Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
File: 1sJp-ek7D7i8SxyUerxbIfIfIwU.mft (raw, json)
Hash identifier: cOqQLqUg6T+L7gfPxRHFDmlrnYZUl5vpIpezJzruBrg=
Subject key identifier: 81:50:53:AF:87:A9:5A:18:AE:63:B0:50:C0:E3:0C:C0:17:0D:9E:26
Authority key identifier: D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
Certificate issuer: /CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Certificate serial: 0194BD17C9CCC790AE8A5E288312DCD39C59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
Manifest number: 036A
Signing time: Fri 31 Jan 2025 16:00:40 +0000
Manifest this update: Fri 31 Jan 2025 16:00:40 +0000
Manifest next update: Sat 01 Feb 2025 16:00:40 +0000
Files and hashes: 1: 1-4EUUJ60y6tCuL7fMYLuUTMussI.roa (hash: ZCZ3I6CzJy+9WHfI/N/oUofNXCUICsdPSdQOOtiTJMs=)
2: 1sJp-ek7D7i8SxyUerxbIfIfIwU.crl (hash: ACiI2AwulR4Ouq5wemBVsivXoxfq4kAYoWsREWu3/i8=)
3: AJ8BcEY-DdXcTmxMdYHCmI3RxoU.roa (hash: 3dzyfVQpkuELs7hezXS9c0EUIsSeRiw+pnrqw/PWP6o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c9:cc:c7:90:ae:8a:5e:28:83:12:dc:d3:9c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Validity
Not Before: Jan 31 16:00:40 2025 GMT
Not After : Feb 1 16:00:40 2025 GMT
Subject: CN=815053af87a95a18ae63b050c0e30cc0170d9e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:52:f6:42:97:cd:3d:32:68:6e:9b:54:dc:d9:
52:b0:07:36:5c:b8:aa:b5:52:82:b3:2a:a8:31:fa:
0d:1b:14:0f:e3:80:6c:b7:d0:5e:98:0b:37:68:44:
51:ae:c0:df:5b:61:bb:6f:24:a4:d5:e0:93:d4:80:
86:40:ac:a2:3d:c1:14:b1:2e:57:f0:9a:da:a2:a1:
79:f9:45:5f:9b:be:ce:6f:ad:b6:c0:c1:84:a9:74:
36:5c:12:05:e1:e4:72:8b:d8:9d:4b:24:26:b2:fb:
8d:3e:9c:43:29:71:8f:41:17:f7:72:68:02:3d:9e:
57:a8:42:11:3a:94:a6:63:73:af:cf:a3:df:dd:d8:
bc:bc:39:77:f8:0c:f7:2d:3a:a9:47:ee:57:d9:cc:
7c:6c:7d:f2:c6:db:57:8d:cb:d4:6c:10:ef:ad:01:
1e:97:28:1d:50:92:35:1b:a1:32:22:78:71:7d:51:
ae:91:2f:2d:6e:df:c3:c2:85:e4:cc:a0:e1:8e:76:
e7:27:f6:26:c4:ce:1b:4c:c5:fd:0e:9f:f8:1a:aa:
0c:d9:8d:e0:96:88:4a:b5:53:8a:7b:50:a5:f0:00:
7d:5b:47:d0:9a:62:97:03:c3:96:2c:a0:e1:96:66:
8a:bd:ea:79:f1:3e:e7:d6:ec:0f:35:43:14:c1:65:
88:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:50:53:AF:87:A9:5A:18:AE:63:B0:50:C0:E3:0C:C0:17:0D:9E:26
X509v3 Authority Key Identifier:
keyid:D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:6d:de:40:a7:98:03:78:f0:9c:1f:d1:58:1d:4e:2e:b7:26:
4c:19:8d:8f:5a:d2:2e:6e:98:1c:1c:7d:78:f3:00:f2:d2:4d:
06:45:07:c4:a7:7b:d4:c1:40:73:bd:8d:7d:99:25:de:15:20:
77:c6:11:a9:71:d3:6b:62:b7:85:32:6d:79:8f:4b:be:a1:e5:
5b:e9:19:e8:c2:fe:ee:f5:8b:95:1d:25:56:85:da:b9:58:7a:
f4:42:d9:4c:25:f2:d2:a7:4a:fd:69:bb:39:fa:26:a8:5a:ce:
dc:52:20:3b:df:04:6e:ac:8e:7c:23:e0:29:af:47:5b:24:a8:
d8:1d:79:20:2d:84:a8:6a:9f:ef:14:2a:47:35:58:d7:14:f3:
ee:be:be:c2:7f:45:09:b1:4d:12:40:0e:c0:80:08:e8:f1:4b:
40:6e:12:54:e6:c5:ac:ff:0a:e1:ed:a9:4a:09:26:7b:af:92:
10:55:47:37:be:e2:c4:be:99:62:3f:26:f3:22:0b:7c:76:e0:
20:05:78:27:e5:09:cc:1a:b9:a8:a2:84:4d:25:ca:ae:5a:71:
24:8c:8c:5f:ff:5b:6c:cb:a6:d4:a7:d8:22:99:ef:22:fb:34:
db:0f:e5:a1:53:33:30:d1:83:ae:de:83:c6:e7:11:e5:ae:a6:
76:80:c6:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F8nMx5Cuil4ogxLc05xZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YzI2OWY5ZTkzYjBmYjhiYzRiMWM5NDdhYmM1YjIxZjIx
ZjIzMDUwHhcNMjUwMTMxMTYwMDQwWhcNMjUwMjAxMTYwMDQwWjAzMTEwLwYDVQQD
Eyg4MTUwNTNhZjg3YTk1YTE4YWU2M2IwNTBjMGUzMGNjMDE3MGQ5ZTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1L2QpfNPTJobptU3NlSsAc2XLiq
tVKCsyqoMfoNGxQP44Bst9BemAs3aERRrsDfW2G7bySk1eCT1ICGQKyiPcEUsS5X
8JraoqF5+UVfm77Ob622wMGEqXQ2XBIF4eRyi9idSyQmsvuNPpxDKXGPQRf3cmgC
PZ5XqEIROpSmY3Ovz6Pf3di8vDl3+Az3LTqpR+5X2cx8bH3yxttXjcvUbBDvrQEe
lygdUJI1G6EyInhxfVGukS8tbt/DwoXkzKDhjnbnJ/YmxM4bTMX9Dp/4GqoM2Y3g
lohKtVOKe1Cl8AB9W0fQmmKXA8OWLKDhlmaKvep58T7n1uwPNUMUwWWINQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFQU6+HqVoYrmOwUMDjDMAXDZ4mMB8GA1UdIwQY
MBaAFNbCafnpOw+4vEsclHq8WyHyHyMFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXNKcC1lazdEN2k4U3h5VWVyeGJJZklmSXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jMjUzZTMtNDEzMy00YTE2LTkwNjEt
Yjc5Y2ZjMjRkM2I3LzEvMXNKcC1lazdEN2k4U3h5VWVyeGJJZklmSXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jMjUzZTMtNDEzMy00YTE2LTkwNjEtYjc5Y2ZjMjRkM2I3
LzEvMXNKcC1lazdEN2k4U3h5VWVyeGJJZklmSXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ23eQKeY
A3jwnB/RWB1OLrcmTBmNj1rSLm6YHBx9ePMA8tJNBkUHxKd71MFAc72NfZkl3hUg
d8YRqXHTa2K3hTJteY9LvqHlW+kZ6ML+7vWLlR0lVoXauVh69ELZTCXy0qdK/Wm7
OfomqFrO3FIgO98EbqyOfCPgKa9HWySo2B15IC2EqGqf7xQqRzVY1xTz7r6+wn9F
CbFNEkAOwIAI6PFLQG4SVObFrP8K4e2pSgkme6+SEFVHN77ixL6ZYj8m8yILfHbg
IAV4J+UJzBq5qKKETSXKrlpxJIyMX/9bbMum1KfYIpnvIvs02w/loVMzMNGDrt6D
xucR5a6mdoDGeg==
-----END CERTIFICATE-----
Generated at Thu May 1 09:14:37 2025 by rpki-client