Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
File: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft (raw, json)
Hash identifier: jAcHOhQ0rhtukm+tpHr9sdNt/7jfCI667jp2K28L+us=
Subject key identifier: BD:F9:CA:31:DF:17:53:E9:C0:CF:D7:14:90:F2:9C:34:10:5D:C5:4F
Authority key identifier: E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
Certificate issuer: /CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Certificate serial: 0194BCA9E396A7030BDD4B729DB620277348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
Manifest number: 12BE
Signing time: Fri 31 Jan 2025 14:00:37 +0000
Manifest this update: Fri 31 Jan 2025 14:00:37 +0000
Manifest next update: Sat 01 Feb 2025 14:00:37 +0000
Files and hashes: 1: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl (hash: ERkpFPwIWgCvNoI7uhZVPBDCTG2f7+xFb+/HSjYsDXQ=)
2: YKk_IxXaH7sfK7_gRS3093UyRYo.roa (hash: COs47LOLhU2xn+3tfczoJAT+wVHUvoY7/hZnsmTjtwc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e3:96:a7:03:0b:dd:4b:72:9d:b6:20:27:73:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Validity
Not Before: Jan 31 14:00:37 2025 GMT
Not After : Feb 1 14:00:37 2025 GMT
Subject: CN=bdf9ca31df1753e9c0cfd71490f29c34105dc54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:28:1a:18:54:36:a8:39:e2:a0:44:5d:67:31:
04:0b:5e:75:5c:69:63:be:08:5f:3b:42:ac:7f:ad:
44:54:52:5e:b1:3d:b3:86:db:d8:ac:3f:d9:0b:9b:
02:07:e0:cf:25:50:80:cd:be:05:b6:d8:84:6c:ac:
92:a7:6e:4e:c8:42:e4:23:d7:6c:35:f4:c8:1d:ed:
85:3d:bd:9e:e2:fe:d2:b2:91:61:80:e9:9b:ef:27:
57:a7:72:a3:6d:fb:f0:82:03:1a:f5:f1:b9:1e:c0:
58:c5:3f:fe:6b:28:3e:2b:52:a1:3e:ee:e8:fa:20:
16:ae:10:1f:82:14:8d:c9:7c:3b:f9:0b:8d:80:08:
86:48:e9:aa:a0:71:59:8b:a0:67:eb:0d:41:c5:84:
7d:10:b9:d8:77:3d:4b:58:c9:09:10:2a:a7:ad:ec:
43:76:0a:78:4d:d4:fe:87:e8:7e:62:2a:c0:f1:03:
5a:b2:56:56:b3:0c:63:c8:bf:76:29:1b:c8:4f:a4:
5c:26:d0:2f:78:05:8c:b4:06:1d:12:03:cd:8c:14:
81:71:30:93:55:3f:2e:e6:d7:9c:d2:c2:40:dc:c5:
3d:3d:3b:8a:5b:32:10:78:9b:1b:5f:07:18:e2:22:
ca:95:67:e6:ca:1d:19:c7:2b:a5:46:6c:a4:37:40:
69:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F9:CA:31:DF:17:53:E9:C0:CF:D7:14:90:F2:9C:34:10:5D:C5:4F
X509v3 Authority Key Identifier:
keyid:E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:45:5a:95:07:b8:ce:ec:6d:9a:dd:c9:d5:dc:06:ec:bf:9d:
8b:35:79:dd:f7:c6:27:07:89:ed:aa:69:44:3f:92:8f:c5:2a:
92:c4:4f:f2:27:05:ab:0e:dc:63:f1:37:f6:16:4b:71:81:91:
4d:f2:29:a3:06:e8:e4:ee:8f:04:1e:c1:71:94:3a:aa:30:79:
00:a2:c4:db:9b:b4:74:6f:7c:fd:0b:e9:bb:34:86:ec:4b:99:
b6:62:7b:7b:bd:e9:1c:63:f2:83:90:e0:c1:59:65:4f:35:fa:
df:2d:96:6a:42:c4:a6:3a:4c:ee:da:9e:a3:c4:ba:9b:3e:4a:
26:cf:07:36:eb:24:0f:d2:e5:e2:06:1d:b0:05:cf:c8:a3:0b:
05:3e:cb:c5:60:32:93:5b:ec:1c:f8:4a:f7:2f:ca:bf:f0:09:
59:c0:e0:8c:3a:00:9c:d7:1e:4a:be:45:0f:1f:28:5b:04:d6:
76:3a:06:20:d0:54:76:11:86:aa:dd:f1:42:21:45:0b:9d:96:
8c:4f:85:60:38:be:f7:1a:ce:f9:ba:af:5b:f7:29:22:8d:4f:
fd:af:52:94:d4:fc:9a:81:b1:a2:b9:90:ad:e3:cf:6a:1f:cf:
f1:9b:1f:6e:95:f0:87:af:e5:4f:79:9d:29:e6:61:a0:2b:a6:
ca:f5:7b:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qeOWpwML3UtynbYgJ3NIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMTU0YWRiNWEyZWQ5OTljZjFkYjljMTI3MWIyMjA5ZGFk
MzQ0OWUwHhcNMjUwMTMxMTQwMDM3WhcNMjUwMjAxMTQwMDM3WjAzMTEwLwYDVQQD
EyhiZGY5Y2EzMWRmMTc1M2U5YzBjZmQ3MTQ5MGYyOWMzNDEwNWRjNTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwigaGFQ2qDnioERdZzEEC151XGlj
vghfO0Ksf61EVFJesT2zhtvYrD/ZC5sCB+DPJVCAzb4FttiEbKySp25OyELkI9ds
NfTIHe2FPb2e4v7SspFhgOmb7ydXp3KjbfvwggMa9fG5HsBYxT/+ayg+K1KhPu7o
+iAWrhAfghSNyXw7+QuNgAiGSOmqoHFZi6Bn6w1BxYR9ELnYdz1LWMkJECqnrexD
dgp4TdT+h+h+YirA8QNaslZWswxjyL92KRvIT6RcJtAveAWMtAYdEgPNjBSBcTCT
VT8u5tec0sJA3MU9PTuKWzIQeJsbXwcY4iLKlWfmyh0ZxyulRmykN0Bp9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL35yjHfF1PpwM/XFJDynDQQXcVPMB8GA1UdIwQY
MBaAFOMVSttaLtmZzx25wScbIgna00SeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhWSzIxb3UyWm5QSGJuQkp4c2lDZHJUUko0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wMTY3ZWItMGQxNi00Y2MxLTgwNDct
MTQyZmNhY2Q3YTQ5LzEvNHhWSzIxb3UyWm5QSGJuQkp4c2lDZHJUUko0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8wMTY3ZWItMGQxNi00Y2MxLTgwNDctMTQyZmNhY2Q3YTQ5
LzEvNHhWSzIxb3UyWm5QSGJuQkp4c2lDZHJUUko0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYEValQe4
zuxtmt3J1dwG7L+dizV53ffGJweJ7appRD+Sj8UqksRP8icFqw7cY/E39hZLcYGR
TfIpowbo5O6PBB7BcZQ6qjB5AKLE25u0dG98/QvpuzSG7EuZtmJ7e73pHGPyg5Dg
wVllTzX63y2WakLEpjpM7tqeo8S6mz5KJs8HNuskD9Ll4gYdsAXPyKMLBT7LxWAy
k1vsHPhK9y/Kv/AJWcDgjDoAnNceSr5FDx8oWwTWdjoGINBUdhGGqt3xQiFFC52W
jE+FYDi+9xrO+bqvW/cpIo1P/a9SlNT8moGxormQrePPah/P8ZsfbpXwh6/lT3md
KeZhoCumyvV7bQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:14 2025 by rpki-client