Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
File: ddzHdrK_WVv0s-YLukJF8BIKIXY.mft (raw, json)
Hash identifier: FxAISv7HWCFLwZFdqS71SPEdbfzO5wtAjrch9LnUyjs=
Subject key identifier: 83:E5:D8:77:FF:73:61:5C:40:8C:10:B2:C4:98:D5:E5:63:82:2F:AE
Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
Certificate issuer: /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Certificate serial: 0194BC3BBFBCC7666F0DC619E6F5422BDD2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 12:00:19 +0000
Manifest this update: Fri 31 Jan 2025 12:00:19 +0000
Manifest next update: Sat 01 Feb 2025 12:00:19 +0000
Files and hashes: 1: Dk824yYieLhb3lnVQMoI_RB7E3g.roa (hash: 8CE4AzqmIW8OvhBrwxxjFMn8prAKH8KtnXAsx4//qm0=)
2: ddzHdrK_WVv0s-YLukJF8BIKIXY.crl (hash: N7Jc+yXRAFI852eDVv9gq0cXd8ujAhnu0yXFaIIPYn8=)
3: i_nP-RMEFWNsq8wmPatyh47z1H4.roa (hash: LMMjHpph11n+9N5yAaKIxDwK0rOXqWLUsY4TjiEcrdw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:bf:bc:c7:66:6f:0d:c6:19:e6:f5:42:2b:dd:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Validity
Not Before: Jan 31 12:00:19 2025 GMT
Not After : Feb 1 12:00:19 2025 GMT
Subject: CN=83e5d877ff73615c408c10b2c498d5e563822fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:77:fe:da:73:2c:e9:c1:f2:23:43:5b:5c:63:
64:61:2f:c5:09:9e:cf:82:8c:6c:23:59:e1:9e:81:
53:d7:df:25:ce:2f:46:87:25:5e:bf:cd:0b:88:71:
0b:be:df:fc:d2:ca:83:77:1e:58:47:35:c1:17:60:
ee:b5:db:de:37:18:92:65:9f:cb:62:2e:df:06:5e:
98:27:e9:30:a2:e1:36:cd:4c:03:0c:4c:2a:c2:a3:
cc:56:73:8d:ef:5f:96:d8:f8:d6:8b:95:75:49:90:
3c:c3:7e:8e:a9:7e:df:ee:e8:61:ad:cd:4d:1e:c6:
38:ad:85:03:51:8f:ed:58:ba:90:52:75:64:0a:7c:
d8:05:39:84:fd:3b:8b:82:9e:ea:5a:bb:8a:2f:68:
86:e8:ed:65:1e:ff:b9:3e:da:e1:08:85:72:8e:64:
9a:9c:18:02:19:3f:4e:91:39:28:44:19:2d:f6:de:
1b:e7:10:9d:f9:2c:8a:6e:9b:9b:89:3a:86:93:96:
7e:66:73:75:b0:79:ab:82:ab:13:93:0e:0c:5b:08:
cb:f6:8a:c3:4a:cf:de:f1:30:20:52:31:80:4c:04:
c1:d6:47:11:78:3d:0f:e5:12:82:e0:30:31:ed:dc:
08:65:98:d0:2f:0f:43:9c:54:f7:bc:41:ec:19:8e:
6d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E5:D8:77:FF:73:61:5C:40:8C:10:B2:C4:98:D5:E5:63:82:2F:AE
X509v3 Authority Key Identifier:
keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9a:82:67:a5:19:15:dd:af:c5:a7:16:96:27:76:01:1f:f8:
fa:98:c1:21:95:bc:09:d7:c0:a4:7b:69:48:bf:1b:11:49:dd:
8e:92:90:52:0f:17:98:10:5a:88:b2:4d:fc:bf:fc:88:21:e5:
26:f9:90:cc:e5:2f:e1:ae:bf:15:51:bc:04:5f:6f:de:af:f4:
56:ba:c1:1c:13:53:23:21:ad:e7:6c:05:88:96:d5:71:b1:1f:
38:16:5b:39:06:f7:d8:56:fe:08:2b:a7:bd:b5:0f:ca:d0:aa:
46:69:92:f3:50:bb:aa:d1:9a:63:c9:54:cd:b3:08:b4:ef:09:
d5:f8:70:bc:3d:0a:31:42:62:f4:d6:02:84:e4:3c:60:e2:75:
bb:93:d1:87:bd:1e:81:b0:95:47:d6:01:b0:a7:e4:2c:28:47:
56:a3:e8:d1:d0:bf:12:89:09:06:14:34:54:c9:6e:97:d8:bf:
91:d4:e8:13:10:a3:ee:fb:b1:63:28:dc:10:b3:a5:e6:f8:a2:
eb:3c:4d:03:ba:b9:5a:aa:fe:27:9a:b5:78:7f:1f:76:92:2d:
a2:ca:f3:16:5f:ca:58:5d:50:07:22:d9:29:a8:81:10:6f:ec:
da:fc:0a:72:ce:d1:b4:1b:48:97:92:3a:d3:ed:e0:c8:f4:e7:
84:08:e9:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O7+8x2ZvDcYZ5vVCK90sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZGNjNzc2YjJiZjU5NWJmNGIzZTYwYmJhNDI0NWYwMTIw
YTIxNzYwHhcNMjUwMTMxMTIwMDE5WhcNMjUwMjAxMTIwMDE5WjAzMTEwLwYDVQQD
Eyg4M2U1ZDg3N2ZmNzM2MTVjNDA4YzEwYjJjNDk4ZDVlNTYzODIyZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnf+2nMs6cHyI0NbXGNkYS/FCZ7P
goxsI1nhnoFT198lzi9GhyVev80LiHELvt/80sqDdx5YRzXBF2DutdveNxiSZZ/L
Yi7fBl6YJ+kwouE2zUwDDEwqwqPMVnON71+W2PjWi5V1SZA8w36OqX7f7uhhrc1N
HsY4rYUDUY/tWLqQUnVkCnzYBTmE/TuLgp7qWruKL2iG6O1lHv+5PtrhCIVyjmSa
nBgCGT9OkTkoRBkt9t4b5xCd+SyKbpubiTqGk5Z+ZnN1sHmrgqsTkw4MWwjL9orD
Ss/e8TAgUjGATATB1kcReD0P5RKC4DAx7dwIZZjQLw9DnFT3vEHsGY5tgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPl2Hf/c2FcQIwQssSY1eVjgi+uMB8GA1UdIwQY
MBaAFHXcx3ayv1lb9LPmC7pCRfASCiF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ODFjNWQtYmM5Yi00MGE2LWE1YTQt
NjQ1NDAyMDVlY2Y0LzEvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81ODFjNWQtYmM5Yi00MGE2LWE1YTQtNjQ1NDAyMDVlY2Y0
LzEvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5qCZ6UZ
Fd2vxacWlid2AR/4+pjBIZW8CdfApHtpSL8bEUndjpKQUg8XmBBaiLJN/L/8iCHl
JvmQzOUv4a6/FVG8BF9v3q/0VrrBHBNTIyGt52wFiJbVcbEfOBZbOQb32Fb+CCun
vbUPytCqRmmS81C7qtGaY8lUzbMItO8J1fhwvD0KMUJi9NYChOQ8YOJ1u5PRh70e
gbCVR9YBsKfkLChHVqPo0dC/EokJBhQ0VMlul9i/kdToExCj7vuxYyjcELOl5vii
6zxNA7q5Wqr+J5q1eH8fdpItosrzFl/KWF1QByLZKaiBEG/s2vwKcs7RtBtIl5I6
0+3gyPTnhAjpTQ==
-----END CERTIFICATE-----
Generated at Wed May 7 17:23:14 2025 by rpki-client