Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/639f64-1df1-46d5-add9-10caf54986ff/1/RDTtvhtBAbKKviMvK88qAUiXglo.mft
File: RDTtvhtBAbKKviMvK88qAUiXglo.mft (raw, json)
Hash identifier: SsFUs14oq9Gzk/zczddbhX/KuEW/mYFClzRRC6Cy+84=
Subject key identifier: 74:F9:AF:2E:7D:F8:38:5A:A3:44:36:66:01:EE:53:A3:8E:13:2C:3B
Authority key identifier: 44:34:ED:BE:1B:41:01:B2:8A:BE:23:2F:2B:CF:2A:01:48:97:82:5A
Certificate issuer: /CN=4434edbe1b4101b28abe232f2bcf2a014897825a
Certificate serial: 0194BC04F4B109961630A8054E5DA4B6671A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDTtvhtBAbKKviMvK88qAUiXglo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/639f64-1df1-46d5-add9-10caf54986ff/1/RDTtvhtBAbKKviMvK88qAUiXglo.mft
Manifest number: 0E15
Signing time: Fri 31 Jan 2025 11:00:28 +0000
Manifest this update: Fri 31 Jan 2025 11:00:28 +0000
Manifest next update: Sat 01 Feb 2025 11:00:28 +0000
Files and hashes: 1: MBnjR0q6eR7PujQYuvXc6EY3kbo.roa (hash: HNqzyjDd+TtlMN5tniTDAwjj1tssNX0++6C4Wyg438o=)
2: RDTtvhtBAbKKviMvK88qAUiXglo.crl (hash: nbMndOykpvFfKy0yO1oSd+Ri5j7pZ2fv7DZKzJEyIPI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f4:b1:09:96:16:30:a8:05:4e:5d:a4:b6:67:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4434edbe1b4101b28abe232f2bcf2a014897825a
Validity
Not Before: Jan 31 11:00:28 2025 GMT
Not After : Feb 1 11:00:28 2025 GMT
Subject: CN=74f9af2e7df8385aa344366601ee53a38e132c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4b:9c:ca:32:f6:5b:28:b9:56:26:3e:08:a1:
47:94:33:c3:3e:f7:a1:c6:66:45:34:f6:6b:9d:74:
94:64:dd:ec:ec:b1:2b:6f:42:22:1b:20:f8:79:36:
12:fe:e9:93:43:02:0c:e7:f6:36:89:90:50:27:72:
0b:1f:45:aa:8d:e2:a7:a9:1e:c4:3d:a9:0c:1d:94:
fd:93:72:92:94:92:81:1a:ad:1c:4c:d5:68:16:e5:
ec:bc:9a:20:2b:39:25:1e:93:3f:f4:b2:43:19:a8:
d3:16:48:c1:24:23:4e:7e:37:9a:5f:9a:59:7b:f6:
98:98:dc:e4:fb:8e:57:b2:7f:96:ab:69:86:c9:6c:
56:d0:08:fa:68:57:a5:c9:91:13:ad:6a:41:35:ec:
7c:82:e7:1e:95:0d:db:9e:48:b1:44:e0:19:69:2b:
10:8a:c5:18:8f:6a:51:8a:1d:70:42:92:00:51:e0:
bd:f2:c3:66:5e:e7:d1:ee:f6:04:51:cd:ac:9b:4f:
4b:8f:5a:b2:cf:fe:e8:80:b2:76:92:23:da:f3:73:
94:31:2f:9f:08:44:58:1d:8c:14:00:2a:4c:a0:1b:
ad:af:51:3c:96:54:32:de:db:09:c1:44:45:17:7a:
e7:f0:db:d7:a2:5d:07:ab:55:74:a6:0a:19:f1:00:
a4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F9:AF:2E:7D:F8:38:5A:A3:44:36:66:01:EE:53:A3:8E:13:2C:3B
X509v3 Authority Key Identifier:
keyid:44:34:ED:BE:1B:41:01:B2:8A:BE:23:2F:2B:CF:2A:01:48:97:82:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDTtvhtBAbKKviMvK88qAUiXglo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/639f64-1df1-46d5-add9-10caf54986ff/1/RDTtvhtBAbKKviMvK88qAUiXglo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/639f64-1df1-46d5-add9-10caf54986ff/1/RDTtvhtBAbKKviMvK88qAUiXglo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:92:11:6d:63:c7:fa:42:7b:f9:56:14:aa:77:35:67:c9:b0:
a6:4b:3d:1b:48:37:e6:ca:fa:cf:14:e6:ab:a1:51:a6:25:08:
d8:12:81:b1:60:d4:11:db:83:b7:cc:63:4c:7e:aa:d1:bf:54:
68:37:28:4a:17:7d:46:f6:60:be:7a:d6:ad:da:a2:a7:0f:91:
d9:27:dc:ae:23:85:8e:3c:47:45:2f:d9:86:71:79:95:2f:11:
99:de:88:56:e7:3c:4e:45:00:fd:d2:c1:56:c1:41:52:97:47:
d8:ee:de:fe:e3:18:14:77:1f:38:b4:02:b8:d7:81:b9:08:9f:
af:7a:09:43:0f:e5:1e:fa:58:cf:c3:7a:de:47:55:b2:2b:c1:
5f:e4:f3:2a:62:30:c4:fd:7e:d5:22:4b:e6:5b:d9:d7:59:0c:
cb:9c:8e:17:05:6e:05:74:7a:3c:1d:bd:c7:a3:57:f7:98:6c:
35:ee:28:4d:39:6a:a2:7c:b4:05:7a:e7:c6:80:01:68:19:7c:
84:4f:97:0e:e5:38:d3:5a:3b:27:68:b5:1a:c4:03:91:3b:1e:
05:23:91:56:88:d7:ad:9b:81:e3:4c:7a:e0:0a:73:ec:2d:81:
2f:18:66:6b:04:a0:eb:18:35:1f:39:a1:e6:f2:4e:f8:6d:6a:
51:8d:a7:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BPSxCZYWMKgFTl2ktmcaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MzRlZGJlMWI0MTAxYjI4YWJlMjMyZjJiY2YyYTAxNDg5
NzgyNWEwHhcNMjUwMTMxMTEwMDI4WhcNMjUwMjAxMTEwMDI4WjAzMTEwLwYDVQQD
Eyg3NGY5YWYyZTdkZjgzODVhYTM0NDM2NjYwMWVlNTNhMzhlMTMyYzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEucyjL2Wyi5ViY+CKFHlDPDPveh
xmZFNPZrnXSUZN3s7LErb0IiGyD4eTYS/umTQwIM5/Y2iZBQJ3ILH0WqjeKnqR7E
PakMHZT9k3KSlJKBGq0cTNVoFuXsvJogKzklHpM/9LJDGajTFkjBJCNOfjeaX5pZ
e/aYmNzk+45Xsn+Wq2mGyWxW0Aj6aFelyZETrWpBNex8gucelQ3bnkixROAZaSsQ
isUYj2pRih1wQpIAUeC98sNmXufR7vYEUc2sm09Lj1qyz/7ogLJ2kiPa83OUMS+f
CERYHYwUACpMoButr1E8llQy3tsJwURFF3rn8NvXol0Hq1V0pgoZ8QCk5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHT5ry59+Dhao0Q2ZgHuU6OOEyw7MB8GA1UdIwQY
MBaAFEQ07b4bQQGyir4jLyvPKgFIl4JaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkRUdHZodEJBYktLdmlNdks4OHFBVWlYZ2xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82MzlmNjQtMWRmMS00NmQ1LWFkZDkt
MTBjYWY1NDk4NmZmLzEvUkRUdHZodEJBYktLdmlNdks4OHFBVWlYZ2xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC82MzlmNjQtMWRmMS00NmQ1LWFkZDktMTBjYWY1NDk4NmZm
LzEvUkRUdHZodEJBYktLdmlNdks4OHFBVWlYZ2xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZIRbWPH
+kJ7+VYUqnc1Z8mwpks9G0g35sr6zxTmq6FRpiUI2BKBsWDUEduDt8xjTH6q0b9U
aDcoShd9RvZgvnrWrdqipw+R2SfcriOFjjxHRS/ZhnF5lS8Rmd6IVuc8TkUA/dLB
VsFBUpdH2O7e/uMYFHcfOLQCuNeBuQifr3oJQw/lHvpYz8N63kdVsivBX+TzKmIw
xP1+1SJL5lvZ11kMy5yOFwVuBXR6PB29x6NX95hsNe4oTTlqony0BXrnxoABaBl8
hE+XDuU401o7J2i1GsQDkTseBSORVojXrZuB40x64Apz7C2BLxhmawSg6xg1Hzmh
5vJO+G1qUY2nPw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:36:46 2025 by rpki-client