Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json)
Hash identifier: 7+hCszj59MG9MCFs7Cfqnno6BH8Ge3saj1Yw19ob7z0=
Subject key identifier: CE:41:89:5C:62:38:15:01:59:F4:6F:5C:3C:A1:63:7F:B2:90:82:84
Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Certificate serial: 0194BBCE338B2BB8BD52AC6DC5F892F0D851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
Manifest number: 02D5
Signing time: Fri 31 Jan 2025 10:00:40 +0000
Manifest this update: Fri 31 Jan 2025 10:00:40 +0000
Manifest next update: Sat 01 Feb 2025 10:00:40 +0000
Files and hashes: 1: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: nLN+erufUATEQ1jAAxXersv0HJtHJK5iMVZr80q69PQ=)
2: 3NKK36OzbyCVvAW6QnBXCk0vC-E.roa (hash: gHjjORGkqgV1v9V5gvG+Gu8C2uJp9VohURGk9hhqXCY=)
3: DWnysDNu_v7yNNJ1aIjDqps-5LM.roa (hash: JPD53SzaSyMUMEmsWnAbUrfvGclz72WlfPM6q3RIsCk=)
4: ELUkdIaDmHCzdJ1jKF6atOwpQrA.roa (hash: v8cCBtVVLi5zxTyJOmDs0jN5Ap8cbQpfbXWFNf4bxUs=)
5: Ogq2Lp1P7Q1AeCwL2AQLdK9KBzM.roa (hash: wCH8HPVc1f++ByfpIUeIUcWNys3iCfeb5u+E+Q/Dfgk=)
6: f7lR2qdNzNhMHZctwhySnx52rh8.roa (hash: uc/3dtcmzwA7XSJMfP+6pPiS8XT6tGwBC3iJr2Zlmhg=)
7: kcbMP36K9zR3OAqVvtstfD6Qc1E.roa (hash: kKzo7D93m1wQVJ52FPItkIqrFxN6fMh/dyqt/5KaXWw=)
8: p8WEIwXo7Clnw_lkUVuyGNIeOvM.roa (hash: Ur1mz6OTaNWSYai5Ah9bPYej/Ck8pv/XZW+9ZEpR3q8=)
9: qJyacpBlbWQwXSv5l4Lxk3gU7sA.roa (hash: A2lDMN5zFwbdpcFJxDl5a8uW8CFGyTpmaP19LpWfeHE=)
10: seHlK4yoKBdb62tkkuXaLzV2yfg.roa (hash: ScsG6hNfwDAK7ZOi0XZluqhuLOKsE23/VLUsA8TDRFE=)
11: wBcaC1_PamN7lirmMN3fzCp6jH4.roa (hash: G/3j6WArnTAj7/DCB5dCgU40hqdUmgoP9O96RyuFd1M=)
12: xQ1rwm6oO8jHA9kZhQvVDEfMToU.roa (hash: rR/azYUh2GUL8HTdYkb3GDWX8S5vRgxNHhornEovZ9o=)
13: xdj8segZXoYSOVijtSVOE4qht7w.roa (hash: 5eHZe22OVB3I0C6Qc/P2mEKiDtOXLMok0XKzDQuouvU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:33:8b:2b:b8:bd:52:ac:6d:c5:f8:92:f0:d8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Validity
Not Before: Jan 31 10:00:40 2025 GMT
Not After : Feb 1 10:00:40 2025 GMT
Subject: CN=ce41895c6238150159f46f5c3ca1637fb2908284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6e:55:b1:5a:4e:bb:29:0b:8a:3f:e3:e6:85:
94:f4:ba:b7:0d:a5:a8:1a:bc:3a:7f:4d:b7:e3:06:
61:9d:d6:a9:3c:dd:7e:d4:9f:1e:99:4a:8c:d3:19:
d4:28:fa:22:93:ed:b3:48:4e:6f:94:34:a9:50:a1:
a0:b9:1c:2d:ad:a9:ea:1c:5b:f2:e6:77:17:0a:4f:
b8:7b:79:83:d3:82:27:7c:b2:a3:24:97:5d:3c:f9:
d8:ab:52:a0:ac:10:4e:78:6b:5e:8d:96:65:a7:1b:
f1:46:37:49:68:0f:dc:1e:a3:1c:69:25:d7:45:79:
45:b4:e2:b1:bf:12:60:c4:0c:a5:fd:47:9f:2f:53:
76:e0:8f:19:52:5c:58:70:27:8b:95:23:36:e8:ff:
47:fd:65:cc:22:d7:bf:e8:e3:4b:e6:f0:41:4e:0a:
9d:07:a9:ed:1e:8b:61:ed:f1:f8:80:5a:ed:83:ca:
61:de:27:54:63:a2:e8:8e:d8:a5:e0:77:64:43:a1:
80:3d:2c:71:f0:7b:6a:2d:92:29:b6:e6:a1:5b:47:
ab:b1:21:da:6b:eb:0a:34:e8:73:46:20:4e:fc:45:
48:7b:b5:b6:98:78:05:70:93:3b:66:b4:c2:bc:b1:
11:e6:3e:b4:1f:48:d3:d5:84:e0:c1:31:b2:a1:1f:
1a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:41:89:5C:62:38:15:01:59:F4:6F:5C:3C:A1:63:7F:B2:90:82:84
X509v3 Authority Key Identifier:
keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2c:0e:e9:11:58:c2:5a:73:16:21:c3:4d:7a:0e:1c:37:25:
96:db:6b:06:b7:c2:6a:eb:4d:84:77:10:90:e1:e0:84:0a:28:
12:25:62:3e:60:5e:26:99:81:b1:e3:87:61:25:35:c5:54:e5:
cd:d7:9c:ba:08:59:5f:e8:6a:83:c2:d0:a1:c0:3c:cc:34:19:
a2:e1:7a:c8:13:2f:89:ca:53:83:a9:10:c6:d3:b4:33:0e:16:
12:13:59:06:7e:42:e6:3a:f2:97:28:86:29:ce:0c:fa:80:c3:
74:ba:06:36:36:d5:e9:81:68:2a:10:dc:d7:1f:52:c3:b1:1b:
c3:cc:86:80:24:9e:cb:ed:01:ce:ee:54:ac:d1:1a:40:95:88:
f4:44:74:f8:b1:d4:99:80:4a:cf:9f:d8:67:84:2b:6c:94:ae:
b2:be:72:a9:0c:46:e2:32:ea:c9:54:0b:8f:0a:2e:c2:e2:a6:
f3:31:3a:0b:b5:f5:ce:d8:ee:98:92:cf:b9:4d:9a:fd:64:b4:
c0:2b:96:8c:14:c3:0b:a8:fd:9d:ed:16:ae:7a:fc:ed:3d:cc:
93:65:41:41:ee:5d:93:a1:8a:18:6f:f6:fc:6c:5b:77:b3:8d:
08:9e:4b:f8:9e:d8:54:5d:7b:13:49:e5:d1:b9:1e:ed:d7:ba:
23:55:d2:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zjOLK7i9UqxtxfiS8NhRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy
MDdmZDIwHhcNMjUwMTMxMTAwMDQwWhcNMjUwMjAxMTAwMDQwWjAzMTEwLwYDVQQD
EyhjZTQxODk1YzYyMzgxNTAxNTlmNDZmNWMzY2ExNjM3ZmIyOTA4Mjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG5VsVpOuykLij/j5oWU9Lq3DaWo
Grw6f0234wZhndapPN1+1J8emUqM0xnUKPoik+2zSE5vlDSpUKGguRwtranqHFvy
5ncXCk+4e3mD04InfLKjJJddPPnYq1KgrBBOeGtejZZlpxvxRjdJaA/cHqMcaSXX
RXlFtOKxvxJgxAyl/UefL1N24I8ZUlxYcCeLlSM26P9H/WXMIte/6ONL5vBBTgqd
B6ntHoth7fH4gFrtg8ph3idUY6Lojtil4HdkQ6GAPSxx8HtqLZIptuahW0ersSHa
a+sKNOhzRiBO/EVIe7W2mHgFcJM7ZrTCvLER5j60H0jT1YTgwTGyoR8a+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5BiVxiOBUBWfRvXDyhY3+ykIKEMB8GA1UdIwQY
MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt
MTVmMTNlM2Y3ZDg1LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1
LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSwO6RFY
wlpzFiHDTXoOHDcllttrBrfCautNhHcQkOHghAooEiViPmBeJpmBseOHYSU1xVTl
zdecughZX+hqg8LQocA8zDQZouF6yBMvicpTg6kQxtO0Mw4WEhNZBn5C5jrylyiG
Kc4M+oDDdLoGNjbV6YFoKhDc1x9Sw7Ebw8yGgCSey+0Bzu5UrNEaQJWI9ER0+LHU
mYBKz5/YZ4QrbJSusr5yqQxG4jLqyVQLjwouwuKm8zE6C7X1ztjumJLPuU2a/WS0
wCuWjBTDC6j9ne0Wrnr87T3Mk2VBQe5dk6GKGG/2/Gxbd7ONCJ5L+J7YVF17E0nl
0bke7de6I1XS6A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:30 2025 by rpki-client