Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
File: 6TjNfs8jrBxJYlRuG89eCDrSKaU.mft (raw, json)
Hash identifier: PCDTguH03ppcXRVbWRoHHvh2HVddSY4PqnNpkrvXQfU=
Subject key identifier: EA:01:D0:65:AC:6F:52:B7:D7:60:D2:CE:1D:3D:33:3B:5B:6A:62:49
Authority key identifier: E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5
Certificate issuer: /CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
Certificate serial: 0194BBCDFD1D9DFFF71FD9F396C49F060B2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: 6TjNfs8jrBxJYlRuG89eCDrSKaU.crl (hash: mqvCNlOES2hpxfSWLy9Xkg2klCjXSx2rAIU65qAC4QI=)
2: Goi94Dc_RUuC8EGWeEnJH7qqhjU.roa (hash: G+DgjuNd7tv+5EJaL+G6NuJWBrxhCutOC8EdL+rglNc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fd:1d:9d:ff:f7:1f:d9:f3:96:c4:9f:06:0b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=ea01d065ac6f52b7d760d2ce1d3d333b5b6a6249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:32:d8:d0:97:4b:68:73:8e:5c:ee:0f:55:b8:
2d:6a:e9:d3:f9:4d:e1:b5:be:9e:6d:03:ef:0f:9b:
95:88:5c:ed:aa:0a:69:8f:13:f3:de:c7:43:4e:4c:
4e:69:aa:f0:d1:c2:ac:88:94:f3:38:80:ca:f6:7f:
80:b2:9a:29:ee:ae:d0:6d:64:ff:de:0d:49:f2:c7:
46:c1:fc:72:f1:6f:7e:a0:12:de:07:85:4a:53:e4:
79:55:98:f1:65:a1:64:2c:1c:dd:2b:42:ae:9e:db:
a1:d3:53:da:27:18:48:ee:33:0b:a8:ca:f8:dd:e4:
b7:52:e1:be:67:85:b0:3e:73:4f:c3:e1:b3:38:8b:
6f:0c:6a:d6:11:2c:9d:4c:0b:c2:72:95:8e:b3:94:
7b:b4:1f:af:2f:76:a6:ac:40:e2:f7:b1:31:92:05:
ca:3d:f3:83:69:5f:bc:70:34:eb:96:53:28:c7:46:
33:49:8e:1e:3e:15:54:6e:76:36:5c:a5:4d:73:7c:
9e:7f:ff:1b:3e:2e:16:3b:51:36:f3:5f:86:70:8d:
d6:f4:83:55:75:88:f3:3e:d2:23:f1:67:51:2b:86:
84:f5:0d:0c:19:c5:6b:60:b6:41:78:87:1b:df:c7:
f5:81:e9:f4:89:94:31:21:1c:a9:4c:fe:4a:8c:3e:
b6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:01:D0:65:AC:6F:52:B7:D7:60:D2:CE:1D:3D:33:3B:5B:6A:62:49
X509v3 Authority Key Identifier:
keyid:E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6b:66:66:b7:67:48:51:47:85:9b:25:bf:3c:98:38:79:d5:
a1:4a:3d:e8:d7:8e:5e:8f:1d:6d:f6:4b:fa:fe:09:97:24:61:
e9:aa:a0:22:42:99:9e:c1:6f:7f:30:bf:9a:a3:77:c7:bc:76:
ae:43:13:10:9a:db:5b:0a:97:74:d2:32:0f:19:9c:0e:1d:23:
80:ec:e9:b8:f7:08:3f:8d:aa:5f:de:ca:1d:14:8b:eb:cc:14:
e8:b2:f1:c5:d1:1a:b7:3f:f5:40:78:55:07:e6:b9:d9:60:2d:
b8:10:75:9f:5c:2d:8e:49:07:cd:56:b6:e3:8c:10:44:5a:e5:
42:4b:6a:08:62:69:a6:de:a0:39:b1:41:4e:9e:a9:81:8a:34:
ed:71:56:c5:7a:ec:53:1b:f4:e7:5c:c0:f8:cb:04:52:c9:20:
24:54:22:53:3d:7e:af:2c:eb:cc:81:7b:07:25:27:6c:76:b4:
0c:ed:74:6d:09:21:69:53:c2:68:48:3a:ef:38:ca:f2:09:43:
e1:91:c7:1c:76:5e:af:74:67:46:58:26:dc:c3:05:2d:1c:ef:
99:11:b4:20:4a:81:5f:cf:78:24:cd:8d:17:2f:a8:98:3a:41:
f9:95:b1:b0:a9:e4:13:82:c3:39:ad:7e:a2:0b:c4:d6:8a:39:
02:3d:4b:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zf0dnf/3H9nzlsSfBgsrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MzhjZDdlY2YyM2FjMWM0OTYyNTQ2ZTFiY2Y1ZTA4M2Fk
MjI5YTUwHhcNMjUwMTMxMTAwMDI2WhcNMjUwMjAxMTAwMDI2WjAzMTEwLwYDVQQD
EyhlYTAxZDA2NWFjNmY1MmI3ZDc2MGQyY2UxZDNkMzMzYjViNmE2MjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizLY0JdLaHOOXO4PVbgtaunT+U3h
tb6ebQPvD5uViFztqgppjxPz3sdDTkxOaarw0cKsiJTzOIDK9n+Aspop7q7QbWT/
3g1J8sdGwfxy8W9+oBLeB4VKU+R5VZjxZaFkLBzdK0Kuntuh01PaJxhI7jMLqMr4
3eS3UuG+Z4WwPnNPw+GzOItvDGrWESydTAvCcpWOs5R7tB+vL3amrEDi97ExkgXK
PfODaV+8cDTrllMox0YzSY4ePhVUbnY2XKVNc3yef/8bPi4WO1E281+GcI3W9INV
dYjzPtIj8WdRK4aE9Q0MGcVrYLZBeIcb38f1gen0iZQxIRypTP5KjD62EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoB0GWsb1K312DSzh09MztbamJJMB8GA1UdIwQY
MBaAFOk4zX7PI6wcSWJUbhvPXgg60imlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlRqTmZzOGpyQnhKWWxSdUc4OWVDRHJTS2FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83NjFiZjUtMDM3ZS00ODA3LTg4YzAt
ZmVlZTg2YzZiNjAwLzEvNlRqTmZzOGpyQnhKWWxSdUc4OWVDRHJTS2FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi83NjFiZjUtMDM3ZS00ODA3LTg4YzAtZmVlZTg2YzZiNjAw
LzEvNlRqTmZzOGpyQnhKWWxSdUc4OWVDRHJTS2FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemtmZrdn
SFFHhZslvzyYOHnVoUo96NeOXo8dbfZL+v4JlyRh6aqgIkKZnsFvfzC/mqN3x7x2
rkMTEJrbWwqXdNIyDxmcDh0jgOzpuPcIP42qX97KHRSL68wU6LLxxdEatz/1QHhV
B+a52WAtuBB1n1wtjkkHzVa244wQRFrlQktqCGJppt6gObFBTp6pgYo07XFWxXrs
Uxv051zA+MsEUskgJFQiUz1+ryzrzIF7ByUnbHa0DO10bQkhaVPCaEg67zjK8glD
4ZHHHHZer3RnRlgm3MMFLRzvmRG0IEqBX894JM2NFy+omDpB+ZWxsKnkE4LDOa1+
ogvE1oo5Aj1LXw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:53 2025 by rpki-client