Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
File: 18R1QD_dkDgYkeWgwyZrR43YyjU.mft (raw, json)
Hash identifier: ruM/PhE9gbTHMrI0iHLvgEPoio34G0kZfVef6R835c8=
Subject key identifier: 69:19:4E:D5:AD:49:4B:2A:36:9B:44:96:6E:46:BD:DE:AD:1C:CD:A9
Authority key identifier: D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
Certificate issuer: /CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Certificate serial: 0194BCA96CB2D9134E15B59ACCB294CF5050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
Manifest number: 0A56
Signing time: Fri 31 Jan 2025 14:00:07 +0000
Manifest this update: Fri 31 Jan 2025 14:00:07 +0000
Manifest next update: Sat 01 Feb 2025 14:00:07 +0000
Files and hashes: 1: 18R1QD_dkDgYkeWgwyZrR43YyjU.crl (hash: Qxl5D6S/XmNtWD+mSFOdrwbrdc2FHWBfKPyVKOCazrw=)
2: TKaIIghuBjovehstBf-4yPQzWzs.roa (hash: Y5l+50EAAN4J3BZwHmdWVnVvSIYr6cNnr7nr74LFy0Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6c:b2:d9:13:4e:15:b5:9a:cc:b2:94:cf:50:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Validity
Not Before: Jan 31 14:00:07 2025 GMT
Not After : Feb 1 14:00:07 2025 GMT
Subject: CN=69194ed5ad494b2a369b44966e46bddead1ccda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:9d:82:fd:e3:91:cf:4e:0f:a7:c6:0d:9f:
20:36:22:0f:fe:ee:c1:12:a5:eb:ec:30:d8:34:92:
12:4f:e2:98:19:77:b4:d4:bb:ab:78:5a:72:06:5b:
1e:fa:3f:d8:25:03:30:33:31:2a:4d:81:63:7d:43:
ba:7c:f2:40:61:27:41:62:00:3b:b7:08:a1:4e:37:
6a:88:6d:27:d1:ee:cb:53:df:2a:eb:78:4c:91:74:
40:86:3c:dc:c8:d3:72:74:38:61:08:b8:69:8c:c4:
9a:b5:75:4c:90:e4:89:0e:03:f7:91:cd:b5:de:5b:
9e:16:90:14:28:53:17:9b:53:eb:4d:68:a9:dd:cd:
39:84:d0:ba:a9:39:97:21:81:2b:95:3d:34:4c:36:
ce:0d:38:ca:74:87:35:67:bc:dd:8f:ef:72:f7:c4:
ae:37:03:7c:b6:91:90:92:97:a8:d2:e1:66:ca:54:
0f:f1:50:c4:84:ee:25:ac:8e:2f:5f:6b:83:ca:1c:
e4:d8:67:4a:f2:29:e0:0b:7b:dc:81:bf:4a:5e:4e:
7f:d9:29:e3:6f:82:92:9a:e0:9a:01:99:cc:92:32:
49:81:78:7f:56:82:01:a0:11:88:e8:8c:81:c1:fa:
9a:7e:c6:91:14:d9:bd:5c:ee:80:e7:1e:37:52:16:
0a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:19:4E:D5:AD:49:4B:2A:36:9B:44:96:6E:46:BD:DE:AD:1C:CD:A9
X509v3 Authority Key Identifier:
keyid:D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:28:f5:12:68:bd:dd:e4:cd:c1:9f:a9:92:4e:73:59:d8:ba:
2a:c1:53:c7:47:30:16:a9:2e:0d:05:1e:ba:75:fd:7f:84:ce:
1c:f7:d2:10:fc:4d:63:3e:57:a6:41:13:30:d2:9b:70:b7:9c:
e6:ad:05:86:69:69:e4:1e:2c:7e:dc:98:30:56:28:c6:17:3c:
44:7a:56:6f:79:40:f8:56:e6:38:11:2e:15:f0:7b:32:9d:f7:
68:6c:c0:30:9e:04:4f:f0:8c:82:ec:31:8c:16:7b:7b:bf:15:
bd:2e:e0:29:5c:fd:cd:75:4c:63:5c:ed:0d:a0:fc:bc:9b:92:
1c:e7:22:39:db:c0:eb:d8:bc:a9:30:ab:e0:e2:2b:6d:48:e2:
aa:c0:af:32:39:d8:e9:89:76:1a:db:0e:dc:86:f2:e8:5c:65:
9e:63:81:88:3c:29:cf:39:83:12:a5:1f:a7:17:c0:2b:d9:97:
cd:f0:d4:e5:b4:e1:b6:8b:e1:49:95:01:a9:d4:9f:49:1f:ea:
ef:03:43:22:f5:bf:c4:b6:76:aa:52:d7:2b:3b:54:4e:f7:dd:
3a:6d:49:f5:e5:d5:3b:0e:2b:dd:27:1f:03:13:30:51:75:f2:
00:45:81:c0:18:62:48:07:ac:ef:2e:04:06:ae:59:b2:fe:48:
a3:40:19:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qWyy2RNOFbWazLKUz1BQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YzQ3NTQwM2ZkZDkwMzgxODkxZTVhMGMzMjY2YjQ3OGRk
OGNhMzUwHhcNMjUwMTMxMTQwMDA3WhcNMjUwMjAxMTQwMDA3WjAzMTEwLwYDVQQD
Eyg2OTE5NGVkNWFkNDk0YjJhMzY5YjQ0OTY2ZTQ2YmRkZWFkMWNjZGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX2dgv3jkc9OD6fGDZ8gNiIP/u7B
EqXr7DDYNJIST+KYGXe01LureFpyBlse+j/YJQMwMzEqTYFjfUO6fPJAYSdBYgA7
twihTjdqiG0n0e7LU98q63hMkXRAhjzcyNNydDhhCLhpjMSatXVMkOSJDgP3kc21
3lueFpAUKFMXm1PrTWip3c05hNC6qTmXIYErlT00TDbODTjKdIc1Z7zdj+9y98Su
NwN8tpGQkpeo0uFmylQP8VDEhO4lrI4vX2uDyhzk2GdK8ingC3vcgb9KXk5/2Snj
b4KSmuCaAZnMkjJJgXh/VoIBoBGI6IyBwfqafsaRFNm9XO6A5x43UhYKkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkZTtWtSUsqNptElm5Gvd6tHM2pMB8GA1UdIwQY
MBaAFNfEdUA/3ZA4GJHloMMma0eN2Mo1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMThSMVFEX2RrRGdZa2VXZ3d5WnJSNDNZeWpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi85NzRjNzAtZTEzYy00Njk5LWIzMWIt
N2FjOWUyY2U0ZTMzLzEvMThSMVFEX2RrRGdZa2VXZ3d5WnJSNDNZeWpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi85NzRjNzAtZTEzYy00Njk5LWIzMWItN2FjOWUyY2U0ZTMz
LzEvMThSMVFEX2RrRGdZa2VXZ3d5WnJSNDNZeWpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAISj1Emi9
3eTNwZ+pkk5zWdi6KsFTx0cwFqkuDQUeunX9f4TOHPfSEPxNYz5XpkETMNKbcLec
5q0Fhmlp5B4sftyYMFYoxhc8RHpWb3lA+FbmOBEuFfB7Mp33aGzAMJ4ET/CMguwx
jBZ7e78VvS7gKVz9zXVMY1ztDaD8vJuSHOciOdvA69i8qTCr4OIrbUjiqsCvMjnY
6Yl2GtsO3Iby6FxlnmOBiDwpzzmDEqUfpxfAK9mXzfDU5bThtovhSZUBqdSfSR/q
7wNDIvW/xLZ2qlLXKztUTvfdOm1J9eXVOw4r3ScfAxMwUXXyAEWBwBhiSAes7y4E
Bq5Zsv5Io0AZgQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:49 2025 by rpki-client