Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
File: POoeqIfc7-5hNhVbi9gzkpN8FnE.mft (raw, json)
Hash identifier: 4EcC1jHnEY0CqeA7poN5Dnn3tlXvYbX54jGqTy19NgE=
Subject key identifier: 70:FE:F6:1C:2F:3D:88:30:0C:A1:9C:2E:D4:C4:EA:B0:41:3F:DF:D4
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 0194BBCE0CD349EDB6B9831CFDDDC463A889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
Manifest number: 08D3
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: 5pbhFrbv6p0fxLITgiU8s5OQtVw.roa (hash: MoawBbuqETIT5X2tb8EXLXxGAQEcqFB39pjZprw8koc=)
2: POoeqIfc7-5hNhVbi9gzkpN8FnE.crl (hash: ZAWEGGQIJ2QNYFR1J2arHrFNuX3o0uGnFrKxQc+GxGU=)
3: aBfkfMsI6RfN5EaoDQWlcn2H95I.roa (hash: kUHTcNhwAMf+AKKhL303auY/4FQ8RuznlrI+X0c8dok=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0c:d3:49:ed:b6:b9:83:1c:fd:dd:c4:63:a8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=70fef61c2f3d88300ca19c2ed4c4eab0413fdfd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bf:9e:49:4d:eb:ea:d2:12:9b:90:88:4a:b7:
d9:ce:cb:36:ae:14:3e:11:60:a2:63:e8:56:db:3f:
e0:e6:21:ee:ee:2d:93:e0:c1:99:86:e8:dc:94:45:
1f:bf:61:c7:67:49:9a:53:c7:bc:2e:14:8e:17:8a:
85:f0:c7:5e:48:42:27:6e:18:35:9c:7e:7d:b4:8c:
92:d0:92:e7:6e:7b:c9:e8:31:c4:19:85:12:23:17:
8d:18:e1:c4:a8:9f:36:e1:11:04:57:3e:50:36:0e:
ce:22:4f:9f:2e:6d:af:b2:54:ab:2c:9a:a8:c5:8d:
78:22:a8:7f:b6:b6:7b:20:6d:8f:e4:22:38:fd:c4:
df:9f:39:b8:a8:38:91:9a:ff:b7:2a:64:02:c7:e4:
dc:73:8e:72:e0:2d:ee:19:45:f6:75:b9:dd:7d:5f:
d2:d7:88:f3:df:5c:c2:2e:11:27:ee:9b:1d:7c:63:
f8:4b:de:40:09:67:a3:ac:7e:59:5c:c2:28:7d:aa:
6d:4b:e7:e0:68:9c:65:4b:a8:b7:5d:b1:7a:40:fc:
78:c6:b5:63:a9:73:55:04:61:13:69:de:e1:09:27:
6a:22:14:07:c1:19:fd:4e:30:47:55:a3:47:04:78:
73:46:cd:26:d8:07:bf:2a:75:af:6b:ab:93:3c:f3:
eb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FE:F6:1C:2F:3D:88:30:0C:A1:9C:2E:D4:C4:EA:B0:41:3F:DF:D4
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:79:17:ac:08:cb:7d:68:e1:e6:96:f3:f2:a0:39:c9:d2:1a:
be:30:a2:c1:1f:1d:53:8d:af:9e:b5:cc:3b:66:59:7d:81:5f:
18:7c:02:5e:d8:66:21:3d:c9:89:d8:b7:9b:88:49:03:2e:c6:
61:21:77:b5:03:e0:0d:03:b9:30:29:8a:aa:61:8b:1a:a3:d4:
03:e3:21:64:17:b3:e3:69:35:b1:a6:72:9a:e2:06:0b:c4:10:
91:6c:1d:ee:1e:c4:84:61:f0:47:df:d7:6e:08:cb:3f:0d:22:
6e:48:25:58:37:c7:6e:28:71:7b:9f:fb:3d:7b:66:ec:37:7e:
0e:d9:5c:04:f5:26:e1:a1:46:06:5b:f9:92:ab:29:9f:47:12:
4f:36:d7:54:5d:25:8f:30:97:b5:8c:f7:a5:2b:9a:5d:d5:d4:
35:56:79:28:8a:0d:22:f8:50:4b:b3:a9:38:5e:38:8c:37:80:
f7:b6:1e:f6:c0:91:2c:79:e3:f4:95:78:24:0c:42:f0:f2:34:
de:4c:89:34:dc:1c:bd:ce:21:38:de:73:81:b2:32:37:f1:9e:
53:c5:67:3e:7a:db:38:da:99:b1:43:19:21:8d:5f:4a:1e:bf:
a5:dc:ec:16:ed:9f:91:b9:d3:dc:33:98:8b:19:9d:0e:c6:63:
02:b2:ab:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zgzTSe22uYMc/d3EY6iJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZWExZWE4ODdkY2VmZWU2MTM2MTU1YjhiZDgzMzkyOTM3
YzE2NzEwHhcNMjUwMTMxMTAwMDMwWhcNMjUwMjAxMTAwMDMwWjAzMTEwLwYDVQQD
Eyg3MGZlZjYxYzJmM2Q4ODMwMGNhMTljMmVkNGM0ZWFiMDQxM2ZkZmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7+eSU3r6tISm5CISrfZzss2rhQ+
EWCiY+hW2z/g5iHu7i2T4MGZhujclEUfv2HHZ0maU8e8LhSOF4qF8MdeSEInbhg1
nH59tIyS0JLnbnvJ6DHEGYUSIxeNGOHEqJ824REEVz5QNg7OIk+fLm2vslSrLJqo
xY14Iqh/trZ7IG2P5CI4/cTfnzm4qDiRmv+3KmQCx+Tcc45y4C3uGUX2dbndfV/S
14jz31zCLhEn7psdfGP4S95ACWejrH5ZXMIofaptS+fgaJxlS6i3XbF6QPx4xrVj
qXNVBGETad7hCSdqIhQHwRn9TjBHVaNHBHhzRs0m2Ae/KnWva6uTPPPrcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHD+9hwvPYgwDKGcLtTE6rBBP9/UMB8GA1UdIwQY
MBaAFDzqHqiH3O/uYTYVW4vYM5KTfBZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgt
YjY0Y2FiNGJiZGZmLzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgtYjY0Y2FiNGJiZGZm
LzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyHkXrAjL
fWjh5pbz8qA5ydIavjCiwR8dU42vnrXMO2ZZfYFfGHwCXthmIT3Jidi3m4hJAy7G
YSF3tQPgDQO5MCmKqmGLGqPUA+MhZBez42k1saZymuIGC8QQkWwd7h7EhGHwR9/X
bgjLPw0ibkglWDfHbihxe5/7PXtm7Dd+DtlcBPUm4aFGBlv5kqspn0cSTzbXVF0l
jzCXtYz3pSuaXdXUNVZ5KIoNIvhQS7OpOF44jDeA97Ye9sCRLHnj9JV4JAxC8PI0
3kyJNNwcvc4hON5zgbIyN/GeU8VnPnrbONqZsUMZIY1fSh6/pdzsFu2fkbnT3DOY
ixmdDsZjArKrhA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 15:13:03 2025 by rpki-client