Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
File: cTm8XO866t8yYT99lZ7I5Ap0KRg.mft (raw, json)
Hash identifier: B9jnBYggUai1CgAiUG0EjcB8Xay3VitA3rod3APB+rA=
Subject key identifier: A7:C0:AD:5D:5D:4A:30:D7:DF:F8:3B:0B:74:30:B3:C6:8A:1E:80:41
Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
Certificate issuer: /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Certificate serial: 0194BD85AF69111DFB3AAA2B18A8DA28313B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
Manifest number: 0A92
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: 1bCVWoklxu9pgUWQ1mLHB-EXkFA.roa (hash: D3wGeYBSZH8FYHWMq5xGTReS6aaUmIPr/PoC2v0b+3Q=)
2: cTm8XO866t8yYT99lZ7I5Ap0KRg.crl (hash: Nqgmn282tBpWIIDXfoq0+y28HY8ex/9zW3NKJ7Xyfb0=)
3: vpqI0SPiMCscv2APIfDksYTh41I.roa (hash: hkscOp/XUtYy+TgoXBDOQozFrFzTsJ23rQpXU2E0uBw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:af:69:11:1d:fb:3a:aa:2b:18:a8:da:28:31:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=a7c0ad5d5d4a30d7dff83b0b7430b3c68a1e8041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5f:a4:9c:7c:30:ec:e6:ca:d5:89:37:5e:3b:
7c:38:8f:10:dc:6e:b1:46:36:fa:06:5d:47:36:76:
68:a1:70:4b:3a:7e:26:08:54:28:af:22:68:9f:53:
f0:32:92:a9:7f:09:c4:02:73:ed:21:f9:24:f1:98:
ac:9c:66:a5:ed:6d:bc:48:4c:68:0c:7c:97:50:5d:
96:0e:9b:f8:4e:4c:35:8d:4f:4e:c0:28:62:22:be:
2f:c2:10:64:2c:9a:a2:ca:16:82:5e:8b:61:09:55:
ac:5e:68:45:b9:a6:d8:04:1b:95:e5:a5:c7:63:05:
be:95:7d:53:e4:55:c5:61:df:01:5f:73:76:b3:b1:
61:f9:bd:19:fb:27:9a:58:52:0d:71:2b:53:cc:58:
c9:02:8c:67:8a:51:73:eb:02:a0:cd:02:26:ae:c6:
c6:8f:8e:49:16:bc:64:c0:1b:35:ac:35:32:ea:6b:
e2:c1:a3:2f:d2:b3:54:e7:26:19:dc:dd:f2:83:80:
66:66:9e:e7:5f:6f:2c:36:c4:2b:fc:31:dd:33:bc:
4b:22:c7:00:14:91:25:ae:09:ad:c1:20:1d:df:ab:
53:14:3f:74:52:ec:00:60:3a:ae:fc:b0:5d:8f:cb:
a1:91:69:00:24:f9:04:6c:9f:6f:e3:0f:11:a4:75:
7a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C0:AD:5D:5D:4A:30:D7:DF:F8:3B:0B:74:30:B3:C6:8A:1E:80:41
X509v3 Authority Key Identifier:
keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:51:4b:23:f2:35:e9:66:d6:63:d4:5e:e5:b5:c3:65:14:95:
27:fc:1e:ce:b5:32:da:43:f7:ee:49:b2:a8:3b:c9:90:56:50:
69:2f:56:bc:b3:c2:42:3f:5e:a6:00:36:54:7d:84:73:47:11:
53:0f:2e:8b:26:47:19:9d:1e:de:8b:a5:d3:60:2f:c8:24:e1:
07:e7:53:96:99:2c:eb:2e:5f:f5:a7:32:dd:0b:28:d6:cf:d4:
06:53:b8:c2:e4:08:59:4e:72:69:e1:d3:f2:d6:b2:30:c7:2d:
8f:cc:fb:01:54:a7:a5:2c:a1:ac:8e:a6:b9:0c:22:f4:49:e7:
1b:c4:81:68:c3:0b:13:a1:28:a0:22:6a:8e:d6:d3:51:ba:89:
8d:fe:f6:ff:bf:33:fe:c1:5d:db:7b:f5:92:23:f2:77:e3:14:
ce:ab:53:53:fa:96:ee:6a:40:aa:09:dc:5e:ed:54:ff:ed:b2:
63:34:ac:51:fa:8b:fe:ec:be:62:d6:75:05:ea:c6:26:1d:69:
53:64:8a:a8:e2:7c:27:2e:10:3f:c3:44:77:16:62:52:ee:bb:
b4:df:6c:43:b5:7d:f2:39:eb:eb:dd:a4:a4:3c:34:9c:38:c0:
e5:0f:d6:de:53:9c:da:6c:2f:79:f3:0f:9d:74:99:b3:a0:5e:
62:78:1d:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9ha9pER37OqorGKjaKDE7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMzliYzVjZWYzYWVhZGYzMjYxM2Y3ZDk1OWVjOGU0MGE3
NDI5MTgwHhcNMjUwMTMxMTgwMDQyWhcNMjUwMjAxMTgwMDQyWjAzMTEwLwYDVQQD
EyhhN2MwYWQ1ZDVkNGEzMGQ3ZGZmODNiMGI3NDMwYjNjNjhhMWU4MDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F+knHww7ObK1Yk3Xjt8OI8Q3G6x
Rjb6Bl1HNnZooXBLOn4mCFQoryJon1PwMpKpfwnEAnPtIfkk8ZisnGal7W28SExo
DHyXUF2WDpv4Tkw1jU9OwChiIr4vwhBkLJqiyhaCXothCVWsXmhFuabYBBuV5aXH
YwW+lX1T5FXFYd8BX3N2s7Fh+b0Z+yeaWFINcStTzFjJAoxnilFz6wKgzQImrsbG
j45JFrxkwBs1rDUy6mviwaMv0rNU5yYZ3N3yg4BmZp7nX28sNsQr/DHdM7xLIscA
FJElrgmtwSAd36tTFD90UuwAYDqu/LBdj8uhkWkAJPkEbJ9v4w8RpHV6FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfArV1dSjDX3/g7C3Qws8aKHoBBMB8GA1UdIwQY
MBaAFHE5vFzvOurfMmE/fZWeyOQKdCkYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1RtOFhPODY2dDh5WVQ5OWxaN0k1QXAwS1JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jYWU2NTItYTIxOC00MmY2LTk3YWYt
Nzk0YjI4ZWIxNmM1LzEvY1RtOFhPODY2dDh5WVQ5OWxaN0k1QXAwS1JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9jYWU2NTItYTIxOC00MmY2LTk3YWYtNzk0YjI4ZWIxNmM1
LzEvY1RtOFhPODY2dDh5WVQ5OWxaN0k1QXAwS1JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR1FLI/I1
6WbWY9Re5bXDZRSVJ/wezrUy2kP37kmyqDvJkFZQaS9WvLPCQj9epgA2VH2Ec0cR
Uw8uiyZHGZ0e3oul02AvyCThB+dTlpks6y5f9acy3Qso1s/UBlO4wuQIWU5yaeHT
8tayMMctj8z7AVSnpSyhrI6muQwi9EnnG8SBaMMLE6EooCJqjtbTUbqJjf72/78z
/sFd23v1kiPyd+MUzqtTU/qW7mpAqgncXu1U/+2yYzSsUfqL/uy+YtZ1BerGJh1p
U2SKqOJ8Jy4QP8NEdxZiUu67tN9sQ7V98jnr692kpDw0nDjA5Q/W3lOc2mwvefMP
nXSZs6BeYngdDQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:34:57 2025 by rpki-client