Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
File: 13eUOzQRiOnNLpPeKIsz_-BBx9I.mft (raw, json)
Hash identifier: LkECspqKvtqPQWU+deR98MwMF5NtwmRPS9d5ny3hhRs=
Subject key identifier: 64:BC:F1:39:9E:5A:9D:8F:1B:8C:07:27:C6:BB:24:D4:72:F6:F9:E2
Authority key identifier: D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
Certificate issuer: /CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Certificate serial: 0194BBCEDD11D75BA1725ED492A47AD4D8E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: 13eUOzQRiOnNLpPeKIsz_-BBx9I.crl (hash: cAteJqNCIXZWupafCw9b4EHPVM0+xACnG5T9X751bCk=)
2: f0gof4jxw94Oa83YFTdbTbKjLPk.roa (hash: TTuzPsw9kpuOO/S82uUhytdELCayKcLt12jYeRdVVIg=)
3: fI_1hDVc0AIsq5nMQmL9xfz1kXA.roa (hash: 89mtvnCyTjJUBdmS9eZxdF32JISfZjUl73RykEZkqVI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:dd:11:d7:5b:a1:72:5e:d4:92:a4:7a:d4:d8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=64bcf1399e5a9d8f1b8c0727c6bb24d472f6f9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:f3:23:72:2b:0c:29:c9:32:fa:1c:50:2c:
79:10:b0:fe:50:84:c7:ac:1b:c5:77:e7:f8:3a:34:
a9:d8:db:3d:0b:1a:8f:1d:6a:c4:b1:bc:b8:20:08:
c8:b2:85:66:43:ee:6e:f3:a6:42:cb:fe:5c:59:b6:
33:1b:22:84:46:ea:de:c2:27:9c:cb:6b:1b:d9:fe:
d1:ee:0c:03:e4:f8:ad:22:00:7b:d8:86:7a:9f:50:
92:c4:97:da:b9:85:c3:cb:68:f8:ac:e7:3c:27:11:
9c:8e:de:2e:85:ae:e7:e6:ed:4b:7b:fb:a4:f5:f0:
12:6f:23:61:a1:bb:68:c4:de:06:aa:d9:57:2d:67:
32:99:0f:e2:da:9c:f8:f7:d6:0a:5a:c2:9f:f1:bd:
1a:c0:86:b8:68:67:14:a3:ae:cd:70:5d:b6:a6:1d:
2b:63:00:6b:87:45:ef:5d:2c:ec:d9:0c:3a:ef:f6:
98:57:ba:a9:3a:c6:72:73:fb:0e:5f:59:29:29:27:
f7:e1:ef:63:43:ce:19:17:f7:68:48:fa:c5:ce:40:
1c:48:45:17:98:35:48:7c:66:02:a1:d5:3b:ee:1f:
a6:25:b8:0e:ac:f0:a8:7a:20:41:24:99:ba:64:8b:
73:c3:de:73:23:97:1c:28:ff:7a:93:40:aa:7e:0f:
38:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BC:F1:39:9E:5A:9D:8F:1B:8C:07:27:C6:BB:24:D4:72:F6:F9:E2
X509v3 Authority Key Identifier:
keyid:D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b0:bf:68:7a:b0:84:f8:a9:d8:2b:a7:d2:ae:41:fd:58:bd:
4b:22:6b:a8:32:c9:3c:da:be:70:a1:4d:b5:af:89:b2:fd:a2:
27:9c:c4:9a:64:ef:5f:6c:f3:fb:4a:55:65:6a:0d:24:8d:7d:
7c:9a:2f:93:9e:63:30:65:29:96:8e:ca:13:44:ca:54:cc:55:
01:92:ca:6e:4e:29:7f:8d:16:dc:5a:08:3b:0e:35:19:e4:c8:
4b:62:8b:8e:b7:6b:bd:46:77:ff:f2:42:b0:2d:98:0d:00:08:
f4:0d:e8:09:d7:c4:c6:47:96:04:a3:e2:ce:a7:9d:94:51:ed:
0b:d6:96:ee:63:94:dd:88:30:39:46:dc:36:76:31:43:0c:7e:
e0:cd:df:8b:54:ce:bc:49:3c:2e:61:4d:31:8a:01:41:16:5b:
ce:12:55:ad:29:66:d7:7b:31:9e:c3:89:5e:77:e3:ca:b9:a8:
cd:e1:15:28:c5:72:f0:86:16:cd:c1:08:7d:b6:08:8f:d7:3c:
3f:fb:d4:d6:31:a5:62:29:0a:b4:48:44:f3:af:f2:39:97:3d:
d2:24:b5:05:32:e9:96:10:ea:05:dd:07:18:f4:45:d4:49:3f:
35:5a:a3:f6:56:bc:70:e7:f2:24:ff:9f:5c:0b:39:68:57:26:
e6:df:6b:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zt0R11uhcl7UkqR61NjjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Nzc5NDNiMzQxMTg4ZTljZDJlOTNkZTI4OGIzM2ZmZTA0
MWM3ZDIwHhcNMjUwMTMxMTAwMTIzWhcNMjUwMjAxMTAwMTIzWjAzMTEwLwYDVQQD
Eyg2NGJjZjEzOTllNWE5ZDhmMWI4YzA3MjdjNmJiMjRkNDcyZjZmOWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQLzI3IrDCnJMvocUCx5ELD+UITH
rBvFd+f4OjSp2Ns9CxqPHWrEsby4IAjIsoVmQ+5u86ZCy/5cWbYzGyKERurewiec
y2sb2f7R7gwD5PitIgB72IZ6n1CSxJfauYXDy2j4rOc8JxGcjt4uha7n5u1Le/uk
9fASbyNhobtoxN4GqtlXLWcymQ/i2pz499YKWsKf8b0awIa4aGcUo67NcF22ph0r
YwBrh0XvXSzs2Qw67/aYV7qpOsZyc/sOX1kpKSf34e9jQ84ZF/doSPrFzkAcSEUX
mDVIfGYCodU77h+mJbgOrPCoeiBBJJm6ZItzw95zI5ccKP96k0Cqfg84kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGS88TmeWp2PG4wHJ8a7JNRy9vniMB8GA1UdIwQY
MBaAFNd3lDs0EYjpzS6T3iiLM//gQcfSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTNlVU96UVJpT25OTHBQZUtJc3pfLUJCeDlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8zNWIxZGYtNzhjZi00ODE4LWIzM2Et
Y2RhN2ZjN2ViMDkyLzEvMTNlVU96UVJpT25OTHBQZUtJc3pfLUJCeDlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8zNWIxZGYtNzhjZi00ODE4LWIzM2EtY2RhN2ZjN2ViMDky
LzEvMTNlVU96UVJpT25OTHBQZUtJc3pfLUJCeDlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbC/aHqw
hPip2Cun0q5B/Vi9SyJrqDLJPNq+cKFNta+Jsv2iJ5zEmmTvX2zz+0pVZWoNJI19
fJovk55jMGUplo7KE0TKVMxVAZLKbk4pf40W3FoIOw41GeTIS2KLjrdrvUZ3//JC
sC2YDQAI9A3oCdfExkeWBKPizqedlFHtC9aW7mOU3YgwOUbcNnYxQwx+4M3fi1TO
vEk8LmFNMYoBQRZbzhJVrSlm13sxnsOJXnfjyrmozeEVKMVy8IYWzcEIfbYIj9c8
P/vU1jGlYikKtEhE86/yOZc90iS1BTLplhDqBd0HGPRF1Ek/NVqj9la8cOfyJP+f
XAs5aFcm5t9rZQ==
-----END CERTIFICATE-----
Generated at Thu May 1 14:53:53 2025 by rpki-client