Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
File: CvEjgQA3CiwF-waACv3mkG2q8tg.mft (raw, json)
Hash identifier: pHzh9rioaD0Uo6lTNTt9/lv1nZDBT0nHRrwrqCUQVM8=
Subject key identifier: 33:13:66:BF:8E:04:8D:03:7D:86:FC:28:6F:1C:53:6D:9F:EF:1D:46
Authority key identifier: 0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
Certificate issuer: /CN=0af1238100370a2c05fb06800afde6906daaf2d8
Certificate serial: 0194BCE0BA4329AAB369C5D444EC059A2228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 15:00:31 +0000
Manifest this update: Fri 31 Jan 2025 15:00:31 +0000
Manifest next update: Sat 01 Feb 2025 15:00:31 +0000
Files and hashes: 1: CvEjgQA3CiwF-waACv3mkG2q8tg.crl (hash: yK5K/5jOVxUsifz5/R+6HHSQeDOT5GOVOtVNtVgnpQ4=)
2: IXCtEaMNeIUhqXl8Lx3l8-Dir_Q.roa (hash: ZiR3KjxwRefwM+SxQhOx2wRJ2km2w6JI0EvTFa0nnZg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ba:43:29:aa:b3:69:c5:d4:44:ec:05:9a:22:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af1238100370a2c05fb06800afde6906daaf2d8
Validity
Not Before: Jan 31 15:00:31 2025 GMT
Not After : Feb 1 15:00:31 2025 GMT
Subject: CN=331366bf8e048d037d86fc286f1c536d9fef1d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:36:6b:51:f9:a9:02:b0:3d:5a:fb:f7:65:d6:
b2:b9:33:39:1e:1b:07:90:b9:05:ee:a1:42:ad:47:
fb:0c:b9:d8:9d:51:b7:30:f1:a9:50:af:b0:26:3a:
cc:34:a0:c2:fe:f1:7e:fb:70:81:2b:3b:a0:14:d7:
51:2f:88:ab:43:fd:c6:95:43:77:ad:6c:97:b3:ed:
82:38:19:2b:12:49:5c:e6:49:6f:db:64:0e:11:02:
62:ff:59:53:ca:39:f6:d7:f9:f0:90:48:cf:84:53:
62:27:f6:21:f6:58:89:45:1b:e6:0a:a9:38:32:7f:
26:b3:55:32:e0:a3:fd:4f:23:e4:12:77:79:e2:81:
fe:2a:d8:13:80:fc:33:e0:c3:62:27:18:ba:50:6c:
a5:a0:b9:93:7d:e5:e1:cb:cb:e4:d1:6d:0b:ef:52:
6f:3e:a5:75:83:ea:f2:82:85:c4:1c:5a:7e:9a:b7:
26:01:b7:29:69:25:06:07:09:69:b6:d9:ec:5c:78:
1e:d1:c0:3b:7a:95:a4:bd:ee:b4:cc:c4:39:10:80:
23:69:a2:3b:88:7b:71:d5:73:dd:70:b2:39:6e:87:
de:a5:a1:24:15:b0:5f:4f:9d:98:b9:8c:e0:32:f5:
f8:ec:f5:48:e7:ab:eb:99:77:eb:90:96:2b:8c:fb:
1c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:13:66:BF:8E:04:8D:03:7D:86:FC:28:6F:1C:53:6D:9F:EF:1D:46
X509v3 Authority Key Identifier:
keyid:0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:85:8f:a9:5d:2f:c2:c6:ee:21:32:ea:e3:e9:a6:f2:df:d2:
72:ab:f0:56:cd:5a:62:3d:b4:18:cb:9a:dd:1f:30:08:e4:02:
93:18:51:7a:11:20:69:99:50:eb:3b:fc:03:dc:b8:94:af:c0:
37:d8:d4:7d:ce:9a:33:70:3e:86:e5:31:a8:b2:e2:ff:9a:d3:
27:c9:d6:52:db:36:2e:75:ba:57:f4:ab:ab:47:56:e3:3f:f5:
6a:1d:74:66:0e:27:f0:74:27:c5:06:7c:71:c7:b2:4e:fb:4a:
ac:3b:e7:25:67:82:49:65:24:92:e3:36:2e:1a:a5:10:8d:df:
42:b2:d0:85:dc:15:5c:85:d9:b6:f5:7c:be:84:2a:7f:77:38:
28:bb:d0:81:da:e7:21:7b:ab:b7:9f:20:81:70:a8:c7:8c:b1:
c0:18:53:21:20:e9:86:eb:e6:8b:64:fc:7f:fb:87:5d:35:3b:
fd:6e:8e:af:c9:d9:33:9f:3c:a4:e5:75:77:bc:e9:ae:a4:53:
f0:96:48:21:eb:44:d3:d5:b0:9d:55:c2:83:67:5d:c9:84:33:
63:8b:95:f7:01:86:b6:9e:ec:6f:fd:4f:c2:35:51:64:90:34:
0d:50:b3:15:95:56:31:e8:63:c0:9e:6e:57:a4:c8:09:d0:11:
49:c6:50:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84LpDKaqzacXUROwFmiIoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZjEyMzgxMDAzNzBhMmMwNWZiMDY4MDBhZmRlNjkwNmRh
YWYyZDgwHhcNMjUwMTMxMTUwMDMxWhcNMjUwMjAxMTUwMDMxWjAzMTEwLwYDVQQD
EygzMzEzNjZiZjhlMDQ4ZDAzN2Q4NmZjMjg2ZjFjNTM2ZDlmZWYxZDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTZrUfmpArA9Wvv3ZdayuTM5HhsH
kLkF7qFCrUf7DLnYnVG3MPGpUK+wJjrMNKDC/vF++3CBKzugFNdRL4irQ/3GlUN3
rWyXs+2COBkrEklc5klv22QOEQJi/1lTyjn21/nwkEjPhFNiJ/Yh9liJRRvmCqk4
Mn8ms1Uy4KP9TyPkEnd54oH+KtgTgPwz4MNiJxi6UGyloLmTfeXhy8vk0W0L71Jv
PqV1g+rygoXEHFp+mrcmAbcpaSUGBwlpttnsXHge0cA7epWkve60zMQ5EIAjaaI7
iHtx1XPdcLI5bofepaEkFbBfT52YuYzgMvX47PVI56vrmXfrkJYrjPscDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMTZr+OBI0DfYb8KG8cU22f7x1GMB8GA1UdIwQY
MBaAFArxI4EANwosBfsGgAr95pBtqvLYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3ZFamdRQTNDaXdGLXdhQUN2M21rRzJxOHRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy85YzFiMDgtYjVhYy00YmJkLWI4YzMt
MGUwZmQwM2IxMTA0LzEvQ3ZFamdRQTNDaXdGLXdhQUN2M21rRzJxOHRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy85YzFiMDgtYjVhYy00YmJkLWI4YzMtMGUwZmQwM2IxMTA0
LzEvQ3ZFamdRQTNDaXdGLXdhQUN2M21rRzJxOHRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYWPqV0v
wsbuITLq4+mm8t/ScqvwVs1aYj20GMua3R8wCOQCkxhRehEgaZlQ6zv8A9y4lK/A
N9jUfc6aM3A+huUxqLLi/5rTJ8nWUts2LnW6V/Srq0dW4z/1ah10Zg4n8HQnxQZ8
cceyTvtKrDvnJWeCSWUkkuM2LhqlEI3fQrLQhdwVXIXZtvV8voQqf3c4KLvQgdrn
IXurt58ggXCox4yxwBhTISDphuvmi2T8f/uHXTU7/W6Or8nZM588pOV1d7zprqRT
8JZIIetE09WwnVXCg2ddyYQzY4uV9wGGtp7sb/1PwjVRZJA0DVCzFZVWMehjwJ5u
V6TICdARScZQrA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:41 2025 by rpki-client