Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
File: _43V_kF56L2ihTJWGRn20Hh3xj0.mft (raw, json)
Hash identifier: GXrqqQYofhn9fIY+SgjRrG9Niu9ExezVp5NsmgcF/EQ=
Subject key identifier: E5:06:54:B2:3D:98:D2:F5:0D:11:D1:9F:DA:B5:E6:5D:C3:C3:D4:CA
Authority key identifier: FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
Certificate issuer: /CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Certificate serial: 0194BD176E9F75CB831F676249DD26169D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
Manifest number: 04E0
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: K6Fu_XiBHvDsYhtG_--3fuPZg48.roa (hash: RNhrx5f19YH8DzgdDWPTLam4LAtgoJZsbS8JdFM0WN8=)
2: Ye2lhVqLlVViESIa1X_75ZD_K3Y.roa (hash: GkZd+LIfPke0Hk41OCtwwY1KwALgbjtXK8ppjf/on0I=)
3: _43V_kF56L2ihTJWGRn20Hh3xj0.crl (hash: rT9Y7iu6d9tPRzFiP7nYGAvq6v1vAuorpFrMMI8RuX8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6e:9f:75:cb:83:1f:67:62:49:dd:26:16:9d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=e50654b23d98d2f50d11d19fdab5e65dc3c3d4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:60:8a:b7:79:e5:0f:53:be:bf:72:fb:50:
d4:32:65:5f:1d:a6:e9:a7:6b:bc:99:78:95:4e:90:
96:27:d2:1b:03:58:e1:ab:68:ef:31:4d:64:dd:9f:
bd:2c:f2:76:54:2b:4c:6a:ac:3e:1c:57:f9:a6:79:
d3:b2:5e:8f:ec:13:82:f4:56:ed:a8:f6:14:a0:9f:
1c:76:85:81:84:d5:a7:38:6e:a5:3a:2b:a2:98:d6:
92:6b:34:f8:07:1d:d1:1a:22:fd:54:82:4d:f6:cc:
eb:3a:67:99:c2:a9:7a:ab:73:28:19:35:77:39:86:
b1:84:e2:e4:b9:c1:37:3c:b5:40:24:a4:21:10:b4:
e8:64:64:c3:2d:00:17:bb:4c:d9:8a:96:aa:3a:aa:
ea:d4:fa:05:a2:97:47:43:1b:4d:09:a6:4a:67:68:
4f:69:ea:52:b2:b8:31:c3:91:a5:28:7e:6f:c6:51:
91:b2:07:ea:f3:8b:e3:9b:60:f5:4b:4f:db:10:80:
4d:b1:14:7e:ff:17:72:29:bf:35:91:97:ac:a5:75:
97:8b:3b:0e:6e:b6:c8:f7:4d:6c:fd:75:9d:c6:5a:
5b:26:55:d3:17:ae:33:e5:a1:59:7f:1b:83:86:52:
3d:5a:d3:39:e4:97:4b:51:dc:d3:89:95:83:a4:3e:
39:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:06:54:B2:3D:98:D2:F5:0D:11:D1:9F:DA:B5:E6:5D:C3:C3:D4:CA
X509v3 Authority Key Identifier:
keyid:FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ad:7b:8a:56:24:80:d5:c4:86:6d:b6:11:c6:c5:8e:81:aa:
4a:84:27:08:6f:a8:fd:81:7f:f0:23:07:d0:97:e1:f4:2f:43:
ad:41:77:68:b9:66:29:3a:8b:28:21:21:f0:44:ba:c7:a1:31:
d9:df:b9:61:0a:2a:db:ea:76:fc:03:27:13:24:39:08:97:8c:
08:94:b1:a1:9c:b9:f2:6a:71:a1:ac:ff:57:8f:bd:08:27:fd:
c9:e8:b8:69:ce:9c:8e:2b:c4:ba:b2:10:aa:85:b1:93:cb:56:
0e:c2:50:1d:fc:9c:e4:8a:d5:46:05:12:6c:a4:af:fd:1b:fe:
2b:e8:9a:5a:a7:b5:cf:6d:bb:3a:31:f0:c0:a7:d8:d9:8f:71:
eb:23:dc:27:b1:5e:91:83:73:56:0b:ed:36:8b:02:3e:91:33:
fb:01:df:a7:44:1e:67:4b:2d:00:26:d8:69:a2:7a:a0:36:a8:
83:7e:f5:90:df:99:fd:11:11:c7:0a:e6:67:ef:d8:c5:d0:53:
8b:20:dd:7f:1e:0b:4e:98:98:53:a6:51:98:99:0e:d1:27:ca:
8a:c4:86:8f:6e:9a:3e:94:32:7e:76:19:63:2d:0b:c7:0e:93:
1a:41:15:eb:53:13:b7:87:c4:25:2d:4e:7f:92:82:ae:3e:0f:
2e:14:68:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F26fdcuDH2diSd0mFp0IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmOGRkNWZlNDE3OWU4YmRhMjg1MzI1NjE5MTlmNmQwNzg3
N2M2M2QwHhcNMjUwMTMxMTYwMDE2WhcNMjUwMjAxMTYwMDE2WjAzMTEwLwYDVQQD
EyhlNTA2NTRiMjNkOThkMmY1MGQxMWQxOWZkYWI1ZTY1ZGMzYzNkNGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSVgird55Q9Tvr9y+1DUMmVfHabp
p2u8mXiVTpCWJ9IbA1jhq2jvMU1k3Z+9LPJ2VCtMaqw+HFf5pnnTsl6P7BOC9Fbt
qPYUoJ8cdoWBhNWnOG6lOiuimNaSazT4Bx3RGiL9VIJN9szrOmeZwql6q3MoGTV3
OYaxhOLkucE3PLVAJKQhELToZGTDLQAXu0zZipaqOqrq1PoFopdHQxtNCaZKZ2hP
aepSsrgxw5GlKH5vxlGRsgfq84vjm2D1S0/bEIBNsRR+/xdyKb81kZespXWXizsO
brbI901s/XWdxlpbJlXTF64z5aFZfxuDhlI9WtM55JdLUdzTiZWDpD45UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUGVLI9mNL1DRHRn9q15l3Dw9TKMB8GA1UdIwQY
MBaAFP+N1f5Beei9ooUyVhkZ9tB4d8Y9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80YjJmODgtM2UyMC00YWZhLWI3NTQt
MDZhNDA0NDM1ZTUwLzEvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS80YjJmODgtM2UyMC00YWZhLWI3NTQtMDZhNDA0NDM1ZTUw
LzEvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOK17ilYk
gNXEhm22EcbFjoGqSoQnCG+o/YF/8CMH0Jfh9C9DrUF3aLlmKTqLKCEh8ES6x6Ex
2d+5YQoq2+p2/AMnEyQ5CJeMCJSxoZy58mpxoaz/V4+9CCf9yei4ac6cjivEurIQ
qoWxk8tWDsJQHfyc5IrVRgUSbKSv/Rv+K+iaWqe1z227OjHwwKfY2Y9x6yPcJ7Fe
kYNzVgvtNosCPpEz+wHfp0QeZ0stACbYaaJ6oDaog371kN+Z/RERxwrmZ+/YxdBT
iyDdfx4LTpiYU6ZRmJkO0SfKisSGj26aPpQyfnYZYy0Lxw6TGkEV61MTt4fEJS1O
f5KCrj4PLhRoYw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:22 2025 by rpki-client