Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
File: 4FotrPXdTpv6LS2bLTw_lnh0WEE.mft (raw, json)
Hash identifier: h4HRiQ+dOgVJZTKqD9S2MR0gc7dficyX5Kqog8HxN68=
Subject key identifier: BA:A4:F2:23:56:B6:AE:29:F2:B6:CF:A7:5B:9A:5D:77:D0:C3:E0:0E
Authority key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
Certificate issuer: /CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Certificate serial: 0194BD4E4C5BD732DEB18521BD3F81D63393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:12 +0000
Manifest this update: Fri 31 Jan 2025 17:00:12 +0000
Manifest next update: Sat 01 Feb 2025 17:00:12 +0000
Files and hashes: 1: 4FotrPXdTpv6LS2bLTw_lnh0WEE.crl (hash: TrGrrxf5kHw/cJXRqsbu83P/5nXM2N+b2x/AP7Ozbvk=)
2: BS790JJGQ7DZlNZUL_em5Su64B4.roa (hash: VVqWBTRMk3+7j4zbJrp8La5lSHjcZGiKvxZueV8Sl7A=)
3: UJGm2ryO8HuvxtqrnMckm6HvQuw.roa (hash: LmIHTI0l7Czq42uu144MFysAfpmWgQRM3SWHkhVtvVI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4c:5b:d7:32:de:b1:85:21:bd:3f:81:d6:33:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Validity
Not Before: Jan 31 17:00:12 2025 GMT
Not After : Feb 1 17:00:12 2025 GMT
Subject: CN=baa4f22356b6ae29f2b6cfa75b9a5d77d0c3e00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:70:57:6a:9d:b3:43:89:c6:be:8e:43:92:ac:
0e:7d:fd:47:e3:9a:28:6c:96:10:9a:46:42:37:5c:
39:9b:0b:6d:1a:cc:93:e9:6a:f7:dc:3f:14:60:b7:
c5:53:92:79:85:80:ef:d1:32:ad:25:93:78:c4:1a:
ed:bf:b8:49:3f:3b:cf:4f:58:78:d8:29:f4:25:4c:
9c:14:e1:3b:bd:b4:a9:86:32:3c:a6:91:4f:59:4d:
01:77:9e:d7:38:84:ac:30:89:36:56:37:e4:e0:3d:
58:42:22:6a:71:bd:c0:2d:19:6f:73:91:29:ea:be:
fb:bb:5a:51:d7:44:79:dc:cc:13:8d:81:f8:0f:9f:
98:48:14:75:63:a5:c8:9a:c8:54:2b:9f:93:c9:7a:
8a:79:39:db:bb:37:53:08:24:3a:1d:26:2b:29:b0:
37:36:6b:01:7e:26:10:09:c4:b4:eb:67:ae:59:04:
6c:4c:31:10:65:38:21:49:d1:0f:52:84:2f:6f:ca:
91:c8:35:fe:63:ec:d0:20:b2:95:ed:ca:c2:96:00:
0a:53:fe:e1:ad:96:ee:61:52:84:b9:70:ea:88:6b:
18:45:57:e9:5d:3e:a8:17:cd:74:8a:50:8e:f2:5c:
2a:01:0e:44:3b:2c:35:89:e2:59:1f:d7:41:1a:d6:
66:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A4:F2:23:56:B6:AE:29:F2:B6:CF:A7:5B:9A:5D:77:D0:C3:E0:0E
X509v3 Authority Key Identifier:
keyid:E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c9:1c:cc:68:94:29:22:89:05:96:1f:8a:a0:9e:24:c4:06:
46:51:b0:cc:3a:3f:40:f3:56:12:02:13:04:ac:e8:fe:59:e3:
ee:a1:b2:89:40:0f:b5:ff:37:d1:7a:27:e9:16:92:1e:ac:fc:
2d:90:38:4f:9d:89:a1:f1:88:d5:fd:34:96:cd:50:a5:93:d4:
07:5c:d6:b7:27:81:ed:22:d9:77:82:14:89:27:30:e2:0c:5d:
f6:59:cc:26:ab:e4:dd:d5:eb:33:7b:3d:3a:95:5d:1c:70:88:
50:dc:8e:2e:c6:f9:1c:fb:d0:23:fc:89:6b:be:53:7d:a3:0d:
ca:2e:51:a1:54:9c:72:62:4c:f0:15:e2:62:0f:b2:b7:1e:d1:
de:49:cf:47:c5:6d:79:62:84:cf:f2:98:15:d1:93:61:aa:b2:
12:50:2a:35:96:a5:fe:e4:ce:56:5c:aa:d2:a4:bb:6f:4b:4f:
cd:a0:f1:38:9b:ea:b6:50:ae:03:64:d1:f0:87:30:a0:1b:65:
26:eb:aa:3c:18:af:4b:e6:64:ea:bf:ee:dd:5d:9a:2f:fd:d9:
9f:43:c2:91:98:f9:8a:4a:f2:55:2a:eb:be:a0:5c:dc:46:07:
52:91:35:1c:46:61:bd:0c:a3:07:c7:99:08:ee:93:b9:5b:8a:
d4:14:a1:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tkxb1zLesYUhvT+B1jOTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNWEyZGFjZjVkZDRlOWJmYTJkMmQ5YjJkM2MzZjk2Nzg3
NDU4NDEwHhcNMjUwMTMxMTcwMDEyWhcNMjUwMjAxMTcwMDEyWjAzMTEwLwYDVQQD
EyhiYWE0ZjIyMzU2YjZhZTI5ZjJiNmNmYTc1YjlhNWQ3N2QwYzNlMDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3BXap2zQ4nGvo5DkqwOff1H45oo
bJYQmkZCN1w5mwttGsyT6Wr33D8UYLfFU5J5hYDv0TKtJZN4xBrtv7hJPzvPT1h4
2Cn0JUycFOE7vbSphjI8ppFPWU0Bd57XOISsMIk2Vjfk4D1YQiJqcb3ALRlvc5Ep
6r77u1pR10R53MwTjYH4D5+YSBR1Y6XImshUK5+TyXqKeTnbuzdTCCQ6HSYrKbA3
NmsBfiYQCcS062euWQRsTDEQZTghSdEPUoQvb8qRyDX+Y+zQILKV7crClgAKU/7h
rZbuYVKEuXDqiGsYRVfpXT6oF810ilCO8lwqAQ5EOyw1ieJZH9dBGtZmBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqk8iNWtq4p8rbPp1uaXXfQw+AOMB8GA1UdIwQY
MBaAFOBaLaz13U6b+i0tmy08P5Z4dFhBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZvdHJQWGRUcHY2TFMyYkxUd19sbmgwV0VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8wMTAwMGItYWE5Ni00YmM2LThjYzEt
YWYwN2E5ZTg3ZmMwLzEvNEZvdHJQWGRUcHY2TFMyYkxUd19sbmgwV0VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8wMTAwMGItYWE5Ni00YmM2LThjYzEtYWYwN2E5ZTg3ZmMw
LzEvNEZvdHJQWGRUcHY2TFMyYkxUd19sbmgwV0VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhMkczGiU
KSKJBZYfiqCeJMQGRlGwzDo/QPNWEgITBKzo/lnj7qGyiUAPtf830Xon6RaSHqz8
LZA4T52JofGI1f00ls1QpZPUB1zWtyeB7SLZd4IUiScw4gxd9lnMJqvk3dXrM3s9
OpVdHHCIUNyOLsb5HPvQI/yJa75TfaMNyi5RoVSccmJM8BXiYg+ytx7R3knPR8Vt
eWKEz/KYFdGTYaqyElAqNZal/uTOVlyq0qS7b0tPzaDxOJvqtlCuA2TR8IcwoBtl
JuuqPBivS+Zk6r/u3V2aL/3Zn0PCkZj5ikryVSrrvqBc3EYHUpE1HEZhvQyjB8eZ
CO6TuVuK1BShAw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:34 2025 by rpki-client