Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
File: M1M9nu9agSjcQ10C8iMygDSNwrY.mft (raw, json)
Hash identifier: 8w5LaTzq7ZQo9moUDm75GAv+9rphvlDeq6DOYQ1PL7Y=
Subject key identifier: F6:DA:2E:35:6E:30:5D:58:EA:29:AD:C8:E1:49:56:8C:9F:43:54:97
Authority key identifier: 33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6
Certificate issuer: /CN=33533d9eef5a8128dc435d02f2233280348dc2b6
Certificate serial: 0194BD4E6C3DCF1954CE6A44AD17C64D3ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
Manifest number: 10BD
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: M1M9nu9agSjcQ10C8iMygDSNwrY.crl (hash: yEXXKvmAI9cxHoTxgswnvT5XRfzJ5shIElccWYb6+Pg=)
2: w5RgxPZJeCHJ32aZdxHuHtsDhQo.roa (hash: Uc4RlDE0xm/vlOwUXxqVD6EiTzssOmMkcQ4YcA/6FLE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6c:3d:cf:19:54:ce:6a:44:ad:17:c6:4d:3e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33533d9eef5a8128dc435d02f2233280348dc2b6
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=f6da2e356e305d58ea29adc8e149568c9f435497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:38:49:98:52:02:ec:f6:73:51:99:2e:7c:
21:7c:ec:be:88:55:0c:c2:d2:05:28:7e:bd:0a:bc:
5c:7e:ca:af:bf:bb:6e:e8:88:cc:9f:89:30:63:3b:
94:e0:5b:c5:e7:45:19:5a:34:d2:c0:f8:65:6f:16:
de:45:b9:fa:50:9a:e6:33:7e:80:fa:46:10:35:90:
7f:04:b5:65:53:2d:c6:43:f8:e0:75:6a:ef:d1:8b:
75:62:39:bc:9c:36:fb:46:97:9a:56:69:2d:18:64:
43:77:9c:11:d4:e3:44:23:16:ad:a8:56:5f:17:24:
b0:81:31:48:72:15:01:8e:9c:e3:1e:6c:e2:a5:3a:
26:c1:12:e9:b8:60:08:55:6f:6b:38:6f:d4:a8:c3:
80:3f:7c:34:93:31:a8:29:4f:d4:fd:85:e4:3a:30:
cf:40:b7:b5:fa:b7:c4:32:22:9e:a6:5c:7c:fc:b8:
a5:06:cb:93:09:2c:06:8b:e7:27:d4:6b:0f:2b:5b:
79:12:1c:c9:ef:43:af:7b:31:fa:5e:bf:15:4c:5f:
8c:4e:81:2f:7f:49:43:6f:5c:ac:48:9b:46:83:da:
23:cb:40:7e:3a:15:bd:f5:71:5c:aa:56:1e:9e:4b:
2a:25:e8:55:56:29:22:71:f3:12:ab:9e:28:43:76:
1a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DA:2E:35:6E:30:5D:58:EA:29:AD:C8:E1:49:56:8C:9F:43:54:97
X509v3 Authority Key Identifier:
keyid:33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:08:3a:5a:a7:97:1d:eb:86:84:79:09:0d:18:72:2f:5f:18:
2b:ed:c6:dc:46:36:78:ce:79:34:53:75:c5:9b:17:b9:68:0c:
a8:3a:68:d5:86:f4:ef:63:26:99:1a:82:7e:85:e4:d1:c1:c4:
87:e6:d5:fe:01:6e:a7:27:e2:2e:b2:6d:48:98:23:58:10:44:
5d:f0:61:9e:08:72:93:6c:9b:78:6c:67:4b:3b:ce:ee:60:07:
8c:1f:ad:ce:68:40:08:81:1d:14:b3:b6:f3:bd:fd:25:60:be:
69:37:5f:a2:d1:c1:6d:04:61:0b:7f:1f:9d:8b:4c:de:d8:b3:
d2:4c:88:fc:fa:ec:0c:da:d2:86:86:90:03:95:49:4f:34:e9:
10:ff:35:83:53:06:c9:37:66:77:33:c9:42:b4:66:c5:bb:a9:
9c:da:78:1e:e2:9a:22:bd:fa:07:25:dc:d5:04:91:b3:2d:35:
c3:9f:9c:a1:f4:c2:99:e7:67:89:d6:c6:fb:5d:65:d5:e1:62:
58:59:c1:2e:c4:7e:1d:c9:48:c0:75:c2:ec:2b:f6:16:c0:aa:
86:cb:42:a4:a7:02:0e:09:04:4b:10:46:3c:ec:82:b6:2d:df:
ce:99:47:42:11:75:80:1f:59:fc:05:a6:bf:cc:c4:d3:4d:37:
41:7c:af:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tmw9zxlUzmpErRfGTT7YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNTMzZDllZWY1YTgxMjhkYzQzNWQwMmYyMjMzMjgwMzQ4
ZGMyYjYwHhcNMjUwMTMxMTcwMDIwWhcNMjUwMjAxMTcwMDIwWjAzMTEwLwYDVQQD
EyhmNmRhMmUzNTZlMzA1ZDU4ZWEyOWFkYzhlMTQ5NTY4YzlmNDM1NDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+Y4SZhSAuz2c1GZLnwhfOy+iFUM
wtIFKH69Crxcfsqvv7tu6IjMn4kwYzuU4FvF50UZWjTSwPhlbxbeRbn6UJrmM36A
+kYQNZB/BLVlUy3GQ/jgdWrv0Yt1Yjm8nDb7RpeaVmktGGRDd5wR1ONEIxatqFZf
FySwgTFIchUBjpzjHmzipTomwRLpuGAIVW9rOG/UqMOAP3w0kzGoKU/U/YXkOjDP
QLe1+rfEMiKeplx8/LilBsuTCSwGi+cn1GsPK1t5EhzJ70OvezH6Xr8VTF+MToEv
f0lDb1ysSJtGg9ojy0B+OhW99XFcqlYenksqJehVVikicfMSq54oQ3Ya7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbaLjVuMF1Y6imtyOFJVoyfQ1SXMB8GA1UdIwQY
MBaAFDNTPZ7vWoEo3ENdAvIjMoA0jcK2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTFNOW51OWFnU2pjUTEwQzhpTXlnRFNOd3JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hM2JjYWQtMWQ5OC00OGI0LWFmYWYt
ZDJjM2I0YzA5ZWExLzEvTTFNOW51OWFnU2pjUTEwQzhpTXlnRFNOd3JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9hM2JjYWQtMWQ5OC00OGI0LWFmYWYtZDJjM2I0YzA5ZWEx
LzEvTTFNOW51OWFnU2pjUTEwQzhpTXlnRFNOd3JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGAg6WqeX
HeuGhHkJDRhyL18YK+3G3EY2eM55NFN1xZsXuWgMqDpo1Yb072MmmRqCfoXk0cHE
h+bV/gFupyfiLrJtSJgjWBBEXfBhnghyk2ybeGxnSzvO7mAHjB+tzmhACIEdFLO2
8739JWC+aTdfotHBbQRhC38fnYtM3tiz0kyI/PrsDNrShoaQA5VJTzTpEP81g1MG
yTdmdzPJQrRmxbupnNp4HuKaIr36ByXc1QSRsy01w5+cofTCmednidbG+11l1eFi
WFnBLsR+HclIwHXC7Cv2FsCqhstCpKcCDgkESxBGPOyCti3fzplHQhF1gB9Z/AWm
v8zE0003QXyvDg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:54 2025 by rpki-client