Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File: cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier: uKJb7PxUnJ3eCzKfV7r/KmoRO0FlD7tMa8C433E7APw=
Subject key identifier: AD:77:EB:FF:BA:93:98:AE:29:50:4C:29:81:13:52:77:0F:14:18:9B
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial: 0194BD852F5AD21DFB8709FEFAA77318B254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number: 0E5C
Signing time: Fri 31 Jan 2025 18:00:09 +0000
Manifest this update: Fri 31 Jan 2025 18:00:09 +0000
Manifest next update: Sat 01 Feb 2025 18:00:09 +0000
Files and hashes: 1: 5kIp4bFmAr9lOCjBtU4-CSX7D0w.roa (hash: zS6XZLioq/dFM9rTCOe5dC9siPtnmQmcYc9glHbFesE=)
2: WZoVc8N-YD-8FMKAITneTMD8_4k.roa (hash: d546sm0t0rb46HppUnfY7MCyS/rnnp2kV23n3HY9/us=)
3: bZJxdCs0gWqYryxwQS8EGlLZ93c.roa (hash: ZMF+prTjcHa6DFcnagp286MUC0TlcS1uVKhgY1MMJNc=)
4: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: vBGkKnMe+lVdHQETMroMUG7IHaDn6l63tLoPW6LMe4c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2f:5a:d2:1d:fb:87:09:fe:fa:a7:73:18:b2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Validity
Not Before: Jan 31 18:00:09 2025 GMT
Not After : Feb 1 18:00:09 2025 GMT
Subject: CN=ad77ebffba9398ae29504c29811352770f14189b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:03:f8:56:8e:46:88:e6:cc:ed:3c:ed:56:cd:
8f:81:41:d9:08:75:9f:3a:7f:4b:0c:68:1f:b4:22:
e2:75:bb:37:c6:03:94:df:15:0c:31:f3:f1:48:40:
91:29:a7:f0:c2:cc:6e:ed:78:fa:79:ab:82:9e:da:
d9:45:e4:d1:e3:5c:51:d0:75:e6:7c:65:58:bd:0e:
81:0f:9e:67:7e:2e:83:08:8d:56:19:8a:22:91:0c:
5a:78:ac:41:ca:6f:6f:2d:4d:9a:a4:d6:6b:ff:a9:
c9:f6:b8:5b:a7:5a:2f:06:ca:b0:91:e5:e7:0d:4f:
92:11:7a:6e:02:b3:3c:9f:5c:41:3b:f6:0a:14:d6:
00:ea:ed:86:0b:dd:28:04:70:4c:7e:d4:09:9d:55:
af:45:2e:b1:44:b7:0e:f9:b3:7e:12:f3:de:75:32:
61:f1:7c:b4:09:dc:cb:ca:fc:48:15:3e:a2:f9:81:
bc:14:67:68:ce:fe:1e:a7:cc:3e:e1:96:fe:d1:db:
f9:32:e8:f1:50:a2:c7:c7:19:6f:17:f7:d7:aa:c5:
3a:a9:41:3a:95:f3:92:e5:8b:75:d7:c9:cc:3e:0c:
c1:f6:44:36:05:06:5e:3d:b2:55:45:59:cc:6a:a1:
33:76:92:e8:23:af:17:8c:d4:96:72:71:98:47:04:
06:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:77:EB:FF:BA:93:98:AE:29:50:4C:29:81:13:52:77:0F:14:18:9B
X509v3 Authority Key Identifier:
keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:98:a7:77:11:9b:90:3e:22:96:cb:a2:78:9d:20:a9:69:3a:
e5:d0:33:fb:da:71:ea:67:fb:5d:3c:f8:9b:8a:ac:22:a9:7d:
32:b6:5f:93:2c:31:8d:de:8a:75:69:6c:e2:91:0f:93:3a:75:
eb:de:e5:3d:de:28:39:41:20:67:e4:8e:86:d3:dc:b7:78:a0:
3f:11:1c:e7:0a:88:ab:55:33:aa:25:22:c4:6c:b7:9b:98:10:
16:25:e5:6f:3b:a2:6a:41:46:a5:63:03:05:bb:58:ea:72:f3:
77:04:84:08:32:34:f4:d6:2c:77:1c:7d:a8:fe:17:49:8b:92:
51:4e:7b:26:e7:55:99:fa:df:6e:a1:d5:d8:fd:8f:7c:35:ef:
51:21:31:6b:1d:70:6c:6f:be:78:da:e6:99:fe:c1:12:76:88:
21:09:ef:15:45:15:40:b7:b2:ed:e7:86:1f:6a:05:f0:95:7b:
ee:a6:7e:a4:22:f1:93:14:3b:f4:f7:ce:92:da:43:79:de:e7:
5d:20:1d:6d:75:8c:94:c5:3d:26:89:6a:f1:aa:8b:1f:03:c1:
71:94:6d:7c:0c:a6:ab:53:53:a5:59:c8:bb:50:69:f2:02:d3:
d1:60:4d:42:fb:16:2a:66:d9:33:7c:2a:56:15:df:47:59:e8:
96:88:9b:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hS9a0h37hwn++qdzGLJUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMWQ5YWQ0MDRlY2RhZmE3MGVhOWE0YzlkMTBiOTgwMTgy
OWVhMWYwHhcNMjUwMTMxMTgwMDA5WhcNMjUwMjAxMTgwMDA5WjAzMTEwLwYDVQQD
EyhhZDc3ZWJmZmJhOTM5OGFlMjk1MDRjMjk4MTEzNTI3NzBmMTQxODliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AP4Vo5GiObM7TztVs2PgUHZCHWf
On9LDGgftCLidbs3xgOU3xUMMfPxSECRKafwwsxu7Xj6eauCntrZReTR41xR0HXm
fGVYvQ6BD55nfi6DCI1WGYoikQxaeKxBym9vLU2apNZr/6nJ9rhbp1ovBsqwkeXn
DU+SEXpuArM8n1xBO/YKFNYA6u2GC90oBHBMftQJnVWvRS6xRLcO+bN+EvPedTJh
8Xy0CdzLyvxIFT6i+YG8FGdozv4ep8w+4Zb+0dv5MujxUKLHxxlvF/fXqsU6qUE6
lfOS5Yt118nMPgzB9kQ2BQZePbJVRVnMaqEzdpLoI68XjNSWcnGYRwQGjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK136/+6k5iuKVBMKYETUncPFBibMB8GA1UdIwQY
MBaAFHMdmtQE7Nr6cOqaTJ0QuYAYKeofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYt
ZTIwYTY1NGZjYTk1LzEvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYtZTIwYTY1NGZjYTk1
LzEvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5indxGb
kD4ilsuieJ0gqWk65dAz+9px6mf7XTz4m4qsIql9MrZfkywxjd6KdWls4pEPkzp1
697lPd4oOUEgZ+SOhtPct3igPxEc5wqIq1UzqiUixGy3m5gQFiXlbzuiakFGpWMD
BbtY6nLzdwSECDI09NYsdxx9qP4XSYuSUU57JudVmfrfbqHV2P2PfDXvUSExax1w
bG++eNrmmf7BEnaIIQnvFUUVQLey7eeGH2oF8JV77qZ+pCLxkxQ79PfOktpDed7n
XSAdbXWMlMU9Jolq8aqLHwPBcZRtfAymq1NTpVnIu1Bp8gLT0WBNQvsWKmbZM3wq
VhXfR1noloib2w==
-----END CERTIFICATE-----
Generated at Thu May 1 11:24:32 2025 by rpki-client