Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
File: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft (raw, json)
Hash identifier: g+60UnKuMp22jKya0dbNipGRNaQ1cDGKC9DsvOPnlPo=
Subject key identifier: 96:72:42:76:21:FF:72:85:0A:5A:59:65:73:A9:50:BD:8B:79:D6:F8
Authority key identifier: E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
Certificate issuer: /CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Certificate serial: 0194BC0528AAC2DEBBE180674F4006D9C780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
Manifest number: 03E5
Signing time: Fri 31 Jan 2025 11:00:42 +0000
Manifest this update: Fri 31 Jan 2025 11:00:42 +0000
Manifest next update: Sat 01 Feb 2025 11:00:42 +0000
Files and hashes: 1: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl (hash: azvmhquW6un7ecsdNLYvD0JVTpiXYcEEreZCfL7zU1Y=)
2: tCDe7wPjFadsHNNfvUOgDucY0uQ.roa (hash: BMf/pb8712weiBqMIzsz+9w0GyVgsUYRF3OPa//jU1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:28:aa:c2:de:bb:e1:80:67:4f:40:06:d9:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Validity
Not Before: Jan 31 11:00:42 2025 GMT
Not After : Feb 1 11:00:42 2025 GMT
Subject: CN=9672427621ff72850a5a596573a950bd8b79d6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:13:81:ea:f6:b7:81:be:fe:0c:14:68:17:
9f:44:6b:11:c3:93:f7:ca:95:fc:bc:1d:de:86:5b:
c1:44:99:73:eb:41:18:34:77:3b:74:eb:6c:46:82:
41:59:78:95:66:40:e1:d0:31:a1:70:79:3f:58:22:
6c:f4:8f:58:56:d0:c9:06:d2:df:90:65:d8:16:fc:
11:f6:46:e6:a7:d3:30:20:a3:a6:ec:1f:8e:23:d2:
a8:26:be:04:ce:2a:f5:93:fa:f6:21:0a:bf:34:17:
bc:5d:6a:d9:00:79:e0:99:59:42:57:f4:a0:22:51:
8b:23:d2:b5:75:f7:13:31:cd:58:ff:9b:df:74:8c:
fa:01:2b:ae:dd:ca:dc:b4:74:30:9f:9d:b9:50:2b:
33:73:44:f0:c1:fc:84:81:4e:9e:4c:1c:f7:55:77:
0d:0d:79:58:b4:d9:08:ec:a2:b8:47:89:0c:89:7c:
22:ea:29:22:66:77:0a:14:84:dc:76:bd:4c:1b:b0:
19:f0:b4:29:eb:8a:95:65:96:d5:6a:77:6f:69:31:
6d:88:0e:53:49:71:c6:70:49:6d:04:4c:72:8c:d2:
44:b8:a7:be:66:f8:16:05:27:f6:7f:b3:3f:f4:d9:
b1:ce:ce:5c:d6:3c:80:0b:03:90:21:4c:a8:44:4b:
9e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:72:42:76:21:FF:72:85:0A:5A:59:65:73:A9:50:BD:8B:79:D6:F8
X509v3 Authority Key Identifier:
keyid:E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d2:f8:e9:a2:0e:a5:a1:d6:cc:67:3f:ba:72:36:a9:78:6c:
41:9e:a9:c3:b8:90:33:d1:f2:65:a1:31:a4:c2:7b:72:5d:55:
51:78:ce:21:94:79:1e:0a:01:3b:38:be:7c:11:7f:7c:15:27:
55:60:7a:4e:bb:c4:c0:19:ae:38:d2:c5:ea:5c:91:ec:bb:2b:
ea:a6:1d:07:fc:df:83:d4:f6:1f:25:2a:f6:12:f7:6a:15:fb:
13:2f:41:24:c3:1a:b5:f8:9f:26:49:3d:03:16:c4:82:2f:e9:
9c:eb:68:e1:b3:77:0e:23:f6:15:56:4f:33:a2:bb:9f:35:5a:
e3:f7:9b:70:48:c2:2b:49:9e:06:b4:55:b0:2b:61:a0:96:00:
57:c7:db:42:e2:eb:3a:d8:82:fa:8e:72:2d:ef:9e:68:b7:0e:
58:a6:9a:6a:35:55:76:8e:4d:3b:2e:e5:e9:00:d9:2f:ed:d1:
7d:e9:1c:c3:ae:0b:0c:74:d8:4d:7d:af:22:bf:05:e7:e8:5c:
66:88:d3:67:3a:19:86:03:5a:0d:12:a4:da:77:d1:c8:96:2f:
b6:07:3b:61:cf:30:bf:ca:a3:f6:35:34:6d:b5:53:15:e5:7d:
d0:71:29:1a:2f:13:47:4a:55:90:0d:e3:44:1b:cb:77:a7:64:
06:23:a5:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BSiqwt674YBnT0AG2ceAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNDc3MDcyYjkxYWY1YzNmM2JmZTY5NzQzMjQzZTdjZGEz
YWU4NzkwHhcNMjUwMTMxMTEwMDQyWhcNMjUwMjAxMTEwMDQyWjAzMTEwLwYDVQQD
Eyg5NjcyNDI3NjIxZmY3Mjg1MGE1YTU5NjU3M2E5NTBiZDhiNzlkNmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0oTger2t4G+/gwUaBefRGsRw5P3
ypX8vB3ehlvBRJlz60EYNHc7dOtsRoJBWXiVZkDh0DGhcHk/WCJs9I9YVtDJBtLf
kGXYFvwR9kbmp9MwIKOm7B+OI9KoJr4Ezir1k/r2IQq/NBe8XWrZAHngmVlCV/Sg
IlGLI9K1dfcTMc1Y/5vfdIz6ASuu3crctHQwn525UCszc0TwwfyEgU6eTBz3VXcN
DXlYtNkI7KK4R4kMiXwi6ikiZncKFITcdr1MG7AZ8LQp64qVZZbVandvaTFtiA5T
SXHGcEltBExyjNJEuKe+ZvgWBSf2f7M/9Nmxzs5c1jyACwOQIUyoREuefQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZyQnYh/3KFClpZZXOpUL2Ledb4MB8GA1UdIwQY
MBaAFOFHcHK5GvXD87/ml0MkPnzaOuh5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFVkd2Nya2E5Y1B6di1hWFF5US1mTm82NkhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy83NDk0YmYtOGFjZC00ZTQzLTg2Y2Ut
ZTdjOGNmM2FmNWRlLzEvNFVkd2Nya2E5Y1B6di1hWFF5US1mTm82NkhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy83NDk0YmYtOGFjZC00ZTQzLTg2Y2UtZTdjOGNmM2FmNWRl
LzEvNFVkd2Nya2E5Y1B6di1hWFF5US1mTm82NkhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtL46aIO
paHWzGc/unI2qXhsQZ6pw7iQM9HyZaExpMJ7cl1VUXjOIZR5HgoBOzi+fBF/fBUn
VWB6TrvEwBmuONLF6lyR7Lsr6qYdB/zfg9T2HyUq9hL3ahX7Ey9BJMMatfifJkk9
AxbEgi/pnOto4bN3DiP2FVZPM6K7nzVa4/ebcEjCK0meBrRVsCthoJYAV8fbQuLr
OtiC+o5yLe+eaLcOWKaaajVVdo5NOy7l6QDZL+3Rfekcw64LDHTYTX2vIr8F5+hc
ZojTZzoZhgNaDRKk2nfRyJYvtgc7Yc8wv8qj9jU0bbVTFeV90HEpGi8TR0pVkA3j
RBvLd6dkBiOlPQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:14:54 2025 by rpki-client