Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
File: 18pTroRCI2dXp4Bm5OIXM_dYQHo.mft (raw, json)
Hash identifier: XefoD1fOZxRir6xztilj2z3pI3i9WEVuRnHn9PZn1Vg=
Subject key identifier: B1:BF:FA:AB:FE:03:E3:09:24:33:ED:6B:1A:AC:60:6A:EA:C5:CB:69
Authority key identifier: D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A
Certificate issuer: /CN=d7ca53ae8442236757a78066e4e21733f758407a
Certificate serial: 0194BBCECAA4429178B5539808CE1637F7A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
Manifest number: 0FB2
Signing time: Fri 31 Jan 2025 10:01:19 +0000
Manifest this update: Fri 31 Jan 2025 10:01:19 +0000
Manifest next update: Sat 01 Feb 2025 10:01:19 +0000
Files and hashes: 1: 18pTroRCI2dXp4Bm5OIXM_dYQHo.crl (hash: 45vf0cSgaF+C44voONEUMLsKLoKouajp1qUlnpQ/mK8=)
2: 38s2EfLKTKzwDnKrug63iitVwN4.roa (hash: e5mS3BLPFSR7Y2uJcSkAUNlVQiD5b7eKpGpMN+urBn0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ca:a4:42:91:78:b5:53:98:08:ce:16:37:f7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7ca53ae8442236757a78066e4e21733f758407a
Validity
Not Before: Jan 31 10:01:19 2025 GMT
Not After : Feb 1 10:01:19 2025 GMT
Subject: CN=b1bffaabfe03e3092433ed6b1aac606aeac5cb69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ab:a3:fc:16:64:10:74:31:64:0a:51:f4:ea:
58:25:a2:7d:c6:29:20:ec:7d:6a:4c:6d:b5:06:e0:
80:5a:16:18:08:27:01:69:d6:49:3d:7a:1f:c6:61:
16:43:5d:7d:39:c8:0d:1e:99:25:33:56:a4:63:81:
65:ff:b1:b5:2d:46:60:35:98:a1:28:26:ea:28:d9:
88:56:2e:d8:2c:1d:c5:71:01:22:48:e8:cb:d0:78:
6d:fe:50:96:44:07:2e:b1:d9:ec:15:9a:0d:c0:8f:
a9:7a:1a:c3:d6:8a:ec:d2:71:99:d4:9e:37:51:5a:
72:1b:d4:92:25:9b:37:ac:2a:32:34:76:5c:5e:ab:
e0:fb:40:3d:b1:81:64:58:26:25:7f:a2:21:12:7f:
50:16:21:e8:e7:32:4c:1a:ed:96:b5:a4:e8:69:09:
69:54:0f:73:bf:e1:25:e1:1f:07:9a:b6:c4:44:0a:
ea:08:00:99:9d:c2:0f:a7:2e:38:53:cb:df:de:bb:
cc:7c:7a:6c:f9:c4:c9:22:87:f5:65:ac:a2:dc:bc:
9b:12:4e:a8:dc:af:9f:4d:9e:21:53:9d:72:8b:42:
d3:9a:d8:3c:b2:bc:3d:5d:57:08:87:57:c7:3b:80:
87:4a:0b:53:da:d1:7a:56:4c:be:e8:c8:76:e5:9e:
a0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BF:FA:AB:FE:03:E3:09:24:33:ED:6B:1A:AC:60:6A:EA:C5:CB:69
X509v3 Authority Key Identifier:
keyid:D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:98:79:41:65:06:fe:a0:54:54:97:13:7b:f4:6e:3a:3a:61:
fb:8e:9a:1d:d4:53:db:25:9e:31:7c:77:b7:af:13:67:bd:33:
97:e1:9b:01:f5:d4:f6:7e:7c:ea:ce:0b:1c:c5:4c:0e:88:99:
70:cb:40:0a:6d:76:4b:af:b8:d7:fb:d4:7f:c7:b8:e4:85:7f:
e0:38:1e:1f:58:cc:80:a6:bc:3d:fb:62:81:10:2d:56:f1:bf:
ba:b7:ca:7d:d2:c5:88:a9:6b:dc:77:a6:ba:7c:30:4d:8a:9f:
db:a2:8b:21:e8:31:85:ff:a1:cd:ae:6b:51:64:b6:e3:d4:de:
5f:6e:1b:15:c8:6f:80:4f:12:df:59:d7:78:44:fe:60:80:02:
48:39:d3:c2:62:aa:8b:ea:db:cc:a7:52:fb:b9:88:6c:e3:af:
67:98:ae:8c:7b:8b:3c:0c:96:61:6f:b0:fc:8b:e2:c3:cf:c3:
aa:df:52:bd:fc:0f:e1:3b:e3:9c:c4:8f:ea:04:0d:1d:78:54:
43:45:4a:85:65:6a:d8:ad:fd:e0:5e:af:5a:87:f5:c9:64:9e:
d0:d3:ce:25:ee:6a:85:b7:02:b5:0b:79:cd:95:93:ea:2a:ee:
b3:f7:03:27:e1:77:17:88:14:71:87:7d:90:cc:1f:b0:43:ec:
ae:89:b5:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zsqkQpF4tVOYCM4WN/eiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Y2E1M2FlODQ0MjIzNjc1N2E3ODA2NmU0ZTIxNzMzZjc1
ODQwN2EwHhcNMjUwMTMxMTAwMTE5WhcNMjUwMjAxMTAwMTE5WjAzMTEwLwYDVQQD
EyhiMWJmZmFhYmZlMDNlMzA5MjQzM2VkNmIxYWFjNjA2YWVhYzVjYjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKuj/BZkEHQxZApR9OpYJaJ9xikg
7H1qTG21BuCAWhYYCCcBadZJPXofxmEWQ119OcgNHpklM1akY4Fl/7G1LUZgNZih
KCbqKNmIVi7YLB3FcQEiSOjL0Hht/lCWRAcusdnsFZoNwI+pehrD1ors0nGZ1J43
UVpyG9SSJZs3rCoyNHZcXqvg+0A9sYFkWCYlf6IhEn9QFiHo5zJMGu2WtaToaQlp
VA9zv+El4R8HmrbERArqCACZncIPpy44U8vf3rvMfHps+cTJIof1Zayi3LybEk6o
3K+fTZ4hU51yi0LTmtg8srw9XVcIh1fHO4CHSgtT2tF6Vky+6Mh25Z6gTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLG/+qv+A+MJJDPtaxqsYGrqxctpMB8GA1UdIwQY
MBaAFNfKU66EQiNnV6eAZuTiFzP3WEB6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMThwVHJvUkNJMmRYcDRCbTVPSVhNX2RZUUhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS82YjE2OWQtN2YxZi00MjE0LWEyNWIt
OGM0OTgwNzc1NzhmLzEvMThwVHJvUkNJMmRYcDRCbTVPSVhNX2RZUUhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS82YjE2OWQtN2YxZi00MjE0LWEyNWItOGM0OTgwNzc1Nzhm
LzEvMThwVHJvUkNJMmRYcDRCbTVPSVhNX2RZUUhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5h5QWUG
/qBUVJcTe/RuOjph+46aHdRT2yWeMXx3t68TZ70zl+GbAfXU9n586s4LHMVMDoiZ
cMtACm12S6+41/vUf8e45IV/4DgeH1jMgKa8PftigRAtVvG/urfKfdLFiKlr3Hem
unwwTYqf26KLIegxhf+hza5rUWS249TeX24bFchvgE8S31nXeET+YIACSDnTwmKq
i+rbzKdS+7mIbOOvZ5iujHuLPAyWYW+w/Iviw8/Dqt9SvfwP4TvjnMSP6gQNHXhU
Q0VKhWVq2K394F6vWof1yWSe0NPOJe5qhbcCtQt5zZWT6irus/cDJ+F3F4gUcYd9
kMwfsEPsrom1eQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:09 2025 by rpki-client