Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
File: 4QnieMeGIlTIh1XkcXOYpVKkkEA.mft (raw, json)
Hash identifier: zzkmj3ssIVdsirV7tNZ3GJJNtrcBJXWKLDNriKUDI4U=
Subject key identifier: 26:88:82:18:58:D5:C7:8F:BE:2E:63:EF:39:C2:C0:90:85:F9:E5:66
Authority key identifier: E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
Certificate issuer: /CN=e109e278c7862254c88755e4717398a552a49040
Certificate serial: 0194BC73261D254266C83B17EEF594F3562E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
Manifest number: 01CA
Signing time: Fri 31 Jan 2025 13:00:50 +0000
Manifest this update: Fri 31 Jan 2025 13:00:50 +0000
Manifest next update: Sat 01 Feb 2025 13:00:50 +0000
Files and hashes: 1: 4QnieMeGIlTIh1XkcXOYpVKkkEA.crl (hash: Kwa/jXbPCqXY6dY+0EC+U02K5S2AtBL/XelWjFw6pBY=)
2: 8a9J3an90z8mWS8TkwqA1Af6V60.roa (hash: Sfg4OixpuznuGw9qd09AY2Lx61QBeTwn9kYrisQDEss=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:26:1d:25:42:66:c8:3b:17:ee:f5:94:f3:56:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e109e278c7862254c88755e4717398a552a49040
Validity
Not Before: Jan 31 13:00:50 2025 GMT
Not After : Feb 1 13:00:50 2025 GMT
Subject: CN=2688821858d5c78fbe2e63ef39c2c09085f9e566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6b:5e:78:ce:88:b7:53:26:34:38:64:50:f7:
36:a4:48:1a:d5:e4:3b:4a:a2:57:eb:fd:58:b9:f0:
1a:9d:69:d9:77:31:97:2c:77:b4:d4:f2:c4:48:84:
26:a3:49:e3:a3:f3:4e:92:5b:a0:6c:bb:ee:e1:e3:
87:02:09:2e:2e:97:d8:b3:43:76:4e:d9:41:3d:44:
c3:cf:82:7d:2e:7c:e4:08:bb:1c:7b:f8:59:01:72:
e5:4f:29:71:dc:25:e9:1c:c0:d4:93:50:08:26:1d:
4b:17:0c:15:66:d4:c7:4e:fe:4c:eb:c0:35:a2:c1:
96:42:08:a1:e4:0e:ea:f2:60:88:7b:cc:4a:7b:e8:
cd:6a:8c:51:ee:ac:61:ab:f1:54:cb:23:ad:65:e6:
38:1f:51:d2:0f:bb:2a:3d:0f:32:47:6d:1f:ce:fd:
90:5c:6c:43:d2:78:e1:d4:c5:96:ee:89:c1:5f:9d:
7a:d4:b8:dd:e3:5e:1a:16:d7:57:a1:86:b7:d3:ca:
7f:20:1f:ac:fe:5e:df:b8:37:81:3f:c9:6f:0c:a7:
d6:a6:f3:0c:b7:16:d0:d5:ea:09:f0:c4:81:a9:87:
e8:2f:39:ac:2c:67:95:70:e6:17:67:56:0e:8a:8a:
38:85:5f:ee:57:4f:53:31:cf:74:5c:c9:8f:71:05:
29:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:88:82:18:58:D5:C7:8F:BE:2E:63:EF:39:C2:C0:90:85:F9:E5:66
X509v3 Authority Key Identifier:
keyid:E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ed:46:0b:cb:e4:cd:e9:a5:3c:c5:07:6c:60:5b:0d:4e:26:
2d:77:09:df:33:b2:9b:61:f8:50:fc:5d:de:16:5d:e8:49:5f:
db:fb:9f:10:48:c3:cb:d4:a9:e4:ca:fc:cd:49:03:39:cf:fb:
54:81:09:09:d0:86:1d:95:ad:d9:0c:6c:66:85:33:b2:1e:4b:
67:8b:cd:ae:86:e6:5b:9d:c3:1b:3a:78:6f:e3:e0:a0:42:b4:
6d:9e:43:bc:c8:d2:8b:85:1b:2e:c3:c2:3c:e9:68:2c:75:7e:
aa:d8:c6:11:b1:ab:b0:8e:e8:0c:c6:99:34:bc:af:07:de:05:
73:33:c9:00:29:d3:29:b9:a3:04:57:7c:dd:16:28:a3:4c:d4:
85:30:05:f3:35:2e:5e:55:56:9a:2f:07:9a:22:2e:72:02:46:
fe:00:26:7c:4d:00:74:b6:67:83:2b:8f:c9:b1:28:46:4e:58:
66:71:76:b3:59:cb:95:ea:e5:7a:08:57:a6:98:5c:cf:d2:e0:
16:1a:a0:1e:9f:1d:29:e5:48:4e:d5:d9:7e:13:b6:9e:ff:b2:
88:cf:66:ff:c9:ec:6a:f8:a3:1c:37:6d:df:8a:42:d1:19:03:
2d:47:0b:5b:ef:dc:74:0b:20:1e:e2:44:33:43:50:92:59:bb:
69:bb:9a:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cyYdJUJmyDsX7vWU81YuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMDllMjc4Yzc4NjIyNTRjODg3NTVlNDcxNzM5OGE1NTJh
NDkwNDAwHhcNMjUwMTMxMTMwMDUwWhcNMjUwMjAxMTMwMDUwWjAzMTEwLwYDVQQD
EygyNjg4ODIxODU4ZDVjNzhmYmUyZTYzZWYzOWMyYzA5MDg1ZjllNTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GteeM6It1MmNDhkUPc2pEga1eQ7
SqJX6/1YufAanWnZdzGXLHe01PLESIQmo0njo/NOklugbLvu4eOHAgkuLpfYs0N2
TtlBPUTDz4J9LnzkCLsce/hZAXLlTylx3CXpHMDUk1AIJh1LFwwVZtTHTv5M68A1
osGWQgih5A7q8mCIe8xKe+jNaoxR7qxhq/FUyyOtZeY4H1HSD7sqPQ8yR20fzv2Q
XGxD0njh1MWW7onBX5161Ljd414aFtdXoYa308p/IB+s/l7fuDeBP8lvDKfWpvMM
txbQ1eoJ8MSBqYfoLzmsLGeVcOYXZ1YOioo4hV/uV09TMc90XMmPcQUpUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaIghhY1cePvi5j7znCwJCF+eVmMB8GA1UdIwQY
MBaAFOEJ4njHhiJUyIdV5HFzmKVSpJBAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFFuaWVNZUdJbFRJaDFYa2NYT1lwVktra0VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lMDcyZDctODdjMC00YjczLTlhNGQt
MmYwM2UzMmJkMjFhLzEvNFFuaWVNZUdJbFRJaDFYa2NYT1lwVktra0VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9lMDcyZDctODdjMC00YjczLTlhNGQtMmYwM2UzMmJkMjFh
LzEvNFFuaWVNZUdJbFRJaDFYa2NYT1lwVktra0VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+1GC8vk
zemlPMUHbGBbDU4mLXcJ3zOym2H4UPxd3hZd6Elf2/ufEEjDy9Sp5Mr8zUkDOc/7
VIEJCdCGHZWt2QxsZoUzsh5LZ4vNrobmW53DGzp4b+PgoEK0bZ5DvMjSi4UbLsPC
POloLHV+qtjGEbGrsI7oDMaZNLyvB94FczPJACnTKbmjBFd83RYoo0zUhTAF8zUu
XlVWmi8HmiIucgJG/gAmfE0AdLZngyuPybEoRk5YZnF2s1nLlerleghXpphcz9Lg
FhqgHp8dKeVITtXZfhO2nv+yiM9m/8nsavijHDdt34pC0RkDLUcLW+/cdAsgHuJE
M0NQklm7abuaUQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:12:45 2025 by rpki-client