Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
File: RfnjL_avPV5dd727mNo30LjkRRk.mft (raw, json)
Hash identifier: QsdHHIG4iksZQDXY6SUfoaXL+WhVQUkIoSOMclVmoJ8=
Subject key identifier: ED:76:83:A4:FF:FE:F3:47:A5:35:17:E5:70:A6:B1:32:4E:13:A0:0F
Authority key identifier: 45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
Certificate issuer: /CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Certificate serial: 0194BCE0E0CCC2C9AAF5EE2F9958898EF21F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
Manifest number: 1437
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: RfnjL_avPV5dd727mNo30LjkRRk.crl (hash: 1AqgyGvRl5xWscNp7v2DkRNvv1Mh9zXUVmKixSYDPro=)
2: SFYQtUf8h78RR3sYV-5vV65d0GI.roa (hash: k8VC+Pkqjm+Q/34YSS05tLomED6YZDaGOWiNO2M8zlM=)
3: cQWK86wyTE6QykBYGD0IQXVxmGU.roa (hash: YU+GQaBeZSBZ4pnqlkuWqIUXGdhcGs2HRIrroMn5n04=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e0:cc:c2:c9:aa:f5:ee:2f:99:58:89:8e:f2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=ed7683a4fffef347a53517e570a6b1324e13a00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:bd:be:73:96:2a:1b:6e:10:2a:11:2b:a8:66:
66:7b:cc:0b:b9:40:36:21:41:f8:fc:dd:d2:38:59:
34:84:31:d6:22:69:c2:78:1d:a9:34:a0:27:3a:bb:
3e:70:e9:c0:e1:ee:53:07:8e:1e:1a:73:24:5c:c3:
7e:c6:4e:11:1f:35:b2:5c:d9:d8:14:27:99:47:32:
75:b6:14:04:43:3d:88:80:6f:e7:6d:be:18:1b:f2:
74:4a:93:5b:5d:12:9f:13:cb:a4:ff:9b:19:6a:2a:
d1:1e:93:8d:fd:1a:89:24:f7:5c:14:26:52:ca:dc:
43:59:bc:e7:9f:bd:dd:a5:41:98:1a:36:42:85:9b:
fd:9a:60:97:4d:cd:6f:13:c7:36:1e:5f:c1:03:d6:
d8:6b:17:c4:e2:83:9c:df:04:ab:d8:f8:fb:ca:49:
d6:61:49:d0:35:14:d1:5e:96:3f:15:91:d7:6d:2b:
e4:22:c2:7d:bb:c7:70:07:02:38:ef:2f:a4:e1:4e:
08:87:30:30:92:6a:ec:09:71:29:97:4b:99:e6:d2:
78:ef:1a:6c:89:cd:f2:c9:73:36:ff:4f:7e:97:ad:
f4:1d:3a:23:08:08:1a:78:b7:73:1a:dd:33:e0:63:
8f:8e:08:64:41:7d:21:4d:bc:98:2a:1c:78:ba:af:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:76:83:A4:FF:FE:F3:47:A5:35:17:E5:70:A6:B1:32:4E:13:A0:0F
X509v3 Authority Key Identifier:
keyid:45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:5e:7d:5c:27:8c:48:76:4f:17:a5:13:e3:51:24:9f:cd:b3:
8f:37:37:a4:ce:f9:51:b2:bf:22:c0:ab:01:8b:28:dd:29:7b:
37:4b:08:a0:fb:4f:38:ef:24:ed:a5:39:ed:9d:35:26:00:d0:
ca:89:0d:99:cd:7f:41:bb:a2:76:aa:30:db:eb:c6:5b:51:29:
b0:83:e7:f7:0b:61:52:63:72:ce:f4:4e:4f:fb:35:6f:5d:20:
c3:a3:4e:47:2e:5b:c0:e1:19:e9:43:1e:36:fc:4c:12:7c:af:
8d:7a:38:c2:ad:e8:4a:c3:4e:a2:31:1f:a1:6c:02:a0:50:e1:
31:fe:4b:98:d4:23:fb:5b:1a:89:f9:bc:a6:36:a8:86:10:7e:
3a:9f:72:73:f1:47:0f:98:9e:0a:19:bc:b0:4f:94:19:7c:b4:
9f:95:9a:4f:9f:12:ca:ca:d6:17:6b:98:b0:35:31:cd:cb:47:
95:24:19:af:cc:f0:5c:f1:67:4b:fe:a0:dc:ad:76:03:9d:9e:
44:44:0f:a7:be:8c:a0:ee:b6:91:10:f0:4f:02:d2:cc:41:53:
2e:c2:6b:51:94:35:95:b0:c8:45:8f:24:f2:9f:37:90:7a:8d:
c5:e0:67:81:31:6e:d9:2a:a6:eb:5d:00:dd:b8:91:28:6c:5d:
71:cd:37:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84ODMwsmq9e4vmViJjvIfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZjllMzJmZjZhZjNkNWU1ZDc3YmRiYjk4ZGEzN2QwYjhl
NDQ1MTkwHhcNMjUwMTMxMTUwMDQxWhcNMjUwMjAxMTUwMDQxWjAzMTEwLwYDVQQD
EyhlZDc2ODNhNGZmZmVmMzQ3YTUzNTE3ZTU3MGE2YjEzMjRlMTNhMDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA872+c5YqG24QKhErqGZme8wLuUA2
IUH4/N3SOFk0hDHWImnCeB2pNKAnOrs+cOnA4e5TB44eGnMkXMN+xk4RHzWyXNnY
FCeZRzJ1thQEQz2IgG/nbb4YG/J0SpNbXRKfE8uk/5sZairRHpON/RqJJPdcFCZS
ytxDWbznn73dpUGYGjZChZv9mmCXTc1vE8c2Hl/BA9bYaxfE4oOc3wSr2Pj7yknW
YUnQNRTRXpY/FZHXbSvkIsJ9u8dwBwI47y+k4U4IhzAwkmrsCXEpl0uZ5tJ47xps
ic3yyXM2/09+l630HTojCAgaeLdzGt0z4GOPjghkQX0hTbyYKhx4uq9DLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO12g6T//vNHpTUX5XCmsTJOE6APMB8GA1UdIwQY
MBaAFEX54y/2rz1eXXe9u5jaN9C45EUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmZuakxfYXZQVjVkZDcyN21ObzMwTGprUlJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85ZGVmMDgtNzU1Mi00YjVhLTk2NmYt
OGVlMGExMmEzNTliLzEvUmZuakxfYXZQVjVkZDcyN21ObzMwTGprUlJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC85ZGVmMDgtNzU1Mi00YjVhLTk2NmYtOGVlMGExMmEzNTli
LzEvUmZuakxfYXZQVjVkZDcyN21ObzMwTGprUlJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgl59XCeM
SHZPF6UT41Ekn82zjzc3pM75UbK/IsCrAYso3Sl7N0sIoPtPOO8k7aU57Z01JgDQ
yokNmc1/Qbuidqow2+vGW1EpsIPn9wthUmNyzvROT/s1b10gw6NORy5bwOEZ6UMe
NvxMEnyvjXo4wq3oSsNOojEfoWwCoFDhMf5LmNQj+1saifm8pjaohhB+Op9yc/FH
D5ieChm8sE+UGXy0n5WaT58SysrWF2uYsDUxzctHlSQZr8zwXPFnS/6g3K12A52e
REQPp76MoO62kRDwTwLSzEFTLsJrUZQ1lbDIRY8k8p83kHqNxeBngTFu2Sqm610A
3biRKGxdcc03Bw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:29 2025 by rpki-client