Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
File: 4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft (raw, json)
Hash identifier: lW+HQduISgSSAwumOkZIDInp+zbs3epBvnbIblISukc=
Subject key identifier: D4:30:90:2D:0D:D0:68:B8:80:BE:2B:CA:D2:E4:82:A3:3A:65:EC:41
Authority key identifier: E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C
Certificate issuer: /CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
Certificate serial: 0194BBCF01B2FBFBC014C6DFFA83EA589ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
Manifest number: 1527
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: 0KdeedL2T8Rp4WiBVO1IOf9Yktc.roa (hash: Nc/tWrHQyoi0hEQ+1RcEv6I0SBogxbOFgcOCweAWCBY=)
2: 3KvVQguLHFipUvH_7wd-pV10Sj4.roa (hash: Rter4wDgBDmmeeKs+/UelRTlIWp0E2pLyHrnMXEh1A8=)
3: 4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl (hash: 2JjH+FkrBwBuNnY+s9FrlcpS/zwbsvXmQKrctO9m3HQ=)
4: WAoTQBn8iJZBu8e2AHqa1bGEmrI.roa (hash: Gvh794vOKgG0OwQ64JTnIyPSYhfW7Hev4v5ELJw0JcY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:01:b2:fb:fb:c0:14:c6:df:fa:83:ea:58:9a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=d430902d0dd068b880be2bcad2e482a33a65ec41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ac:08:94:46:7f:79:0e:e0:66:38:61:62:9d:
8b:e0:64:2e:bf:1c:a9:c9:b3:c0:3d:40:a8:ba:8d:
11:f2:f3:a5:c6:23:39:b0:50:57:62:28:2d:d8:aa:
92:07:25:56:40:4b:76:b6:11:d2:f3:1e:4d:3c:58:
20:67:cf:a1:3e:7c:21:9e:d5:52:f8:1e:d5:f4:67:
0e:5c:61:f8:11:b5:18:1f:8b:b2:02:ec:84:7a:37:
02:b5:c3:9c:27:69:b6:1b:45:cc:10:01:da:3b:70:
03:b7:51:6d:01:2e:af:0b:5b:70:d0:cc:c5:c7:80:
be:70:22:3c:80:d5:d0:f1:d7:23:95:9e:97:8f:1f:
ba:e0:24:b3:6b:2f:f2:5f:b6:d3:81:50:c1:31:48:
9c:f9:ef:65:dc:3d:25:26:d6:a8:23:9f:13:75:0f:
65:ca:d7:9c:3c:a2:bf:08:9d:81:0a:0f:e0:9c:bd:
7a:e0:fd:d4:76:80:28:38:25:e3:81:6e:59:25:0e:
d8:55:f4:48:2c:a2:09:cb:77:be:91:87:5a:2f:06:
59:71:9f:b4:44:1c:aa:1c:f2:ea:47:c7:42:59:bf:
52:69:76:0a:8a:e3:38:b8:07:05:37:55:3f:3b:2e:
c0:0e:ee:f9:f2:99:2d:5e:a4:e8:31:98:5a:ab:9f:
7e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:30:90:2D:0D:D0:68:B8:80:BE:2B:CA:D2:E4:82:A3:3A:65:EC:41
X509v3 Authority Key Identifier:
keyid:E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:43:85:1d:60:61:94:33:73:d1:20:5f:c2:a5:50:99:89:07:
4b:ff:88:c1:d4:83:07:e9:a9:00:aa:c3:53:7c:81:23:ab:e0:
2d:81:a4:39:8c:d8:ef:64:b3:e5:54:b8:11:64:db:e1:7e:2a:
04:5f:69:17:d8:ed:53:28:c3:28:b9:13:18:d4:01:b6:01:76:
25:d8:43:dd:eb:15:19:17:83:d2:a0:33:b5:26:fb:82:0d:8c:
4a:9b:49:38:8e:80:0d:6a:6c:a6:c7:6c:28:c2:3b:f5:16:03:
e1:22:b2:d7:fa:dc:c2:ca:f6:49:d8:f3:6c:a1:52:fa:6f:a8:
5c:a7:73:8b:93:2c:ae:47:3f:9f:0c:79:8f:9d:82:5b:2d:0c:
59:ea:83:3f:99:f2:9a:29:64:03:a9:69:0b:fa:d1:04:b5:91:
39:43:84:fd:40:69:a0:61:b9:b9:9b:ca:d2:29:e2:02:3a:16:
19:08:47:d3:b2:62:97:03:df:67:84:16:33:b6:c7:6a:6b:74:
e7:f1:c4:57:48:da:1f:70:f3:ac:dc:bf:31:c9:47:28:ce:61:
34:53:23:f6:e1:8e:34:e3:98:41:dc:c4:9b:5d:e2:b2:5b:5d:
fa:8f:1a:39:ab:27:3d:60:d7:cf:06:47:e4:75:e4:30:c0:f0:
c2:6a:4b:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zwGy+/vAFMbf+oPqWJq7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMmJjZDQwYzY3NzQ2NzdkMmMzNzAyZWY1OWVkZjQ5ZDBi
MzZjNmMwHhcNMjUwMTMxMTAwMTMzWhcNMjUwMjAxMTAwMTMzWjAzMTEwLwYDVQQD
EyhkNDMwOTAyZDBkZDA2OGI4ODBiZTJiY2FkMmU0ODJhMzNhNjVlYzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KwIlEZ/eQ7gZjhhYp2L4GQuvxyp
ybPAPUCouo0R8vOlxiM5sFBXYigt2KqSByVWQEt2thHS8x5NPFggZ8+hPnwhntVS
+B7V9GcOXGH4EbUYH4uyAuyEejcCtcOcJ2m2G0XMEAHaO3ADt1FtAS6vC1tw0MzF
x4C+cCI8gNXQ8dcjlZ6Xjx+64CSzay/yX7bTgVDBMUic+e9l3D0lJtaoI58TdQ9l
ytecPKK/CJ2BCg/gnL164P3UdoAoOCXjgW5ZJQ7YVfRILKIJy3e+kYdaLwZZcZ+0
RByqHPLqR8dCWb9SaXYKiuM4uAcFN1U/Oy7ADu758pktXqToMZhaq59+bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQwkC0N0Gi4gL4rytLkgqM6ZexBMB8GA1UdIwQY
MBaAFOMrzUDGd0Z30sNwLvWe30nQs2xsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHl2TlFNWjNSbmZTdzNBdTlaN2ZTZEN6Ykd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80YjdlZjgtODY0My00ZGJiLTkyYWEt
MDc0MDExNWI1YTUyLzEvNHl2TlFNWjNSbmZTdzNBdTlaN2ZTZEN6Ykd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi80YjdlZjgtODY0My00ZGJiLTkyYWEtMDc0MDExNWI1YTUy
LzEvNHl2TlFNWjNSbmZTdzNBdTlaN2ZTZEN6Ykd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUOFHWBh
lDNz0SBfwqVQmYkHS/+IwdSDB+mpAKrDU3yBI6vgLYGkOYzY72Sz5VS4EWTb4X4q
BF9pF9jtUyjDKLkTGNQBtgF2JdhD3esVGReD0qAztSb7gg2MSptJOI6ADWpspsds
KMI79RYD4SKy1/rcwsr2SdjzbKFS+m+oXKdzi5Msrkc/nwx5j52CWy0MWeqDP5ny
milkA6lpC/rRBLWROUOE/UBpoGG5uZvK0iniAjoWGQhH07JilwPfZ4QWM7bHamt0
5/HEV0jaH3DzrNy/MclHKM5hNFMj9uGONOOYQdzEm13isltd+o8aOasnPWDXzwZH
5HXkMMDwwmpLKw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:05 2025 by rpki-client