Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
File: 10zp2eGKKooGy02bCLWc12siEYQ.mft (raw, json)
Hash identifier: NPkp27hh7ixGnjaKNqLnATaKOnhFiv/SdFA862Yb5HM=
Subject key identifier: 38:74:4C:02:B0:C1:BB:28:CC:61:B9:FC:4C:9E:2B:9B:4B:15:7D:27
Authority key identifier: D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84
Certificate issuer: /CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
Certificate serial: 0194BC3C3B5090CF66710F507A6DBD0D675C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: 10zp2eGKKooGy02bCLWc12siEYQ.crl (hash: h0rZofMLDMo/iwDPVHbv/dgrObNuOtM0g1n+wTjdomc=)
2: ukTm-wxzEJj-s_OEsyy8V9c_Wr4.roa (hash: fj9aOH6SJjD+OTCiFFLafnYvA1jJNlZv9daAJcHZMJs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3b:50:90:cf:66:71:0f:50:7a:6d:bd:0d:67:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=38744c02b0c1bb28cc61b9fc4c9e2b9b4b157d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f9:ec:cd:32:a5:57:f1:7b:49:84:8e:98:da:
0b:ae:eb:29:e0:a6:2c:50:9c:b3:2f:34:5e:0c:dc:
f1:7d:01:55:0f:08:82:7e:89:38:be:3f:2d:46:43:
02:c1:54:e5:ca:6a:78:7f:8e:bb:58:72:28:3f:40:
fc:86:24:56:95:59:9d:60:1f:6a:45:91:a9:cf:bc:
f1:27:35:e4:a5:f4:c3:04:a2:35:be:f4:91:b6:a5:
43:68:56:f5:a8:17:86:22:42:1b:73:1d:23:7c:d4:
fc:bb:8e:40:9c:64:31:a5:04:33:53:b3:6e:ef:60:
b5:72:f8:45:c7:6c:e1:dc:1e:dd:0f:25:2f:f5:51:
e1:b4:dc:15:af:06:f3:2b:45:8b:58:6f:be:70:b1:
b9:c0:76:8d:a0:29:f3:6a:2e:28:0d:4d:09:ce:90:
e8:6f:f0:fd:a8:7d:69:cd:c8:a0:8e:32:59:f2:2e:
3f:0a:2f:2d:80:dc:f4:9d:e8:72:eb:5a:4f:9f:73:
34:e4:c8:48:f9:91:5e:5a:ae:70:fb:22:b3:8a:3c:
6f:db:84:ab:70:cb:bf:a7:8f:89:14:aa:b2:42:4d:
ba:45:1a:93:a8:5e:b6:ea:f1:f1:de:81:dd:ae:72:
37:0d:6c:6b:f4:70:44:95:85:df:74:94:ed:db:be:
da:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:74:4C:02:B0:C1:BB:28:CC:61:B9:FC:4C:9E:2B:9B:4B:15:7D:27
X509v3 Authority Key Identifier:
keyid:D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:73:9d:38:ae:44:0b:48:4c:5e:39:b1:ed:f0:89:cb:ab:5d:
79:50:c4:55:c4:8b:b1:08:01:43:31:67:01:14:8e:31:68:20:
ee:0a:83:32:5b:6c:b9:0d:b1:03:86:c8:da:7d:d9:d0:94:12:
1f:e6:de:8a:4d:5f:89:3c:85:e3:db:74:92:42:ce:58:c7:fd:
a7:a8:2a:d8:84:73:76:79:4f:a0:69:8b:8e:13:67:86:1d:d7:
db:2c:1d:c5:e4:92:20:64:0d:d0:20:44:db:6d:a9:0b:10:72:
d7:23:83:92:ab:c5:b9:ce:ad:ca:11:35:ac:66:4d:15:97:7a:
d5:97:8e:14:55:9e:4d:22:66:46:84:e9:45:e5:cd:8c:a2:c6:
bd:20:8f:20:63:47:97:da:51:4e:e1:eb:02:fa:e7:38:1a:fd:
c8:82:9c:0e:f3:56:4a:ee:df:42:89:40:fd:0e:81:52:13:37:
53:cc:43:61:96:7d:db:23:fa:61:dc:aa:7d:76:b8:1c:5a:bc:
e9:cc:a5:7f:13:03:fc:90:69:f2:5b:df:69:67:4a:e8:ca:9e:
11:98:78:be:37:ca:c1:9b:41:31:4b:4c:e6:57:96:da:54:48:
a9:f6:76:39:07:7d:34:cc:f3:1f:90:be:35:93:bc:9f:e0:91:
8d:8b:34:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PDtQkM9mcQ9Qem29DWdcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NGNlOWQ5ZTE4YTJhOGEwNmNiNGQ5YjA4YjU5Y2Q3NmIy
MjExODQwHhcNMjUwMTMxMTIwMDUxWhcNMjUwMjAxMTIwMDUxWjAzMTEwLwYDVQQD
EygzODc0NGMwMmIwYzFiYjI4Y2M2MWI5ZmM0YzllMmI5YjRiMTU3ZDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvnszTKlV/F7SYSOmNoLrusp4KYs
UJyzLzReDNzxfQFVDwiCfok4vj8tRkMCwVTlymp4f467WHIoP0D8hiRWlVmdYB9q
RZGpz7zxJzXkpfTDBKI1vvSRtqVDaFb1qBeGIkIbcx0jfNT8u45AnGQxpQQzU7Nu
72C1cvhFx2zh3B7dDyUv9VHhtNwVrwbzK0WLWG++cLG5wHaNoCnzai4oDU0JzpDo
b/D9qH1pzcigjjJZ8i4/Ci8tgNz0nehy61pPn3M05MhI+ZFeWq5w+yKzijxv24Sr
cMu/p4+JFKqyQk26RRqTqF626vHx3oHdrnI3DWxr9HBElYXfdJTt277aHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDh0TAKwwbsozGG5/EyeK5tLFX0nMB8GA1UdIwQY
MBaAFNdM6dnhiiqKBstNmwi1nNdrIhGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTB6cDJlR0tLb29HeTAyYkNMV2MxMnNpRVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lZDVjMWUtMmQ1Zi00MjIyLWJkYzct
NjNiOTUyNDBkNzQ1LzEvMTB6cDJlR0tLb29HeTAyYkNMV2MxMnNpRVlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9lZDVjMWUtMmQ1Zi00MjIyLWJkYzctNjNiOTUyNDBkNzQ1
LzEvMTB6cDJlR0tLb29HeTAyYkNMV2MxMnNpRVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnOdOK5E
C0hMXjmx7fCJy6tdeVDEVcSLsQgBQzFnARSOMWgg7gqDMltsuQ2xA4bI2n3Z0JQS
H+beik1fiTyF49t0kkLOWMf9p6gq2IRzdnlPoGmLjhNnhh3X2ywdxeSSIGQN0CBE
222pCxBy1yODkqvFuc6tyhE1rGZNFZd61ZeOFFWeTSJmRoTpReXNjKLGvSCPIGNH
l9pRTuHrAvrnOBr9yIKcDvNWSu7fQolA/Q6BUhM3U8xDYZZ92yP6YdyqfXa4HFq8
6cylfxMD/JBp8lvfaWdK6MqeEZh4vjfKwZtBMUtM5leW2lRIqfZ2OQd9NMzzH5C+
NZO8n+CRjYs0gw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:28 2025 by rpki-client