Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
File: 0-2n3wX226CeOefUvex7rg7_urA.mft (raw, json)
Hash identifier: 86K0IUsmsHYp/fvIRQcNrWkPsNQH9uNyYC/p3RygOxA=
Subject key identifier: 53:FA:11:E4:2A:8E:93:8A:B4:69:E8:AA:57:1D:59:8A:3A:38:8D:B5
Authority key identifier: D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
Certificate issuer: /CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Certificate serial: 0194BCA9EDE5EE51EB51E8BD316A542B141C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
Manifest number: 0133
Signing time: Fri 31 Jan 2025 14:00:40 +0000
Manifest this update: Fri 31 Jan 2025 14:00:40 +0000
Manifest next update: Sat 01 Feb 2025 14:00:40 +0000
Files and hashes: 1: 0-2n3wX226CeOefUvex7rg7_urA.crl (hash: JjHjzigDPqpL+5OS3oCNliRoUPFBBk2Ilu7z/WMAn3g=)
2: mFUkKUV2j8Fct1DGbVQJTzcA0ig.roa (hash: bNr/zF64vk+SVTrKPbIdCfqu6Sowa5lS9V4LG/Ns2g0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ed:e5:ee:51:eb:51:e8:bd:31:6a:54:2b:14:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Validity
Not Before: Jan 31 14:00:40 2025 GMT
Not After : Feb 1 14:00:40 2025 GMT
Subject: CN=53fa11e42a8e938ab469e8aa571d598a3a388db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:96:3f:16:a7:60:39:17:93:a7:1c:f0:e5:5c:
28:a8:32:ed:9d:82:11:d1:08:ed:0e:c1:1e:c2:f4:
79:b3:7c:c8:ae:a4:58:a7:f1:b1:8a:9c:05:7f:2e:
84:7e:04:22:ad:a6:58:21:ac:e8:10:a3:83:ff:26:
ad:0b:d6:30:24:1a:47:ee:9d:4c:99:e3:f7:42:cc:
c8:06:33:83:85:bc:cf:5f:98:44:76:8c:36:fd:fb:
8d:34:bb:68:51:8b:07:72:9b:39:26:e6:cf:07:b3:
d5:f2:01:33:10:6a:89:11:ac:2c:ac:68:1a:07:89:
14:5b:16:e7:f4:7d:1c:70:f0:68:85:ae:15:2e:43:
b8:05:80:96:a2:28:96:76:de:82:31:3d:26:22:1c:
40:ec:74:e8:52:60:00:a1:10:ce:70:5a:14:5e:98:
f8:c0:63:be:af:a9:fc:76:e4:05:bf:e8:02:df:fd:
bb:01:b1:47:9c:34:f6:56:5f:35:01:c7:3c:93:22:
1a:bc:0c:76:e1:2d:07:49:fe:6e:bd:e2:32:1f:74:
0c:c6:69:0f:90:a5:89:6a:68:53:b7:58:9d:d0:09:
d1:5f:5a:66:49:12:36:de:cb:e1:13:36:0b:09:2e:
89:5f:95:f3:3c:d8:11:a2:a7:cf:82:53:91:1a:a8:
e4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FA:11:E4:2A:8E:93:8A:B4:69:E8:AA:57:1D:59:8A:3A:38:8D:B5
X509v3 Authority Key Identifier:
keyid:D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:70:99:a8:e1:9a:39:f9:d7:09:58:cf:30:fd:63:8f:1b:81:
a1:2d:89:af:29:26:16:d4:fb:e8:70:cd:7e:47:fd:93:35:6b:
fa:c3:bc:d9:94:d5:69:20:e2:13:c9:38:b9:4c:45:08:dd:97:
8f:21:06:71:8c:22:34:b6:8d:d7:ec:a7:6a:7a:6f:bf:7d:3f:
b6:52:d4:d4:11:26:c2:31:03:0a:d9:bf:30:6c:14:47:40:d0:
a0:8e:5e:1a:41:06:4f:b1:8f:51:c0:43:e4:c3:66:4c:73:f1:
36:24:cf:c8:84:e8:4e:2b:4f:56:72:f0:03:01:71:50:0f:88:
1c:18:9c:6e:ce:5e:47:fe:93:21:c0:51:38:6c:85:02:e8:95:
48:83:d9:7d:f2:b4:46:d6:9b:ed:e9:62:ac:73:94:a8:25:0f:
2f:61:c9:78:ef:2f:a7:f8:1b:73:67:8f:67:85:7d:ae:31:28:
b3:96:0a:8f:18:96:d4:5e:c2:7e:a9:a6:b9:b9:be:93:cc:1e:
69:22:54:9e:86:45:d5:6d:80:07:9f:56:49:6c:63:a7:56:89:
ef:c9:b0:79:72:d0:95:38:26:7e:9b:60:d3:0e:10:5e:6a:75:
0f:3d:4f:1e:fe:cf:12:b8:93:c3:27:3e:71:47:39:ce:93:e2:
83:e2:b7:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qe3l7lHrUei9MWpUKxQcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZWRhN2RmMDVmNmRiYTA5ZTM5ZTdkNGJkZWM3YmFlMGVm
ZmJhYjAwHhcNMjUwMTMxMTQwMDQwWhcNMjUwMjAxMTQwMDQwWjAzMTEwLwYDVQQD
Eyg1M2ZhMTFlNDJhOGU5MzhhYjQ2OWU4YWE1NzFkNTk4YTNhMzg4ZGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZY/FqdgOReTpxzw5VwoqDLtnYIR
0QjtDsEewvR5s3zIrqRYp/GxipwFfy6EfgQiraZYIazoEKOD/yatC9YwJBpH7p1M
meP3QszIBjODhbzPX5hEdow2/fuNNLtoUYsHcps5JubPB7PV8gEzEGqJEawsrGga
B4kUWxbn9H0ccPBoha4VLkO4BYCWoiiWdt6CMT0mIhxA7HToUmAAoRDOcFoUXpj4
wGO+r6n8duQFv+gC3/27AbFHnDT2Vl81Acc8kyIavAx24S0HSf5uveIyH3QMxmkP
kKWJamhTt1id0AnRX1pmSRI23svhEzYLCS6JX5XzPNgRoqfPglORGqjkxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFP6EeQqjpOKtGnoqlcdWYo6OI21MB8GA1UdIwQY
MBaAFNPtp98F9tugnjnn1L3se64O/7qwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMC0ybjN3WDIyNkNlT2VmVXZleDdyZzdfdXJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kYzY0ZjQtY2ZiYS00ZWZkLWI0ZWQt
Njc2YmVkYjE3NDczLzEvMC0ybjN3WDIyNkNlT2VmVXZleDdyZzdfdXJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9kYzY0ZjQtY2ZiYS00ZWZkLWI0ZWQtNjc2YmVkYjE3NDcz
LzEvMC0ybjN3WDIyNkNlT2VmVXZleDdyZzdfdXJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXCZqOGa
OfnXCVjPMP1jjxuBoS2JrykmFtT76HDNfkf9kzVr+sO82ZTVaSDiE8k4uUxFCN2X
jyEGcYwiNLaN1+ynanpvv30/tlLU1BEmwjEDCtm/MGwUR0DQoI5eGkEGT7GPUcBD
5MNmTHPxNiTPyIToTitPVnLwAwFxUA+IHBicbs5eR/6TIcBROGyFAuiVSIPZffK0
Rtab7elirHOUqCUPL2HJeO8vp/gbc2ePZ4V9rjEos5YKjxiW1F7Cfqmmubm+k8we
aSJUnoZF1W2AB59WSWxjp1aJ78mweXLQlTgmfptg0w4QXmp1Dz1PHv7PEriTwyc+
cUc5zpPig+K3RQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:42 2025 by rpki-client