Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
File: dyDGcENNpRAiYQmdoQHyXdP3qto.mft (raw, json)
Hash identifier: Kt8Nohv9ckBRF2TvaMySh4eCYR+S1xRDhPWwGAcZe94=
Subject key identifier: 6C:F2:04:C2:E9:C7:4F:AC:23:C9:2C:0A:03:81:9D:DB:78:78:C3:F6
Authority key identifier: 77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA
Certificate issuer: /CN=7720c670434da5102261099da101f25dd3f7aada
Certificate serial: 0194BCAA075279A84C8AAE1A16EA397ACDC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
Manifest number: 0C6D
Signing time: Fri 31 Jan 2025 14:00:46 +0000
Manifest this update: Fri 31 Jan 2025 14:00:46 +0000
Manifest next update: Sat 01 Feb 2025 14:00:46 +0000
Files and hashes: 1: dyDGcENNpRAiYQmdoQHyXdP3qto.crl (hash: g/I+u5sQCLxhv3x8s1TYpcka0/BD0f6Gffxi7xBfeMQ=)
2: s7pdPnsOB8imHTQwb8o3CB7JIMI.roa (hash: lFvR0bEMv7k9KIxJ6Wc08171+rqM84YXRxLTrqtVpQk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:07:52:79:a8:4c:8a:ae:1a:16:ea:39:7a:cd:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7720c670434da5102261099da101f25dd3f7aada
Validity
Not Before: Jan 31 14:00:46 2025 GMT
Not After : Feb 1 14:00:46 2025 GMT
Subject: CN=6cf204c2e9c74fac23c92c0a03819ddb7878c3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:ef:2f:94:e2:bd:21:87:38:cc:22:0c:21:
66:f8:b5:5b:5e:51:92:cf:d8:fe:2d:e9:86:bf:23:
81:63:e4:29:b5:31:75:65:05:75:d5:12:f8:56:ad:
14:f3:b9:4e:e5:bb:1c:97:8e:cb:78:91:2d:ae:61:
0b:97:28:58:5a:c6:6f:72:45:d8:d4:c5:00:4e:43:
3e:dd:44:d1:e1:46:aa:02:00:b2:da:1f:58:22:6d:
5d:dd:6f:40:6a:cf:18:71:69:11:2f:8b:a0:4f:0f:
dc:02:ca:99:4a:fb:e1:cd:a5:fd:75:c7:0f:97:b5:
4b:fe:11:a3:61:dd:75:5e:a5:07:c6:12:43:cc:43:
86:48:3e:84:87:bf:96:af:f8:de:21:b1:c9:6d:f8:
9c:e6:2a:34:b8:3a:04:23:fe:93:e3:13:a8:b8:b0:
5a:c8:58:51:8e:bb:24:a3:b4:15:40:81:19:6c:ae:
41:49:a6:1e:1b:5e:d0:4f:30:ac:c6:c8:aa:91:d4:
d0:32:ef:32:9e:b1:ce:9d:0c:a6:e3:11:af:f7:91:
c7:f4:4a:dd:49:03:3e:6b:50:ef:1d:93:60:18:1d:
39:67:a1:1c:7b:b7:eb:96:ce:c1:8e:d4:9e:e9:a7:
c7:85:a5:72:17:cd:91:b0:d0:53:b4:ff:6c:f2:48:
7a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F2:04:C2:E9:C7:4F:AC:23:C9:2C:0A:03:81:9D:DB:78:78:C3:F6
X509v3 Authority Key Identifier:
keyid:77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d5:4a:b4:70:8b:77:5d:5b:99:ff:e5:14:1d:8a:1e:4f:b0:
62:b9:0e:cb:e3:73:34:59:c7:8b:2c:80:e0:6b:39:b8:a3:6f:
c2:15:1d:4e:ce:91:32:6f:a1:e3:b8:ee:ce:5d:c4:3f:fb:18:
2b:16:c1:f5:22:9f:04:b8:0f:28:2c:8a:21:4a:df:79:8b:b9:
8f:4c:74:fd:a7:c5:f7:a2:b7:a7:43:2c:31:e0:52:71:53:fe:
86:e9:19:64:90:ba:bb:69:ab:55:da:12:10:41:6d:68:06:5c:
de:cc:21:c9:15:da:3c:59:d9:3a:1e:4d:0c:14:9e:d5:51:1b:
28:d6:60:e3:ca:bd:4a:6a:26:51:e2:1e:7c:8b:ee:25:1f:59:
17:fd:11:7a:6e:65:90:69:5a:78:df:8e:c6:6e:4d:d1:1e:c8:
cf:15:c8:8f:0a:04:dd:54:7c:61:3c:f5:5b:c4:36:0f:7f:40:
c8:a1:26:1c:4b:34:c0:f0:15:2e:08:a8:41:05:8a:20:e7:7b:
c6:b6:20:66:7e:3a:e6:45:d1:4c:1b:6c:18:74:3f:61:9a:6f:
18:9f:52:85:de:b0:89:54:18:3e:ab:71:77:48:1c:9e:af:e0:
e5:7f:df:49:37:6e:b0:b5:bd:7b:25:38:17:a2:95:31:0d:9f:
60:49:48:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qgdSeahMiq4aFuo5es3EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MjBjNjcwNDM0ZGE1MTAyMjYxMDk5ZGExMDFmMjVkZDNm
N2FhZGEwHhcNMjUwMTMxMTQwMDQ2WhcNMjUwMjAxMTQwMDQ2WjAzMTEwLwYDVQQD
Eyg2Y2YyMDRjMmU5Yzc0ZmFjMjNjOTJjMGEwMzgxOWRkYjc4NzhjM2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtLvL5TivSGHOMwiDCFm+LVbXlGS
z9j+LemGvyOBY+QptTF1ZQV11RL4Vq0U87lO5bscl47LeJEtrmELlyhYWsZvckXY
1MUATkM+3UTR4UaqAgCy2h9YIm1d3W9Aas8YcWkRL4ugTw/cAsqZSvvhzaX9dccP
l7VL/hGjYd11XqUHxhJDzEOGSD6Eh7+Wr/jeIbHJbfic5io0uDoEI/6T4xOouLBa
yFhRjrsko7QVQIEZbK5BSaYeG17QTzCsxsiqkdTQMu8ynrHOnQym4xGv95HH9Erd
SQM+a1DvHZNgGB05Z6Ece7frls7BjtSe6afHhaVyF82RsNBTtP9s8kh69QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGzyBMLpx0+sI8ksCgOBndt4eMP2MB8GA1UdIwQY
MBaAFHcgxnBDTaUQImEJnaEB8l3T96raMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHlER2NFTk5wUkFpWVFtZG9RSHlYZFAzcXRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jZjc1M2YtNzc4MS00ZGZlLWEzOGUt
ZDg0NTk5NTk5MWFjLzEvZHlER2NFTk5wUkFpWVFtZG9RSHlYZFAzcXRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9jZjc1M2YtNzc4MS00ZGZlLWEzOGUtZDg0NTk5NTk5MWFj
LzEvZHlER2NFTk5wUkFpWVFtZG9RSHlYZFAzcXRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArtVKtHCL
d11bmf/lFB2KHk+wYrkOy+NzNFnHiyyA4Gs5uKNvwhUdTs6RMm+h47juzl3EP/sY
KxbB9SKfBLgPKCyKIUrfeYu5j0x0/afF96K3p0MsMeBScVP+hukZZJC6u2mrVdoS
EEFtaAZc3swhyRXaPFnZOh5NDBSe1VEbKNZg48q9SmomUeIefIvuJR9ZF/0Rem5l
kGlaeN+Oxm5N0R7IzxXIjwoE3VR8YTz1W8Q2D39AyKEmHEs0wPAVLgioQQWKIOd7
xrYgZn465kXRTBtsGHQ/YZpvGJ9Shd6wiVQYPqtxd0gcnq/g5X/fSTdusLW9eyU4
F6KVMQ2fYElIOQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:47:10 2025 by rpki-client