Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
File: rUS-GO4-DSdHZwVV6GsACWXoE5s.mft (raw, json)
Hash identifier: 1l1ZrfLYKGuF436RX/9DLXAJ538d/k/E1ueajV96Z5o=
Subject key identifier: 12:33:E4:A0:73:09:F5:BA:6A:5E:0A:25:68:A3:BD:89:74:6B:5E:45
Authority key identifier: AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B
Certificate issuer: /CN=ad44be18ee3e0d2747670555e86b000965e8139b
Certificate serial: 0194BBCF0150CCF9ACE567FC114665AE7F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: kX62bL3xBVpkyK0FphmC5iQUK74.roa (hash: GEBZd8qkO5malJhFWg729yyTB3o+issIVlA3FLkcy9o=)
2: rUS-GO4-DSdHZwVV6GsACWXoE5s.crl (hash: uS688l+qLY0NE9Zd/a6rOx0IkV7XasaSmGa9wrgJwDI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:01:50:cc:f9:ac:e5:67:fc:11:46:65:ae:7f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad44be18ee3e0d2747670555e86b000965e8139b
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=1233e4a07309f5ba6a5e0a2568a3bd89746b5e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:14:d7:97:fc:ae:61:7f:0b:9d:cc:75:5d:a8:
71:8d:ff:9a:cd:94:98:9d:32:5a:9c:76:f4:9f:51:
52:27:e3:72:0e:48:cd:6f:36:f8:98:b5:43:ce:4b:
6a:a8:dd:65:da:cc:28:e1:86:75:85:d9:f4:12:45:
72:88:af:be:1c:9a:1d:e6:2e:a9:f3:a7:d2:d0:27:
f0:8b:5e:f9:a0:a0:0e:5a:f8:57:7e:a7:01:21:fc:
0c:b8:2d:bd:68:49:c7:c2:9e:7b:75:cf:2c:e8:bc:
ed:27:e4:a6:42:aa:0a:83:22:e1:c6:af:01:1a:9a:
33:a2:a0:ca:70:10:58:72:38:aa:57:8e:0d:65:6a:
5f:3e:f6:36:b5:2c:18:3e:af:e2:99:e6:f1:e0:c9:
55:9e:46:78:d3:ca:5f:eb:3b:ba:c3:f4:3b:d3:42:
a6:3e:6d:a1:0f:43:64:bb:89:02:e0:38:6e:28:50:
47:fa:ff:34:2d:39:f8:03:46:8b:86:43:32:e6:7d:
cf:68:5e:1c:fb:45:f2:1d:e5:46:bf:d0:ff:18:05:
c2:f1:44:1f:31:34:a8:1e:08:75:7f:b9:2c:75:ed:
b1:5f:44:c8:02:5e:e0:ab:7e:ea:b9:f7:10:76:1f:
c2:77:66:b8:5e:57:50:d3:d9:ab:88:c0:35:bb:13:
1f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:33:E4:A0:73:09:F5:BA:6A:5E:0A:25:68:A3:BD:89:74:6B:5E:45
X509v3 Authority Key Identifier:
keyid:AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8d:86:8c:be:f0:7a:09:c5:a5:06:56:c4:73:2f:5a:31:92:
60:2b:2f:26:1f:58:b8:d0:73:2b:85:48:85:d4:06:ba:b4:66:
49:08:00:df:d6:07:67:ef:e3:b7:b2:34:d5:9a:7d:4c:1f:25:
0a:e6:2e:cf:6a:a8:28:33:19:0e:14:14:1f:b9:03:2b:66:3e:
3d:a6:f3:38:74:a0:15:54:db:bf:71:e4:2a:74:73:2b:df:60:
3d:90:f0:d5:71:6c:02:02:3b:7a:ca:bd:cd:04:c2:82:f7:91:
0f:21:37:31:56:40:50:2b:8f:98:4b:cb:71:07:b8:09:e6:18:
6c:67:95:47:44:4e:b9:a5:bb:0e:c8:cc:1f:36:ec:24:aa:f3:
04:18:d3:75:bf:33:ab:56:7d:7e:dc:28:1c:f4:30:17:a4:70:
3f:76:5a:4e:b3:0b:97:0c:7c:52:ab:9a:2d:c1:81:47:75:76:
2f:ad:a0:98:e5:af:0f:91:14:17:68:c9:a9:2b:95:f5:03:71:
c7:a4:12:9e:c4:4f:ef:2a:7a:f8:98:6d:b7:42:09:1b:8b:d4:
d7:50:f5:55:a6:2a:0d:99:61:6e:c0:22:ce:12:f0:c7:80:56:
51:81:64:cf:8c:7c:37:ca:e8:c4:7f:d8:4e:f2:24:a2:dd:ad:
80:7f:8d:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zwFQzPms5Wf8EUZlrn9HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNDRiZTE4ZWUzZTBkMjc0NzY3MDU1NWU4NmIwMDA5NjVl
ODEzOWIwHhcNMjUwMTMxMTAwMTMzWhcNMjUwMjAxMTAwMTMzWjAzMTEwLwYDVQQD
EygxMjMzZTRhMDczMDlmNWJhNmE1ZTBhMjU2OGEzYmQ4OTc0NmI1ZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhTXl/yuYX8Lncx1Xahxjf+azZSY
nTJanHb0n1FSJ+NyDkjNbzb4mLVDzktqqN1l2swo4YZ1hdn0EkVyiK++HJod5i6p
86fS0Cfwi175oKAOWvhXfqcBIfwMuC29aEnHwp57dc8s6LztJ+SmQqoKgyLhxq8B
GpozoqDKcBBYcjiqV44NZWpfPvY2tSwYPq/imebx4MlVnkZ408pf6zu6w/Q700Km
Pm2hD0Nku4kC4DhuKFBH+v80LTn4A0aLhkMy5n3PaF4c+0XyHeVGv9D/GAXC8UQf
MTSoHgh1f7ksde2xX0TIAl7gq37qufcQdh/Cd2a4XldQ09mriMA1uxMfNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIz5KBzCfW6al4KJWijvYl0a15FMB8GA1UdIwQY
MBaAFK1EvhjuPg0nR2cFVehrAAll6BObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclVTLUdPNC1EU2RIWndWVjZHc0FDV1hvRTVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mOGNmNTctNTcxZi00OWVlLWE3NmQt
MTNhOGNiMjU4N2Q0LzEvclVTLUdPNC1EU2RIWndWVjZHc0FDV1hvRTVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mOGNmNTctNTcxZi00OWVlLWE3NmQtMTNhOGNiMjU4N2Q0
LzEvclVTLUdPNC1EU2RIWndWVjZHc0FDV1hvRTVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACo2GjL7w
egnFpQZWxHMvWjGSYCsvJh9YuNBzK4VIhdQGurRmSQgA39YHZ+/jt7I01Zp9TB8l
CuYuz2qoKDMZDhQUH7kDK2Y+PabzOHSgFVTbv3HkKnRzK99gPZDw1XFsAgI7esq9
zQTCgveRDyE3MVZAUCuPmEvLcQe4CeYYbGeVR0ROuaW7DsjMHzbsJKrzBBjTdb8z
q1Z9ftwoHPQwF6RwP3ZaTrMLlwx8UquaLcGBR3V2L62gmOWvD5EUF2jJqSuV9QNx
x6QSnsRP7yp6+Jhtt0IJG4vU11D1VaYqDZlhbsAizhLwx4BWUYFkz4x8N8roxH/Y
TvIkot2tgH+NEw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:16:44 2025 by rpki-client