Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
File: Cq4aYFi73NCDUGjjtPneUfK9kFc.mft (raw, json)
Hash identifier: BlXPJFTGPyA6h3H+QW0M3BCkeAeXGg1ZM4tgUgA6Wmk=
Subject key identifier: F5:26:FB:78:E7:B8:1F:43:A4:9C:AC:26:9B:A6:05:44:93:57:3F:0D
Authority key identifier: 0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
Certificate issuer: /CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Certificate serial: 0194BC3C11DD76CC162B72EFF598B7BDB1C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: 1-wt4KP4ZyrvPLe15q7PV87j5ouc.roa (hash: YZnIrYBAzViRIOg0Z2wubi6eZGwgwJHXDai7+0T2WrY=)
2: Cq4aYFi73NCDUGjjtPneUfK9kFc.crl (hash: lObSpVoyR3nPAYvT2Ia1kS3/Vd4I3CTj8PAMTFvcAck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:11:dd:76:cc:16:2b:72:ef:f5:98:b7:bd:b1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=f526fb78e7b81f43a49cac269ba6054493573f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:08:71:68:98:40:f6:c2:40:57:40:43:06:
8c:84:8e:a7:88:1a:ad:56:9a:ee:54:55:87:57:5a:
a0:9e:f1:a9:94:a5:5b:79:90:c9:0a:a4:15:0c:f8:
4b:86:3f:7b:fe:01:65:7f:39:34:f1:bd:e4:ec:4d:
a3:20:89:69:c1:df:c4:94:30:1c:ef:54:f9:fa:bd:
ea:f1:ec:e8:d3:82:02:df:48:be:ce:9d:97:e6:4c:
62:1f:be:0e:16:56:70:9e:e5:f1:75:26:c4:26:1c:
c0:5c:d9:cc:f1:b0:49:c8:1c:49:9e:9c:0e:24:44:
ac:70:92:c8:75:97:f4:74:37:48:09:3d:b5:71:76:
6a:5b:47:62:46:25:2b:67:4d:76:8a:06:c2:60:9d:
41:aa:b5:48:70:b7:8f:a9:9c:60:c7:35:8f:58:d9:
47:59:4b:4f:15:20:f4:3a:92:85:eb:63:b6:54:a1:
29:7d:b4:d7:ef:e5:72:eb:bb:82:f5:b9:98:24:8a:
49:b6:97:95:f8:85:da:db:05:3f:2f:c1:b2:72:3e:
a5:a3:0f:3f:2b:bf:22:91:96:60:2b:8b:e5:8a:ef:
f0:7d:72:34:be:3a:67:55:02:a3:36:b3:89:74:7d:
ce:f2:9a:00:da:89:fc:a1:5d:63:ca:36:5f:b3:4d:
29:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:26:FB:78:E7:B8:1F:43:A4:9C:AC:26:9B:A6:05:44:93:57:3F:0D
X509v3 Authority Key Identifier:
keyid:0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ba:38:4d:22:9d:19:9e:00:7c:1d:f0:1a:71:c6:f0:b3:2a:
60:19:d6:df:0d:f9:20:30:36:8a:6d:4a:64:3c:84:60:e8:33:
73:53:85:15:11:6d:be:ac:52:f5:6e:6d:ee:a6:ca:82:d4:84:
bd:59:41:cb:5f:d6:4f:61:49:69:33:48:49:6c:90:51:ea:47:
a4:ce:a2:40:18:a2:4f:59:a2:b9:7e:ac:53:ad:e4:77:c5:a6:
af:5b:11:38:33:a8:c8:78:b9:7a:dc:0c:a4:92:88:fd:93:4c:
75:02:53:50:91:d4:09:2a:10:55:47:73:f6:c9:eb:59:f4:41:
58:ae:82:5c:ae:92:fe:57:88:39:29:6e:8b:a3:25:c9:3e:ce:
5b:22:9f:9d:b0:b7:93:3d:b2:d4:31:16:e6:81:85:f0:31:71:
77:e3:f9:19:fe:8d:05:46:e7:19:c3:36:68:67:33:cc:18:e2:
0b:02:38:57:1e:4e:d6:6d:fb:e5:70:b2:5a:c5:7f:d3:25:9d:
7f:2e:8e:09:df:b0:f2:98:1d:de:00:15:8a:40:26:13:61:04:
59:e4:aa:54:7c:20:09:9f:53:4e:73:1f:5f:81:7a:42:61:5c:
46:04:ed:16:44:11:20:a3:9f:ce:37:f7:98:fc:5a:4d:fc:ac:
f9:96:11:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PBHddswWK3Lv9Zi3vbHBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYWUxYTYwNThiYmRjZDA4MzUwNjhlM2I0ZjlkZTUxZjJi
ZDkwNTcwHhcNMjUwMTMxMTIwMDQwWhcNMjUwMjAxMTIwMDQwWjAzMTEwLwYDVQQD
EyhmNTI2ZmI3OGU3YjgxZjQzYTQ5Y2FjMjY5YmE2MDU0NDkzNTczZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtosIcWiYQPbCQFdAQwaMhI6niBqt
VpruVFWHV1qgnvGplKVbeZDJCqQVDPhLhj97/gFlfzk08b3k7E2jIIlpwd/ElDAc
71T5+r3q8ezo04IC30i+zp2X5kxiH74OFlZwnuXxdSbEJhzAXNnM8bBJyBxJnpwO
JESscJLIdZf0dDdICT21cXZqW0diRiUrZ012igbCYJ1BqrVIcLePqZxgxzWPWNlH
WUtPFSD0OpKF62O2VKEpfbTX7+Vy67uC9bmYJIpJtpeV+IXa2wU/L8Gycj6low8/
K78ikZZgK4vliu/wfXI0vjpnVQKjNrOJdH3O8poA2on8oV1jyjZfs00pAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUm+3jnuB9DpJysJpumBUSTVz8NMB8GA1UdIwQY
MBaAFAquGmBYu9zQg1Bo47T53lHyvZBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3E0YVlGaTczTkNEVUdqanRQbmVVZks5a0ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny85YzBiMmUtN2JlOS00YmM0LTkzMjAt
YjIyNDdiM2E1MmQ4LzEvQ3E0YVlGaTczTkNEVUdqanRQbmVVZks5a0ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny85YzBiMmUtN2JlOS00YmM0LTkzMjAtYjIyNDdiM2E1MmQ4
LzEvQ3E0YVlGaTczTkNEVUdqanRQbmVVZks5a0ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqLo4TSKd
GZ4AfB3wGnHG8LMqYBnW3w35IDA2im1KZDyEYOgzc1OFFRFtvqxS9W5t7qbKgtSE
vVlBy1/WT2FJaTNISWyQUepHpM6iQBiiT1miuX6sU63kd8Wmr1sRODOoyHi5etwM
pJKI/ZNMdQJTUJHUCSoQVUdz9snrWfRBWK6CXK6S/leIOSlui6MlyT7OWyKfnbC3
kz2y1DEW5oGF8DFxd+P5Gf6NBUbnGcM2aGczzBjiCwI4Vx5O1m375XCyWsV/0yWd
fy6OCd+w8pgd3gAVikAmE2EEWeSqVHwgCZ9TTnMfX4F6QmFcRgTtFkQRIKOfzjf3
mPxaTfys+ZYR9A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:55:22 2025 by rpki-client