Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
File: CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft (raw, json)
Hash identifier: OfeA5EhFHsnR8AFDXOpjkrMzyiStQdAwKUTb3CF7FFA=
Subject key identifier: 46:42:89:2E:00:90:41:FC:86:AB:8E:9F:23:88:0E:D2:C7:6A:EF:4C
Authority key identifier: 09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
Certificate issuer: /CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Certificate serial: 0194BCE05F110E3CBC4271FD24B43C3C2FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 15:00:08 +0000
Manifest this update: Fri 31 Jan 2025 15:00:08 +0000
Manifest next update: Sat 01 Feb 2025 15:00:08 +0000
Files and hashes: 1: 4to_68QAA5EZP6QVD93278mKQ9M.roa (hash: Din2sy8w9QJ69ucmdkg50bJdWrDL1O3pEtYdPufl40o=)
2: CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl (hash: AtAtJ+XEVzjSPZfTRBlpln4RjZTzHzHDzFcpIqH6ViY=)
3: kA5bGRl5EHENPG-lFJ-KaUPwtEE.roa (hash: SCW2no/wqMGhhPF1PG24OTD/SWeQikiX3GB3gK0CJDQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5f:11:0e:3c:bc:42:71:fd:24:b4:3c:3c:2f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Validity
Not Before: Jan 31 15:00:08 2025 GMT
Not After : Feb 1 15:00:08 2025 GMT
Subject: CN=4642892e009041fc86ab8e9f23880ed2c76aef4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:2a:4e:d4:01:46:78:9f:99:8c:d5:e9:94:
c4:8a:85:d3:90:b3:70:4a:08:ce:61:2e:8f:29:8c:
6f:3c:2d:f3:7d:3d:14:44:5c:1d:95:4b:3f:e8:08:
95:1d:84:2d:33:f9:45:44:c8:ca:6f:de:dc:a3:a3:
01:bf:aa:ba:ff:2d:70:c7:e1:53:1f:40:af:d1:83:
77:0f:51:7e:d8:d4:e2:cb:ae:4e:bb:4f:2c:26:de:
f1:48:4a:1e:66:2e:dc:2f:09:07:8c:06:50:53:f8:
d8:e4:3c:e1:f1:d1:03:0a:0c:29:88:1e:85:c2:71:
32:de:f4:e9:96:fe:62:90:79:11:bf:f6:04:5f:f5:
55:dc:9b:5e:21:5c:e7:f5:ff:47:ed:9a:f0:b9:ed:
7d:a4:c9:dc:e2:ee:8b:86:8c:ec:8c:a1:26:45:ba:
e1:67:34:a5:38:cd:04:e9:dc:5b:10:29:ea:0c:c8:
bf:26:e7:9c:0b:f0:dc:be:39:5b:64:59:e3:70:fb:
6b:86:d2:dc:07:1b:9f:58:fd:34:1f:f3:c3:18:ce:
0f:e6:be:60:31:b1:21:ba:72:96:39:09:e6:c2:05:
a2:bf:6a:6e:4f:70:e1:76:94:f0:6f:9f:b6:d7:3b:
cd:d3:3b:3e:ac:63:60:2b:23:36:81:77:e5:21:5b:
f2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:42:89:2E:00:90:41:FC:86:AB:8E:9F:23:88:0E:D2:C7:6A:EF:4C
X509v3 Authority Key Identifier:
keyid:09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:00:6e:74:62:b3:ef:ee:76:c9:d7:c1:73:24:5e:d2:05:1d:
c9:c3:10:d4:95:34:d5:2a:2a:58:00:6d:15:2f:ce:22:0d:80:
07:e9:4a:12:ae:b6:d9:c7:27:19:d4:22:16:c2:5c:63:d6:5c:
64:9f:1c:e6:81:cc:96:f1:db:07:7c:d5:6d:20:81:f4:3c:a4:
7d:19:79:4b:e6:94:bc:68:8f:5f:00:df:55:56:4a:31:b5:80:
e8:b7:ef:13:19:94:08:b6:29:d8:3d:07:32:1c:70:79:07:6a:
a5:d9:28:c8:cb:e8:98:d0:78:98:ee:96:73:6f:45:bf:6c:07:
60:f9:97:6c:78:a3:f7:ae:aa:38:d9:14:83:5b:07:5b:df:ed:
dd:e5:cd:df:0a:30:3a:89:58:d9:70:66:9b:2e:89:4b:fd:86:
2d:fe:51:76:f3:46:59:d5:cf:f4:b9:12:d6:74:24:23:26:a0:
e6:b1:28:41:a8:31:7c:a6:d4:b1:55:f5:31:32:3f:f1:9a:a3:
1f:e4:7f:bd:45:cd:ad:11:3f:59:1a:40:76:e1:84:58:5b:1c:
1c:7b:af:58:3a:ab:55:d2:44:a9:12:6f:99:e4:c0:7f:ff:39:
6f:b8:79:11:03:0d:71:4c:51:42:31:75:40:f6:94:ed:67:7b:
cf:3f:96:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84F8RDjy8QnH9JLQ8PC/QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZWExZDQ1MzFiMDcxZDY1NzQ2OTljMTJlNWFmYTQxZjg5
YmQ0MDkwHhcNMjUwMTMxMTUwMDA4WhcNMjUwMjAxMTUwMDA4WjAzMTEwLwYDVQQD
Eyg0NjQyODkyZTAwOTA0MWZjODZhYjhlOWYyMzg4MGVkMmM3NmFlZjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu0qTtQBRnifmYzV6ZTEioXTkLNw
SgjOYS6PKYxvPC3zfT0URFwdlUs/6AiVHYQtM/lFRMjKb97co6MBv6q6/y1wx+FT
H0Cv0YN3D1F+2NTiy65Ou08sJt7xSEoeZi7cLwkHjAZQU/jY5Dzh8dEDCgwpiB6F
wnEy3vTplv5ikHkRv/YEX/VV3JteIVzn9f9H7Zrwue19pMnc4u6LhozsjKEmRbrh
ZzSlOM0E6dxbECnqDMi/JuecC/DcvjlbZFnjcPtrhtLcBxufWP00H/PDGM4P5r5g
MbEhunKWOQnmwgWiv2puT3DhdpTwb5+21zvN0zs+rGNgKyM2gXflIVvyMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZCiS4AkEH8hquOnyOIDtLHau9MMB8GA1UdIwQY
MBaAFAnqHUUxsHHWV0aZwS5a+kH4m9QJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2VvZFJUR3djZFpYUnBuQkxscjZRZmliMUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hN2NhNjEtMmU4ZC00YmJlLTljMzYt
NGU2ZDEzMGJkYTBmLzEvQ2VvZFJUR3djZFpYUnBuQkxscjZRZmliMUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hN2NhNjEtMmU4ZC00YmJlLTljMzYtNGU2ZDEzMGJkYTBm
LzEvQ2VvZFJUR3djZFpYUnBuQkxscjZRZmliMUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwBudGKz
7+52ydfBcyRe0gUdycMQ1JU01SoqWABtFS/OIg2AB+lKEq622ccnGdQiFsJcY9Zc
ZJ8c5oHMlvHbB3zVbSCB9DykfRl5S+aUvGiPXwDfVVZKMbWA6LfvExmUCLYp2D0H
MhxweQdqpdkoyMvomNB4mO6Wc29Fv2wHYPmXbHij966qONkUg1sHW9/t3eXN3wow
OolY2XBmmy6JS/2GLf5RdvNGWdXP9LkS1nQkIyag5rEoQagxfKbUsVX1MTI/8Zqj
H+R/vUXNrRE/WRpAduGEWFscHHuvWDqrVdJEqRJvmeTAf/85b7h5EQMNcUxRQjF1
QPaU7Wd7zz+Wdw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:15 2025 by rpki-client