Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
File: 70QOE80mESzLWVF2D8-y1JFtcSc.mft (raw, json)
Hash identifier: AgTLExByj+OoSv2POW0NadO+kkoIFuyom+ndaoTNuPg=
Subject key identifier: F3:15:91:63:63:52:34:CB:6E:B5:7C:B3:04:7C:09:CB:30:8B:A8:40
Authority key identifier: EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27
Certificate issuer: /CN=ef440e13cd26112ccb5951760fcfb2d4916d7127
Certificate serial: 0194BD1761F6A2665808260C93C96AC31374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: 70QOE80mESzLWVF2D8-y1JFtcSc.crl (hash: P5Wx3vSoN6BJ2GcwF8Rhgq/HQtCDpPkVM/0o0butP7M=)
2: W0KEQ42eAsjOaTiDlKrXfXSH1aw.roa (hash: MjWN2D0Y+IB6RDhAWue+MqeEjuWUWzQKaH29Oe4TfRk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:61:f6:a2:66:58:08:26:0c:93:c9:6a:c3:13:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef440e13cd26112ccb5951760fcfb2d4916d7127
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=f3159163635234cb6eb57cb3047c09cb308ba840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:b0:c4:83:8f:9b:4d:dc:59:f2:97:bb:6b:
5f:05:84:6f:8b:10:88:db:ca:e0:55:46:0c:fb:53:
4b:3d:6c:78:6d:62:13:a6:ec:ce:4f:f6:c1:fb:ba:
c6:7c:b4:76:80:14:47:69:2f:f7:88:7f:95:13:19:
e9:09:12:4c:0b:66:e8:63:da:ec:d5:9a:9f:92:49:
bb:c0:47:d1:f9:e8:18:c5:79:a7:46:b6:a3:db:c1:
9f:68:b5:c9:b1:f3:74:52:42:51:2e:01:b3:71:f6:
55:b5:21:68:c8:86:f9:ae:69:f6:0d:61:05:c6:04:
cb:e2:34:c2:dd:b3:b4:be:1a:37:b3:69:21:6e:f7:
0b:3f:2e:46:47:0e:86:73:bb:86:26:0e:7a:fd:32:
18:65:5b:72:bc:17:4e:0a:9a:62:01:f9:2f:ae:0f:
b3:7f:d3:20:93:28:5a:97:87:6b:37:20:83:03:8e:
62:e0:c3:d0:21:d7:87:fb:07:70:c2:64:d6:1d:d6:
a8:f1:ba:69:14:66:7b:12:ba:30:ee:f4:33:09:c3:
33:64:5e:ef:ff:cb:5b:72:d6:8d:b3:f9:28:d4:6c:
35:31:2f:31:12:a0:90:26:bb:b4:b0:af:c7:e7:15:
1c:b3:1a:6c:40:ab:cf:73:9d:8e:05:69:e9:1c:16:
21:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:15:91:63:63:52:34:CB:6E:B5:7C:B3:04:7C:09:CB:30:8B:A8:40
X509v3 Authority Key Identifier:
keyid:EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:66:d2:5e:e0:15:e8:df:5b:d2:91:ef:25:98:81:22:bc:1d:
09:93:ba:02:63:ff:2e:c1:eb:5b:7c:07:f3:c2:99:b5:72:d3:
0c:99:9d:b4:92:a5:9b:c2:f4:90:c9:97:d6:b6:17:7f:b9:18:
39:fe:ab:32:f1:fb:d8:9a:34:3c:10:98:f4:72:71:ff:f5:c6:
00:8c:b2:b1:dc:08:1d:92:33:36:22:a8:56:33:be:c0:0b:4f:
1f:7d:c7:a9:f2:8a:45:4d:dc:df:1a:ed:cd:0a:58:2c:7c:08:
56:5e:b1:74:69:92:85:51:37:53:40:57:24:d7:1e:ba:95:24:
a6:84:e4:0d:71:79:d6:04:64:c7:e2:ab:d7:a9:9c:24:a4:ef:
f9:d4:c6:9c:24:af:e7:ca:af:35:21:11:38:03:a8:a1:43:63:
32:46:39:1f:88:18:5b:7b:1d:7f:2f:61:04:2d:aa:a4:b1:af:
21:a0:9a:fb:6a:26:96:38:07:83:de:74:d2:21:b0:54:40:a1:
d0:9b:18:29:e7:aa:04:55:99:a1:f1:fd:25:e4:27:93:5e:ad:
3d:66:d9:1f:d5:96:8b:8b:74:5a:af:87:b1:ba:3b:9f:93:22:
3b:24:8e:df:2e:62:ab:01:20:fa:44:06:ec:47:ba:14:31:41:
d7:f0:0b:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F2H2omZYCCYMk8lqwxN0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNDQwZTEzY2QyNjExMmNjYjU5NTE3NjBmY2ZiMmQ0OTE2
ZDcxMjcwHhcNMjUwMTMxMTYwMDEzWhcNMjUwMjAxMTYwMDEzWjAzMTEwLwYDVQQD
EyhmMzE1OTE2MzYzNTIzNGNiNmViNTdjYjMwNDdjMDljYjMwOGJhODQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKmwxIOPm03cWfKXu2tfBYRvixCI
28rgVUYM+1NLPWx4bWITpuzOT/bB+7rGfLR2gBRHaS/3iH+VExnpCRJMC2boY9rs
1Zqfkkm7wEfR+egYxXmnRraj28GfaLXJsfN0UkJRLgGzcfZVtSFoyIb5rmn2DWEF
xgTL4jTC3bO0vho3s2khbvcLPy5GRw6Gc7uGJg56/TIYZVtyvBdOCppiAfkvrg+z
f9Mgkyhal4drNyCDA45i4MPQIdeH+wdwwmTWHdao8bppFGZ7Erow7vQzCcMzZF7v
/8tbctaNs/ko1Gw1MS8xEqCQJru0sK/H5xUcsxpsQKvPc52OBWnpHBYhuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMVkWNjUjTLbrV8swR8Ccswi6hAMB8GA1UdIwQY
MBaAFO9EDhPNJhEsy1lRdg/PstSRbXEnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzBRT0U4MG1FU3pMV1ZGMkQ4LXkxSkZ0Y1NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81OTgzMWItZGU4YS00MGFjLWE5NDkt
N2E4MzY4MDBlOWY3LzEvNzBRT0U4MG1FU3pMV1ZGMkQ4LXkxSkZ0Y1NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81OTgzMWItZGU4YS00MGFjLWE5NDktN2E4MzY4MDBlOWY3
LzEvNzBRT0U4MG1FU3pMV1ZGMkQ4LXkxSkZ0Y1NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2bSXuAV
6N9b0pHvJZiBIrwdCZO6AmP/LsHrW3wH88KZtXLTDJmdtJKlm8L0kMmX1rYXf7kY
Of6rMvH72Jo0PBCY9HJx//XGAIyysdwIHZIzNiKoVjO+wAtPH33HqfKKRU3c3xrt
zQpYLHwIVl6xdGmShVE3U0BXJNceupUkpoTkDXF51gRkx+Kr16mcJKTv+dTGnCSv
58qvNSEROAOooUNjMkY5H4gYW3sdfy9hBC2qpLGvIaCa+2omljgHg9500iGwVECh
0JsYKeeqBFWZofH9JeQnk16tPWbZH9WWi4t0Wq+Hsbo7n5MiOySO3y5iqwEg+kQG
7Ee6FDFB1/ALrw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 03:15:26 2025 by rpki-client