Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
File: dE3Tr9fM584AqerGfgvKmb63Kao.mft (raw, json)
Hash identifier: +rvOHZB3Ls4MOah8U5cuOHftnXTCyFkGYqdgASIUHpU=
Subject key identifier: AE:45:23:CF:B3:AE:73:0D:51:7D:AE:60:A2:F9:09:A9:BA:1D:C0:56
Authority key identifier: 74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA
Certificate issuer: /CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
Certificate serial: 0194BD4E45AD25E46FFD7147C6DF9952CC8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:10 +0000
Manifest this update: Fri 31 Jan 2025 17:00:10 +0000
Manifest next update: Sat 01 Feb 2025 17:00:10 +0000
Files and hashes: 1: dE3Tr9fM584AqerGfgvKmb63Kao.crl (hash: ci41XCHmHDlDW1b0cOXvcPTQryTg6ZhhNHCm5WhdFhM=)
2: fOC0mLVVaWFlMUvT0z_PddjsHw8.roa (hash: BmfmQSKAMKow/2vkZFChgOrrtOQvA5Kh+ohq4iFZyJg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:45:ad:25:e4:6f:fd:71:47:c6:df:99:52:cc:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
Validity
Not Before: Jan 31 17:00:10 2025 GMT
Not After : Feb 1 17:00:10 2025 GMT
Subject: CN=ae4523cfb3ae730d517dae60a2f909a9ba1dc056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:14:19:b0:49:dc:db:d2:08:4a:a4:a6:52:
db:4e:35:d9:44:76:7c:d1:f2:96:63:a6:83:89:6d:
2e:b9:9d:58:b6:03:97:23:23:03:66:68:8f:1d:ec:
8e:7d:b3:1e:0b:59:10:cf:57:c2:05:6a:61:13:08:
97:ea:dd:6a:47:d2:f1:8d:1e:51:94:c6:e4:86:67:
f4:ea:c3:78:16:e1:26:6f:2e:12:ba:a7:88:00:4f:
4a:cf:a2:1f:b5:d6:7e:c0:89:cc:6f:90:d4:f8:3f:
b1:7f:fa:87:09:b1:11:54:08:90:62:f1:08:01:d1:
a9:4c:3c:75:62:c9:99:eb:84:3e:c9:06:d4:69:ce:
b2:74:01:db:fe:8d:30:e4:5f:26:d8:55:a6:98:2e:
ef:1e:88:8a:d5:f9:e6:f2:00:05:0d:e1:26:77:a4:
8e:fc:3a:9a:47:cc:de:ef:50:b6:fa:0e:8b:39:c2:
34:9f:44:e6:28:99:b5:96:dd:8b:d7:21:88:ec:a3:
be:4f:ce:8e:dc:cf:ac:18:6a:b3:5c:4d:78:b2:96:
82:2b:0f:2c:7e:42:d7:0c:a5:6b:0b:8b:63:64:24:
37:2d:07:06:3a:dc:ff:c2:fb:29:0b:c7:5f:db:be:
5d:51:5a:1c:81:4b:6a:72:e4:71:69:79:19:4f:e0:
ff:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:45:23:CF:B3:AE:73:0D:51:7D:AE:60:A2:F9:09:A9:BA:1D:C0:56
X509v3 Authority Key Identifier:
keyid:74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b0:7c:67:09:66:a8:a6:79:f2:ac:bf:0d:30:2d:12:71:d7:
a7:9d:59:ce:78:41:39:b6:23:1e:57:98:eb:e0:eb:89:d8:d0:
ef:13:7b:09:46:8e:b9:9c:17:5a:bd:66:3b:36:df:88:87:ac:
2f:83:58:39:64:4f:5f:d0:6d:09:fb:ff:bb:01:e1:4a:7d:f9:
28:3e:62:76:92:d6:b6:a9:f9:15:f4:08:76:3e:1c:a7:88:50:
b6:60:9e:ce:e6:b2:3f:87:88:9e:ae:1c:3d:9a:20:f0:f8:94:
ba:81:41:7d:79:55:47:11:23:4c:df:c1:fe:9d:26:93:3c:11:
fc:3b:19:90:ff:32:65:cc:71:04:8c:39:3c:2a:d8:15:e7:16:
3d:b3:c3:ec:31:fa:f5:fe:93:57:27:12:fb:84:8d:da:85:81:
75:11:c9:d0:d6:e7:18:89:96:c5:4c:1e:f2:6d:dc:aa:58:93:
0c:ab:b2:39:cf:a0:d6:ac:45:f6:97:82:84:0e:8d:a8:c3:b4:
1f:c8:8a:89:be:3d:7d:46:15:1a:a3:f2:b3:c6:ee:e5:44:5d:
3f:51:6a:08:8d:49:fd:46:eb:ea:06:1d:0e:af:f4:29:ad:3a:
da:46:b7:96:67:e9:7b:ec:63:e4:67:d9:eb:a7:ec:06:b7:2b:
6a:e2:44:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TkWtJeRv/XFHxt+ZUsyMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NGRkM2FmZDdjY2U3Y2UwMGE5ZWFjNjdlMGJjYTk5YmVi
NzI5YWEwHhcNMjUwMTMxMTcwMDEwWhcNMjUwMjAxMTcwMDEwWjAzMTEwLwYDVQQD
EyhhZTQ1MjNjZmIzYWU3MzBkNTE3ZGFlNjBhMmY5MDlhOWJhMWRjMDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKgUGbBJ3NvSCEqkplLbTjXZRHZ8
0fKWY6aDiW0uuZ1YtgOXIyMDZmiPHeyOfbMeC1kQz1fCBWphEwiX6t1qR9LxjR5R
lMbkhmf06sN4FuEmby4SuqeIAE9Kz6IftdZ+wInMb5DU+D+xf/qHCbERVAiQYvEI
AdGpTDx1YsmZ64Q+yQbUac6ydAHb/o0w5F8m2FWmmC7vHoiK1fnm8gAFDeEmd6SO
/DqaR8ze71C2+g6LOcI0n0TmKJm1lt2L1yGI7KO+T86O3M+sGGqzXE14spaCKw8s
fkLXDKVrC4tjZCQ3LQcGOtz/wvspC8df275dUVocgUtqcuRxaXkZT+D/ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5FI8+zrnMNUX2uYKL5Cam6HcBWMB8GA1UdIwQY
MBaAFHRN06/XzOfOAKnqxn4Lypm+tymqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEUzVHI5Zk01ODRBcWVyR2ZndkttYjYzS2FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yZWE1OTQtYTJjYS00ZmZhLTg5ZWUt
ODkyMWIwNTU5ZTkwLzEvZEUzVHI5Zk01ODRBcWVyR2ZndkttYjYzS2FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8yZWE1OTQtYTJjYS00ZmZhLTg5ZWUtODkyMWIwNTU5ZTkw
LzEvZEUzVHI5Zk01ODRBcWVyR2ZndkttYjYzS2FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7B8Zwlm
qKZ58qy/DTAtEnHXp51ZznhBObYjHleY6+DridjQ7xN7CUaOuZwXWr1mOzbfiIes
L4NYOWRPX9BtCfv/uwHhSn35KD5idpLWtqn5FfQIdj4cp4hQtmCezuayP4eInq4c
PZog8PiUuoFBfXlVRxEjTN/B/p0mkzwR/DsZkP8yZcxxBIw5PCrYFecWPbPD7DH6
9f6TVycS+4SN2oWBdRHJ0NbnGImWxUwe8m3cqliTDKuyOc+g1qxF9peChA6NqMO0
H8iKib49fUYVGqPys8bu5URdP1FqCI1J/Ubr6gYdDq/0Ka062ka3lmfpe+xj5GfZ
66fsBrcrauJE/A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:26 2025 by rpki-client