Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
File: 1DySR0_tODyV-izNg9YU9X5WPYI.mft (raw, json)
Hash identifier: OYcQyzco+G286rvBAdawE4PQOzc3jnIpMGGrnG3o8b8=
Subject key identifier: 43:65:42:D4:D6:8C:31:F9:92:A9:89:A3:F6:80:3A:2E:CC:6C:9D:D1
Authority key identifier: D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
Certificate issuer: /CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Certificate serial: 0194BCA9D6D4B2B73FAA43AFFE670EA4353E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:34 +0000
Manifest this update: Fri 31 Jan 2025 14:00:34 +0000
Manifest next update: Sat 01 Feb 2025 14:00:34 +0000
Files and hashes: 1: 1DySR0_tODyV-izNg9YU9X5WPYI.crl (hash: x0N5lSGwz8c5NA6+DCkRX1VuAvMqpQkLhd8cyBEbjeI=)
2: YeNb4uILFMttwTAEJ0OqaURJezM.roa (hash: TrCAXhjpMq5IYAz3anoVsFKGrU1fVwfTtHHZACZFwhI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d6:d4:b2:b7:3f:aa:43:af:fe:67:0e:a4:35:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Validity
Not Before: Jan 31 14:00:34 2025 GMT
Not After : Feb 1 14:00:34 2025 GMT
Subject: CN=436542d4d68c31f992a989a3f6803a2ecc6c9dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:35:97:5e:b0:38:a4:17:fe:92:0f:3c:a8:26:
68:3a:0c:ac:1c:53:1f:6b:b0:5f:a8:c3:1c:1b:05:
56:bb:2d:4c:da:e8:88:d1:1a:8d:51:52:6b:6b:c0:
5e:af:c2:b1:8b:23:72:05:6c:b9:19:47:e7:90:9a:
71:66:9a:27:ee:71:b5:a4:17:e7:5e:d8:45:6c:5e:
0b:4c:28:7b:9e:98:31:1e:ce:1d:1d:a0:11:37:12:
be:90:04:41:f6:71:02:28:2f:64:e6:de:38:5f:56:
1a:b2:f0:f4:7e:90:4f:7c:a9:b1:ef:8b:44:1c:bc:
47:8f:57:e3:a8:4f:2a:f5:16:22:d9:21:3a:63:29:
45:90:8d:3f:56:7b:ca:6f:e6:37:5d:25:8d:38:fe:
fa:f1:cd:12:35:ad:ee:49:28:7c:df:e3:f2:07:e3:
e8:db:5b:d7:ba:7e:8d:74:fa:ea:4d:78:c6:59:bc:
f0:76:48:ff:49:23:7c:ef:37:49:57:62:e4:9e:f8:
b1:43:4e:f5:38:db:3c:70:9c:34:1f:99:1c:d6:14:
5c:87:d5:37:ef:02:37:e1:b2:b8:8c:2c:67:a5:ec:
35:a4:a1:39:bc:73:8d:55:ec:de:65:76:2f:80:a7:
31:47:df:d2:01:2e:a9:7a:9c:17:f9:80:53:2c:20:
e8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:65:42:D4:D6:8C:31:F9:92:A9:89:A3:F6:80:3A:2E:CC:6C:9D:D1
X509v3 Authority Key Identifier:
keyid:D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0e:61:f2:20:b1:e4:60:91:8e:91:01:6b:8e:65:94:0e:85:
67:ca:7f:d8:19:de:67:13:f5:70:5e:90:74:f3:54:ca:43:4a:
e6:0e:e7:81:67:17:5c:01:6b:01:5e:b6:bf:ce:81:31:24:38:
3a:f1:08:33:ed:df:42:66:84:86:66:bd:dd:d8:0d:4f:33:7b:
fc:42:79:3f:b1:1a:51:b8:b9:4a:10:96:68:e3:47:5a:bb:9f:
84:36:96:cb:a5:27:7f:7d:1a:9d:06:fb:1e:89:49:03:29:2a:
d0:89:36:9f:74:b3:f9:5e:dd:e4:b3:e0:9f:72:6a:e0:2b:eb:
88:2d:dd:77:ea:5e:9b:3e:37:27:da:7e:db:ba:ed:51:67:3d:
51:f2:20:b3:c4:c1:ae:55:fc:40:fa:b6:09:44:07:e3:09:14:
6c:66:db:71:fa:4a:ed:d1:d2:13:b4:98:53:6e:dc:d8:0d:fb:
61:d9:f3:2f:f5:05:5b:5d:ee:c7:24:c2:54:74:b5:61:78:90:
c5:bd:40:f2:f2:53:cd:ba:a6:3f:82:e2:51:b8:5a:0c:0d:c5:
f6:6f:d4:28:87:2d:f5:ad:18:2e:b7:92:3b:40:16:49:f8:e9:
ea:b2:0b:8a:df:e0:e7:fc:3e:6e:3c:84:e5:95:02:88:62:10:
fc:ad:c2:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qdbUsrc/qkOv/mcOpDU+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0M2M5MjQ3NGZlZDM4M2M5NWZhMmNjZDgzZDYxNGY1N2U1
NjNkODIwHhcNMjUwMTMxMTQwMDM0WhcNMjUwMjAxMTQwMDM0WjAzMTEwLwYDVQQD
Eyg0MzY1NDJkNGQ2OGMzMWY5OTJhOTg5YTNmNjgwM2EyZWNjNmM5ZGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zWXXrA4pBf+kg88qCZoOgysHFMf
a7BfqMMcGwVWuy1M2uiI0RqNUVJra8Ber8KxiyNyBWy5GUfnkJpxZpon7nG1pBfn
XthFbF4LTCh7npgxHs4dHaARNxK+kARB9nECKC9k5t44X1YasvD0fpBPfKmx74tE
HLxHj1fjqE8q9RYi2SE6YylFkI0/VnvKb+Y3XSWNOP768c0SNa3uSSh83+PyB+Po
21vXun6NdPrqTXjGWbzwdkj/SSN87zdJV2LknvixQ071ONs8cJw0H5kc1hRch9U3
7wI34bK4jCxnpew1pKE5vHONVezeZXYvgKcxR9/SAS6pepwX+YBTLCDozQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENlQtTWjDH5kqmJo/aAOi7MbJ3RMB8GA1UdIwQY
MBaAFNQ8kkdP7Tg8lfoszYPWFPV+Vj2CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUR5U1IwX3RPRHlWLWl6Tmc5WVU5WDVXUFlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84NDFmM2EtYWI4My00ZGQ5LWIxODMt
NmIwNmMxNzZiZDVhLzEvMUR5U1IwX3RPRHlWLWl6Tmc5WVU5WDVXUFlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS84NDFmM2EtYWI4My00ZGQ5LWIxODMtNmIwNmMxNzZiZDVh
LzEvMUR5U1IwX3RPRHlWLWl6Tmc5WVU5WDVXUFlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQ5h8iCx
5GCRjpEBa45llA6FZ8p/2BneZxP1cF6QdPNUykNK5g7ngWcXXAFrAV62v86BMSQ4
OvEIM+3fQmaEhma93dgNTzN7/EJ5P7EaUbi5ShCWaONHWrufhDaWy6Unf30anQb7
HolJAykq0Ik2n3Sz+V7d5LPgn3Jq4CvriC3dd+pemz43J9p+27rtUWc9UfIgs8TB
rlX8QPq2CUQH4wkUbGbbcfpK7dHSE7SYU27c2A37YdnzL/UFW13uxyTCVHS1YXiQ
xb1A8vJTzbqmP4LiUbhaDA3F9m/UKIct9a0YLreSO0AWSfjp6rILit/g5/w+bjyE
5ZUCiGIQ/K3CkQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:47:30 2025 by rpki-client