Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
File: Cr193OT9cDvD-8r8G11Xfhp1dXU.mft (raw, json)
Hash identifier: 01B/CYpYJu6/xz5/3lNIXYKn+DrPvLtMOajlKLNdGqo=
Subject key identifier: 45:9B:83:81:14:83:00:10:18:EF:0C:FC:CD:3D:9E:B0:C7:06:4F:8E
Authority key identifier: 0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
Certificate issuer: /CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Certificate serial: 0194BC727C422901A97D3EDE9B33F3470FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
Manifest number: 11F1
Signing time: Fri 31 Jan 2025 13:00:06 +0000
Manifest this update: Fri 31 Jan 2025 13:00:06 +0000
Manifest next update: Sat 01 Feb 2025 13:00:06 +0000
Files and hashes: 1: AWRVDrJmsEsB9Z159jyFngqyGLE.roa (hash: DirE8id/agwWNhmtyshobBEdAnWhXbNRd3+Zdg4CPc0=)
2: Cr193OT9cDvD-8r8G11Xfhp1dXU.crl (hash: 5zo81soT/3aSkZdVDPcPhm0sMpKsICFt0/7NAidjkp8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7c:42:29:01:a9:7d:3e:de:9b:33:f3:47:0f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Validity
Not Before: Jan 31 13:00:06 2025 GMT
Not After : Feb 1 13:00:06 2025 GMT
Subject: CN=459b83811483001018ef0cfccd3d9eb0c7064f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:82:20:f2:a6:2c:a9:e1:0a:10:21:1c:d7:ee:
69:dd:a0:ba:dc:7d:aa:6b:6a:6e:3c:c7:e4:ac:e5:
b8:81:50:71:58:39:17:d8:35:12:13:c5:6b:dc:fb:
6a:75:d1:75:86:b2:34:3a:55:3a:d7:c2:5d:aa:34:
7a:14:67:bf:b2:a6:65:4a:5a:12:77:21:c2:8e:f8:
76:8c:02:bd:13:9c:50:c1:0b:86:4a:87:4b:d4:e1:
09:aa:fe:6e:7d:70:e7:8c:65:fa:65:72:fa:58:4d:
ec:d0:df:1b:18:9e:9f:a7:ee:08:f0:a9:3b:b5:c3:
4e:e9:9d:fa:8d:20:ad:96:7a:1b:c2:a2:05:b0:76:
52:c4:8f:22:36:98:b5:5a:24:4f:44:a3:cf:5d:79:
36:51:b6:a7:c9:2b:0f:ea:12:8f:20:1e:5d:54:65:
fe:0d:7f:bd:af:48:76:ec:c4:75:36:f8:43:58:f2:
eb:d2:6d:53:07:46:a2:e5:5a:3a:73:aa:48:fd:7c:
0e:c9:2f:bd:94:56:0f:8a:0d:26:d0:dd:fc:34:5b:
dc:cb:4d:93:7a:30:7f:16:65:13:91:90:56:41:17:
a1:71:8b:19:87:64:30:a9:76:41:a5:e0:9e:83:9e:
fe:12:fd:4b:e6:28:3c:85:1e:ce:f5:8a:87:22:49:
6b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9B:83:81:14:83:00:10:18:EF:0C:FC:CD:3D:9E:B0:C7:06:4F:8E
X509v3 Authority Key Identifier:
keyid:0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1a:12:a4:ec:7d:84:fa:08:6f:00:a0:94:b8:b8:32:91:33:
d7:00:3a:7a:b1:77:b0:e6:91:4c:da:27:93:a0:64:fc:c9:81:
99:9d:8a:c8:6e:73:ae:df:fa:63:ba:58:17:55:93:15:cc:32:
59:d6:b6:1f:3c:6a:af:f2:6a:13:51:cf:d0:f3:81:7f:2c:88:
56:09:bd:d9:fb:fe:9d:b9:83:cd:d4:dd:d4:a2:40:c8:8d:56:
8c:86:d5:a0:57:d1:c6:41:51:a4:b7:d0:7d:40:32:e1:7b:eb:
1f:f0:eb:f6:c9:42:e2:89:af:00:fc:cb:eb:90:80:58:13:c7:
07:84:db:56:36:c5:ca:74:2c:df:ea:44:6c:6c:20:4e:46:26:
64:cc:70:79:18:cb:5e:dd:bd:ae:72:b4:aa:f4:39:d2:33:81:
66:06:88:f6:c5:7a:ec:07:67:18:6a:53:0a:55:79:2f:7e:f1:
67:53:9b:2a:7c:5e:f1:71:e9:d7:1a:0a:af:58:14:b2:32:af:
73:01:4f:cf:17:ac:d1:c0:ef:fe:ed:bb:ef:50:ca:a3:b6:e2:
ff:e5:59:cb:6e:ec:a0:9d:ba:bc:3f:1f:f9:09:28:de:ae:cf:
30:9d:a2:8a:45:d8:ef:4c:e1:40:ed:42:9c:be:cb:ba:c0:2a:
b5:3e:33:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cnxCKQGpfT7emzPzRw/nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYmQ3ZGRjZTRmZDcwM2JjM2ZiY2FmYzFiNWQ1NzdlMWE3
NTc1NzUwHhcNMjUwMTMxMTMwMDA2WhcNMjUwMjAxMTMwMDA2WjAzMTEwLwYDVQQD
Eyg0NTliODM4MTE0ODMwMDEwMThlZjBjZmNjZDNkOWViMGM3MDY0ZjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4Ig8qYsqeEKECEc1+5p3aC63H2q
a2puPMfkrOW4gVBxWDkX2DUSE8Vr3PtqddF1hrI0OlU618JdqjR6FGe/sqZlSloS
dyHCjvh2jAK9E5xQwQuGSodL1OEJqv5ufXDnjGX6ZXL6WE3s0N8bGJ6fp+4I8Kk7
tcNO6Z36jSCtlnobwqIFsHZSxI8iNpi1WiRPRKPPXXk2UbanySsP6hKPIB5dVGX+
DX+9r0h27MR1NvhDWPLr0m1TB0ai5Vo6c6pI/XwOyS+9lFYPig0m0N38NFvcy02T
ejB/FmUTkZBWQRehcYsZh2QwqXZBpeCeg57+Ev1L5ig8hR7O9YqHIklrVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWbg4EUgwAQGO8M/M09nrDHBk+OMB8GA1UdIwQY
MBaAFAq9fdzk/XA7w/vK/BtdV34adXV1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3IxOTNPVDljRHZELThyOEcxMVhmaHAxZFhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kNjY4MGMtMmZmMy00ZGI1LTk3MDIt
N2QzNDhjY2ExZDIwLzEvQ3IxOTNPVDljRHZELThyOEcxMVhmaHAxZFhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kNjY4MGMtMmZmMy00ZGI1LTk3MDItN2QzNDhjY2ExZDIw
LzEvQ3IxOTNPVDljRHZELThyOEcxMVhmaHAxZFhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxoSpOx9
hPoIbwCglLi4MpEz1wA6erF3sOaRTNonk6Bk/MmBmZ2KyG5zrt/6Y7pYF1WTFcwy
Wda2Hzxqr/JqE1HP0POBfyyIVgm92fv+nbmDzdTd1KJAyI1WjIbVoFfRxkFRpLfQ
fUAy4XvrH/Dr9slC4omvAPzL65CAWBPHB4TbVjbFynQs3+pEbGwgTkYmZMxweRjL
Xt29rnK0qvQ50jOBZgaI9sV67AdnGGpTClV5L37xZ1ObKnxe8XHp1xoKr1gUsjKv
cwFPzxes0cDv/u2771DKo7bi/+VZy27soJ26vD8f+Qko3q7PMJ2iikXY70zhQO1C
nL7LusAqtT4zKg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:28 2025 by rpki-client