Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json)
Hash identifier: nkJ9CPIH7BOTvzOJRxtBz3F+xbp7nfGFdGT2RpE5Ch4=
Subject key identifier: 1F:42:D9:72:D4:C7:B5:C3:2D:6B:1C:E5:F2:75:DB:ED:87:9C:CA:B3
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial: 0194BC72C5CC8457EC40BC4159CF7C6C9203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
Manifest number: 0EC1
Signing time: Fri 31 Jan 2025 13:00:25 +0000
Manifest this update: Fri 31 Jan 2025 13:00:25 +0000
Manifest next update: Sat 01 Feb 2025 13:00:25 +0000
Files and hashes: 1: 1NP21bBcjBPyQEY2JxKMTy8KWnI.roa (hash: nEpG5QclJFuSzinXm1Th0RF7eqEVbPT7VUvAfBWJ6uw=)
2: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: zJia9cgJz220eDI4boNqKEBVFDFgFih8LKQNWSOCShE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c5:cc:84:57:ec:40:bc:41:59:cf:7c:6c:92:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Validity
Not Before: Jan 31 13:00:25 2025 GMT
Not After : Feb 1 13:00:25 2025 GMT
Subject: CN=1f42d972d4c7b5c32d6b1ce5f275dbed879ccab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:7e:fa:2d:f1:b4:da:a0:36:d1:df:77:09:
78:a7:57:54:76:a9:1b:90:b8:ac:fa:bd:c9:38:37:
40:9f:96:68:19:f2:2c:e3:18:69:89:79:fb:8b:09:
3a:dd:05:74:bc:ed:2f:e0:11:0c:cc:cd:ea:3e:c6:
9d:ba:44:58:7d:cd:0f:ab:f8:f8:ea:a1:f7:2f:a9:
bb:7c:65:6b:d5:56:0f:7d:55:01:c3:4c:c7:ec:d7:
5b:18:5a:39:6e:82:be:cd:53:fa:3b:87:7a:81:62:
1a:c5:81:95:76:98:56:d7:72:5c:b6:f8:ac:0d:ce:
b0:6c:49:ca:b5:2c:17:d2:fa:1b:4e:de:0b:a2:ef:
dd:62:cc:f7:5a:02:b7:2d:91:8d:f3:f5:da:ac:a2:
5e:31:9a:88:c2:02:23:57:aa:41:0d:d7:99:b8:e3:
a1:f7:c3:14:55:f9:2b:76:47:25:11:ae:3a:d7:3a:
04:81:86:c9:75:6f:21:ad:65:ef:c8:16:fe:78:e8:
1c:d0:41:fd:60:10:94:b9:eb:61:fb:39:07:26:4b:
d5:a3:ef:a4:b3:1a:e0:48:a4:fa:ad:13:c8:18:e1:
a2:ff:5f:c7:fc:6a:ac:16:d6:23:39:ee:00:25:dc:
f9:b7:c4:89:fb:07:cd:81:3a:82:9d:99:40:fb:b2:
d5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:42:D9:72:D4:C7:B5:C3:2D:6B:1C:E5:F2:75:DB:ED:87:9C:CA:B3
X509v3 Authority Key Identifier:
keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e3:a8:9e:c8:c4:81:fe:48:97:46:e4:0b:71:2f:1e:45:ca:
55:0d:0c:1f:ba:9e:27:1d:de:e7:cd:9d:ca:34:6f:00:f3:f0:
d0:87:4f:e3:40:17:bd:b4:f7:a9:fc:54:a6:ae:6b:c1:08:67:
0d:71:01:1b:c0:39:e7:6a:63:37:ac:ad:f5:e1:aa:70:07:a1:
17:5a:56:e3:e4:a7:33:0a:d1:5f:25:b9:80:c0:d2:ee:ae:65:
17:fe:10:d9:3e:b8:2e:69:f6:d1:cf:61:5c:4c:cd:cf:c3:40:
15:09:89:f3:e4:55:b4:cb:ba:e1:60:6d:16:d0:30:3f:f4:81:
2d:fc:e5:c7:b5:14:02:dd:78:45:6e:2b:68:57:97:16:fb:6e:
7e:e0:92:b8:e1:b4:ba:3a:ed:23:43:e2:6f:44:b6:fe:5b:43:
88:4c:8c:c8:76:7d:df:a5:d0:22:62:9b:cc:15:8f:dd:00:f4:
f9:c4:7d:69:16:95:4d:e7:1c:70:b9:65:43:1e:3a:e1:53:26:
19:87:e8:ba:c5:87:54:8c:35:cb:8f:7d:bc:5e:e9:22:87:ac:
e3:05:3f:9e:b4:fd:69:68:27:cb:bc:55:78:a5:66:5c:89:d4:
df:2e:b3:b8:b3:f7:e4:22:33:ef:0e:b6:3f:7e:d7:6f:99:f5:
32:98:c7:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8csXMhFfsQLxBWc98bJIDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZTczMmU2YjI0OTA5M2U3OWExYTUwN2NiY2Q4MTk2ZjAx
ODE3ZmEwHhcNMjUwMTMxMTMwMDI1WhcNMjUwMjAxMTMwMDI1WjAzMTEwLwYDVQQD
EygxZjQyZDk3MmQ0YzdiNWMzMmQ2YjFjZTVmMjc1ZGJlZDg3OWNjYWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJl++i3xtNqgNtHfdwl4p1dUdqkb
kLis+r3JODdAn5ZoGfIs4xhpiXn7iwk63QV0vO0v4BEMzM3qPsadukRYfc0Pq/j4
6qH3L6m7fGVr1VYPfVUBw0zH7NdbGFo5boK+zVP6O4d6gWIaxYGVdphW13Jctvis
Dc6wbEnKtSwX0vobTt4Lou/dYsz3WgK3LZGN8/XarKJeMZqIwgIjV6pBDdeZuOOh
98MUVfkrdkclEa461zoEgYbJdW8hrWXvyBb+eOgc0EH9YBCUueth+zkHJkvVo++k
sxrgSKT6rRPIGOGi/1/H/GqsFtYjOe4AJdz5t8SJ+wfNgTqCnZlA+7LVTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9C2XLUx7XDLWsc5fJ12+2HnMqzMB8GA1UdIwQY
MBaAFA/nMuaySQk+eaGlB8vNgZbwGBf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wOGE5ZGUtYzg4ZC00YTQ1LTk1OGUt
YTI3Nzg5ODI5M2I5LzEvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wOGE5ZGUtYzg4ZC00YTQ1LTk1OGUtYTI3Nzg5ODI5M2I5
LzEvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmOOonsjE
gf5Il0bkC3EvHkXKVQ0MH7qeJx3e582dyjRvAPPw0IdP40AXvbT3qfxUpq5rwQhn
DXEBG8A552pjN6yt9eGqcAehF1pW4+SnMwrRXyW5gMDS7q5lF/4Q2T64Lmn20c9h
XEzNz8NAFQmJ8+RVtMu64WBtFtAwP/SBLfzlx7UUAt14RW4raFeXFvtufuCSuOG0
ujrtI0Pib0S2/ltDiEyMyHZ936XQImKbzBWP3QD0+cR9aRaVTecccLllQx464VMm
GYfousWHVIw1y499vF7pIoes4wU/nrT9aWgny7xVeKVmXInU3y6zuLP35CIz7w62
P37Xb5n1MpjHLQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:38 2025 by rpki-client