Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
File: 6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft (raw, json)
Hash identifier: 1M8kqXsskfOUCzqzMwTTuTtvV1HXBudFli0JEEktQ+s=
Subject key identifier: B2:82:75:4D:93:67:BC:7D:3A:D0:04:65:7F:4F:6B:37:8F:66:9A:F5
Authority key identifier: E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A
Certificate issuer: /CN=e9c4cd4118ddffee56e885663795547a1de3f98a
Certificate serial: 0194BD4E3DB7E0BA778715838E13511EB912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 17:00:08 +0000
Manifest this update: Fri 31 Jan 2025 17:00:08 +0000
Manifest next update: Sat 01 Feb 2025 17:00:08 +0000
Files and hashes: 1: 6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl (hash: 2RwLDRJyi8lkvnGP9zFHsHuG0jUGgExxQuNbcvkUt5I=)
2: yQp3lf1OVxhMQ-si3fJCgBiD3so.roa (hash: 2hMAD2c5ISOXJtDVu0nTlgQQryv7G6wnTPw6jHWepts=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3d:b7:e0:ba:77:87:15:83:8e:13:51:1e:b9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9c4cd4118ddffee56e885663795547a1de3f98a
Validity
Not Before: Jan 31 17:00:08 2025 GMT
Not After : Feb 1 17:00:08 2025 GMT
Subject: CN=b282754d9367bc7d3ad004657f4f6b378f669af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1b:8f:da:64:e3:e8:e7:a1:d0:3d:df:9a:d2:
34:2d:c6:d0:69:52:bd:48:29:f2:be:d7:62:ab:91:
d7:54:ae:bd:d6:bb:48:24:3a:9b:2a:9e:18:19:69:
39:23:60:bf:cb:80:ce:48:b0:8a:92:92:d6:c9:73:
0c:42:3f:ef:18:cf:8c:e2:81:e3:fc:18:4a:66:aa:
49:20:8f:ca:e1:86:be:9a:87:42:33:d9:d6:03:38:
2e:fc:87:fc:40:7f:ca:9e:bc:90:e6:e0:de:11:33:
09:9e:4a:50:6f:7f:a9:10:b5:76:36:ac:d3:ca:48:
f1:d5:3c:4c:f3:8c:f5:e3:cb:37:cf:1c:9e:28:e0:
f0:a6:79:fe:ba:d2:0c:0f:e3:fd:f0:0f:e5:8f:d1:
90:8e:7d:12:5d:10:80:75:9d:c7:8a:c2:f8:bf:ce:
5f:ea:ea:02:27:15:18:48:e1:34:f5:00:31:4b:78:
03:94:50:0b:b5:55:ef:56:58:e3:a4:6c:eb:3e:03:
a2:1e:3a:ab:a4:76:8e:da:4d:d2:54:62:96:c5:11:
87:25:42:ad:7e:d5:29:ba:15:cf:9b:4e:eb:d6:bb:
84:4b:f0:9d:b1:0f:1a:64:ed:99:c0:b0:af:71:0a:
d7:07:9d:46:5e:b5:c6:29:24:35:8e:3f:90:06:d8:
f8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:82:75:4D:93:67:BC:7D:3A:D0:04:65:7F:4F:6B:37:8F:66:9A:F5
X509v3 Authority Key Identifier:
keyid:E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:2b:7f:9c:e1:86:a3:2b:f2:cc:a5:82:c4:7d:d4:54:c7:d8:
3d:b4:77:89:89:78:e4:f7:2b:a7:b6:49:a6:82:fd:47:2c:33:
bb:cd:62:dc:bf:87:8e:da:9b:3f:12:86:87:fe:c6:53:2f:04:
6d:a0:ff:bb:72:02:a6:8e:a0:95:40:78:db:e9:cb:82:30:cf:
db:06:79:8d:06:ab:23:15:4a:10:43:79:0c:a2:f3:59:cf:2a:
52:e6:03:5b:4e:34:25:47:11:03:06:e2:9e:76:7b:b7:95:34:
06:2c:7a:ff:28:e3:7f:eb:0c:26:90:2d:86:a7:82:b5:f7:e8:
58:83:47:73:03:56:52:c1:d8:f7:42:09:ce:d8:7d:29:d5:9e:
41:a9:50:a8:90:c9:00:10:cb:74:31:3b:d1:b5:a4:e4:8e:42:
1c:60:da:f1:f9:85:f5:94:86:64:4d:40:2b:b9:7c:02:62:fc:
2e:13:d7:d6:99:c3:65:46:ba:0a:3b:93:2e:4c:51:39:23:48:
09:f8:46:9c:74:18:20:ec:c5:69:89:01:1f:cf:42:71:21:14:
30:77:7a:d0:8b:ec:64:bd:28:d5:e9:f4:24:80:63:5c:d9:bc:
1d:dd:67:f8:88:16:89:0b:05:b5:91:94:c3:51:5e:5a:93:71:
44:79:39:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tj234Lp3hxWDjhNRHrkSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YzRjZDQxMThkZGZmZWU1NmU4ODU2NjM3OTU1NDdhMWRl
M2Y5OGEwHhcNMjUwMTMxMTcwMDA4WhcNMjUwMjAxMTcwMDA4WjAzMTEwLwYDVQQD
EyhiMjgyNzU0ZDkzNjdiYzdkM2FkMDA0NjU3ZjRmNmIzNzhmNjY5YWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRuP2mTj6Oeh0D3fmtI0LcbQaVK9
SCnyvtdiq5HXVK691rtIJDqbKp4YGWk5I2C/y4DOSLCKkpLWyXMMQj/vGM+M4oHj
/BhKZqpJII/K4Ya+modCM9nWAzgu/If8QH/KnryQ5uDeETMJnkpQb3+pELV2NqzT
ykjx1TxM84z148s3zxyeKODwpnn+utIMD+P98A/lj9GQjn0SXRCAdZ3HisL4v85f
6uoCJxUYSOE09QAxS3gDlFALtVXvVljjpGzrPgOiHjqrpHaO2k3SVGKWxRGHJUKt
ftUpuhXPm07r1ruES/CdsQ8aZO2ZwLCvcQrXB51GXrXGKSQ1jj+QBtj4ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKCdU2TZ7x9OtAEZX9PazePZpr1MB8GA1UdIwQY
MBaAFOnEzUEY3f/uVuiFZjeVVHod4/mKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmNUTlFSamRfLTVXNklWbU41VlVlaDNqLVlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zZjdkYTQtMzYzMS00YjAzLWJhODQt
NmNiMmQzYjQ0MzdjLzEvNmNUTlFSamRfLTVXNklWbU41VlVlaDNqLVlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8zZjdkYTQtMzYzMS00YjAzLWJhODQtNmNiMmQzYjQ0Mzdj
LzEvNmNUTlFSamRfLTVXNklWbU41VlVlaDNqLVlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsSt/nOGG
oyvyzKWCxH3UVMfYPbR3iYl45Pcrp7ZJpoL9Rywzu81i3L+HjtqbPxKGh/7GUy8E
baD/u3ICpo6glUB42+nLgjDP2wZ5jQarIxVKEEN5DKLzWc8qUuYDW040JUcRAwbi
nnZ7t5U0Bix6/yjjf+sMJpAthqeCtffoWINHcwNWUsHY90IJzth9KdWeQalQqJDJ
ABDLdDE70bWk5I5CHGDa8fmF9ZSGZE1AK7l8AmL8LhPX1pnDZUa6CjuTLkxROSNI
CfhGnHQYIOzFaYkBH89CcSEUMHd60IvsZL0o1en0JIBjXNm8Hd1n+IgWiQsFtZGU
w1FeWpNxRHk5hQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:52:16 2025 by rpki-client