Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
File: cNvqB1PfCD5XgrufOAtdeZy3igY.mft (raw, json)
Hash identifier: yaP5JlIzUnhkTd+D4aGSNz2tziYPw6aKiJOODNzA3/4=
Subject key identifier: 03:50:B7:16:4E:F8:D0:DF:D3:0A:A4:B1:78:A8:40:DC:8F:4E:20:60
Authority key identifier: 70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06
Certificate issuer: /CN=70dbea0753df083e5782bb9f380b5d799cb78a06
Certificate serial: 0194BC3C6704D951990E26E6BA528BAB9776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 12:01:02 +0000
Manifest this update: Fri 31 Jan 2025 12:01:02 +0000
Manifest next update: Sat 01 Feb 2025 12:01:02 +0000
Files and hashes: 1: 7wYbQJjmUZJ3jrCYQep7ej1ycX8.roa (hash: gX6AQ4uDUscH9HZMwyFhtSxb+YXiJVmytGAK7BhRx4Q=)
2: cNvqB1PfCD5XgrufOAtdeZy3igY.crl (hash: nDeGMwzAPHLLcKuaDK0pz3dLM36XNC1fzNBFb1MNrZo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:67:04:d9:51:99:0e:26:e6:ba:52:8b:ab:97:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70dbea0753df083e5782bb9f380b5d799cb78a06
Validity
Not Before: Jan 31 12:01:02 2025 GMT
Not After : Feb 1 12:01:02 2025 GMT
Subject: CN=0350b7164ef8d0dfd30aa4b178a840dc8f4e2060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:db:88:a0:ae:7e:5b:a4:46:19:e1:dc:63:8a:
37:ea:95:b9:e5:22:e2:67:b9:e2:01:b8:62:21:17:
80:5d:00:b1:99:6b:dc:89:f9:e3:a1:ab:47:21:a6:
dc:34:da:33:f0:fa:df:b1:d8:08:33:3d:bf:b6:46:
4e:cf:d2:c4:5c:cf:34:1a:8e:1c:ae:3e:eb:ac:0f:
ad:23:f3:e0:4b:32:7a:3b:b8:4d:4d:6a:12:3a:df:
6f:d2:8b:42:4c:e0:47:3a:57:75:11:ab:93:50:92:
29:8b:a1:cf:c8:29:45:86:47:3a:2e:ea:0b:b3:10:
b4:ce:f1:f5:16:67:a3:bc:24:54:12:24:10:b9:87:
22:4d:fe:e2:2b:00:21:43:35:45:94:74:1d:82:20:
04:cd:e7:55:b9:32:7d:4a:1c:09:f4:51:3b:ba:63:
e7:c1:7b:56:2d:1e:90:bc:bc:8c:c1:bc:0c:53:37:
ee:1b:b4:6b:8f:7a:d8:6e:60:60:25:e3:1e:4a:d9:
fb:2c:0b:50:cf:97:75:d8:72:59:2b:e0:cf:36:58:
04:c6:0d:17:0d:4a:dc:76:4d:1a:26:c7:e6:9b:e2:
ab:36:b2:8a:16:b4:4a:37:d5:10:7e:c7:94:6c:be:
81:34:7c:37:7a:44:0e:29:14:2e:3d:88:57:5f:d4:
70:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:50:B7:16:4E:F8:D0:DF:D3:0A:A4:B1:78:A8:40:DC:8F:4E:20:60
X509v3 Authority Key Identifier:
keyid:70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0d:36:ef:be:7a:48:be:95:20:a6:f4:44:d4:ce:56:11:05:
41:0e:d0:4c:23:71:ca:5c:1e:27:94:a0:c9:d1:5b:2c:34:8e:
3a:50:e8:a2:f2:a0:1d:ac:9d:c8:97:8e:b1:f3:aa:4c:2d:da:
18:ea:41:86:2f:f0:ed:87:fc:c1:a5:0c:36:b8:cf:18:c5:6e:
12:90:4f:5b:f9:b1:a8:c3:d3:b9:36:43:9f:35:86:be:cb:ae:
c0:21:cc:ae:18:75:70:58:a5:25:82:c2:fe:99:28:1b:7c:49:
3b:b6:7d:7c:04:b4:4c:1f:88:bd:9f:42:a1:da:52:83:e3:0a:
d2:a4:88:86:3f:d2:67:79:4d:7b:a9:75:3c:dc:1a:90:dd:62:
c0:85:70:b3:2d:17:c2:ce:03:f1:4a:a2:e9:1a:00:88:c5:db:
54:34:bf:51:9b:1f:63:af:a5:cc:d5:30:99:d9:51:94:85:42:
61:b4:f3:85:ba:66:97:0e:f8:f1:7f:83:23:32:ba:f8:f6:da:
6b:84:b5:a5:e4:3c:8c:8a:36:d9:a0:bb:59:79:91:b8:bf:07:
9c:f1:f0:6e:9b:b6:bd:e0:7d:a6:25:b7:db:a3:20:37:96:0e:
a6:6c:2a:55:e2:41:da:f8:69:d8:73:c3:2c:e3:1a:a3:e4:dc:
a4:84:71:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PGcE2VGZDibmulKLq5d2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZGJlYTA3NTNkZjA4M2U1NzgyYmI5ZjM4MGI1ZDc5OWNi
NzhhMDYwHhcNMjUwMTMxMTIwMTAyWhcNMjUwMjAxMTIwMTAyWjAzMTEwLwYDVQQD
EygwMzUwYjcxNjRlZjhkMGRmZDMwYWE0YjE3OGE4NDBkYzhmNGUyMDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9uIoK5+W6RGGeHcY4o36pW55SLi
Z7niAbhiIReAXQCxmWvcifnjoatHIabcNNoz8PrfsdgIMz2/tkZOz9LEXM80Go4c
rj7rrA+tI/PgSzJ6O7hNTWoSOt9v0otCTOBHOld1EauTUJIpi6HPyClFhkc6LuoL
sxC0zvH1FmejvCRUEiQQuYciTf7iKwAhQzVFlHQdgiAEzedVuTJ9ShwJ9FE7umPn
wXtWLR6QvLyMwbwMUzfuG7Rrj3rYbmBgJeMeStn7LAtQz5d12HJZK+DPNlgExg0X
DUrcdk0aJsfmm+KrNrKKFrRKN9UQfseUbL6BNHw3ekQOKRQuPYhXX9Rw1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANQtxZO+NDf0wqksXioQNyPTiBgMB8GA1UdIwQY
MBaAFHDb6gdT3wg+V4K7nzgLXXmct4oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY052cUIxUGZDRDVYZ3J1Zk9BdGRlWnkzaWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kZWVjMmUtMGNkNi00MTEzLWIyYjkt
MmEwY2YxMzE3M2Q4LzEvY052cUIxUGZDRDVYZ3J1Zk9BdGRlWnkzaWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9kZWVjMmUtMGNkNi00MTEzLWIyYjktMmEwY2YxMzE3M2Q4
LzEvY052cUIxUGZDRDVYZ3J1Zk9BdGRlWnkzaWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQ027756
SL6VIKb0RNTOVhEFQQ7QTCNxylweJ5SgydFbLDSOOlDoovKgHaydyJeOsfOqTC3a
GOpBhi/w7Yf8waUMNrjPGMVuEpBPW/mxqMPTuTZDnzWGvsuuwCHMrhh1cFilJYLC
/pkoG3xJO7Z9fAS0TB+IvZ9CodpSg+MK0qSIhj/SZ3lNe6l1PNwakN1iwIVwsy0X
ws4D8Uqi6RoAiMXbVDS/UZsfY6+lzNUwmdlRlIVCYbTzhbpmlw748X+DIzK6+Pba
a4S1peQ8jIo22aC7WXmRuL8HnPHwbpu2veB9piW326MgN5YOpmwqVeJB2vhp2HPD
LOMao+TcpIRxBA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:28:46 2025 by rpki-client