Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
File: debiEsY3QbhblXx8l_fFj1teEzU.mft (raw, json)
Hash identifier: FnbY0hnbfkpraKXn+JiOAQWYlzz7JOB8QS+j8PCzjRE=
Subject key identifier: A1:0E:D0:AB:00:0C:45:7A:90:49:3C:9C:35:3C:F3:A2:6D:FA:90:A3
Authority key identifier: 75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35
Certificate issuer: /CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335
Certificate serial: 0194BC3C833CA996F5FBD03320D9F44622B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:01:09 +0000
Manifest this update: Fri 31 Jan 2025 12:01:09 +0000
Manifest next update: Sat 01 Feb 2025 12:01:09 +0000
Files and hashes: 1: bhZ8f0F77iFP_2rwZL2z4iLQgpA.roa (hash: TT4ui96hPVB8JuhJPLD2IoWX5TtqeZQlOzkrZUeBR/0=)
2: debiEsY3QbhblXx8l_fFj1teEzU.crl (hash: 5fVdNPH+cHSnipQ9XlWilLHe5S40Q9vKBhR9uXeWw44=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:83:3c:a9:96:f5:fb:d0:33:20:d9:f4:46:22:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335
Validity
Not Before: Jan 31 12:01:09 2025 GMT
Not After : Feb 1 12:01:09 2025 GMT
Subject: CN=a10ed0ab000c457a90493c9c353cf3a26dfa90a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:58:09:29:94:19:55:66:72:e9:b3:45:69:b4:
ab:b4:40:00:63:4d:fe:b2:6b:04:9e:4c:f9:aa:55:
72:76:e9:19:81:84:35:23:ec:c1:d6:a2:08:ce:99:
2d:06:ac:0c:db:b8:a3:57:b7:de:5d:66:aa:f1:d7:
b6:fe:82:5d:16:71:2b:c9:5d:3b:2d:b6:09:8f:93:
b5:30:ba:be:22:d1:85:39:ae:c5:20:09:88:93:d2:
23:ea:b0:6f:71:18:70:5c:7a:33:c7:93:8a:d9:2b:
78:5b:f1:f6:b5:57:10:01:6a:04:1e:90:14:d1:57:
b7:3c:fb:6c:10:6d:26:00:d8:30:5d:3a:57:e3:f0:
f8:68:28:48:d8:dc:4f:1e:2f:ab:3a:ef:6f:76:be:
97:a9:02:d0:1d:3b:5a:f5:a9:d3:e5:93:dd:9a:b2:
a5:35:95:00:4b:a8:13:4c:e6:f8:c3:6f:b2:7e:70:
05:42:6c:bb:a1:85:a3:36:c1:70:3e:3b:d7:99:81:
8e:d2:b8:ff:6e:23:8d:72:cb:3f:4a:0d:2e:e2:53:
b3:22:e3:a4:9d:3a:f2:b8:04:26:c5:80:b9:d5:0e:
e1:62:01:18:76:0f:23:e2:5f:93:aa:b9:e6:7a:06:
d3:17:6f:19:c6:3b:39:2c:6e:87:2b:ab:e4:94:dd:
d0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0E:D0:AB:00:0C:45:7A:90:49:3C:9C:35:3C:F3:A2:6D:FA:90:A3
X509v3 Authority Key Identifier:
keyid:75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:7d:ca:e6:17:90:df:f4:a2:c3:d7:cb:b8:20:15:35:e5:1f:
44:20:73:56:d8:97:bb:20:75:93:19:d4:b8:3a:93:58:c9:c1:
6b:a1:4b:00:4e:7b:2d:30:d0:08:a2:d5:61:73:9c:f3:c2:fc:
79:7d:fd:74:94:e8:dc:e1:89:58:a5:07:0a:5b:3b:8c:8d:fb:
44:5b:5a:4f:7c:37:63:21:09:1b:d2:2f:f0:f6:e0:2b:d3:5c:
16:95:50:2a:73:d1:52:8a:df:a6:9f:15:99:66:f1:67:57:90:
a4:01:18:25:c9:43:aa:2c:01:7d:42:cf:8e:15:be:b8:4d:e4:
a4:48:db:b1:83:97:76:4c:ca:80:98:e2:f6:4e:80:5f:90:58:
ae:fa:65:e5:67:be:cc:2e:5f:68:2e:af:89:9d:a0:ab:ab:a8:
57:dc:97:b7:47:3d:68:68:9b:06:81:ca:39:d9:01:a8:ef:7b:
e1:92:43:c6:b3:45:0a:cf:cd:ec:4e:4d:33:d2:7e:3f:0c:ce:
93:42:a9:ba:6c:47:e9:e3:cd:83:20:f9:fa:de:de:f0:8c:61:
dd:91:75:e9:37:32:ed:42:f6:d2:e3:d2:3f:7c:68:08:03:25:
92:b6:4f:e1:6f:85:3e:67:c0:40:e0:07:f2:9c:36:d2:3b:57:
8c:7e:41:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PIM8qZb1+9AzINn0RiK1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZTZlMjEyYzYzNzQxYjg1Yjk1N2M3Yzk3ZjdjNThmNWI1
ZTEzMzUwHhcNMjUwMTMxMTIwMTA5WhcNMjUwMjAxMTIwMTA5WjAzMTEwLwYDVQQD
EyhhMTBlZDBhYjAwMGM0NTdhOTA0OTNjOWMzNTNjZjNhMjZkZmE5MGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFgJKZQZVWZy6bNFabSrtEAAY03+
smsEnkz5qlVydukZgYQ1I+zB1qIIzpktBqwM27ijV7feXWaq8de2/oJdFnEryV07
LbYJj5O1MLq+ItGFOa7FIAmIk9Ij6rBvcRhwXHozx5OK2St4W/H2tVcQAWoEHpAU
0Ve3PPtsEG0mANgwXTpX4/D4aChI2NxPHi+rOu9vdr6XqQLQHTta9anT5ZPdmrKl
NZUAS6gTTOb4w2+yfnAFQmy7oYWjNsFwPjvXmYGO0rj/biONcss/Sg0u4lOzIuOk
nTryuAQmxYC51Q7hYgEYdg8j4l+TqrnmegbTF28Zxjs5LG6HK6vklN3QuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEO0KsADEV6kEk8nDU886Jt+pCjMB8GA1UdIwQY
MBaAFHXm4hLGN0G4W5V8fJf3xY9bXhM1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGViaUVzWTNRYmhibFh4OGxfZkZqMXRlRXpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8zMzNlYTYtNTg0YS00NzQ5LTgzYzct
MDNkNzQ2MWViNThhLzEvZGViaUVzWTNRYmhibFh4OGxfZkZqMXRlRXpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8zMzNlYTYtNTg0YS00NzQ5LTgzYzctMDNkNzQ2MWViNThh
LzEvZGViaUVzWTNRYmhibFh4OGxfZkZqMXRlRXpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz33K5heQ
3/Siw9fLuCAVNeUfRCBzVtiXuyB1kxnUuDqTWMnBa6FLAE57LTDQCKLVYXOc88L8
eX39dJTo3OGJWKUHCls7jI37RFtaT3w3YyEJG9Iv8PbgK9NcFpVQKnPRUorfpp8V
mWbxZ1eQpAEYJclDqiwBfULPjhW+uE3kpEjbsYOXdkzKgJji9k6AX5BYrvpl5We+
zC5faC6viZ2gq6uoV9yXt0c9aGibBoHKOdkBqO974ZJDxrNFCs/N7E5NM9J+PwzO
k0KpumxH6ePNgyD5+t7e8Ixh3ZF16Tcy7UL20uPSP3xoCAMlkrZP4W+FPmfAQOAH
8pw20jtXjH5Btw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:20 2025 by rpki-client