Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
File: RK1W7mAdrD36Yd_lLL9bALe3opA.mft (raw, json)
Hash identifier: yHM/xNRJklbZJAs+MJIS9BeUX/o7IwA/Gv6Lfxjbfnk=
Subject key identifier: 11:04:0C:55:CA:CB:E2:08:01:81:26:4D:63:69:22:28:B5:D7:F9:5D
Authority key identifier: 44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
Certificate issuer: /CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
Certificate serial: 0194BCA9FAEC9BFE05671C527637ECA62319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
Manifest number: 081A
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: RK1W7mAdrD36Yd_lLL9bALe3opA.crl (hash: KIyZeMdI00j77P5rlA49jok0w0lWftVn8EzF7XiQnU4=)
2: lbF_l02xwlPuqyIyhvc-CUJUU3g.roa (hash: 7hIs2Gkxh47foaseC5DC1sFgdBVuaxJrQVf2xLhJkbc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fa:ec:9b:fe:05:67:1c:52:76:37:ec:a6:23:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=11040c55cacbe2080181264d63692228b5d7f95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fe:c0:22:c5:c4:73:77:22:d7:c0:ff:c4:83:
3f:a5:2e:bb:83:9f:d3:b1:0d:36:be:3a:0e:58:36:
99:79:b2:3c:90:6c:19:e7:39:1e:60:e9:f4:28:73:
74:31:ae:ba:3d:54:f5:48:6b:fa:f8:78:57:d8:d0:
ed:41:2f:c6:be:aa:09:12:13:4d:a8:0f:e9:99:15:
df:c4:76:c3:93:83:41:49:3a:e4:0c:9e:3a:99:a0:
9e:20:7e:c5:60:ef:86:62:47:52:04:85:c4:60:48:
e3:25:bc:3b:e0:7c:74:25:02:0d:3f:aa:0e:5f:5e:
cc:a5:1f:5f:5f:fb:fb:75:72:35:50:87:32:10:d9:
ce:8f:02:92:bb:43:95:82:69:d9:9f:e5:12:fa:e5:
12:03:8f:08:b5:d9:62:b2:5e:cd:b6:98:d5:21:66:
e9:f1:ba:03:a8:fb:77:6e:5b:c4:9e:1e:cd:bd:da:
d3:fd:27:b0:ae:1d:34:be:76:73:b5:ef:7b:0d:f1:
78:fc:c6:b9:2e:8c:a6:af:a9:21:bf:3a:62:e9:9a:
e5:6b:43:60:b3:2d:15:01:4a:88:0b:a8:aa:ea:4b:
c6:3e:47:02:e9:33:9b:ec:52:a3:24:ca:07:71:c5:
25:03:14:3f:95:b8:89:4b:fd:22:e0:2f:51:5f:af:
d2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:04:0C:55:CA:CB:E2:08:01:81:26:4D:63:69:22:28:B5:D7:F9:5D
X509v3 Authority Key Identifier:
keyid:44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:45:ac:5a:8a:a6:bd:06:9d:59:b5:cc:61:79:5e:72:cb:ee:
0a:43:d2:20:de:55:fe:a1:fe:fe:e6:30:ba:01:66:4a:a8:50:
eb:f0:2b:01:f8:50:75:d3:30:8a:56:9c:1f:d6:78:9a:06:dd:
02:32:09:cf:4b:5f:4a:b2:a3:03:c2:14:59:d0:36:a7:c5:3b:
79:e4:98:1b:5b:a1:a5:f6:7a:83:b3:8c:54:4a:19:1b:cf:61:
bc:23:a7:a6:e5:ed:64:fd:76:2e:48:f3:a8:8e:08:7b:5f:6d:
56:2c:4c:11:43:10:41:71:08:2a:20:22:49:bb:86:a2:d6:ee:
8d:2e:ea:cd:b5:21:66:58:39:2e:27:0b:e6:92:ae:40:f7:20:
52:40:b1:da:77:a2:8d:b3:58:18:13:96:5f:aa:d9:a3:f9:74:
8e:24:dd:50:0c:95:47:d8:c6:18:5d:0e:70:7c:82:c4:48:28:
dd:b2:7c:71:c4:65:ad:c3:d0:a9:b5:ff:89:92:74:f5:3b:54:
ea:7d:41:fa:24:40:3c:a9:53:98:dd:7f:6c:75:c8:17:18:3f:
ad:03:65:ef:b4:62:01:7a:e0:cc:9d:81:3c:04:e2:c3:e6:bc:
44:e7:d0:5f:32:c2:cf:cf:a5:61:6b:a8:81:02:b5:b3:09:bb:
92:82:9f:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qfrsm/4FZxxSdjfspiMZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YWQ1NmVlNjAxZGFjM2RmYTYxZGZlNTJjYmY1YjAwYjdi
N2EyOTAwHhcNMjUwMTMxMTQwMDQzWhcNMjUwMjAxMTQwMDQzWjAzMTEwLwYDVQQD
EygxMTA0MGM1NWNhY2JlMjA4MDE4MTI2NGQ2MzY5MjIyOGI1ZDdmOTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2f7AIsXEc3ci18D/xIM/pS67g5/T
sQ02vjoOWDaZebI8kGwZ5zkeYOn0KHN0Ma66PVT1SGv6+HhX2NDtQS/GvqoJEhNN
qA/pmRXfxHbDk4NBSTrkDJ46maCeIH7FYO+GYkdSBIXEYEjjJbw74Hx0JQINP6oO
X17MpR9fX/v7dXI1UIcyENnOjwKSu0OVgmnZn+US+uUSA48Itdlisl7NtpjVIWbp
8boDqPt3blvEnh7NvdrT/Sewrh00vnZzte97DfF4/Ma5Loymr6khvzpi6Zrla0Ng
sy0VAUqIC6iq6kvGPkcC6TOb7FKjJMoHccUlAxQ/lbiJS/0i4C9RX6/SUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEEDFXKy+IIAYEmTWNpIii11/ldMB8GA1UdIwQY
MBaAFEStVu5gHaw9+mHf5Sy/WwC3t6KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUksxVzdtQWRyRDM2WWRfbExMOWJBTGUzb3BBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9jZmE1YjAtNzk4OC00ZmU5LTlkZDUt
ZWVkMjA0ZWQ5NzgwLzEvUksxVzdtQWRyRDM2WWRfbExMOWJBTGUzb3BBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9jZmE1YjAtNzk4OC00ZmU5LTlkZDUtZWVkMjA0ZWQ5Nzgw
LzEvUksxVzdtQWRyRDM2WWRfbExMOWJBTGUzb3BBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAekWsWoqm
vQadWbXMYXlecsvuCkPSIN5V/qH+/uYwugFmSqhQ6/ArAfhQddMwilacH9Z4mgbd
AjIJz0tfSrKjA8IUWdA2p8U7eeSYG1uhpfZ6g7OMVEoZG89hvCOnpuXtZP12Lkjz
qI4Ie19tVixMEUMQQXEIKiAiSbuGotbujS7qzbUhZlg5LicL5pKuQPcgUkCx2nei
jbNYGBOWX6rZo/l0jiTdUAyVR9jGGF0OcHyCxEgo3bJ8ccRlrcPQqbX/iZJ09TtU
6n1B+iRAPKlTmN1/bHXIFxg/rQNl77RiAXrgzJ2BPATiw+a8ROfQXzLCz8+lYWuo
gQK1swm7koKffg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:50:19 2025 by rpki-client