Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
File: 2DAJNvtQCnRWRAq6izuK1TyfAUA.mft (raw, json)
Hash identifier: n77aAc4x7lDjGRTA8hGbGAODVNvVHMgDs7vNPGl6bX4=
Subject key identifier: 13:1F:09:30:93:1D:44:F6:86:A2:58:24:76:A9:0D:76:73:BE:AE:E8
Authority key identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
Certificate issuer: /CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Certificate serial: 0194BCA9AD5B05A6DAEF2C096ACC96633FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
Manifest number: 0A09
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: 2DAJNvtQCnRWRAq6izuK1TyfAUA.crl (hash: VytcdkpU4Rv9AKWxn0NMYsq9gdoSkEGwiT9OZkcyYss=)
2: 9Rv9UA6xqHbqOVDX3M_ewENA274.roa (hash: CV9IQyD4yDSrfmV6gwR5PLHm4BEjsLgc7yXn2cWM6fU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ad:5b:05:a6:da:ef:2c:09:6a:cc:96:63:3f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=131f0930931d44f686a2582476a90d7673beaee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d0:0f:d3:0c:d0:6e:e5:92:f2:47:d6:03:f3:
2f:d1:ea:61:f6:ea:16:a0:89:04:13:fa:85:b9:62:
c4:08:4c:de:b5:ae:85:cc:90:c6:9b:14:b0:a0:ac:
59:d0:c4:e0:cd:8e:40:10:a0:f4:03:b0:e8:75:b6:
38:da:41:f8:54:53:8d:c7:61:89:3b:e8:db:3b:cb:
e6:08:43:bd:25:e7:76:7b:c4:d9:af:a8:86:f3:1d:
b9:ed:79:30:b6:97:9d:f3:19:e0:1c:86:83:ef:57:
08:b9:36:ce:1e:62:ea:55:a8:b5:89:1a:40:e6:95:
1c:37:f1:45:98:a1:6b:07:e7:fe:3c:19:9c:81:b0:
d0:05:67:a4:57:b1:46:85:c8:07:d8:cd:e1:81:82:
1e:dd:3e:8e:3a:11:29:30:40:96:7a:ae:f4:be:d7:
48:b1:76:0a:b1:fc:91:79:4c:da:15:9a:29:2b:75:
54:75:87:48:1b:86:6f:19:fa:99:79:dc:7d:74:47:
f7:1e:34:a6:71:11:fe:f6:f5:d3:0b:ff:64:29:99:
8a:f0:5e:cb:b8:95:95:5b:a0:c6:0d:06:b8:89:2c:
63:0d:bd:26:95:8e:57:a5:2d:3b:1a:dc:1b:44:61:
ec:3e:28:fa:72:b9:23:4c:9b:0d:b9:ae:d8:68:91:
12:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1F:09:30:93:1D:44:F6:86:A2:58:24:76:A9:0D:76:73:BE:AE:E8
X509v3 Authority Key Identifier:
keyid:D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:af:89:69:45:82:5e:71:a2:d7:fe:5d:35:df:90:79:c6:92:
ac:18:2d:8c:cd:45:ee:68:3c:1a:dc:06:6c:42:36:c5:53:cd:
c8:26:9c:94:4f:45:b3:05:87:3c:a5:23:44:0d:e4:80:0b:34:
77:b6:35:7f:e8:cf:72:b7:b0:56:c2:e8:5e:f3:25:81:ca:15:
f2:d9:eb:80:c7:6e:7b:54:d3:1e:c2:24:7b:34:65:81:5c:ee:
42:b6:97:27:82:b0:71:17:42:fc:11:c0:fb:c0:7d:32:bc:84:
93:7e:23:75:3e:f6:e7:71:30:92:33:17:43:3a:fe:ef:93:cb:
19:f0:e3:36:12:00:f7:12:f0:f0:a4:fb:25:6f:4c:29:c6:10:
cf:6a:af:76:de:dc:d5:8c:a5:61:62:0e:9c:c6:9c:72:68:2e:
e6:43:ce:c5:35:36:f6:ad:48:8e:37:c2:d8:1e:ab:0e:76:0c:
d8:84:2f:34:87:65:4e:12:ee:65:50:46:c2:de:e9:2e:04:c1:
9d:4f:a5:59:91:1e:73:25:a8:58:cd:4e:42:fd:88:e1:d0:c1:
b0:03:b5:8d:2b:c2:cf:f8:5d:0d:87:d7:27:96:65:64:51:50:
38:cd:cb:c6:3a:42:58:7e:d2:63:21:ae:fb:63:c9:f8:f5:62:
d3:83:b4:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qa1bBaba7ywJasyWYz/QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MzAwOTM2ZmI1MDBhNzQ1NjQ0MGFiYThiM2I4YWQ1M2M5
ZjAxNDAwHhcNMjUwMTMxMTQwMDIzWhcNMjUwMjAxMTQwMDIzWjAzMTEwLwYDVQQD
EygxMzFmMDkzMDkzMWQ0NGY2ODZhMjU4MjQ3NmE5MGQ3NjczYmVhZWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69AP0wzQbuWS8kfWA/Mv0eph9uoW
oIkEE/qFuWLECEzeta6FzJDGmxSwoKxZ0MTgzY5AEKD0A7DodbY42kH4VFONx2GJ
O+jbO8vmCEO9Jed2e8TZr6iG8x257Xkwtped8xngHIaD71cIuTbOHmLqVai1iRpA
5pUcN/FFmKFrB+f+PBmcgbDQBWekV7FGhcgH2M3hgYIe3T6OOhEpMECWeq70vtdI
sXYKsfyReUzaFZopK3VUdYdIG4ZvGfqZedx9dEf3HjSmcRH+9vXTC/9kKZmK8F7L
uJWVW6DGDQa4iSxjDb0mlY5XpS07GtwbRGHsPij6crkjTJsNua7YaJESMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMfCTCTHUT2hqJYJHapDXZzvq7oMB8GA1UdIwQY
MBaAFNgwCTb7UAp0VkQKuos7itU8nwFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkRBSk52dFFDblJXUkFxNml6dUsxVHlmQVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83N2YyYWEtY2MwYy00ZjE1LThiMzkt
YWRkY2Q4NTUyMDI2LzEvMkRBSk52dFFDblJXUkFxNml6dUsxVHlmQVVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83N2YyYWEtY2MwYy00ZjE1LThiMzktYWRkY2Q4NTUyMDI2
LzEvMkRBSk52dFFDblJXUkFxNml6dUsxVHlmQVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlK+JaUWC
XnGi1/5dNd+QecaSrBgtjM1F7mg8GtwGbEI2xVPNyCaclE9FswWHPKUjRA3kgAs0
d7Y1f+jPcrewVsLoXvMlgcoV8tnrgMdue1TTHsIkezRlgVzuQraXJ4KwcRdC/BHA
+8B9MryEk34jdT7253EwkjMXQzr+75PLGfDjNhIA9xLw8KT7JW9MKcYQz2qvdt7c
1YylYWIOnMaccmgu5kPOxTU29q1IjjfC2B6rDnYM2IQvNIdlThLuZVBGwt7pLgTB
nU+lWZEecyWoWM1OQv2I4dDBsAO1jSvCz/hdDYfXJ5ZlZFFQOM3LxjpCWH7SYyGu
+2PJ+PVi04O05w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:36 2025 by rpki-client