Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
File: 1zCimUHvvHp5J_ApSB4scloaZxE.mft (raw, json)
Hash identifier: hNQi98y/M3KKpqLUPqDGsyYQIuoUMVLEkWmSqHuu0n0=
Subject key identifier: 07:E6:97:7E:E9:C5:F3:19:F9:47:C6:90:64:C1:04:BF:9E:C1:27:98
Authority key identifier: D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11
Certificate issuer: /CN=d730a29941efbc7a7927f029481e2c725a1a6711
Certificate serial: 0194BC3C3D811A35CEAF64BF7297A4DD07CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: 1zCimUHvvHp5J_ApSB4scloaZxE.crl (hash: DbNgNAiTGeFbxvqgFcDSYHfV2IGEI6+8kqElczsRZNg=)
2: v5B9bil7tlbUN50h6GDN8m6sKFE.roa (hash: 47YbpbDGbrGPtLvV/Gf30olGqwG6mqrNB3XSB3G5VQg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3d:81:1a:35:ce:af:64:bf:72:97:a4:dd:07:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d730a29941efbc7a7927f029481e2c725a1a6711
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=07e6977ee9c5f319f947c69064c104bf9ec12798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6b:8f:8d:05:8c:c4:78:5d:1b:54:64:ec:0c:
d5:61:28:8e:26:cc:af:36:ab:8d:be:b6:04:d9:bd:
d0:37:71:95:71:fe:b9:53:25:8d:1b:46:09:14:82:
6a:c3:a6:ae:c2:b1:79:02:90:d9:d9:fa:6f:95:e5:
7f:e2:28:c8:c8:f7:5b:3e:43:fa:44:21:f8:34:2b:
d9:b7:2d:1a:56:d2:c1:7d:a6:94:66:be:28:eb:2a:
98:e1:f6:28:38:51:92:f8:d2:af:38:6f:5a:01:55:
f2:07:93:12:54:75:96:6b:1c:35:99:eb:57:1b:04:
92:74:d1:5e:66:f6:9e:e2:94:20:98:b4:07:f5:a3:
44:f7:b2:74:76:75:64:81:2a:98:8e:d1:cb:df:25:
fa:8e:de:8a:ee:6a:e5:48:c0:c2:b2:b6:7b:4d:1d:
b1:4b:2c:28:a3:83:69:b3:41:85:f3:36:dc:95:ee:
1f:52:3d:91:16:d2:2e:28:8c:0d:09:07:69:3f:3f:
5e:32:72:63:ca:83:60:82:10:30:5a:c9:b0:97:51:
94:85:fd:2a:a1:16:08:06:aa:5f:40:95:f3:85:1a:
ef:1a:55:e9:45:df:7d:0a:17:e1:2b:90:df:32:39:
aa:14:cc:b6:2c:2a:11:ae:35:dc:14:70:44:07:40:
20:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E6:97:7E:E9:C5:F3:19:F9:47:C6:90:64:C1:04:BF:9E:C1:27:98
X509v3 Authority Key Identifier:
keyid:D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6a:4a:b4:e7:4f:40:29:f6:75:3d:bb:db:8f:d5:8e:e1:bf:
31:80:e7:4b:ad:8f:32:4b:d0:6a:5d:a5:40:02:f2:40:7f:1f:
b9:52:8e:ae:2e:ca:18:87:6a:72:c7:fc:c9:4e:12:31:3e:57:
f7:80:ce:b9:a4:f3:2b:89:57:c1:dc:74:f8:8c:77:c3:68:5c:
2a:3a:e4:8a:17:cf:15:da:4b:5a:f4:9c:01:76:da:c1:10:04:
a5:a1:98:02:17:a4:bb:ad:a2:c2:25:76:c8:a1:4b:5f:54:f2:
0f:7b:bd:a7:5b:12:f4:13:9e:67:03:6f:c8:40:58:ca:93:64:
07:f2:6f:e8:b0:5f:51:0e:55:9d:8d:5e:a6:75:37:47:60:f4:
91:cf:44:68:f2:e3:46:e5:e7:79:c6:61:a5:10:91:f4:cd:7f:
f7:54:eb:de:f8:40:52:76:69:82:ec:b8:38:2a:e9:85:e5:6f:
0d:03:3e:3b:31:6a:d8:ce:45:4e:b2:34:2d:13:c0:31:be:90:
6e:96:a0:ae:f8:52:cb:71:88:58:76:b5:91:e9:ba:ab:34:7a:
c6:b3:4c:fd:2b:ef:35:7a:9d:93:e2:5d:d9:8a:d7:27:fb:a4:
4f:49:41:37:1c:5b:9c:01:9b:5c:f9:23:06:1b:1a:c4:87:22:
5d:9f:44:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PD2BGjXOr2S/cpek3QfKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MzBhMjk5NDFlZmJjN2E3OTI3ZjAyOTQ4MWUyYzcyNWEx
YTY3MTEwHhcNMjUwMTMxMTIwMDUyWhcNMjUwMjAxMTIwMDUyWjAzMTEwLwYDVQQD
EygwN2U2OTc3ZWU5YzVmMzE5Zjk0N2M2OTA2NGMxMDRiZjllYzEyNzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGuPjQWMxHhdG1Rk7AzVYSiOJsyv
NquNvrYE2b3QN3GVcf65UyWNG0YJFIJqw6auwrF5ApDZ2fpvleV/4ijIyPdbPkP6
RCH4NCvZty0aVtLBfaaUZr4o6yqY4fYoOFGS+NKvOG9aAVXyB5MSVHWWaxw1metX
GwSSdNFeZvae4pQgmLQH9aNE97J0dnVkgSqYjtHL3yX6jt6K7mrlSMDCsrZ7TR2x
Sywoo4Nps0GF8zbcle4fUj2RFtIuKIwNCQdpPz9eMnJjyoNgghAwWsmwl1GUhf0q
oRYIBqpfQJXzhRrvGlXpRd99ChfhK5DfMjmqFMy2LCoRrjXcFHBEB0Ag+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfml37pxfMZ+UfGkGTBBL+ewSeYMB8GA1UdIwQY
MBaAFNcwoplB77x6eSfwKUgeLHJaGmcRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXpDaW1VSHZ2SHA1Sl9BcFNCNHNjbG9hWnhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82NGM1YTktYjM3OS00OTk5LWFmN2Et
M2MwZmExOGM1OGNiLzEvMXpDaW1VSHZ2SHA1Sl9BcFNCNHNjbG9hWnhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi82NGM1YTktYjM3OS00OTk5LWFmN2EtM2MwZmExOGM1OGNi
LzEvMXpDaW1VSHZ2SHA1Sl9BcFNCNHNjbG9hWnhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFmpKtOdP
QCn2dT2724/VjuG/MYDnS62PMkvQal2lQALyQH8fuVKOri7KGIdqcsf8yU4SMT5X
94DOuaTzK4lXwdx0+Ix3w2hcKjrkihfPFdpLWvScAXbawRAEpaGYAheku62iwiV2
yKFLX1TyD3u9p1sS9BOeZwNvyEBYypNkB/Jv6LBfUQ5VnY1epnU3R2D0kc9EaPLj
RuXnecZhpRCR9M1/91Tr3vhAUnZpguy4OCrpheVvDQM+OzFq2M5FTrI0LRPAMb6Q
bpagrvhSy3GIWHa1kem6qzR6xrNM/SvvNXqdk+Jd2YrXJ/ukT0lBNxxbnAGbXPkj
BhsaxIciXZ9EqA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:03 2025 by rpki-client