Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
File: 0TAReuHNwt8cWIFuAOVFH4fvs3A.mft (raw, json)
Hash identifier: hYCWuTrm84cEYW+be65s0G0gPUUX4GQLj1+wEJYCWgc=
Subject key identifier: 4D:EE:4F:50:31:5E:1F:D2:F8:3D:E9:67:D0:AA:A3:06:F1:AC:F7:0C
Authority key identifier: D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
Certificate issuer: /CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Certificate serial: 0194BBCE43F50FEFA0F2C5D150F17BA8005D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
Manifest number: 04B7
Signing time: Fri 31 Jan 2025 10:00:44 +0000
Manifest this update: Fri 31 Jan 2025 10:00:44 +0000
Manifest next update: Sat 01 Feb 2025 10:00:44 +0000
Files and hashes: 1: 0TAReuHNwt8cWIFuAOVFH4fvs3A.crl (hash: Eyw0Q12fEeOgCNVffinhMwAhLid4nWvLlA+uqwQ8Wsk=)
2: z_Ej6CoZbrKxrzLQhz11AHSKLRg.roa (hash: UVS5jjAa9OEvk26uuzlwcbiMZWOU5g+RlzuAxXPKfXY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:43:f5:0f:ef:a0:f2:c5:d1:50:f1:7b:a8:00:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Validity
Not Before: Jan 31 10:00:44 2025 GMT
Not After : Feb 1 10:00:44 2025 GMT
Subject: CN=4dee4f50315e1fd2f83de967d0aaa306f1acf70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:15:8e:78:f4:b5:4b:17:8b:5d:04:24:5e:77:
24:2b:81:50:61:82:67:67:26:b0:1a:c0:24:0d:ba:
e6:eb:6b:5b:9d:82:88:61:0f:7a:a1:b5:5b:37:f3:
db:b5:79:e1:c0:5f:4f:3a:74:c5:b0:26:a0:c0:9b:
b8:b6:50:dc:d7:5a:d6:98:30:08:23:1a:21:5f:72:
4d:33:db:2e:df:98:37:f2:a7:6a:69:cb:00:49:7d:
f5:f9:aa:79:79:97:ff:38:61:a9:75:13:5d:91:39:
d0:88:df:70:d9:1a:f4:c3:e3:fc:34:0f:53:f4:62:
5d:e6:6e:c0:6b:d1:98:2f:29:95:e5:66:6a:2c:77:
d4:cd:d8:0e:6a:06:fd:41:83:37:68:9a:c4:07:fa:
79:80:53:84:ac:af:ae:ef:8b:17:8f:80:3d:0c:0d:
a2:34:19:01:e1:20:46:11:4f:74:80:3b:ac:a5:f7:
b1:13:08:81:06:29:92:17:ef:ba:6e:49:f4:1e:8b:
97:a4:a4:b5:0d:4b:5b:89:c0:fa:ae:55:c0:81:7c:
57:90:e6:a6:87:d9:cb:3a:49:bd:72:71:d5:13:99:
22:dd:cd:ca:c6:21:d2:a5:39:7a:5b:4b:b1:1e:99:
1d:ee:d9:9a:d5:ac:72:12:7d:f6:09:8c:38:89:83:
d8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EE:4F:50:31:5E:1F:D2:F8:3D:E9:67:D0:AA:A3:06:F1:AC:F7:0C
X509v3 Authority Key Identifier:
keyid:D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:26:45:e7:b6:32:fb:15:1e:1c:cc:95:6c:83:2a:e8:56:5e:
e9:b9:1a:ad:d9:f2:66:87:65:b4:80:03:ea:5c:01:94:4e:75:
5c:8b:72:58:b3:ab:76:46:15:14:72:31:e4:bc:6d:99:c4:7b:
35:9c:a4:63:7d:5b:94:11:33:fb:43:89:b4:74:04:43:91:c8:
0d:f2:1e:dc:cf:9d:94:08:6d:50:e9:2d:b9:2f:5d:e2:11:8e:
55:e7:15:9b:97:51:c2:75:2d:ee:e3:f9:40:1a:77:1b:ab:db:
a9:5b:42:c5:a2:02:14:b5:80:60:26:e7:b7:c9:84:61:9b:e0:
bf:93:8e:37:a1:38:33:37:75:60:34:03:a3:f5:59:e1:28:cd:
c9:83:e7:59:81:0b:eb:49:19:a4:38:9d:e9:f8:ed:f1:b9:82:
ed:b1:7a:7e:52:a4:61:dc:db:28:bf:7e:40:6b:21:85:cd:2f:
a8:56:34:7a:41:bc:95:d4:5e:f0:af:6c:77:17:ba:16:fb:7e:
43:e2:9c:d4:a5:c1:35:88:fc:d7:1c:6e:54:76:fc:dc:59:c3:
35:b5:49:6f:84:38:b5:b4:24:c5:f0:f6:63:73:f3:62:a3:1a:
91:d5:a4:c2:8a:8a:26:d4:13:46:9f:dd:df:34:3d:c5:65:cc:
8e:e0:e8:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zkP1D++g8sXRUPF7qABdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMzAxMTdhZTFjZGMyZGYxYzU4ODE2ZTAwZTU0NTFmODdl
ZmIzNzAwHhcNMjUwMTMxMTAwMDQ0WhcNMjUwMjAxMTAwMDQ0WjAzMTEwLwYDVQQD
Eyg0ZGVlNGY1MDMxNWUxZmQyZjgzZGU5NjdkMGFhYTMwNmYxYWNmNzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxWOePS1SxeLXQQkXnckK4FQYYJn
ZyawGsAkDbrm62tbnYKIYQ96obVbN/PbtXnhwF9POnTFsCagwJu4tlDc11rWmDAI
IxohX3JNM9su35g38qdqacsASX31+ap5eZf/OGGpdRNdkTnQiN9w2Rr0w+P8NA9T
9GJd5m7Aa9GYLymV5WZqLHfUzdgOagb9QYM3aJrEB/p5gFOErK+u74sXj4A9DA2i
NBkB4SBGEU90gDuspfexEwiBBimSF++6bkn0HouXpKS1DUtbicD6rlXAgXxXkOam
h9nLOkm9cnHVE5ki3c3KxiHSpTl6W0uxHpkd7tma1axyEn32CYw4iYPYlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3uT1AxXh/S+D3pZ9CqowbxrPcMMB8GA1UdIwQY
MBaAFNEwEXrhzcLfHFiBbgDlRR+H77NwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFRBUmV1SE53dDhjV0lGdUFPVkZINGZ2czNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xMGNlNzMtM2Q0Zi00M2VmLWI2ODUt
MjUwYTRkNzc3YmE2LzEvMFRBUmV1SE53dDhjV0lGdUFPVkZINGZ2czNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8xMGNlNzMtM2Q0Zi00M2VmLWI2ODUtMjUwYTRkNzc3YmE2
LzEvMFRBUmV1SE53dDhjV0lGdUFPVkZINGZ2czNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCZF57Yy
+xUeHMyVbIMq6FZe6bkardnyZodltIAD6lwBlE51XItyWLOrdkYVFHIx5LxtmcR7
NZykY31blBEz+0OJtHQEQ5HIDfIe3M+dlAhtUOktuS9d4hGOVecVm5dRwnUt7uP5
QBp3G6vbqVtCxaICFLWAYCbnt8mEYZvgv5OON6E4Mzd1YDQDo/VZ4SjNyYPnWYEL
60kZpDid6fjt8bmC7bF6flKkYdzbKL9+QGshhc0vqFY0ekG8ldRe8K9sdxe6Fvt+
Q+Kc1KXBNYj81xxuVHb83FnDNbVJb4Q4tbQkxfD2Y3PzYqMakdWkwoqKJtQTRp/d
3zQ9xWXMjuDoSA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:32:50 2025 by rpki-client