Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
File: 4toj07kw1MHzrHMGXXGmB8NdKQA.mft (raw, json)
Hash identifier: EdOUmJz6U0xipDc6j10j5FSCsNO6aWDtHAvq6lwsWGs=
Subject key identifier: CD:84:A1:8D:1A:67:60:78:FD:1C:E6:84:1C:43:22:4D:2C:95:F6:E7
Authority key identifier: E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
Certificate issuer: /CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Certificate serial: 0194BC3BBB6F3A2AFA8B4A053D19FCF00E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:00:18 +0000
Manifest this update: Fri 31 Jan 2025 12:00:18 +0000
Manifest next update: Sat 01 Feb 2025 12:00:18 +0000
Files and hashes: 1: 1-rU3n-MmX0x7vSSIglpKrM6p7wc.roa (hash: c73xh5XkAcPFRSo/oWqlfjE2NzFubQ+3BLO5+whFr6o=)
2: 4toj07kw1MHzrHMGXXGmB8NdKQA.crl (hash: ODMb1XkVgX2tKh8jZopc4nT4YtY0i7Qy8u/cXxYkfqk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:bb:6f:3a:2a:fa:8b:4a:05:3d:19:fc:f0:0e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Validity
Not Before: Jan 31 12:00:18 2025 GMT
Not After : Feb 1 12:00:18 2025 GMT
Subject: CN=cd84a18d1a676078fd1ce6841c43224d2c95f6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e9:0a:94:25:21:7d:1c:e3:64:21:4e:61:38:
72:9d:4e:41:5b:c7:e4:af:22:2d:d2:6f:e6:f1:98:
52:4b:4c:ca:d3:99:b6:5f:6c:7c:59:d2:73:28:19:
19:df:c3:06:e1:89:61:66:4a:41:4e:06:21:c2:62:
c5:94:f3:84:33:b0:df:51:8a:5d:52:5d:d0:26:f3:
a7:47:5c:c5:28:50:34:68:1d:8b:65:b4:7d:63:14:
a7:a5:d7:f7:07:53:e6:fd:d7:79:b6:85:a8:d0:99:
b6:0e:e3:aa:c8:f5:9f:41:4b:8e:ca:64:81:30:de:
84:a6:59:e1:af:bb:92:c1:57:14:d2:3b:e5:66:45:
59:4e:19:99:bf:b7:e4:2b:4e:e0:39:ea:24:7e:60:
b4:8e:81:76:92:a1:fd:9f:86:6a:85:db:02:3b:7a:
29:73:01:35:47:9a:d3:4c:fb:76:b3:56:17:8a:2d:
d2:8c:01:c5:f2:1a:8d:51:b2:1c:10:98:51:f0:f8:
0d:50:84:71:cc:45:6f:ff:93:15:09:dd:16:db:43:
3f:8c:3d:9d:bd:b7:d3:69:6b:9b:27:82:74:15:1c:
10:a2:00:3f:8b:3c:00:30:30:76:bb:26:57:51:95:
f6:8e:5d:f4:f2:59:f8:d3:1a:68:2a:94:44:e0:a8:
d7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:84:A1:8D:1A:67:60:78:FD:1C:E6:84:1C:43:22:4D:2C:95:F6:E7
X509v3 Authority Key Identifier:
keyid:E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:54:95:e3:c5:99:28:d0:4a:79:71:d3:4f:64:92:5b:b6:5b:
f9:4a:64:fc:fd:b6:58:7f:a5:5a:59:94:3c:1e:da:b5:07:7c:
28:bb:db:78:20:ec:98:f0:01:e7:b3:6e:0e:71:aa:4c:c7:a5:
49:d0:8f:7e:71:3b:b8:2c:d9:eb:b8:1e:47:01:30:9a:d2:ee:
48:4d:2a:d8:85:e6:13:00:4d:ff:0c:88:09:4c:b0:a6:26:61:
cb:6a:42:a5:38:62:49:15:54:3d:02:32:66:c8:9a:6f:17:97:
9c:26:95:ec:95:c7:b4:69:f9:de:cd:9c:f7:52:f8:83:74:30:
50:73:cd:bf:0f:e1:6e:f9:c0:0b:e4:60:65:fa:f2:c1:aa:fd:
51:e9:a5:27:33:ad:44:8f:07:95:f2:74:bb:33:2a:5f:dd:5a:
e4:62:06:cb:be:2a:45:88:73:97:34:61:e3:00:e5:74:05:88:
b7:fc:30:c5:05:7f:ad:6a:ad:37:af:ed:c6:84:b4:3d:fd:cb:
cb:c9:f2:fb:fe:2c:ea:44:2e:09:67:b4:bb:5d:39:1e:70:e4:
53:bd:96:8a:c5:91:0c:c2:4e:ef:e5:e3:9e:f8:de:0a:9c:24:
8f:42:c2:e0:77:7a:b9:55:c9:a6:a5:42:1e:6c:ac:a2:07:7b:
ab:ad:4e:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O7tvOir6i0oFPRn88A6BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZGEyM2QzYjkzMGQ0YzFmM2FjNzMwNjVkNzFhNjA3YzM1
ZDI5MDAwHhcNMjUwMTMxMTIwMDE4WhcNMjUwMjAxMTIwMDE4WjAzMTEwLwYDVQQD
EyhjZDg0YTE4ZDFhNjc2MDc4ZmQxY2U2ODQxYzQzMjI0ZDJjOTVmNmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+kKlCUhfRzjZCFOYThynU5BW8fk
ryIt0m/m8ZhSS0zK05m2X2x8WdJzKBkZ38MG4YlhZkpBTgYhwmLFlPOEM7DfUYpd
Ul3QJvOnR1zFKFA0aB2LZbR9YxSnpdf3B1Pm/dd5toWo0Jm2DuOqyPWfQUuOymSB
MN6Eplnhr7uSwVcU0jvlZkVZThmZv7fkK07gOeokfmC0joF2kqH9n4ZqhdsCO3op
cwE1R5rTTPt2s1YXii3SjAHF8hqNUbIcEJhR8PgNUIRxzEVv/5MVCd0W20M/jD2d
vbfTaWubJ4J0FRwQogA/izwAMDB2uyZXUZX2jl308ln40xpoKpRE4KjXkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2EoY0aZ2B4/RzmhBxDIk0slfbnMB8GA1UdIwQY
MBaAFOLaI9O5MNTB86xzBl1xpgfDXSkAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRvajA3a3cxTUh6ckhNR1hYR21COE5kS1FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kZWViYjgtYWU4Ni00Njk0LWE5NzIt
ODI3YTBhYzA0YTlkLzEvNHRvajA3a3cxTUh6ckhNR1hYR21COE5kS1FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9kZWViYjgtYWU4Ni00Njk0LWE5NzItODI3YTBhYzA0YTlk
LzEvNHRvajA3a3cxTUh6ckhNR1hYR21COE5kS1FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFFSV48WZ
KNBKeXHTT2SSW7Zb+Upk/P22WH+lWlmUPB7atQd8KLvbeCDsmPAB57NuDnGqTMel
SdCPfnE7uCzZ67geRwEwmtLuSE0q2IXmEwBN/wyICUywpiZhy2pCpThiSRVUPQIy
ZsiabxeXnCaV7JXHtGn53s2c91L4g3QwUHPNvw/hbvnAC+RgZfrywar9UemlJzOt
RI8HlfJ0uzMqX91a5GIGy74qRYhzlzRh4wDldAWIt/wwxQV/rWqtN6/txoS0Pf3L
y8ny+/4s6kQuCWe0u105HnDkU72WisWRDMJO7+XjnvjeCpwkj0LC4Hd6uVXJpqVC
Hmysogd7q61OQw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:35:18 2025 by rpki-client