Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
File: cCD5EV0ZQDH8XISfFau_2A4IYis.mft (raw, json)
Hash identifier: +JWzxP95t0m2jjbIEhQ269vc2yT7IOEhAXEErljqM54=
Subject key identifier: 70:EB:30:3A:51:07:38:01:A4:4C:0C:64:AA:35:08:8F:78:75:15:D7
Authority key identifier: 70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
Certificate issuer: /CN=7020f9115d194031fc5c849f15abbfd80e08622b
Certificate serial: 0194BD4EA0573A314E32FB5D17841368EE1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
Manifest number: 0DB5
Signing time: Fri 31 Jan 2025 17:00:34 +0000
Manifest this update: Fri 31 Jan 2025 17:00:34 +0000
Manifest next update: Sat 01 Feb 2025 17:00:34 +0000
Files and hashes: 1: cCD5EV0ZQDH8XISfFau_2A4IYis.crl (hash: PVgR+6oYXML2sA0VY9U8fS6wg2Nq2TlprH0QoFlOpeY=)
2: qVT8jOoIg3NQ7grXFr4I7SQu8PY.roa (hash: OKj4yzwEJbloQV+D0rgvNOZHy8KXLKDzSxRsqanfakg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a0:57:3a:31:4e:32:fb:5d:17:84:13:68:ee:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7020f9115d194031fc5c849f15abbfd80e08622b
Validity
Not Before: Jan 31 17:00:34 2025 GMT
Not After : Feb 1 17:00:34 2025 GMT
Subject: CN=70eb303a51073801a44c0c64aa35088f787515d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:16:41:70:2d:e5:28:43:c7:ba:a4:4f:d6:58:
2f:78:ee:12:df:25:e9:5a:2f:4d:68:38:2f:a7:13:
ac:46:08:49:f2:26:1b:61:18:f6:09:8f:25:cc:fc:
0d:b3:5c:e0:44:02:23:03:e2:05:1c:40:3a:5a:88:
85:33:25:33:b4:14:e3:91:80:e3:03:42:58:42:e7:
70:62:30:bc:22:31:e0:ba:c8:8a:ea:cf:cf:a1:dd:
0b:48:6c:bb:5b:58:27:41:40:12:be:e4:10:28:e4:
57:0d:2b:ed:95:b1:63:70:fc:e5:89:2b:63:c9:8b:
2c:0b:bf:42:ed:7b:58:09:96:1d:c3:e6:da:af:99:
67:ac:17:b9:00:38:b3:02:db:7d:6a:c2:da:39:64:
a8:2c:3b:92:7f:61:96:65:ac:47:15:43:2c:09:fd:
5b:a2:a2:d6:fe:7d:44:22:f4:89:28:ed:c7:4c:7f:
58:78:31:d0:6f:57:4e:06:c9:2b:eb:91:0d:a6:b8:
6a:55:11:00:74:d9:63:4e:a0:e5:93:9f:a2:6f:4a:
94:e5:e6:a5:f5:3e:ae:ca:c2:c0:be:8b:51:5e:42:
b7:8b:7f:73:ab:6b:63:c7:03:3d:9c:f0:c4:44:a4:
fe:00:94:82:e5:ab:d7:0b:8d:15:b3:7a:86:76:a0:
f3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EB:30:3A:51:07:38:01:A4:4C:0C:64:AA:35:08:8F:78:75:15:D7
X509v3 Authority Key Identifier:
keyid:70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ef:f5:a1:a2:24:8e:92:04:5b:a1:53:fc:ad:00:a4:a9:59:
e1:f4:6c:8f:a0:61:ea:52:63:3b:9e:7b:15:52:e1:b5:fd:70:
3e:e2:f6:6e:a4:95:56:ec:b6:6a:35:6b:dc:6b:0f:bf:04:50:
8f:1f:c1:40:68:8b:22:6e:44:ac:07:53:16:c1:4c:42:f8:98:
cd:d1:40:14:32:49:04:d1:17:6c:99:bc:64:b4:fc:77:74:43:
83:77:91:13:c0:bb:af:fe:f3:4f:67:21:ab:4c:2f:2b:ec:b9:
b7:13:56:67:f5:0c:12:96:5a:ab:79:a4:9c:8c:a3:66:3b:87:
ef:66:d6:c5:c2:7c:c2:67:b7:e5:db:cf:98:60:3b:f0:21:ae:
0c:e1:f5:ce:a0:9a:d0:2a:83:dc:6d:cd:1a:5d:aa:44:bb:3c:
92:56:b4:f0:02:54:85:70:0d:b1:5f:8c:0c:be:a8:f2:2f:d1:
ca:99:42:b0:98:55:b8:26:57:fc:87:b3:d0:c3:a9:4c:33:ae:
07:d3:eb:31:0b:de:d6:dd:d6:2b:d5:e3:09:52:e3:40:9b:24:
0c:2f:4c:7f:7f:ae:49:46:5c:01:04:6c:e3:2e:4a:0d:51:b7:
ca:3f:1e:84:1f:4b:11:42:10:f8:3e:a6:eb:ae:89:26:15:10:
35:ff:74:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TqBXOjFOMvtdF4QTaO4fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMjBmOTExNWQxOTQwMzFmYzVjODQ5ZjE1YWJiZmQ4MGUw
ODYyMmIwHhcNMjUwMTMxMTcwMDM0WhcNMjUwMjAxMTcwMDM0WjAzMTEwLwYDVQQD
Eyg3MGViMzAzYTUxMDczODAxYTQ0YzBjNjRhYTM1MDg4Zjc4NzUxNWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxZBcC3lKEPHuqRP1lgveO4S3yXp
Wi9NaDgvpxOsRghJ8iYbYRj2CY8lzPwNs1zgRAIjA+IFHEA6WoiFMyUztBTjkYDj
A0JYQudwYjC8IjHgusiK6s/Pod0LSGy7W1gnQUASvuQQKORXDSvtlbFjcPzliStj
yYssC79C7XtYCZYdw+bar5lnrBe5ADizAtt9asLaOWSoLDuSf2GWZaxHFUMsCf1b
oqLW/n1EIvSJKO3HTH9YeDHQb1dOBskr65ENprhqVREAdNljTqDlk5+ib0qU5eal
9T6uysLAvotRXkK3i39zq2tjxwM9nPDERKT+AJSC5avXC40Vs3qGdqDzLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDrMDpRBzgBpEwMZKo1CI94dRXXMB8GA1UdIwQY
MBaAFHAg+RFdGUAx/FyEnxWrv9gOCGIrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85OTA1MTMtZjQ5Yy00NWZiLWE3YmIt
NWYwNDU2ODhiYjk5LzEvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85OTA1MTMtZjQ5Yy00NWZiLWE3YmItNWYwNDU2ODhiYjk5
LzEvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYO/1oaIk
jpIEW6FT/K0ApKlZ4fRsj6Bh6lJjO557FVLhtf1wPuL2bqSVVuy2ajVr3GsPvwRQ
jx/BQGiLIm5ErAdTFsFMQviYzdFAFDJJBNEXbJm8ZLT8d3RDg3eRE8C7r/7zT2ch
q0wvK+y5txNWZ/UMEpZaq3mknIyjZjuH72bWxcJ8wme35dvPmGA78CGuDOH1zqCa
0CqD3G3NGl2qRLs8kla08AJUhXANsV+MDL6o8i/RyplCsJhVuCZX/Iez0MOpTDOu
B9PrMQve1t3WK9XjCVLjQJskDC9Mf3+uSUZcAQRs4y5KDVG3yj8ehB9LEUIQ+D6m
666JJhUQNf90DQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:03 2025 by rpki-client