Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
File: cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft (raw, json)
Hash identifier: 7c37j3e6uQB+r3lxoQY/FWvlYMrQNi4/vl1hNR6VWo8=
Subject key identifier: 4F:49:DD:B0:9E:1A:DE:FC:D0:B4:E9:43:8F:32:8E:83:D1:C4:A8:84
Authority key identifier: 72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D
Certificate issuer: /CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
Certificate serial: 0194BD4E43483E2BC404BCD3EF669695A792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 17:00:09 +0000
Manifest this update: Fri 31 Jan 2025 17:00:09 +0000
Manifest next update: Sat 01 Feb 2025 17:00:09 +0000
Files and hashes: 1: cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl (hash: CeSPTk53Pq7NtLmuymg5zDLvOV7FA+8BpMFlcRFfpU8=)
2: daRkFVsWIwe8tAsklauoDwt6UpA.roa (hash: a6fXOEYxSdy4VfRiyyu63eijEDfNFxmj7t/XlgH/vhk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:43:48:3e:2b:c4:04:bc:d3:ef:66:96:95:a7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
Validity
Not Before: Jan 31 17:00:09 2025 GMT
Not After : Feb 1 17:00:09 2025 GMT
Subject: CN=4f49ddb09e1adefcd0b4e9438f328e83d1c4a884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:94:d6:ea:d9:27:36:7f:63:ce:d2:d6:cc:20:
31:c2:41:7f:d5:9e:bc:e7:a2:c6:f8:ee:57:c2:a8:
5f:a8:f3:fd:5f:82:8b:f8:4a:0b:6e:3f:5e:44:18:
58:7b:f8:99:9a:a4:26:bf:02:ab:44:69:a0:ac:59:
ea:76:ce:54:d5:04:73:91:3d:c1:77:10:87:b2:31:
6d:2d:a8:29:57:6c:b2:30:6e:53:80:a6:68:3f:ce:
29:cd:d9:ae:30:9b:75:cf:cd:ee:22:d9:75:a8:e0:
75:8e:eb:41:bf:29:4c:6c:b7:6d:70:f5:13:86:53:
de:27:89:f9:1f:09:25:ee:76:fa:5f:b7:34:74:8c:
2e:03:e6:ff:11:26:0e:81:c8:57:6f:24:47:f5:d0:
59:0f:a1:4b:ce:e3:0a:89:69:eb:cb:a6:1c:95:57:
26:ae:ce:ca:2c:ff:3d:a2:72:42:ae:33:0d:c2:24:
b2:2c:2a:99:ef:b3:83:65:71:73:e9:8c:7c:27:85:
5f:97:81:4e:be:a1:60:23:7b:1a:b7:e6:f6:1e:8d:
c0:0a:94:a1:a0:64:c0:1a:d2:62:5e:51:36:7f:5e:
fa:28:b2:53:10:3f:89:61:17:f4:bc:6e:fc:3c:28:
45:4a:a6:65:53:d6:c3:7f:be:f5:be:04:42:4e:96:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:49:DD:B0:9E:1A:DE:FC:D0:B4:E9:43:8F:32:8E:83:D1:C4:A8:84
X509v3 Authority Key Identifier:
keyid:72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:cf:29:18:bf:98:91:d6:79:f2:1f:7d:bf:f7:52:51:66:45:
e0:d4:5b:e0:40:ce:f0:be:d0:7f:5c:cb:96:df:33:a0:b0:69:
7d:32:18:dd:fb:f5:22:e8:06:47:3f:0f:c0:63:ab:65:c0:7f:
6a:ff:94:8a:42:d6:75:9e:fe:5f:a0:f5:fe:60:89:c6:d8:9d:
11:6f:79:33:ca:43:2b:b5:4d:10:7d:cc:85:52:e4:e5:9f:f5:
96:12:7c:ab:66:c8:51:63:11:5f:de:46:bf:39:fa:ca:fe:6e:
01:b6:bf:3e:b1:fd:75:73:5b:d7:83:8f:dd:21:f3:7e:54:ed:
7c:f2:c8:76:06:92:65:b3:de:1a:fa:7c:60:e4:96:cd:ee:12:
93:cb:fb:cb:f3:42:6e:19:77:c1:14:5f:3e:6d:58:44:61:1d:
8b:71:8d:32:9b:e1:48:23:42:9e:84:2e:29:1a:39:fd:06:01:
b6:96:d3:cc:18:1f:cc:a7:5d:0c:dd:c3:c0:9e:75:24:4a:f1:
df:42:a3:1e:74:60:b5:f0:30:8b:16:87:e2:6d:ad:11:bd:7a:
84:03:e1:ea:32:fb:18:f6:b6:9d:42:41:cc:cb:08:ef:92:90:
22:35:02:f2:02:29:76:13:32:f8:e7:d5:2c:97:2b:3f:36:e1:
19:c2:e7:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TkNIPivEBLzT72aWlaeSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTEyYTM4NzZmZjdiZDAwZDlkOWViYjk3MmFiMWU2MjFl
YTFlOGQwHhcNMjUwMTMxMTcwMDA5WhcNMjUwMjAxMTcwMDA5WjAzMTEwLwYDVQQD
Eyg0ZjQ5ZGRiMDllMWFkZWZjZDBiNGU5NDM4ZjMyOGU4M2QxYzRhODg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopTW6tknNn9jztLWzCAxwkF/1Z68
56LG+O5XwqhfqPP9X4KL+EoLbj9eRBhYe/iZmqQmvwKrRGmgrFnqds5U1QRzkT3B
dxCHsjFtLagpV2yyMG5TgKZoP84pzdmuMJt1z83uItl1qOB1jutBvylMbLdtcPUT
hlPeJ4n5Hwkl7nb6X7c0dIwuA+b/ESYOgchXbyRH9dBZD6FLzuMKiWnry6YclVcm
rs7KLP89onJCrjMNwiSyLCqZ77ODZXFz6Yx8J4Vfl4FOvqFgI3sat+b2Ho3ACpSh
oGTAGtJiXlE2f176KLJTED+JYRf0vG78PChFSqZlU9bDf771vgRCTpYXlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9J3bCeGt780LTpQ48yjoPRxKiEMB8GA1UdIwQY
MBaAFHLhKjh2/3vQDZ2eu5cqseYh6h6NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3VFcU9IYl9lOUFOblo2N2x5cXg1aUhxSG8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xZmFhMjQtZjA4Ni00YjQ4LWIxYmQt
NDU1MjdlOGU0NGQyLzEvY3VFcU9IYl9lOUFOblo2N2x5cXg1aUhxSG8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8xZmFhMjQtZjA4Ni00YjQ4LWIxYmQtNDU1MjdlOGU0NGQy
LzEvY3VFcU9IYl9lOUFOblo2N2x5cXg1aUhxSG8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmM8pGL+Y
kdZ58h99v/dSUWZF4NRb4EDO8L7Qf1zLlt8zoLBpfTIY3fv1IugGRz8PwGOrZcB/
av+UikLWdZ7+X6D1/mCJxtidEW95M8pDK7VNEH3MhVLk5Z/1lhJ8q2bIUWMRX95G
vzn6yv5uAba/PrH9dXNb14OP3SHzflTtfPLIdgaSZbPeGvp8YOSWze4Sk8v7y/NC
bhl3wRRfPm1YRGEdi3GNMpvhSCNCnoQuKRo5/QYBtpbTzBgfzKddDN3DwJ51JErx
30KjHnRgtfAwixaH4m2tEb16hAPh6jL7GPa2nUJBzMsI75KQIjUC8gIpdhMy+OfV
LJcrPzbhGcLn5A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:51:52 2025 by rpki-client