Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
File: cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft (raw, json)
Hash identifier: MQ/t1ykGnHRyAi0Au3tFzng+eAr0xvYI0BiwSmrh1UI=
Subject key identifier: 34:AC:3B:9A:D3:18:02:B0:C4:43:BF:2C:55:08:B5:CE:A2:F3:F6:50
Authority key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
Certificate issuer: /CN=703c48ed46cb79490e1662db01c31d02d02effe2
Certificate serial: 0194BBCE0C83ECB3825EF84DDB62569B73E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
Manifest number: 0F6E
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: PpEWGz-OwlSLlk0QHrICVTcwUWc.roa (hash: WptBbhD5BCS6QBVvLotY3hLMhEGQcn9whh44ucm6M50=)
2: cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl (hash: I1gVCwRd610TmFIWxYNtjHSnyYLIZ3pHm0OveWZxwjg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0c:83:ec:b3:82:5e:f8:4d:db:62:56:9b:73:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703c48ed46cb79490e1662db01c31d02d02effe2
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=34ac3b9ad31802b0c443bf2c5508b5cea2f3f650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fe:1f:e0:33:6d:6f:b6:23:bc:8d:4e:c5:c6:
8e:47:90:47:29:0a:fd:2b:45:5a:5e:8b:c2:e8:0e:
61:ab:bd:86:58:ee:a4:6e:f9:11:da:c0:6d:19:61:
65:01:e1:f0:d3:dd:fd:10:c4:bb:ec:b2:db:52:b9:
e4:08:3a:64:f0:0b:71:bd:1d:a5:62:d0:1b:61:d0:
10:4a:72:fe:3b:21:4b:af:20:97:e4:d5:c2:9e:87:
8f:64:35:62:d0:37:93:99:48:6a:b4:95:eb:7e:2f:
d9:f8:a8:06:40:77:a2:90:d0:9d:d1:ac:46:a6:0a:
0e:c6:f7:c0:6e:4b:f2:7e:1c:40:91:21:d2:02:90:
47:14:14:cf:5a:52:dd:df:ec:88:cd:12:02:9b:97:
ac:40:f8:c8:7c:3a:67:69:0f:4c:51:2a:84:81:3d:
c0:10:23:81:3f:6b:f4:e8:10:e6:d5:46:94:3c:e0:
22:3d:4c:e2:16:38:29:cb:47:81:96:c2:6b:52:6f:
19:40:0d:d6:83:4d:25:3c:86:7d:98:83:39:58:53:
19:42:7b:89:f8:4e:99:ee:fd:18:f6:e2:ef:6c:1d:
d7:5f:79:a1:72:db:89:e6:d8:10:e1:ef:d5:b7:ba:
d0:5f:43:fd:09:12:b7:3a:44:58:8b:94:63:e5:a5:
c0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AC:3B:9A:D3:18:02:B0:C4:43:BF:2C:55:08:B5:CE:A2:F3:F6:50
X509v3 Authority Key Identifier:
keyid:70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b9:6c:d3:5d:05:db:36:74:dd:79:84:df:2c:a1:c9:67:33:
b4:6c:b4:a6:a2:39:71:5a:12:3e:46:3b:a9:7f:74:3f:f4:76:
71:8b:13:2b:7b:ae:9b:59:ab:54:90:48:4a:9d:cd:69:36:ad:
d0:81:ea:d9:96:bc:6c:ab:d1:94:3d:57:2a:a5:48:54:cc:f4:
a2:cb:d0:4f:a2:6d:e1:32:1a:d1:16:30:04:cb:31:71:30:92:
1f:79:4c:97:51:bd:96:6f:24:83:a0:a6:d8:96:4d:f5:cc:fe:
bd:c3:3e:8b:4c:9e:bb:e4:ee:2d:d3:5b:3a:57:5a:59:11:b6:
7a:ea:38:b9:b0:93:43:e0:b1:a8:d1:22:1e:9d:5d:eb:b5:ad:
8a:6c:3a:de:b4:bc:34:de:75:3d:c4:1e:35:88:17:11:db:60:
d0:d7:12:c1:4f:b1:11:99:75:b1:70:7b:15:ae:df:f6:ea:22:
21:4c:d6:73:1c:a3:44:a0:07:bd:4a:5a:7c:90:37:23:b8:06:
63:5b:e9:c2:23:7c:a9:0b:3f:ef:ea:63:69:f9:24:85:d9:94:
e5:fa:83:e7:63:a5:ad:ad:a5:b6:90:3f:aa:f1:21:66:aa:90:
2e:3c:d7:07:ac:f8:8f:8b:ac:d1:0e:f7:2d:8f:33:5e:d6:84:
d1:c3:d1:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zgyD7LOCXvhN22JWm3PkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwM2M0OGVkNDZjYjc5NDkwZTE2NjJkYjAxYzMxZDAyZDAy
ZWZmZTIwHhcNMjUwMTMxMTAwMDMwWhcNMjUwMjAxMTAwMDMwWjAzMTEwLwYDVQQD
EygzNGFjM2I5YWQzMTgwMmIwYzQ0M2JmMmM1NTA4YjVjZWEyZjNmNjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP4f4DNtb7YjvI1OxcaOR5BHKQr9
K0VaXovC6A5hq72GWO6kbvkR2sBtGWFlAeHw0939EMS77LLbUrnkCDpk8AtxvR2l
YtAbYdAQSnL+OyFLryCX5NXCnoePZDVi0DeTmUhqtJXrfi/Z+KgGQHeikNCd0axG
pgoOxvfAbkvyfhxAkSHSApBHFBTPWlLd3+yIzRICm5esQPjIfDpnaQ9MUSqEgT3A
ECOBP2v06BDm1UaUPOAiPUziFjgpy0eBlsJrUm8ZQA3Wg00lPIZ9mIM5WFMZQnuJ
+E6Z7v0Y9uLvbB3XX3mhctuJ5tgQ4e/Vt7rQX0P9CRK3OkRYi5Rj5aXAJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSsO5rTGAKwxEO/LFUItc6i8/ZQMB8GA1UdIwQY
MBaAFHA8SO1Gy3lJDhZi2wHDHQLQLv/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0R4STdVYkxlVWtPRm1MYkFjTWRBdEF1Xy1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kYTFjNDMtMTkxNi00NmFlLTg0OTEt
MzU4ODNhZjlhMzIzLzEvY0R4STdVYkxlVWtPRm1MYkFjTWRBdEF1Xy1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9kYTFjNDMtMTkxNi00NmFlLTg0OTEtMzU4ODNhZjlhMzIz
LzEvY0R4STdVYkxlVWtPRm1MYkFjTWRBdEF1Xy1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLls010F
2zZ03XmE3yyhyWcztGy0pqI5cVoSPkY7qX90P/R2cYsTK3uum1mrVJBISp3NaTat
0IHq2Za8bKvRlD1XKqVIVMz0osvQT6Jt4TIa0RYwBMsxcTCSH3lMl1G9lm8kg6Cm
2JZN9cz+vcM+i0yeu+TuLdNbOldaWRG2euo4ubCTQ+CxqNEiHp1d67Wtimw63rS8
NN51PcQeNYgXEdtg0NcSwU+xEZl1sXB7Fa7f9uoiIUzWcxyjRKAHvUpafJA3I7gG
Y1vpwiN8qQs/7+pjafkkhdmU5fqD52Olra2ltpA/qvEhZqqQLjzXB6z4j4us0Q73
LY8zXtaE0cPR2Q==
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:39:41 2025 by rpki-client