Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
File: 0Dxztg8hA-47Kiw8vpIOISqS7mU.mft (raw, json)
Hash identifier: 1JzYxgX4gCsQ93No5l3pXV4znO9DrODyRhxa/ymnkdY=
Subject key identifier: C0:79:A8:66:04:77:69:35:48:F6:74:14:E7:29:9C:1B:A8:9F:6A:B9
Authority key identifier: D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
Certificate issuer: /CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Certificate serial: 0194BC0501C78A0EE2277587D6BEAD3812CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
Manifest number: 0391
Signing time: Fri 31 Jan 2025 11:00:32 +0000
Manifest this update: Fri 31 Jan 2025 11:00:32 +0000
Manifest next update: Sat 01 Feb 2025 11:00:32 +0000
Files and hashes: 1: 0Dxztg8hA-47Kiw8vpIOISqS7mU.crl (hash: xLkgJRQoZN1TL/EcOuJS3Jr4oBh772GEHtot3Y4lIvc=)
2: hkEEBeSBNTyx105gMqinOhr6zBc.roa (hash: quUJq0tHtG6vnMQ86E6ZCMcfr4ctD+gvtACQTeGqyEo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:01:c7:8a:0e:e2:27:75:87:d6:be:ad:38:12:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Validity
Not Before: Jan 31 11:00:32 2025 GMT
Not After : Feb 1 11:00:32 2025 GMT
Subject: CN=c079a8660477693548f67414e7299c1ba89f6ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:14:00:de:4a:14:b3:73:16:23:86:b5:1e:cc:
5c:0c:a1:c0:ab:a8:5b:3d:2b:9f:fd:06:fd:3c:f7:
d8:dc:c7:d8:cf:27:3f:d6:59:15:94:5b:ae:7c:df:
a0:cd:ff:89:53:cf:9b:0a:46:0d:48:ab:c3:af:42:
c7:62:59:82:4c:82:d9:f1:6b:af:4c:7b:27:33:22:
ce:58:82:7f:ac:16:87:f0:76:ed:05:a7:89:ef:b5:
08:2e:ea:46:25:9c:81:65:0c:62:ab:92:95:29:62:
f4:b5:e5:a5:40:ef:ae:80:41:7f:75:0b:31:0a:bd:
28:21:b9:f2:bf:1c:71:53:01:b6:a1:44:01:58:06:
c7:97:ca:32:ee:f2:67:10:c0:43:c0:f2:6d:0f:b7:
89:be:45:4a:40:e3:f6:ca:46:df:42:11:c5:5d:62:
06:8b:82:80:e9:db:f5:1a:96:96:19:de:ed:c5:95:
3f:23:64:16:b1:14:54:98:ad:4c:01:7d:70:02:cf:
1d:ac:32:b3:ac:27:82:54:f9:74:b2:24:5f:27:9a:
5c:37:9f:d6:5a:9d:2c:00:e2:bb:44:c3:c6:69:05:
8d:47:27:5d:ff:a0:0d:c1:fc:fa:7d:a8:e5:5f:81:
7c:99:7d:77:59:e1:0a:a7:01:8c:cd:65:82:03:b8:
e8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:79:A8:66:04:77:69:35:48:F6:74:14:E7:29:9C:1B:A8:9F:6A:B9
X509v3 Authority Key Identifier:
keyid:D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:78:12:fe:f4:10:e0:b0:ee:16:3d:14:0a:40:1d:17:7f:c4:
56:e4:52:4b:30:2b:78:b6:ff:4b:e9:c7:2f:6b:64:2f:d5:05:
3c:c5:7f:0c:6c:84:7e:b1:ea:6b:7e:4b:15:d8:bc:cd:df:c4:
ea:ab:5c:10:a2:14:98:3b:45:89:8a:1a:eb:f4:ae:fc:7c:5c:
a4:f1:f2:ac:04:c4:3e:17:5f:2b:ac:29:fa:08:b9:3a:a6:d7:
da:87:fc:65:b4:54:0e:4b:a0:e7:19:a1:38:13:99:22:dc:c4:
c3:e9:78:60:b7:5d:6f:f6:2d:57:75:70:6b:86:30:34:32:89:
70:0e:b1:1c:b8:86:a3:96:5c:a3:18:ea:aa:4f:01:ba:16:54:
5e:90:cf:c0:e9:e9:36:bd:5a:f9:05:33:26:30:50:10:58:55:
0d:53:4d:9f:57:76:29:bd:f3:3e:a7:1f:c5:df:91:75:d4:7c:
30:27:a6:9b:7d:c8:09:e8:3b:d3:95:42:3f:d1:c3:2d:40:36:
e2:2c:74:d1:2c:dc:ac:e9:c4:ce:1f:a5:40:74:e7:97:b7:35:
ce:1d:b4:fd:8f:ef:a3:5c:52:0e:36:c6:5a:81:36:28:e2:bc:
f4:a6:72:8d:61:ff:d7:56:46:87:a9:50:a5:52:7f:d1:cf:58:
97:f9:7a:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BQHHig7iJ3WH1r6tOBLNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwM2M3M2I2MGYyMTAzZWUzYjJhMmMzY2JlOTIwZTIxMmE5
MmVlNjUwHhcNMjUwMTMxMTEwMDMyWhcNMjUwMjAxMTEwMDMyWjAzMTEwLwYDVQQD
EyhjMDc5YTg2NjA0Nzc2OTM1NDhmNjc0MTRlNzI5OWMxYmE4OWY2YWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRQA3koUs3MWI4a1HsxcDKHAq6hb
PSuf/Qb9PPfY3MfYzyc/1lkVlFuufN+gzf+JU8+bCkYNSKvDr0LHYlmCTILZ8Wuv
THsnMyLOWIJ/rBaH8HbtBaeJ77UILupGJZyBZQxiq5KVKWL0teWlQO+ugEF/dQsx
Cr0oIbnyvxxxUwG2oUQBWAbHl8oy7vJnEMBDwPJtD7eJvkVKQOP2ykbfQhHFXWIG
i4KA6dv1GpaWGd7txZU/I2QWsRRUmK1MAX1wAs8drDKzrCeCVPl0siRfJ5pcN5/W
Wp0sAOK7RMPGaQWNRydd/6ANwfz6fajlX4F8mX13WeEKpwGMzWWCA7joUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMB5qGYEd2k1SPZ0FOcpnBuon2q5MB8GA1UdIwQY
MBaAFNA8c7YPIQPuOyosPL6SDiEqku5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMER4enRnOGhBLTQ3S2l3OHZwSU9JU3FTN21VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wMTExMzItZWFlMy00ZTlkLWI2ZjAt
NDZmMDA0YTE5NTkxLzEvMER4enRnOGhBLTQ3S2l3OHZwSU9JU3FTN21VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wMTExMzItZWFlMy00ZTlkLWI2ZjAtNDZmMDA0YTE5NTkx
LzEvMER4enRnOGhBLTQ3S2l3OHZwSU9JU3FTN21VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqHgS/vQQ
4LDuFj0UCkAdF3/EVuRSSzAreLb/S+nHL2tkL9UFPMV/DGyEfrHqa35LFdi8zd/E
6qtcEKIUmDtFiYoa6/Su/HxcpPHyrATEPhdfK6wp+gi5OqbX2of8ZbRUDkug5xmh
OBOZItzEw+l4YLddb/YtV3Vwa4YwNDKJcA6xHLiGo5Zcoxjqqk8BuhZUXpDPwOnp
Nr1a+QUzJjBQEFhVDVNNn1d2Kb3zPqcfxd+RddR8MCemm33ICeg705VCP9HDLUA2
4ix00SzcrOnEzh+lQHTnl7c1zh20/Y/vo1xSDjbGWoE2KOK89KZyjWH/11ZGh6lQ
pVJ/0c9Yl/l68w==
-----END CERTIFICATE-----
Generated at Tue Apr 29 17:43:19 2025 by rpki-client