Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
File: 6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft (raw, json)
Hash identifier: m3toBMHSax5NwDL0Yus/ZM9A1XqmlbCJ+iolRJ5UG90=
Subject key identifier: 30:45:A3:6C:25:EA:E4:58:2F:A5:E8:CB:BE:B6:40:8A:37:E7:9C:1E
Authority key identifier: EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
Certificate issuer: /CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Certificate serial: 0194BD4EA1A1F57A4AB21A7C0B024E7F4BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
Manifest number: 08E3
Signing time: Fri 31 Jan 2025 17:00:34 +0000
Manifest this update: Fri 31 Jan 2025 17:00:34 +0000
Manifest next update: Sat 01 Feb 2025 17:00:34 +0000
Files and hashes: 1: 6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl (hash: dGm9nFgKHfsorlBrarpXeIhNOn0LQrbIX1kKWivOeq0=)
2: LdRBYy0Dc5TAEL5DjhgBeOrbOd4.roa (hash: DqAe52Zea4wwRHNsVvBEFGj53/XE1pCKy+2JNBHlZFI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a1:a1:f5:7a:4a:b2:1a:7c:0b:02:4e:7f:4b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Validity
Not Before: Jan 31 17:00:34 2025 GMT
Not After : Feb 1 17:00:34 2025 GMT
Subject: CN=3045a36c25eae4582fa5e8cbbeb6408a37e79c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:29:b2:95:53:00:3e:27:8d:ca:7f:4b:13:c9:
c4:09:19:82:8c:02:29:3c:63:36:40:a1:f9:da:10:
76:89:15:91:8b:7f:c7:e7:d6:87:ec:3d:24:58:17:
05:91:26:3b:bf:fb:ac:90:3c:2e:3e:7c:cf:31:69:
a1:75:21:33:72:15:e7:94:e9:29:e3:e7:be:5f:e0:
38:fe:4b:0a:62:4c:55:d9:50:9c:38:70:ea:fc:2a:
58:22:95:f4:54:2d:8e:5a:d2:dd:c8:18:c1:5a:a7:
16:0c:0a:49:f9:0b:d0:95:e9:c4:7f:16:fd:61:1b:
d6:8c:11:4a:ce:f0:c8:82:e2:08:6d:4a:c1:14:2e:
20:f4:e5:c3:f5:b9:d6:f8:b7:8d:be:30:bd:db:67:
a9:8e:18:e9:f3:e5:11:ce:76:33:c9:cd:9c:4d:51:
a2:18:16:b5:b6:ce:92:f4:f8:ea:7c:80:4e:ca:6d:
2c:b9:d0:13:5d:61:84:92:01:aa:5a:d2:1d:29:ce:
57:cf:c2:ca:7f:f3:da:15:d0:02:85:1d:c8:c3:48:
bf:51:7a:c3:bd:c7:d3:7b:5b:56:d2:cb:43:25:74:
09:2b:75:d3:4e:58:a9:4c:2d:38:d1:0c:68:e3:97:
b5:55:ce:d8:d4:5d:75:05:d4:f0:d0:63:9f:4a:ba:
59:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:45:A3:6C:25:EA:E4:58:2F:A5:E8:CB:BE:B6:40:8A:37:E7:9C:1E
X509v3 Authority Key Identifier:
keyid:EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:20:2f:20:53:0c:c4:24:ed:56:f2:fb:ea:b9:e1:0c:ae:a9:
19:7e:3e:62:2e:2a:b9:43:44:38:0f:99:a0:5b:83:d8:da:98:
41:79:3f:87:62:dd:5f:20:e2:2f:3b:b0:69:73:49:71:a2:dd:
7c:db:d1:90:66:7e:0b:cc:6b:e8:f1:ca:b0:53:4c:1b:a8:f2:
4c:da:fc:3d:4b:fe:47:0e:dd:e7:0b:29:74:a5:2a:c9:91:10:
97:78:69:73:0b:42:64:5a:da:8e:5d:f5:0d:dd:46:e3:37:f6:
1c:26:0c:1f:c2:65:5a:79:0d:ac:31:a8:fe:eb:d4:72:6c:b8:
c2:de:a0:1d:7c:85:bd:bb:d6:f2:49:86:a4:ad:06:70:ef:1e:
bc:97:bf:e0:59:8a:c0:e2:e2:b6:2c:5e:6f:45:f6:dd:f1:21:
d7:05:d3:33:88:d0:84:65:c7:2c:c8:b9:6c:04:a2:32:77:23:
27:8c:c9:6a:b6:e7:5d:e8:af:00:9b:01:34:7a:8d:8c:74:2c:
a2:cf:9c:2d:53:dc:d3:a8:0c:a3:88:72:65:37:cb:eb:b9:0a:
0e:0a:7b:5f:ab:bf:04:e1:6c:73:d4:50:c3:13:0f:95:31:0b:
33:bc:08:bd:cd:0d:30:9f:68:ee:92:4f:ee:d0:9d:81:38:a9:
0d:93:b8:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TqGh9XpKshp8CwJOf0uzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYTVhYmU5ZjczMDQzODMxOThiYTFmZmE1OTI3OTBlY2Yy
YzNjZWIwHhcNMjUwMTMxMTcwMDM0WhcNMjUwMjAxMTcwMDM0WjAzMTEwLwYDVQQD
EygzMDQ1YTM2YzI1ZWFlNDU4MmZhNWU4Y2JiZWI2NDA4YTM3ZTc5YzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ymylVMAPieNyn9LE8nECRmCjAIp
PGM2QKH52hB2iRWRi3/H59aH7D0kWBcFkSY7v/uskDwuPnzPMWmhdSEzchXnlOkp
4+e+X+A4/ksKYkxV2VCcOHDq/CpYIpX0VC2OWtLdyBjBWqcWDApJ+QvQlenEfxb9
YRvWjBFKzvDIguIIbUrBFC4g9OXD9bnW+LeNvjC922epjhjp8+URznYzyc2cTVGi
GBa1ts6S9PjqfIBOym0sudATXWGEkgGqWtIdKc5Xz8LKf/PaFdAChR3Iw0i/UXrD
vcfTe1tW0stDJXQJK3XTTlipTC040Qxo45e1Vc7Y1F11BdTw0GOfSrpZqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBFo2wl6uRYL6Xoy762QIo355weMB8GA1UdIwQY
MBaAFOqlq+n3MEODGYuh/6WSeQ7PLDzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFXcjZmY3dRNE1aaTZIX3BaSjVEczhzUE9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9mYjJhYTEtMDA0Yi00OWM0LWFhNDEt
YzlkZTIyYjkxNmNhLzEvNnFXcjZmY3dRNE1aaTZIX3BaSjVEczhzUE9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9mYjJhYTEtMDA0Yi00OWM0LWFhNDEtYzlkZTIyYjkxNmNh
LzEvNnFXcjZmY3dRNE1aaTZIX3BaSjVEczhzUE9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCAvIFMM
xCTtVvL76rnhDK6pGX4+Yi4quUNEOA+ZoFuD2NqYQXk/h2LdXyDiLzuwaXNJcaLd
fNvRkGZ+C8xr6PHKsFNMG6jyTNr8PUv+Rw7d5wspdKUqyZEQl3hpcwtCZFrajl31
Dd1G4zf2HCYMH8JlWnkNrDGo/uvUcmy4wt6gHXyFvbvW8kmGpK0GcO8evJe/4FmK
wOLitixeb0X23fEh1wXTM4jQhGXHLMi5bASiMncjJ4zJarbnXeivAJsBNHqNjHQs
os+cLVPc06gMo4hyZTfL67kKDgp7X6u/BOFsc9RQwxMPlTELM7wIvc0NMJ9o7pJP
7tCdgTipDZO4BQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:07 2025 by rpki-client