Subject: CN=b5a2850b54c33a848f5fa08837b4c82d4e3e0333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7d:49:44:21:f9:b0:2a:47:22:0f:1c:5c:72:
d2:9f:c2:ed:a5:c4:25:46:ee:33:9f:5f:64:c9:ef:
a8:98:a2:1e:c6:e3:1e:fe:45:f2:85:c5:61:6b:e1:
1b:66:40:b3:1c:f5:d9:c1:bf:e4:72:f2:37:b4:db:
1f:98:7b:28:d3:c1:b8:d9:62:bb:42:bc:8f:2c:43:
0f:26:d5:55:78:f5:2e:38:a5:a7:f2:f6:f9:10:6f:
9a:14:7c:84:cf:ba:82:f4:5b:2e:c4:f8:0d:f3:13:
59:30:e9:41:16:dc:65:93:33:2e:11:df:7e:f9:78:
55:f8:bd:10:26:02:6c:d0:cd:5a:3b:1b:2b:24:9e:
0c:75:ab:f9:59:6a:40:32:61:25:21:39:ea:5d:1a:
96:79:be:b1:f7:ee:ab:e8:a0:13:34:fe:c3:34:ff:
cc:52:4e:a2:50:13:58:f9:2d:fe:dc:92:10:30:6f:
d4:03:fa:ea:43:1e:f4:e2:50:a2:f9:00:4d:af:8a:
78:10:11:95:36:74:d3:54:5a:d0:11:8c:90:49:87:
f3:b0:6b:02:28:d2:12:30:a3:42:67:aa:a3:3e:2f:
99:fd:fd:62:80:1a:51:0a:bf:92:e5:d0:49:6b:90:
f8:b7:aa:ed:e6:10:b9:a4:89:71:f3:1d:7c:c6:ae:
6f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A2:85:0B:54:C3:3A:84:8F:5F:A0:88:37:B4:C8:2D:4E:3E:03:33
X509v3 Authority Key Identifier:
keyid:76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b4:63:88:72:1a:22:f2:8b:6c:13:4c:c3:20:bc:fa:ed:60:
f9:c9:5b:04:e8:c1:7c:cc:1d:e4:91:92:f6:a8:d0:31:a0:fd:
87:37:2a:72:65:04:fb:21:4c:bb:51:43:b7:53:1b:2f:0d:8a:
ce:db:bc:96:13:a9:70:42:6a:ff:11:25:78:8a:a7:51:62:1b:
ed:55:c0:05:ac:d2:1e:25:b7:2e:d4:90:ea:77:67:69:d4:a1:
40:e5:60:f7:a3:13:ae:75:95:4d:46:cb:98:05:75:b7:93:e5:
6a:c9:45:a4:45:79:64:25:5f:1c:27:29:86:94:62:56:fb:ba:
6e:3d:6c:68:81:da:9d:a7:13:26:6e:cc:02:5c:95:1b:91:67:
6e:4d:37:22:02:1d:2a:3f:f6:d9:bd:d0:b2:1f:84:70:5b:22:
7a:1c:4e:a0:3f:08:d8:d1:83:2c:51:c4:d9:4a:25:b9:90:a9:
6f:5c:29:9c:e1:48:c5:5d:f2:31:91:c2:3d:85:dd:c6:6b:b7:
57:45:61:b6:f2:c5:c2:11:9e:2d:b8:fe:f0:0c:e0:0f:df:5e:
4d:ab:c7:d7:4b:5b:80:f0:76:8b:84:7f:09:d9:dc:f4:46:bb:
ff:86:58:2b:57:49:5b:33:11:d3:71:d2:96:a8:2b:e0:e4:6f:
db:86:45:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BKjQHX6RpKrRcBLXHTAmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2OWQ1YzUyYzMxNTdlNTk0NWU2NjNiOTJlZDQ0MDJjNjA2
MTZlM2IwHhcNMjUwMTMxMTEwMDA5WhcNMjUwMjAxMTEwMDA5WjAzMTEwLwYDVQQD
EyhiNWEyODUwYjU0YzMzYTg0OGY1ZmEwODgzN2I0YzgyZDRlM2UwMzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6n1JRCH5sCpHIg8cXHLSn8LtpcQl
Ru4zn19kye+omKIexuMe/kXyhcVha+EbZkCzHPXZwb/kcvI3tNsfmHso08G42WK7
QryPLEMPJtVVePUuOKWn8vb5EG+aFHyEz7qC9FsuxPgN8xNZMOlBFtxlkzMuEd9+
+XhV+L0QJgJs0M1aOxsrJJ4Mdav5WWpAMmElITnqXRqWeb6x9+6r6KATNP7DNP/M
Uk6iUBNY+S3+3JIQMG/UA/rqQx704lCi+QBNr4p4EBGVNnTTVFrQEYyQSYfzsGsC
KNISMKNCZ6qjPi+Z/f1igBpRCr+S5dBJa5D4t6rt5hC5pIlx8x18xq5v6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWihQtUwzqEj1+giDe0yC1OPgMzMB8GA1UdIwQY
MBaAFHadXFLDFX5ZReZjuS7UQCxgYW47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHAxY1VzTVZmbGxGNW1PNUx0UkFMR0JoYmpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jYzY2YjItMTI2Ny00NTE2LWEzOWYt
Mzc2YjQ5ZDUyZDdlLzEvZHAxY1VzTVZmbGxGNW1PNUx0UkFMR0JoYmpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jYzY2YjItMTI2Ny00NTE2LWEzOWYtMzc2YjQ5ZDUyZDdl
LzEvZHAxY1VzTVZmbGxGNW1PNUx0UkFMR0JoYmpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABrRjiHIa
IvKLbBNMwyC8+u1g+clbBOjBfMwd5JGS9qjQMaD9hzcqcmUE+yFMu1FDt1MbLw2K
ztu8lhOpcEJq/xEleIqnUWIb7VXABazSHiW3LtSQ6ndnadShQOVg96MTrnWVTUbL
mAV1t5PlaslFpEV5ZCVfHCcphpRiVvu6bj1saIHanacTJm7MAlyVG5Fnbk03IgId
Kj/22b3Qsh+EcFsiehxOoD8I2NGDLFHE2UoluZCpb1wpnOFIxV3yMZHCPYXdxmu3
V0VhtvLFwhGeLbj+8AzgD99eTavH10tbgPB2i4R/Cdnc9Ea7/4ZYK1dJWzMR03HS
lqgr4ORv24ZFSQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:01:20 2025 by rpki-client