Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
File: Dp4K_r9UpNIYr7rtVDB3G793d6k.mft (raw, json)
Hash identifier: 74Qr+b2HeTAWrscH37rohKu9eUiZ4c46tRQLrtyGBVw=
Subject key identifier: 98:A7:E3:A7:B0:16:99:71:28:DD:FD:54:25:60:ED:30:DE:DB:56:78
Authority key identifier: 0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
Certificate issuer: /CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Certificate serial: 0194BC3BCB51BB7444A146F3483F4FC175BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:22 +0000
Manifest this update: Fri 31 Jan 2025 12:00:22 +0000
Manifest next update: Sat 01 Feb 2025 12:00:22 +0000
Files and hashes: 1: Dp4K_r9UpNIYr7rtVDB3G793d6k.crl (hash: abNrUy+snrXnEoJ1EALWqedXgtKfh+YSUsLzqlTRmwY=)
2: RX3j6hG8jPHQlqgQDFsxWI9wjiU.roa (hash: iX9OHbXh9X/4e6G7wovNf6r/WuAf8SkEeNMsZiGLv+M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:cb:51:bb:74:44:a1:46:f3:48:3f:4f:c1:75:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Validity
Not Before: Jan 31 12:00:22 2025 GMT
Not After : Feb 1 12:00:22 2025 GMT
Subject: CN=98a7e3a7b016997128ddfd542560ed30dedb5678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e9:d2:75:5a:e3:ed:65:35:ff:3f:5d:02:06:
39:5b:cb:5a:51:44:47:6c:47:22:28:3c:87:3a:76:
a7:4b:b9:b0:c2:90:3f:2a:69:b4:84:d8:5d:e5:9f:
50:ff:c4:0f:54:79:1d:20:b3:f9:6f:09:c2:28:9a:
7b:3d:8e:a2:98:e4:54:e4:2e:e1:c2:c0:3e:49:1d:
bc:e8:6d:33:24:4f:08:ca:22:f2:ee:cb:4c:5f:2b:
f3:33:1a:56:95:c5:37:f5:b5:67:e4:52:92:75:1a:
4d:fe:99:1f:56:5d:27:cc:8e:cd:47:19:7c:67:e5:
a1:4e:f7:91:0a:b7:ad:51:73:ec:72:08:da:56:51:
b3:d7:d0:b9:98:c4:1d:76:c7:d5:26:2f:69:2c:80:
5c:03:9c:14:b5:21:93:91:a3:2b:54:25:a2:c4:40:
8f:7c:a3:52:ec:32:7a:c4:2c:b5:af:de:b2:9d:2b:
fe:37:3d:ed:df:48:5d:13:72:33:2e:ca:86:40:1c:
12:91:d1:dd:43:44:53:42:c3:d8:37:0e:0b:df:59:
6f:47:eb:9b:2f:16:3a:e0:c3:aa:01:9d:cc:5f:4d:
4d:fd:5f:63:b3:c8:8d:4b:71:b4:c0:7d:fc:53:42:
d7:9c:0a:c9:4e:94:0e:41:f9:5c:bd:b9:df:58:23:
2e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A7:E3:A7:B0:16:99:71:28:DD:FD:54:25:60:ED:30:DE:DB:56:78
X509v3 Authority Key Identifier:
keyid:0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a1:41:cf:b1:8a:3c:de:2e:ba:61:e4:63:5e:e8:24:6d:90:
f8:86:2b:9b:53:82:ea:2b:51:bd:02:75:60:7a:e2:72:9c:b5:
0c:0e:5d:f5:3c:34:2b:ab:ef:09:97:27:1b:f3:d2:6d:0a:37:
c3:60:96:19:d9:72:9f:1e:2c:7e:76:19:56:79:ac:41:d6:ab:
f7:c7:61:8d:bf:39:ec:e9:11:f5:ed:7b:37:7b:9b:a0:9b:70:
87:4f:7d:0d:63:97:44:79:d1:6a:6b:45:df:6f:39:0b:d3:33:
22:be:8a:af:0f:c0:d3:e9:94:7c:e7:8c:49:b1:f5:c0:7a:e5:
2c:8e:57:d7:43:b9:b0:21:92:e4:57:5a:76:01:7d:49:24:b9:
97:aa:05:66:8f:b3:5f:4d:17:32:30:bf:f6:1a:73:c0:b2:cb:
f3:87:20:8f:a6:2c:e6:db:0a:fe:d4:5a:82:c4:4b:83:ca:e4:
b0:16:55:fe:32:6d:42:5f:bc:58:8c:a4:78:8a:b7:15:48:09:
32:e6:76:0b:ba:87:5f:86:42:d5:6b:a2:df:70:c4:20:ca:71:
50:f9:d4:20:76:2e:92:3a:cc:ed:20:35:b6:a9:ef:95:bf:62:
63:5e:0e:fb:ca:0c:34:96:ea:43:0f:49:32:f8:a4:ee:2d:e4:
8d:35:53:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O8tRu3REoUbzSD9PwXW/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlOWUwYWZlYmY1NGE0ZDIxOGFmYmFlZDU0MzA3NzFiYmY3
Nzc3YTkwHhcNMjUwMTMxMTIwMDIyWhcNMjUwMjAxMTIwMDIyWjAzMTEwLwYDVQQD
Eyg5OGE3ZTNhN2IwMTY5OTcxMjhkZGZkNTQyNTYwZWQzMGRlZGI1Njc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8unSdVrj7WU1/z9dAgY5W8taUURH
bEciKDyHOnanS7mwwpA/Kmm0hNhd5Z9Q/8QPVHkdILP5bwnCKJp7PY6imORU5C7h
wsA+SR286G0zJE8IyiLy7stMXyvzMxpWlcU39bVn5FKSdRpN/pkfVl0nzI7NRxl8
Z+WhTveRCretUXPscgjaVlGz19C5mMQddsfVJi9pLIBcA5wUtSGTkaMrVCWixECP
fKNS7DJ6xCy1r96ynSv+Nz3t30hdE3IzLsqGQBwSkdHdQ0RTQsPYNw4L31lvR+ub
LxY64MOqAZ3MX01N/V9js8iNS3G0wH38U0LXnArJTpQOQflcvbnfWCMuFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJin46ewFplxKN39VCVg7TDe21Z4MB8GA1UdIwQY
MBaAFA6eCv6/VKTSGK+67VQwdxu/d3epMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kMjIxNDAtZDk2MS00Mzc3LWI4YzYt
M2VmNTk0ZTZjNjk2LzEvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kMjIxNDAtZDk2MS00Mzc3LWI4YzYtM2VmNTk0ZTZjNjk2
LzEvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhKFBz7GK
PN4uumHkY17oJG2Q+IYrm1OC6itRvQJ1YHricpy1DA5d9Tw0K6vvCZcnG/PSbQo3
w2CWGdlynx4sfnYZVnmsQdar98dhjb857OkR9e17N3uboJtwh099DWOXRHnRamtF
3285C9MzIr6Krw/A0+mUfOeMSbH1wHrlLI5X10O5sCGS5FdadgF9SSS5l6oFZo+z
X00XMjC/9hpzwLLL84cgj6Ys5tsK/tRagsRLg8rksBZV/jJtQl+8WIykeIq3FUgJ
MuZ2C7qHX4ZC1Wui33DEIMpxUPnUIHYukjrM7SA1tqnvlb9iY14O+8oMNJbqQw9J
Mvik7i3kjTVTdA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:51:54 2025 by rpki-client