Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
File: 4QhbYki9cgdqtCH_oOO_75NWXp0.mft (raw, json)
Hash identifier: evZway0sPD0wL+S5ujW/VKDBx2sTxkgpI5rDcoIIZZQ=
Subject key identifier: 8D:C2:77:7A:97:60:8F:AF:9B:D5:F5:29:A7:1E:65:89:F4:7B:10:C5
Authority key identifier: E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
Certificate issuer: /CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Certificate serial: 0194BCE06501FA5BE6E3884028E73B8FF997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
Manifest number: 0982
Signing time: Fri 31 Jan 2025 15:00:09 +0000
Manifest this update: Fri 31 Jan 2025 15:00:09 +0000
Manifest next update: Sat 01 Feb 2025 15:00:09 +0000
Files and hashes: 1: 4QhbYki9cgdqtCH_oOO_75NWXp0.crl (hash: 2bNL8fQG8rwp1LIPTXgG6GGojgFwb9+3ka2uI5CQvxs=)
2: PBq5zLGD_CUeX0SfhuWUFrucnGw.roa (hash: rPbgNnUy1CwR89NF9bSl2HtGtuQRXqqe8MrxpHJ/Dco=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:65:01:fa:5b:e6:e3:88:40:28:e7:3b:8f:f9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Validity
Not Before: Jan 31 15:00:09 2025 GMT
Not After : Feb 1 15:00:09 2025 GMT
Subject: CN=8dc2777a97608faf9bd5f529a71e6589f47b10c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:31:e0:cd:a2:4d:f1:03:59:5f:2b:f7:7f:c7:
ad:9b:98:82:3c:d1:2d:90:e7:2e:78:bd:5c:8c:03:
f5:4c:3f:91:32:dd:b4:c1:2f:1b:36:df:a7:22:b0:
24:3e:82:70:00:c6:00:55:81:62:f1:8d:4c:d0:d6:
e0:a3:d4:bf:52:9f:b3:3f:19:2b:ad:07:65:2a:7f:
4c:61:0e:9d:96:0f:72:6e:b0:d9:09:4f:0d:70:c7:
35:7e:66:89:41:4f:da:ff:f3:7d:d6:0b:9a:b8:d7:
b6:d3:a5:6e:86:fd:2b:e1:98:62:dc:a3:e8:67:02:
54:89:0f:73:96:9a:a4:87:99:e2:13:ba:b2:63:e8:
d1:9e:68:ef:cf:84:3a:98:dc:cd:bd:18:8f:ec:c8:
5e:0f:bc:88:e2:a7:3e:b8:43:35:a0:bc:b2:f9:9c:
da:45:ee:ec:14:a9:81:34:14:d4:79:64:0c:80:87:
ee:6a:cb:4c:85:03:cb:de:58:34:e6:6c:b9:58:85:
49:e8:34:bb:57:50:c2:f0:1c:6c:2b:3c:e7:4f:a9:
92:2e:a7:d6:eb:84:c9:cd:5d:9c:22:7f:37:30:01:
d2:7c:82:95:3b:cc:e2:48:2e:13:e0:96:a9:05:41:
9f:b6:9c:08:e1:65:69:cb:06:3b:27:88:99:61:89:
3a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C2:77:7A:97:60:8F:AF:9B:D5:F5:29:A7:1E:65:89:F4:7B:10:C5
X509v3 Authority Key Identifier:
keyid:E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ae:f0:dc:b0:fa:1e:fe:55:84:22:b1:a6:2e:cf:99:63:d3:
63:a9:39:88:59:b2:bc:d2:81:19:0d:0c:68:a4:61:f2:ad:b4:
71:93:e5:57:1a:a6:f5:b1:87:d3:51:32:84:40:32:38:8c:0c:
5c:ce:49:95:d5:53:86:f5:7e:70:de:9c:b2:39:c7:6c:e9:fe:
bc:16:b6:58:a0:58:b5:b5:59:d3:32:98:66:12:57:d8:be:0a:
4b:1c:6a:d6:c9:17:d7:ec:e9:c4:21:e4:a2:d2:c3:d9:c5:76:
12:07:69:21:e6:c7:2c:81:c7:c3:6d:79:8a:23:66:95:bb:39:
90:28:be:81:5f:ff:08:a1:e3:57:18:41:52:f3:99:de:9e:f6:
d2:4b:98:a9:df:fd:7d:81:dd:42:e0:af:98:d9:f3:45:03:01:
a2:66:27:b6:64:ae:e2:cd:72:ed:3f:c3:d1:9c:0e:72:0c:cd:
63:d2:4f:f8:9d:6f:a4:94:f0:2e:fc:e5:35:9c:a7:bb:aa:af:
ef:f0:93:47:0c:79:5b:a2:2b:3a:c3:d2:39:b7:9e:a8:ca:77:
4f:ed:be:e1:64:8a:6a:a4:db:3f:3f:aa:c1:b7:34:74:9e:23:
bd:45:f5:a8:36:cc:69:ea:ef:7e:26:06:83:4f:e4:7c:b4:b7:
6e:84:df:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84GUB+lvm44hAKOc7j/mXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMDg1YjYyNDhiZDcyMDc2YWI0MjFmZmEwZTNiZmVmOTM1
NjVlOWQwHhcNMjUwMTMxMTUwMDA5WhcNMjUwMjAxMTUwMDA5WjAzMTEwLwYDVQQD
Eyg4ZGMyNzc3YTk3NjA4ZmFmOWJkNWY1MjlhNzFlNjU4OWY0N2IxMGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jHgzaJN8QNZXyv3f8etm5iCPNEt
kOcueL1cjAP1TD+RMt20wS8bNt+nIrAkPoJwAMYAVYFi8Y1M0Nbgo9S/Up+zPxkr
rQdlKn9MYQ6dlg9ybrDZCU8NcMc1fmaJQU/a//N91guauNe206Vuhv0r4Zhi3KPo
ZwJUiQ9zlpqkh5niE7qyY+jRnmjvz4Q6mNzNvRiP7MheD7yI4qc+uEM1oLyy+Zza
Re7sFKmBNBTUeWQMgIfuastMhQPL3lg05my5WIVJ6DS7V1DC8BxsKzznT6mSLqfW
64TJzV2cIn83MAHSfIKVO8ziSC4T4JapBUGftpwI4WVpywY7J4iZYYk6jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3Cd3qXYI+vm9X1KaceZYn0exDFMB8GA1UdIwQY
MBaAFOEIW2JIvXIHarQh/6Djv++TVl6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy82ZDlhYjUtZDFhZS00NDlkLWE3ZTkt
MWY1Zjk0Y2UzNWVlLzEvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy82ZDlhYjUtZDFhZS00NDlkLWE3ZTktMWY1Zjk0Y2UzNWVl
LzEvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVK7w3LD6
Hv5VhCKxpi7PmWPTY6k5iFmyvNKBGQ0MaKRh8q20cZPlVxqm9bGH01EyhEAyOIwM
XM5JldVThvV+cN6csjnHbOn+vBa2WKBYtbVZ0zKYZhJX2L4KSxxq1skX1+zpxCHk
otLD2cV2EgdpIebHLIHHw215iiNmlbs5kCi+gV//CKHjVxhBUvOZ3p720kuYqd/9
fYHdQuCvmNnzRQMBomYntmSu4s1y7T/D0ZwOcgzNY9JP+J1vpJTwLvzlNZynu6qv
7/CTRwx5W6IrOsPSObeeqMp3T+2+4WSKaqTbPz+qwbc0dJ4jvUX1qDbMaervfiYG
g0/kfLS3boTfFQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:55 2025 by rpki-client