Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
File: cd9sdT6ghb7zcrOSYw90uldpbuU.mft (raw, json)
Hash identifier: 32iUlJFiEVpKfE073DE7lTjtwl8I8y3yJ2zocidMM4U=
Subject key identifier: 89:44:F9:0C:4A:2E:BA:45:0F:78:80:FF:A1:A2:95:77:84:CC:4F:6A
Authority key identifier: 71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
Certificate issuer: /CN=71df6c753ea085bef372b392630f74ba57696ee5
Certificate serial: 0194BC0518D93AE2865BE75185AE9EC3AD7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
Manifest number: 113A
Signing time: Fri 31 Jan 2025 11:00:38 +0000
Manifest this update: Fri 31 Jan 2025 11:00:38 +0000
Manifest next update: Sat 01 Feb 2025 11:00:38 +0000
Files and hashes: 1: 26OroNSilLDsLnRmS90OawnRg8M.roa (hash: 2vZiL1ss373Q0TX+B8Q8SMDZKCr1m9fpyjjeqgVg0rI=)
2: cd9sdT6ghb7zcrOSYw90uldpbuU.crl (hash: i4FGMhQS7NaA+oGf8jguXLVFagE/6TsdJ3E3a9cg+Yg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:18:d9:3a:e2:86:5b:e7:51:85:ae:9e:c3:ad:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71df6c753ea085bef372b392630f74ba57696ee5
Validity
Not Before: Jan 31 11:00:38 2025 GMT
Not After : Feb 1 11:00:38 2025 GMT
Subject: CN=8944f90c4a2eba450f7880ffa1a2957784cc4f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:54:d8:a3:39:b2:bd:11:3e:02:8f:28:94:f5:
86:d8:01:2a:27:8e:45:d6:53:05:69:f1:08:20:dd:
f6:c5:41:f0:d9:be:c1:87:93:1d:44:b5:7b:b8:1d:
98:c4:8e:66:b3:1a:a2:c0:19:96:b8:64:8c:b5:a4:
8e:a0:6f:1d:45:a8:0d:d7:c4:62:76:95:b3:73:a3:
a0:78:c9:a9:eb:e2:e9:97:3d:8d:0b:08:8f:34:3c:
00:d9:65:50:b8:22:0b:65:bf:7c:f6:fd:62:f6:7a:
15:f7:ed:86:6a:b6:62:fc:11:60:a0:df:59:dd:61:
d2:ff:59:b8:c7:cd:08:9a:2b:51:58:e8:7c:18:64:
a1:b2:76:ba:86:d4:92:c2:1b:99:d1:e0:a8:56:91:
2f:3a:bd:2a:ce:c6:60:be:10:2e:9b:21:00:a0:33:
ef:50:69:69:5f:ce:81:b4:d3:c7:b5:6c:7d:4d:9b:
98:48:33:98:9c:53:71:ed:24:89:0d:ce:b5:fe:dc:
79:8c:d6:ca:27:fc:c3:b6:df:db:b2:bc:5f:ed:b5:
3e:c4:2d:b4:d8:e6:bd:f7:8f:2e:72:6e:e5:a5:58:
4b:c4:d1:d1:96:78:d9:0f:ba:27:27:07:36:fd:3d:
49:72:3c:ba:6b:77:8c:72:74:55:68:cd:0e:d3:9d:
ac:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:44:F9:0C:4A:2E:BA:45:0F:78:80:FF:A1:A2:95:77:84:CC:4F:6A
X509v3 Authority Key Identifier:
keyid:71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:02:4d:e5:ec:2a:07:eb:83:71:0e:ec:0c:4c:29:0a:62:25:
75:f6:be:91:80:98:f5:9e:db:61:7b:ee:98:45:13:8e:fe:9e:
dd:d7:2b:8c:a1:09:ca:b8:68:aa:7e:3d:13:22:aa:98:82:ca:
0f:d7:ac:0b:6a:60:8c:21:f3:3f:9d:fe:71:da:86:e9:77:c5:
66:2f:a5:81:e4:81:48:5b:32:13:4b:1a:22:ac:3e:cc:99:ae:
61:8d:eb:2d:8f:bd:d1:7b:f9:7a:5b:b2:b6:27:c8:06:8b:e6:
15:13:fb:4e:f4:95:7e:6c:44:c8:00:6b:46:96:82:9f:1d:07:
8c:c0:b9:3e:66:47:fe:c6:1b:61:62:4f:25:e6:87:73:03:c4:
c2:db:f0:bd:cb:bd:46:02:c1:a9:8e:4b:d2:e5:01:15:e4:93:
75:cf:eb:ff:46:ca:15:d4:93:bd:12:df:62:05:d7:7a:3f:12:
c0:29:1e:39:25:af:32:f2:43:49:3a:e4:60:d0:b1:85:35:9d:
22:d8:39:31:68:ac:bf:75:fe:e0:95:1d:cc:20:35:ef:05:12:
1c:5e:c9:7a:9f:9b:69:c9:3f:c7:da:de:67:59:db:61:a9:63:
2e:03:37:7a:68:30:17:29:fa:9a:03:b2:31:be:4c:1d:e8:30:
e7:91:30:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BRjZOuKGW+dRha6ew618MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZGY2Yzc1M2VhMDg1YmVmMzcyYjM5MjYzMGY3NGJhNTc2
OTZlZTUwHhcNMjUwMTMxMTEwMDM4WhcNMjUwMjAxMTEwMDM4WjAzMTEwLwYDVQQD
Eyg4OTQ0ZjkwYzRhMmViYTQ1MGY3ODgwZmZhMWEyOTU3Nzg0Y2M0ZjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVTYozmyvRE+Ao8olPWG2AEqJ45F
1lMFafEIIN32xUHw2b7Bh5MdRLV7uB2YxI5msxqiwBmWuGSMtaSOoG8dRagN18Ri
dpWzc6OgeMmp6+Lplz2NCwiPNDwA2WVQuCILZb989v1i9noV9+2GarZi/BFgoN9Z
3WHS/1m4x80ImitRWOh8GGShsna6htSSwhuZ0eCoVpEvOr0qzsZgvhAumyEAoDPv
UGlpX86BtNPHtWx9TZuYSDOYnFNx7SSJDc61/tx5jNbKJ/zDtt/bsrxf7bU+xC20
2Oa9948ucm7lpVhLxNHRlnjZD7onJwc2/T1Jcjy6a3eMcnRVaM0O052sRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlE+QxKLrpFD3iA/6GilXeEzE9qMB8GA1UdIwQY
MBaAFHHfbHU+oIW+83KzkmMPdLpXaW7lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2Q5c2RUNmdoYjd6Y3JPU1l3OTB1bGRwYnVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jNTk0ODQtYjA3YS00Y2ExLWFiY2Qt
YTgzODQ1Y2FhYzIxLzEvY2Q5c2RUNmdoYjd6Y3JPU1l3OTB1bGRwYnVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9jNTk0ODQtYjA3YS00Y2ExLWFiY2QtYTgzODQ1Y2FhYzIx
LzEvY2Q5c2RUNmdoYjd6Y3JPU1l3OTB1bGRwYnVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggJN5ewq
B+uDcQ7sDEwpCmIldfa+kYCY9Z7bYXvumEUTjv6e3dcrjKEJyrhoqn49EyKqmILK
D9esC2pgjCHzP53+cdqG6XfFZi+lgeSBSFsyE0saIqw+zJmuYY3rLY+90Xv5eluy
tifIBovmFRP7TvSVfmxEyABrRpaCnx0HjMC5PmZH/sYbYWJPJeaHcwPEwtvwvcu9
RgLBqY5L0uUBFeSTdc/r/0bKFdSTvRLfYgXXej8SwCkeOSWvMvJDSTrkYNCxhTWd
Itg5MWisv3X+4JUdzCA17wUSHF7Jep+back/x9reZ1nbYaljLgM3emgwFyn6mgOy
Mb5MHegw55EwMQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:19 2025 by rpki-client