Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
File: cLteVPJ0jstdhpjTeTOcwV8yuJM.mft (raw, json)
Hash identifier: BSAEBjI6T6FiaNRKkPRVVzpAyoY9GKwtU5xw8AwUchM=
Subject key identifier: D1:B2:EC:03:35:4A:26:FF:71:5B:64:CB:44:75:0C:B1:AE:38:EC:A3
Authority key identifier: 70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93
Certificate issuer: /CN=70bb5e54f2748ecb5d8698d379339cc15f32b893
Certificate serial: 0194BD853806838C3BA5B091013D678AF119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
Manifest number: 102E
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: VABLE3iBHalb6Jl_c3u-oyHeiS8.roa (hash: s1CBILyJSh7gNgL+QAYvHKZM5KaEqmZAwVEcKOw0A0E=)
2: cLteVPJ0jstdhpjTeTOcwV8yuJM.crl (hash: GWRpFZRUi7T+Fmcb3Amz23wjFZ+QXPxwumtAKkTXHfw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:38:06:83:8c:3b:a5:b0:91:01:3d:67:8a:f1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bb5e54f2748ecb5d8698d379339cc15f32b893
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=d1b2ec03354a26ff715b64cb44750cb1ae38eca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6b:15:87:fd:ea:dd:ae:40:9a:0f:e5:29:8b:
24:50:01:53:c5:d3:d1:a3:a0:e4:a9:04:18:62:27:
1c:69:99:bd:3d:ac:ca:33:cc:d3:86:6a:71:f2:7a:
6b:33:17:96:3f:7d:27:1a:19:5a:ad:8c:a8:a6:d7:
53:8d:5f:8f:0e:dc:3a:76:aa:8c:0d:96:f8:46:5b:
dd:b4:42:25:74:d5:25:64:63:13:8e:71:0f:9b:ec:
de:86:72:4a:77:04:50:45:95:27:b0:16:df:2a:91:
5f:94:30:82:2e:f0:18:ae:11:03:7e:b3:b0:21:8a:
4b:19:19:e0:5b:da:85:18:a3:2d:bf:08:75:b8:08:
d9:50:b7:eb:03:06:a2:a3:be:32:93:f0:ea:de:6e:
8d:af:a3:2a:c5:85:dd:dc:b5:9c:f7:8f:b0:94:ad:
78:a2:b4:9c:6a:0f:79:6b:9e:92:2d:cf:61:5d:f4:
67:ef:01:c2:8c:24:27:be:a0:a7:a7:ef:60:27:e7:
f3:2e:9e:9f:ed:43:ed:ae:ee:76:05:9d:33:77:3e:
cc:a3:a6:7b:82:0b:5d:69:b9:f6:3d:b5:ac:2c:70:
10:e4:04:fe:69:0f:ad:eb:01:dc:80:ed:ab:24:f1:
9c:7b:6a:3a:07:0d:e0:fc:7f:56:e4:3a:d8:33:a7:
8d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B2:EC:03:35:4A:26:FF:71:5B:64:CB:44:75:0C:B1:AE:38:EC:A3
X509v3 Authority Key Identifier:
keyid:70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d2:2b:21:2c:63:e6:50:31:1e:16:f3:07:5a:cd:61:bb:7a:
57:30:a2:55:b0:cb:65:b3:c5:c3:86:d2:e5:ed:ca:1a:32:96:
59:b8:b6:82:80:02:b3:7b:58:00:2b:ae:f7:6a:d5:71:83:72:
91:56:cd:1d:6f:a2:37:0a:36:82:32:a4:9c:21:43:78:ca:1a:
9d:a3:68:72:75:1f:36:17:f8:a8:9b:41:b3:08:1c:db:13:f5:
6e:d0:6e:74:ae:e8:4d:67:fb:35:63:d4:7a:2b:3c:3c:d8:00:
83:b6:b0:c7:65:42:60:09:b2:47:45:13:53:49:bf:66:07:6e:
ff:d5:f8:7f:b0:76:b3:99:1f:a5:da:ab:a6:bf:6c:ba:b9:54:
9a:b2:56:9c:98:ef:19:81:a6:06:ec:4c:85:f7:7d:8a:e9:cf:
c9:dc:be:9f:25:ba:c4:06:2d:1a:14:b3:6a:5a:4b:50:3c:01:
de:3f:4f:7c:68:b0:56:9c:06:04:b9:3c:4a:a4:77:3a:a9:7c:
e9:2a:48:73:04:d4:b8:c3:d9:04:41:c2:b0:3c:8a:50:92:b7:
ff:2d:93:4e:7a:6b:74:cc:39:a5:af:fb:1a:5d:88:8c:b9:e5:
f1:fd:5b:31:24:9b:6c:19:c9:e2:cd:57:b1:e8:9c:b1:d8:9b:
b5:cc:92:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hTgGg4w7pbCRAT1nivEZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYmI1ZTU0ZjI3NDhlY2I1ZDg2OThkMzc5MzM5Y2MxNWYz
MmI4OTMwHhcNMjUwMTMxMTgwMDExWhcNMjUwMjAxMTgwMDExWjAzMTEwLwYDVQQD
EyhkMWIyZWMwMzM1NGEyNmZmNzE1YjY0Y2I0NDc1MGNiMWFlMzhlY2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52sVh/3q3a5Amg/lKYskUAFTxdPR
o6DkqQQYYiccaZm9PazKM8zThmpx8nprMxeWP30nGhlarYyoptdTjV+PDtw6dqqM
DZb4RlvdtEIldNUlZGMTjnEPm+zehnJKdwRQRZUnsBbfKpFflDCCLvAYrhEDfrOw
IYpLGRngW9qFGKMtvwh1uAjZULfrAwaio74yk/Dq3m6Nr6MqxYXd3LWc94+wlK14
orScag95a56SLc9hXfRn7wHCjCQnvqCnp+9gJ+fzLp6f7UPtru52BZ0zdz7Mo6Z7
ggtdabn2PbWsLHAQ5AT+aQ+t6wHcgO2rJPGce2o6Bw3g/H9W5DrYM6eNnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGy7AM1Sib/cVtky0R1DLGuOOyjMB8GA1UdIwQY
MBaAFHC7XlTydI7LXYaY03kznMFfMriTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0x0ZVZQSjBqc3RkaHBqVGVUT2N3Vjh5dUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9kYzMyNDYtYzg1YS00NmRmLThjMzAt
NDhjZWUyNmM1NWJiLzEvY0x0ZVZQSjBqc3RkaHBqVGVUT2N3Vjh5dUpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9kYzMyNDYtYzg1YS00NmRmLThjMzAtNDhjZWUyNmM1NWJi
LzEvY0x0ZVZQSjBqc3RkaHBqVGVUT2N3Vjh5dUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOtIrISxj
5lAxHhbzB1rNYbt6VzCiVbDLZbPFw4bS5e3KGjKWWbi2goACs3tYACuu92rVcYNy
kVbNHW+iNwo2gjKknCFDeMoanaNocnUfNhf4qJtBswgc2xP1btBudK7oTWf7NWPU
eis8PNgAg7awx2VCYAmyR0UTU0m/Zgdu/9X4f7B2s5kfpdqrpr9surlUmrJWnJjv
GYGmBuxMhfd9iunPydy+nyW6xAYtGhSzalpLUDwB3j9PfGiwVpwGBLk8SqR3Oql8
6SpIcwTUuMPZBEHCsDyKUJK3/y2TTnprdMw5pa/7Gl2IjLnl8f1bMSSbbBnJ4s1X
seicsdibtcySXA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:45 2025 by rpki-client