Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.mft
File: 1-2d6wpD-CR-iNunaZquveM0sjGE.mft (raw, json)
Hash identifier: wtGX7uOIZMFcywoOSNVEy0L8gdqTisAtYEGR2oArm1c=
Subject key identifier: DE:10:53:79:F0:B8:2D:1D:75:7A:AC:1D:43:D2:90:FF:52:92:30:14
Authority key identifier: FB:67:7A:C2:90:FE:09:1F:A2:36:E9:DA:66:AB:AF:78:CD:2C:8C:61
Certificate issuer: /CN=fb677ac290fe091fa236e9da66abaf78cd2c8c61
Certificate serial: 0194BD85B5D0A7B9373B99532623A9DDE762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2d6wpD-CR-iNunaZquveM0sjGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 18:00:44 +0000
Manifest this update: Fri 31 Jan 2025 18:00:44 +0000
Manifest next update: Sat 01 Feb 2025 18:00:44 +0000
Files and hashes: 1: 1-2d6wpD-CR-iNunaZquveM0sjGE.crl (hash: C7x5aqUqNKwC1G0kQrzIBfC4yFAb3e8k2KvcCVnS0kk=)
2: 9IBHLWVOZ0QllouyRgZXZZaYaZg.roa (hash: EjNvIqlv1V/ciVJtAGWjow9nk1g6XEmRzV7siqw9gdU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b5:d0:a7:b9:37:3b:99:53:26:23:a9:dd:e7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb677ac290fe091fa236e9da66abaf78cd2c8c61
Validity
Not Before: Jan 31 18:00:44 2025 GMT
Not After : Feb 1 18:00:44 2025 GMT
Subject: CN=de105379f0b82d1d757aac1d43d290ff52923014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2a:ca:fd:4b:64:85:00:c9:bd:5d:f8:01:c4:
8f:f9:54:86:76:27:fe:54:25:4b:a2:3c:20:d9:f0:
16:b7:46:e4:98:87:9b:d3:60:59:65:93:33:ad:35:
83:42:80:07:e2:c9:cb:5b:2f:37:10:a2:6b:0c:60:
07:99:0f:60:38:c0:1f:e8:3f:3b:30:ac:92:b9:4b:
b0:9a:24:35:fc:74:90:c0:a8:c5:c9:5e:7e:60:fc:
0d:a0:9f:d9:ab:94:30:23:f5:8f:ef:2b:25:67:13:
67:3e:37:52:9f:3f:35:46:58:c1:a5:5b:cc:55:52:
ce:3f:98:b1:39:be:9f:5f:32:2e:67:3e:e0:3f:d0:
d3:9a:07:cf:62:bb:f6:f5:47:56:49:d3:56:d7:99:
75:03:3a:ae:d3:de:53:20:0b:08:50:f3:0c:ea:e8:
68:ad:f0:e4:b4:36:4a:8b:ed:b2:38:7c:0c:17:d9:
79:6f:51:bd:0c:5e:da:0e:e4:a6:dc:b0:12:33:21:
34:60:c3:cc:4e:93:1a:78:06:23:72:fb:28:46:91:
25:a1:40:96:14:c6:bd:b6:6b:3f:c7:f9:9c:83:aa:
38:89:e1:ea:19:1f:f1:b7:c6:88:4c:df:72:cf:9c:
f8:7f:15:b4:3a:8f:21:4c:c8:3d:6c:34:45:71:64:
04:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:10:53:79:F0:B8:2D:1D:75:7A:AC:1D:43:D2:90:FF:52:92:30:14
X509v3 Authority Key Identifier:
keyid:FB:67:7A:C2:90:FE:09:1F:A2:36:E9:DA:66:AB:AF:78:CD:2C:8C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2d6wpD-CR-iNunaZquveM0sjGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:74:14:fd:12:82:12:ba:ef:3c:5f:99:4e:b0:6a:e0:1d:68:
f4:44:11:a6:d4:09:b0:7a:96:1c:36:77:55:1e:2b:fd:bb:db:
1b:bc:4f:98:1e:5f:cf:9f:12:81:cf:51:90:85:5f:28:9c:0d:
b4:1b:7a:92:1a:08:c7:9d:d8:47:54:9f:eb:49:ff:ba:61:39:
bb:ba:c8:39:53:e1:ba:85:1a:48:e0:62:19:b6:92:78:dc:e2:
02:1b:6e:76:c8:e1:24:9a:b8:76:cb:bb:44:32:c3:d9:ae:0b:
b7:61:ea:eb:6c:89:c0:f8:5d:75:c5:02:93:0b:03:ed:6e:21:
9e:f0:4a:b2:43:0b:9e:a3:de:68:45:ce:1e:23:95:d0:15:db:
1d:c8:33:f0:aa:93:20:d0:04:b9:3a:9c:32:db:b1:d8:c1:82:
97:94:d7:97:67:69:56:41:da:ae:c5:27:8f:6c:e8:88:17:21:
2a:e6:cd:b5:5c:a8:e4:af:32:d0:5a:ef:ae:8b:e9:27:b3:4e:
3c:cb:c1:16:60:87:b1:d0:6d:cf:a5:c2:5c:0b:72:00:75:40:
18:34:4b:6f:9f:81:98:42:a2:3d:03:f2:76:f4:e7:f2:27:d6:
21:e1:a8:ae:6b:c4:86:72:a4:36:07:71:85:ca:de:94:42:70:
b2:e5:37:b0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS9hbXQp7k3O5lTJiOp3ediMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNjc3YWMyOTBmZTA5MWZhMjM2ZTlkYTY2YWJhZjc4Y2Qy
YzhjNjEwHhcNMjUwMTMxMTgwMDQ0WhcNMjUwMjAxMTgwMDQ0WjAzMTEwLwYDVQQD
EyhkZTEwNTM3OWYwYjgyZDFkNzU3YWFjMWQ0M2QyOTBmZjUyOTIzMDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoirK/UtkhQDJvV34AcSP+VSGdif+
VCVLojwg2fAWt0bkmIeb02BZZZMzrTWDQoAH4snLWy83EKJrDGAHmQ9gOMAf6D87
MKySuUuwmiQ1/HSQwKjFyV5+YPwNoJ/Zq5QwI/WP7yslZxNnPjdSnz81RljBpVvM
VVLOP5ixOb6fXzIuZz7gP9DTmgfPYrv29UdWSdNW15l1Azqu095TIAsIUPMM6uho
rfDktDZKi+2yOHwMF9l5b1G9DF7aDuSm3LASMyE0YMPMTpMaeAYjcvsoRpEloUCW
FMa9tms/x/mcg6o4ieHqGR/xt8aITN9yz5z4fxW0Oo8hTMg9bDRFcWQEPwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFN4QU3nwuC0ddXqsHUPSkP9SkjAUMB8GA1UdIwQY
MBaAFPtnesKQ/gkfojbp2marr3jNLIxhMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0yZDZ3cEQtQ1ItaU51bmFacXV2ZU0wc2pHRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvNWEwMWUyLTgzZTItNGE3Yy1hYzJi
LTU4ZjY3MjNlOTgxZS8xLzEtMmQ2d3BELUNSLWlOdW5hWnF1dmVNMHNqR0UubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRjLzVhMDFlMi04M2UyLTRhN2MtYWMyYi01OGY2NzIzZTk4
MWUvMS8xLTJkNndwRC1DUi1pTnVuYVpxdXZlTTBzakdFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQXQU
/RKCErrvPF+ZTrBq4B1o9EQRptQJsHqWHDZ3VR4r/bvbG7xPmB5fz58Sgc9RkIVf
KJwNtBt6khoIx53YR1Sf60n/umE5u7rIOVPhuoUaSOBiGbaSeNziAhtudsjhJJq4
dsu7RDLD2a4Lt2Hq62yJwPhddcUCkwsD7W4hnvBKskMLnqPeaEXOHiOV0BXbHcgz
8KqTINAEuTqcMtux2MGCl5TXl2dpVkHarsUnj2zoiBchKubNtVyo5K8y0Frvrovp
J7NOPMvBFmCHsdBtz6XCXAtyAHVAGDRLb5+BmEKiPQPydvTn8ifWIeGormvEhnKk
NgdxhcrelEJwsuU3sA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:58 2025 by rpki-client