Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
File: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft (raw, json)
Hash identifier: HeatHYbD6dpd1Csg1vfarDbfWyP6kwbIPdZ/aGKOTX0=
Subject key identifier: CD:BD:42:7A:47:70:4E:3D:76:64:63:49:FD:74:DD:11:9A:6A:91:D2
Authority key identifier: 71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
Certificate issuer: /CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Certificate serial: 0194BCAA05B4B1D335C9BE4BFF0F3A99D299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:46 +0000
Manifest this update: Fri 31 Jan 2025 14:00:46 +0000
Manifest next update: Sat 01 Feb 2025 14:00:46 +0000
Files and hashes: 1: SCQLL9FrRwZS3_4QAQMFwFWEnMU.roa (hash: hA+a1SinlIIzAIvLt/cO3Kjqq6i5Xzb+bDE4vvr8VPM=)
2: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl (hash: V7NXSXUTw1H25QMUeuTWl21WSuzSd3qW+t3dt5/7L1A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:05:b4:b1:d3:35:c9:be:4b:ff:0f:3a:99:d2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Validity
Not Before: Jan 31 14:00:46 2025 GMT
Not After : Feb 1 14:00:46 2025 GMT
Subject: CN=cdbd427a47704e3d76646349fd74dd119a6a91d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:91:fe:a2:a2:84:a2:cd:24:a0:a6:b7:c9:29:
49:ab:40:5b:8b:77:c6:4a:7c:44:f1:e0:f0:d6:71:
7d:1e:06:42:7c:e7:40:3f:bf:3c:5f:e4:88:fa:d1:
ed:ed:eb:b7:41:ed:55:3e:45:08:40:57:f3:3d:1b:
6e:70:d9:21:a4:21:40:af:b7:f6:08:bf:07:8d:3d:
6e:da:b8:d6:4c:41:a9:69:6b:90:72:99:b1:6e:18:
b2:ad:a2:e0:98:d4:ab:c2:a1:d1:77:0a:87:9c:f3:
5e:45:33:2d:56:51:b2:7a:6c:c7:4d:28:54:81:0a:
92:70:ba:3d:7b:49:e6:d0:95:b6:62:e7:13:8c:38:
b0:64:b6:7f:5e:55:04:dd:7a:f8:1d:7c:18:73:a4:
40:12:fa:6c:1a:46:b4:50:3a:71:33:64:55:ff:53:
c8:b7:76:91:65:c3:65:7b:2d:39:f5:84:a4:65:52:
2d:62:12:d5:0b:57:1d:55:d9:37:53:9e:cb:08:6e:
d4:d0:be:bd:e1:ca:65:f1:0e:c4:20:6b:7c:a6:f4:
6e:c8:04:a1:48:69:f5:b4:d4:7b:dd:f4:35:55:2a:
70:33:da:79:94:4b:6b:5d:a5:8a:59:0b:0e:db:7d:
66:42:1f:7e:77:34:73:fc:30:6d:b8:8d:11:ed:7b:
f7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BD:42:7A:47:70:4E:3D:76:64:63:49:FD:74:DD:11:9A:6A:91:D2
X509v3 Authority Key Identifier:
keyid:71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d9:74:51:04:db:08:d5:b7:61:7d:e6:7d:a1:89:6c:d0:85:
29:9e:af:16:e0:3a:46:a7:46:b4:b1:57:20:c6:22:4e:e1:74:
e6:d6:54:ce:8f:48:e8:ee:fb:87:f8:f8:73:47:94:e6:41:5d:
c7:e1:a4:1f:e1:55:b0:7b:75:e0:91:99:f5:4c:e3:31:3a:0e:
a1:f3:e6:5f:ed:ec:be:8f:52:02:13:c1:65:1b:39:5b:a9:e1:
d7:0c:41:b5:0b:6d:77:f1:7a:41:df:31:18:c5:63:bc:24:63:
80:9a:70:bb:b7:1f:bf:3b:b8:96:39:aa:7f:cd:46:ef:d9:ca:
2e:db:ff:7f:70:9c:6d:c2:e9:3a:3c:5d:ce:fe:ea:ea:56:c1:
49:68:b3:2f:f3:a9:c8:4f:ae:14:65:75:a8:ff:57:79:00:b8:
4b:d4:f0:2d:93:3a:a0:3b:c5:4f:ee:55:1b:d6:61:d9:e4:d2:
c6:58:96:1f:f3:6d:8d:4e:c9:12:54:1b:67:22:f3:b5:4f:2c:
c5:d4:07:3e:b5:7a:e9:39:5b:ac:7b:a9:22:e6:1a:78:6d:d5:
d8:c0:c7:df:f7:9c:4d:28:51:a2:87:57:d8:85:5a:51:99:97:
58:56:e1:4f:4b:8c:25:99:93:37:eb:dd:0b:e8:0a:53:85:e2:
5f:72:3f:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qgW0sdM1yb5L/w86mdKZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNzg3MDBmMTYxOWVjMWNkMzRkOTcwMDM5MjE1M2VjNGI2
MjMxZmMwHhcNMjUwMTMxMTQwMDQ2WhcNMjUwMjAxMTQwMDQ2WjAzMTEwLwYDVQQD
EyhjZGJkNDI3YTQ3NzA0ZTNkNzY2NDYzNDlmZDc0ZGQxMTlhNmE5MWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5H+oqKEos0koKa3ySlJq0Bbi3fG
SnxE8eDw1nF9HgZCfOdAP788X+SI+tHt7eu3Qe1VPkUIQFfzPRtucNkhpCFAr7f2
CL8HjT1u2rjWTEGpaWuQcpmxbhiyraLgmNSrwqHRdwqHnPNeRTMtVlGyemzHTShU
gQqScLo9e0nm0JW2YucTjDiwZLZ/XlUE3Xr4HXwYc6RAEvpsGka0UDpxM2RV/1PI
t3aRZcNley059YSkZVItYhLVC1cdVdk3U57LCG7U0L694cpl8Q7EIGt8pvRuyASh
SGn1tNR73fQ1VSpwM9p5lEtrXaWKWQsO231mQh9+dzRz/DBtuI0R7Xv3/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM29QnpHcE49dmRjSf103RGaapHSMB8GA1UdIwQY
MBaAFHF4cA8WGewc002XADkhU+xLYjH8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1hod0R4WVo3QnpUVFpjQU9TRlQ3RXRpTWZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iNTg1YWMtODYxOC00MTVhLTg3ZWMt
ZDFkOGRiMTQ4ZWMyLzEvY1hod0R4WVo3QnpUVFpjQU9TRlQ3RXRpTWZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iNTg1YWMtODYxOC00MTVhLTg3ZWMtZDFkOGRiMTQ4ZWMy
LzEvY1hod0R4WVo3QnpUVFpjQU9TRlQ3RXRpTWZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKtl0UQTb
CNW3YX3mfaGJbNCFKZ6vFuA6RqdGtLFXIMYiTuF05tZUzo9I6O77h/j4c0eU5kFd
x+GkH+FVsHt14JGZ9UzjMToOofPmX+3svo9SAhPBZRs5W6nh1wxBtQttd/F6Qd8x
GMVjvCRjgJpwu7cfvzu4ljmqf81G79nKLtv/f3CcbcLpOjxdzv7q6lbBSWizL/Op
yE+uFGV1qP9XeQC4S9TwLZM6oDvFT+5VG9Zh2eTSxliWH/NtjU7JElQbZyLztU8s
xdQHPrV66TlbrHupIuYaeG3V2MDH3/ecTShRoodX2IVaUZmXWFbhT0uMJZmTN+vd
C+gKU4XiX3I/nA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:02 2025 by rpki-client