Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
File: CFeH5l60_NZuM0C2Kt5HygCRnc4.mft (raw, json)
Hash identifier: upBtJC/cMS99vbp5Ho185dknvQKFZ7RHpT/l276opmI=
Subject key identifier: EB:1A:4D:58:4D:10:DB:44:8E:B5:B8:87:00:F7:24:F3:B9:CF:29:DA
Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
Certificate issuer: /CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Certificate serial: 0194BBCDBF7E34FFA68A3A8C8E76B38A689F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
Manifest number: 039A
Signing time: Fri 31 Jan 2025 10:00:10 +0000
Manifest this update: Fri 31 Jan 2025 10:00:10 +0000
Manifest next update: Sat 01 Feb 2025 10:00:10 +0000
Files and hashes: 1: CFeH5l60_NZuM0C2Kt5HygCRnc4.crl (hash: 50Db4c6sw8uOPfqHgGmGrzFb9wmx/k//VFxdKXoD8Zw=)
2: IZ-nCDCZ_WFPQrV4b51Gvn4a1GU.roa (hash: 1zcxhGAttFQP5ld0bDKnJ/ztckFUeO0GInmPR3RRBiI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:bf:7e:34:ff:a6:8a:3a:8c:8e:76:b3:8a:68:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Validity
Not Before: Jan 31 10:00:10 2025 GMT
Not After : Feb 1 10:00:10 2025 GMT
Subject: CN=eb1a4d584d10db448eb5b88700f724f3b9cf29da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7d:b9:9d:8c:fa:51:bb:9b:49:12:0b:4d:81:
a5:d7:cb:11:c7:af:ad:95:0c:78:f4:d6:f4:3c:11:
0d:e6:f8:9a:f3:f2:a0:42:f4:36:02:92:37:7c:35:
d2:66:9d:2b:fa:3c:bb:37:dc:7c:c6:7d:b8:d1:18:
50:7f:36:b0:d3:15:25:1b:95:3b:5f:d2:65:26:82:
1c:61:10:89:7e:a3:34:e6:e8:94:cc:8c:5b:18:c5:
b9:20:49:66:00:4c:88:10:b9:fb:2c:18:65:1b:21:
8b:43:02:56:7b:c0:6d:8a:19:0b:05:fe:0a:b6:cf:
c4:0c:d1:26:9d:22:8a:d7:df:65:d4:fb:2b:e4:3e:
11:da:33:97:0c:a6:92:b9:64:b6:cc:d9:c1:da:84:
93:d7:bc:24:1c:33:c1:ce:18:60:e2:41:a8:02:13:
6a:a5:8e:76:fc:92:c8:4f:db:6e:90:dc:57:b7:8b:
1d:15:52:d5:6b:32:c7:92:17:8b:8a:e0:8c:4d:fb:
2c:9a:47:8f:18:9a:a5:f3:54:f8:1e:05:5b:f7:4d:
df:61:f0:d1:bf:18:c5:fd:21:5a:36:5b:33:b8:72:
4f:e2:9a:55:e8:36:b0:f8:d3:1e:7a:47:fb:33:dc:
33:98:a6:18:ba:7c:cd:c0:5e:b8:20:2c:d1:4e:cc:
2a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1A:4D:58:4D:10:DB:44:8E:B5:B8:87:00:F7:24:F3:B9:CF:29:DA
X509v3 Authority Key Identifier:
keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:6c:60:e2:2a:8e:c9:c8:ea:f3:fa:68:79:04:2d:d7:66:97:
6c:91:96:5f:80:fa:dd:5a:2d:90:01:e7:bf:42:20:f6:78:27:
da:68:c8:50:bb:39:db:ac:dd:66:ba:7d:ac:20:99:15:05:39:
02:2e:ff:95:b5:4c:bc:e7:d0:d1:10:92:ab:79:b4:05:22:70:
07:8f:a4:28:f8:14:72:5a:77:7b:88:b2:4f:10:30:7f:b2:c2:
9b:c0:e7:f3:7c:fb:50:9e:b4:d0:3c:a6:dd:3e:a3:1d:dc:8b:
65:20:14:a9:8d:62:36:70:51:db:1e:50:a3:28:35:f7:81:0a:
99:10:d0:99:a7:56:f8:0c:67:20:07:e2:20:42:c1:52:6c:bc:
19:7c:e2:41:01:b1:6b:80:32:44:80:9d:77:e2:23:d2:6e:98:
e3:74:64:70:4d:70:b7:d3:24:0d:78:9c:b8:c4:ce:c3:ee:ac:
60:68:d0:97:fa:6b:bd:eb:fd:02:01:2b:ba:65:f1:8a:32:12:
57:d0:ce:68:f0:23:1c:55:43:42:58:2d:5a:81:7e:f0:38:41:
4b:a5:24:a5:e1:0a:5b:0e:e3:98:f4:0a:25:69:f3:b5:5c:04:
26:18:d0:a9:90:2f:4a:a1:bb:fa:4f:e5:77:4a:00:29:2d:fb:
31:a2:24:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zb9+NP+mijqMjnazimifMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NTc4N2U2NWViNGZjZDY2ZTMzNDBiNjJhZGU0N2NhMDA5
MTlkY2UwHhcNMjUwMTMxMTAwMDEwWhcNMjUwMjAxMTAwMDEwWjAzMTEwLwYDVQQD
EyhlYjFhNGQ1ODRkMTBkYjQ0OGViNWI4ODcwMGY3MjRmM2I5Y2YyOWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6X25nYz6UbubSRILTYGl18sRx6+t
lQx49Nb0PBEN5via8/KgQvQ2ApI3fDXSZp0r+jy7N9x8xn240RhQfzaw0xUlG5U7
X9JlJoIcYRCJfqM05uiUzIxbGMW5IElmAEyIELn7LBhlGyGLQwJWe8BtihkLBf4K
ts/EDNEmnSKK199l1Psr5D4R2jOXDKaSuWS2zNnB2oST17wkHDPBzhhg4kGoAhNq
pY52/JLIT9tukNxXt4sdFVLVazLHkheLiuCMTfssmkePGJql81T4HgVb903fYfDR
vxjF/SFaNlszuHJP4ppV6Daw+NMeekf7M9wzmKYYunzNwF64ICzRTswqsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOsaTVhNENtEjrW4hwD3JPO5zynaMB8GA1UdIwQY
MBaAFAhXh+ZetPzWbjNAtireR8oAkZ3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0ZlSDVsNjBfTlp1TTBDMkt0NUh5Z0NSbmM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9kMmJiZjYtM2I2OS00NDJlLWI0OTAt
N2U1NGMzMmFiZWQ4LzEvQ0ZlSDVsNjBfTlp1TTBDMkt0NUh5Z0NSbmM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9kMmJiZjYtM2I2OS00NDJlLWI0OTAtN2U1NGMzMmFiZWQ4
LzEvQ0ZlSDVsNjBfTlp1TTBDMkt0NUh5Z0NSbmM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgGxg4iqO
ycjq8/poeQQt12aXbJGWX4D63VotkAHnv0Ig9ngn2mjIULs526zdZrp9rCCZFQU5
Ai7/lbVMvOfQ0RCSq3m0BSJwB4+kKPgUclp3e4iyTxAwf7LCm8Dn83z7UJ600Dym
3T6jHdyLZSAUqY1iNnBR2x5Qoyg194EKmRDQmadW+AxnIAfiIELBUmy8GXziQQGx
a4AyRICdd+Ij0m6Y43RkcE1wt9MkDXicuMTOw+6sYGjQl/prvev9AgErumXxijIS
V9DOaPAjHFVDQlgtWoF+8DhBS6UkpeEKWw7jmPQKJWnztVwEJhjQqZAvSqG7+k/l
d0oAKS37MaIkUg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:20 2025 by rpki-client