Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
File: 0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft (raw, json)
Hash identifier: Qlh0hkzLKy2eN2OD10lhQGJ0eZ7WCFx0FYLV4w5ygb0=
Subject key identifier: 40:BB:51:36:F3:C1:70:5A:BB:82:CC:67:C7:2A:0E:FA:7A:9D:DE:C6
Authority key identifier: D2:B3:6A:D2:8E:52:1E:DA:B4:B4:DE:A3:49:A2:77:72:D4:B2:A7:BE
Certificate issuer: /CN=d2b36ad28e521edab4b4dea349a27772d4b2a7be
Certificate serial: 0194BC04D5760AC49D8EED9551A27D7B1813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
Manifest number: 116E
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: 0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl (hash: A1Nvvz1ZsoIIVJ4zleO8Bu4kf9c1yIB5wj49Rcu1uO8=)
2: 5tz1cuLC3Spal7LSIEjI-Qlcl6U.roa (hash: XSoR4/ODhnGd0USG7NRxHx6V9kNwJuT3OUfa19EcNCE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d5:76:0a:c4:9d:8e:ed:95:51:a2:7d:7b:18:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b36ad28e521edab4b4dea349a27772d4b2a7be
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=40bb5136f3c1705abb82cc67c72a0efa7a9ddec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:2d:01:bd:ae:dd:49:9c:13:9b:e9:18:0b:
c3:4a:51:6f:8d:cd:df:e0:a1:00:46:50:d7:84:45:
ac:55:3c:b6:5a:44:06:99:fa:c8:ac:ac:45:0a:35:
c8:67:33:1b:cc:29:a2:fc:de:fd:36:fe:6a:e5:20:
60:10:c2:3b:25:cc:44:7e:b0:7a:c5:7f:e8:72:db:
e0:96:22:7b:1f:f6:5a:c7:bc:04:68:a0:b0:e9:39:
ff:f1:5a:64:09:e9:a9:86:80:fb:55:04:70:d8:9e:
4b:65:3d:78:6f:ae:f5:93:2c:b2:02:42:fb:2d:6e:
cd:01:ee:90:05:35:72:d8:34:bc:4b:2b:c6:7c:08:
f5:81:0f:b2:9a:92:7a:4e:ba:f5:b6:fd:c8:69:36:
2f:00:b9:0b:e7:3d:23:44:a4:ce:58:c0:71:7e:fa:
71:39:26:e1:8c:59:00:42:37:54:1d:b2:8c:10:10:
d7:75:bf:8f:7a:00:03:f0:8a:51:cf:ad:fa:ee:3f:
1f:aa:bb:3b:40:d8:49:ed:38:51:01:67:b4:df:49:
6c:bb:e5:e4:3d:bd:fa:c4:93:46:82:87:8f:a5:9d:
ab:91:ed:2f:6b:c4:94:b3:63:33:f5:bc:11:de:5c:
05:64:62:91:1e:fb:fb:84:59:a9:20:a0:bf:1b:e4:
d2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BB:51:36:F3:C1:70:5A:BB:82:CC:67:C7:2A:0E:FA:7A:9D:DE:C6
X509v3 Authority Key Identifier:
keyid:D2:B3:6A:D2:8E:52:1E:DA:B4:B4:DE:A3:49:A2:77:72:D4:B2:A7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:3b:bf:6d:e2:b2:9c:c9:d5:a0:d5:5f:3d:c5:58:47:e6:f7:
fd:5b:18:db:43:89:9b:45:c9:ac:e1:d6:07:eb:1a:69:47:bd:
1b:14:c9:97:1a:7a:85:6c:05:71:a0:c6:75:9a:f2:69:4e:d3:
c1:a2:bd:be:bf:fc:5f:bd:8e:c3:4d:12:31:ca:18:90:79:ad:
ad:13:be:29:06:ab:b0:64:2c:98:53:28:30:5d:f4:7e:15:db:
e8:33:1e:3d:dd:a8:88:e6:70:72:62:8e:b7:f1:d3:a3:ec:e2:
80:da:b9:06:34:36:f4:02:79:71:f4:7d:02:d8:d5:47:ab:dc:
81:e3:24:42:a8:6c:e0:d4:bd:4b:a3:72:f8:81:b6:a1:c9:80:
a3:8e:af:88:87:98:05:06:17:89:9b:3f:d7:95:83:08:31:d8:
a7:a4:ac:db:40:3e:66:89:89:53:70:3c:86:44:73:5a:5d:96:
58:71:82:bc:86:e6:f8:42:37:92:c8:1c:a7:bc:bc:81:79:9a:
b7:3f:fb:6a:a3:61:3a:01:9a:25:c3:e0:c2:fb:82:74:9f:5a:
c5:30:22:66:c0:1d:22:48:ab:d1:37:9e:39:0f:03:d6:4a:8d:
a7:e0:8a:22:80:6f:80:c5:d5:0b:af:38:99:58:d8:72:0d:93:
01:66:51:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BNV2CsSdju2VUaJ9exgTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYjM2YWQyOGU1MjFlZGFiNGI0ZGVhMzQ5YTI3NzcyZDRi
MmE3YmUwHhcNMjUwMTMxMTEwMDIwWhcNMjUwMjAxMTEwMDIwWjAzMTEwLwYDVQQD
Eyg0MGJiNTEzNmYzYzE3MDVhYmI4MmNjNjdjNzJhMGVmYTdhOWRkZWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpctAb2u3UmcE5vpGAvDSlFvjc3f
4KEARlDXhEWsVTy2WkQGmfrIrKxFCjXIZzMbzCmi/N79Nv5q5SBgEMI7JcxEfrB6
xX/octvgliJ7H/Zax7wEaKCw6Tn/8VpkCemphoD7VQRw2J5LZT14b671kyyyAkL7
LW7NAe6QBTVy2DS8SyvGfAj1gQ+ympJ6Trr1tv3IaTYvALkL5z0jRKTOWMBxfvpx
OSbhjFkAQjdUHbKMEBDXdb+PegAD8IpRz6367j8fqrs7QNhJ7ThRAWe030lsu+Xk
Pb36xJNGgoePpZ2rke0va8SUs2Mz9bwR3lwFZGKRHvv7hFmpIKC/G+TSpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEC7UTbzwXBau4LMZ8cqDvp6nd7GMB8GA1UdIwQY
MBaAFNKzatKOUh7atLTeo0mid3LUsqe+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHJOcTBvNVNIdHEwdE42alNhSjNjdFN5cDc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8zYTlhMGItZDQyNC00ZWNhLWE5Mzgt
OTJhODc3YmIxOWY3LzEvMHJOcTBvNVNIdHEwdE42alNhSjNjdFN5cDc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8zYTlhMGItZDQyNC00ZWNhLWE5MzgtOTJhODc3YmIxOWY3
LzEvMHJOcTBvNVNIdHEwdE42alNhSjNjdFN5cDc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoDu/beKy
nMnVoNVfPcVYR+b3/VsY20OJm0XJrOHWB+saaUe9GxTJlxp6hWwFcaDGdZryaU7T
waK9vr/8X72Ow00SMcoYkHmtrRO+KQarsGQsmFMoMF30fhXb6DMePd2oiOZwcmKO
t/HTo+zigNq5BjQ29AJ5cfR9AtjVR6vcgeMkQqhs4NS9S6Ny+IG2ocmAo46viIeY
BQYXiZs/15WDCDHYp6Ss20A+ZomJU3A8hkRzWl2WWHGCvIbm+EI3ksgcp7y8gXma
tz/7aqNhOgGaJcPgwvuCdJ9axTAiZsAdIkir0TeeOQ8D1kqNp+CKIoBvgMXVC684
mVjYcg2TAWZRSA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:40 2025 by rpki-client