Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
File: RPTFphl4VJskg4j530SdKpXhCgc.mft (raw, json)
Hash identifier: cbhSqSfk9lDsePt2S+l4V7HmOTYbjpYkhhrFLTDH15A=
Subject key identifier: 52:F8:DC:91:0C:61:8D:3A:63:E0:8B:C5:32:A8:01:6B:6F:96:F3:97
Authority key identifier: 44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07
Certificate issuer: /CN=44f4c5a61978549b248388f9df449d2a95e10a07
Certificate serial: 0194BBCE5F814D2E88BA046BB137CD480700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:51 +0000
Manifest this update: Fri 31 Jan 2025 10:00:51 +0000
Manifest next update: Sat 01 Feb 2025 10:00:51 +0000
Files and hashes: 1: RPTFphl4VJskg4j530SdKpXhCgc.crl (hash: 7nZf+ZeY81QzB0Yw4tu6IgYER9keLrHs1+pMV0d1lPA=)
2: ios5KWpmGZUyejt9fTyM20Kq3iQ.roa (hash: ueEa/mQzKdPiJu8mODUSR4ctsWUuOZw5Ht5pcIUfCfI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5f:81:4d:2e:88:ba:04:6b:b1:37:cd:48:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f4c5a61978549b248388f9df449d2a95e10a07
Validity
Not Before: Jan 31 10:00:51 2025 GMT
Not After : Feb 1 10:00:51 2025 GMT
Subject: CN=52f8dc910c618d3a63e08bc532a8016b6f96f397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2b:43:35:b9:c5:f5:fc:b6:fc:a6:9d:76:f9:
2e:66:a0:71:ca:d6:bb:d2:1e:e7:ca:fe:12:e6:fa:
89:77:e1:bf:a2:60:4b:3b:8a:81:41:1f:74:68:bc:
1c:4e:9b:c5:67:82:81:b8:3e:e1:39:9e:a5:1c:2a:
4b:ef:4b:c7:5b:4b:14:03:9e:c7:34:9c:e8:d5:59:
95:91:12:07:de:23:15:8f:f3:24:b1:ca:f5:7b:c6:
21:d7:bf:2f:07:89:db:08:4b:82:e4:ce:8b:e8:f6:
db:31:b9:9c:58:da:8f:e7:b2:b2:7b:c3:e9:ef:27:
46:8e:db:93:fa:19:a4:86:4e:9b:0b:dc:60:50:e7:
72:02:21:8b:68:75:ca:0c:aa:a8:a3:6d:2b:0e:61:
d0:c7:42:13:16:a8:60:cd:82:db:02:7e:05:c6:9c:
68:8e:42:f0:2d:4a:b9:16:86:13:2c:5a:f3:dc:da:
49:8f:d4:ee:2d:5f:18:cb:a3:d9:56:75:a4:04:94:
5c:51:cf:38:c3:fd:05:51:3e:5c:a7:2c:9c:9a:fb:
dd:a6:22:e2:a1:f3:76:95:e9:27:0f:b1:bd:a8:55:
72:44:73:8a:ac:36:cd:e9:19:39:18:8b:81:f5:5c:
c6:50:f1:4c:da:38:56:5b:f2:47:64:bc:8b:8b:1d:
39:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F8:DC:91:0C:61:8D:3A:63:E0:8B:C5:32:A8:01:6B:6F:96:F3:97
X509v3 Authority Key Identifier:
keyid:44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ea:6b:fd:9b:5d:7c:e2:06:fc:3a:a8:bf:f2:bf:ea:6f:ad:
29:2c:a9:c4:fd:f8:8f:5a:dd:66:b1:02:3a:b5:0c:c0:f4:38:
ff:43:50:57:4e:52:19:9f:fd:60:14:08:56:85:dd:5e:b3:3d:
be:5f:05:2f:61:32:d5:5d:0e:dd:d3:7e:7b:21:e0:63:cc:ec:
75:97:43:02:cf:bb:34:ee:b9:dd:2b:b2:0a:a2:b3:53:db:16:
b0:ab:28:36:3f:4a:a1:35:7e:20:c7:3a:a4:20:2d:e5:31:13:
3c:ab:b6:20:bb:08:4f:36:11:4b:6a:a5:1f:8a:4c:9e:fc:fb:
58:b4:39:27:85:d1:f9:32:7b:c1:97:4f:c2:08:59:9f:e4:12:
cd:d7:7c:3b:53:de:ed:aa:19:b8:84:d5:fc:e2:cd:56:45:b3:
8f:8b:eb:3a:15:3d:e1:27:f2:e8:6c:ad:fa:3d:e7:fc:cc:39:
4b:b7:07:3b:7b:98:94:03:6f:84:22:27:4f:e7:6b:d3:ce:5a:
8e:d2:cc:54:25:e4:b8:d8:50:a3:5e:2c:47:01:b8:68:4d:d2:
1d:61:55:1b:9f:7a:1f:e9:11:db:a1:27:1a:b3:13:67:79:9d:
88:36:3b:52:ef:a9:de:78:0a:48:7d:ad:e8:17:be:72:5a:a0:
53:70:89:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zl+BTS6IugRrsTfNSAcAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZjRjNWE2MTk3ODU0OWIyNDgzODhmOWRmNDQ5ZDJhOTVl
MTBhMDcwHhcNMjUwMTMxMTAwMDUxWhcNMjUwMjAxMTAwMDUxWjAzMTEwLwYDVQQD
Eyg1MmY4ZGM5MTBjNjE4ZDNhNjNlMDhiYzUzMmE4MDE2YjZmOTZmMzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqitDNbnF9fy2/KaddvkuZqBxyta7
0h7nyv4S5vqJd+G/omBLO4qBQR90aLwcTpvFZ4KBuD7hOZ6lHCpL70vHW0sUA57H
NJzo1VmVkRIH3iMVj/Mkscr1e8Yh178vB4nbCEuC5M6L6PbbMbmcWNqP57Kye8Pp
7ydGjtuT+hmkhk6bC9xgUOdyAiGLaHXKDKqoo20rDmHQx0ITFqhgzYLbAn4Fxpxo
jkLwLUq5FoYTLFrz3NpJj9TuLV8Yy6PZVnWkBJRcUc84w/0FUT5cpyycmvvdpiLi
ofN2leknD7G9qFVyRHOKrDbN6Rk5GIuB9VzGUPFM2jhWW/JHZLyLix055QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFL43JEMYY06Y+CLxTKoAWtvlvOXMB8GA1UdIwQY
MBaAFET0xaYZeFSbJIOI+d9EnSqV4QoHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlBURnBobDRWSnNrZzRqNTMwU2RLcFhoQ2djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9lNWM4ZGYtNGVmOC00ZDkwLWE0OTAt
MzU4MDBlOWYxNzBlLzEvUlBURnBobDRWSnNrZzRqNTMwU2RLcFhoQ2djLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9lNWM4ZGYtNGVmOC00ZDkwLWE0OTAtMzU4MDBlOWYxNzBl
LzEvUlBURnBobDRWSnNrZzRqNTMwU2RLcFhoQ2djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKOpr/Ztd
fOIG/Dqov/K/6m+tKSypxP34j1rdZrECOrUMwPQ4/0NQV05SGZ/9YBQIVoXdXrM9
vl8FL2Ey1V0O3dN+eyHgY8zsdZdDAs+7NO653SuyCqKzU9sWsKsoNj9KoTV+IMc6
pCAt5TETPKu2ILsITzYRS2qlH4pMnvz7WLQ5J4XR+TJ7wZdPwghZn+QSzdd8O1Pe
7aoZuITV/OLNVkWzj4vrOhU94Sfy6Gyt+j3n/Mw5S7cHO3uYlANvhCInT+dr085a
jtLMVCXkuNhQo14sRwG4aE3SHWFVG596H+kR26EnGrMTZ3mdiDY7Uu+p3ngKSH2t
6Be+clqgU3CJbQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:48:26 2025 by rpki-client