Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
File: 4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft (raw, json)
Hash identifier: QKWnga/hJLs0au4C4lvifb40Xfa/Vmv1K+BuBnk6lm4=
Subject key identifier: 7B:88:29:A2:87:9A:B4:DF:B6:EE:9E:1F:3A:FA:A0:32:E6:81:39:D9
Authority key identifier: E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
Certificate issuer: /CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Certificate serial: 0194BBCE60905FD4FF67A560FF2DD63DD1BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
Manifest number: 012D
Signing time: Fri 31 Jan 2025 10:00:51 +0000
Manifest this update: Fri 31 Jan 2025 10:00:51 +0000
Manifest next update: Sat 01 Feb 2025 10:00:51 +0000
Files and hashes: 1: 4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl (hash: xDXusnKitjeZjxc0Hj4N0MMuyDyYOrhcwYps7cGn0pk=)
2: H7jD667ua1MTRSgNeUALgotBmYc.roa (hash: DYMDYLZ2zWAIEYH23OdxIBtMbFHxghghtjADwNcrKf0=)
3: b9-JZ3RdF7ZemK1dm7cPMRh2l58.roa (hash: oUjihEIhXb/rvj31i27jlX3Sh4tmRUO23s5LKuEs2r0=)
4: lchTEZvN-6afhfJLiZL0vloeA9I.roa (hash: ralvdBvuAobYP/kvHgUFvqB6/N94B6BhMEuSMEPEay0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:60:90:5f:d4:ff:67:a5:60:ff:2d:d6:3d:d1:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Validity
Not Before: Jan 31 10:00:51 2025 GMT
Not After : Feb 1 10:00:51 2025 GMT
Subject: CN=7b8829a2879ab4dfb6ee9e1f3afaa032e68139d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:67:1b:42:3c:b7:cc:00:1a:9b:fd:dc:17:dc:
e8:f7:76:7a:77:cd:09:8e:4b:13:7c:cb:31:d9:23:
9f:62:60:81:c6:58:cc:07:43:c2:f0:3d:f8:3b:5c:
0f:e9:8f:b0:53:42:b0:c2:55:85:ee:fc:61:8e:15:
16:03:3a:63:dd:66:49:73:6b:fe:6a:95:68:e8:b6:
13:ca:f6:34:cf:c0:96:a6:2c:9b:31:aa:00:16:43:
dc:71:03:ff:56:af:ae:d1:d9:0f:1b:d2:f3:83:54:
b4:b6:10:fa:96:0c:40:f1:85:41:a2:31:4b:63:16:
84:04:43:cc:f9:57:8f:69:8a:33:05:9e:6d:99:56:
87:7f:01:7c:b9:a3:25:39:02:47:17:f4:1a:64:d7:
46:36:08:71:18:a6:9f:d7:d3:31:fe:6b:83:d7:12:
13:f5:27:4a:ef:ae:b3:df:58:bb:f0:e2:1c:77:92:
09:b9:b1:5f:0a:b0:7f:c3:57:1a:45:1d:4d:f5:57:
40:93:e9:a7:d5:43:19:bd:3e:ff:fa:f8:d3:06:53:
21:f5:2d:54:0d:91:5c:cf:7e:f7:46:d8:28:99:7f:
43:84:8b:78:a7:63:e1:c0:d1:1e:f4:c1:fe:7f:a7:
0a:9f:45:2b:f9:6f:b7:9c:0b:c0:3b:df:67:d9:fa:
28:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:88:29:A2:87:9A:B4:DF:B6:EE:9E:1F:3A:FA:A0:32:E6:81:39:D9
X509v3 Authority Key Identifier:
keyid:E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:21:ec:d4:61:1d:db:b4:61:3e:ee:29:85:e7:8a:cd:5d:19:
bc:a5:4b:35:48:5a:ad:5e:1f:c0:a8:84:62:e0:56:33:3d:92:
4e:71:5c:72:3e:80:6b:41:06:56:57:5a:b9:de:80:03:df:b9:
79:1f:be:9a:14:20:24:74:de:9f:b5:ca:be:c8:74:8b:7d:fe:
13:1b:92:bd:a7:6f:c7:e6:32:6e:b8:29:4b:3c:18:ad:a1:3b:
7b:29:55:dc:07:15:0b:a6:33:07:86:db:00:26:c0:ff:55:29:
c4:87:54:c4:53:00:9d:b4:48:98:e6:92:ed:d9:b8:61:bc:f2:
ec:48:1d:85:41:19:9a:3c:20:4c:cf:09:34:b7:53:fa:43:46:
f1:f2:ab:c7:f1:88:0f:99:01:00:c7:d6:89:9a:af:ed:38:9d:
d0:72:9b:7d:b3:94:cb:86:b6:d1:ac:56:49:43:e9:58:ed:bc:
7b:5f:d5:5e:58:37:d6:cb:54:bb:f2:3b:65:39:7a:5d:ba:d0:
17:3d:e0:22:61:3c:6c:d2:ce:85:9b:aa:ac:f2:e8:52:95:bf:
42:3a:9a:84:8f:9f:a6:11:85:9f:32:cf:5c:ff:cd:55:40:5c:
17:7f:0c:53:8e:31:db:05:fb:1d:5d:38:00:a1:36:42:71:78:
2b:e4:b3:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zmCQX9T/Z6Vg/y3WPdG6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNjBiMGE1NWE4N2E2NmU5MGE3NDYzYTAxZGE2NDE0ZmMw
MzRkM2QwHhcNMjUwMTMxMTAwMDUxWhcNMjUwMjAxMTAwMDUxWjAzMTEwLwYDVQQD
Eyg3Yjg4MjlhMjg3OWFiNGRmYjZlZTllMWYzYWZhYTAzMmU2ODEzOWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWcbQjy3zAAam/3cF9zo93Z6d80J
jksTfMsx2SOfYmCBxljMB0PC8D34O1wP6Y+wU0KwwlWF7vxhjhUWAzpj3WZJc2v+
apVo6LYTyvY0z8CWpiybMaoAFkPccQP/Vq+u0dkPG9Lzg1S0thD6lgxA8YVBojFL
YxaEBEPM+VePaYozBZ5tmVaHfwF8uaMlOQJHF/QaZNdGNghxGKaf19Mx/muD1xIT
9SdK766z31i78OIcd5IJubFfCrB/w1caRR1N9VdAk+mn1UMZvT7/+vjTBlMh9S1U
DZFcz373RtgomX9DhIt4p2PhwNEe9MH+f6cKn0Ur+W+3nAvAO99n2fooZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuIKaKHmrTftu6eHzr6oDLmgTnZMB8GA1UdIwQY
MBaAFOJgsKVah6ZukKdGOgHaZBT8A009MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG1Dd3BWcUhwbTZRcDBZNkFkcGtGUHdEVFQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8xYmNiMTEtMzQxZC00YWRlLTk2YjEt
ZDIyNjlmNDBmM2QzLzEvNG1Dd3BWcUhwbTZRcDBZNkFkcGtGUHdEVFQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8xYmNiMTEtMzQxZC00YWRlLTk2YjEtZDIyNjlmNDBmM2Qz
LzEvNG1Dd3BWcUhwbTZRcDBZNkFkcGtGUHdEVFQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFiHs1GEd
27RhPu4pheeKzV0ZvKVLNUharV4fwKiEYuBWMz2STnFccj6Aa0EGVldaud6AA9+5
eR++mhQgJHTen7XKvsh0i33+ExuSvadvx+YybrgpSzwYraE7eylV3AcVC6YzB4bb
ACbA/1UpxIdUxFMAnbRImOaS7dm4Ybzy7EgdhUEZmjwgTM8JNLdT+kNG8fKrx/GI
D5kBAMfWiZqv7Tid0HKbfbOUy4a20axWSUPpWO28e1/VXlg31stUu/I7ZTl6XbrQ
Fz3gImE8bNLOhZuqrPLoUpW/QjqahI+fphGFnzLPXP/NVUBcF38MU44x2wX7HV04
AKE2QnF4K+SztQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:40:11 2025 by rpki-client