Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
File: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft (raw, json)
Hash identifier: JZRLfL1QGjrQH8DyJLAELP0gU59EWl0T5EK/hoEK+AY=
Subject key identifier: 36:62:F4:AF:10:D2:BB:43:7C:BF:39:18:D2:9E:ED:13:31:3C:E2:D5
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial: 0194BD859DE0707BB29C4CD910B8217FCB29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
Manifest number: 0B6D
Signing time: Fri 31 Jan 2025 18:00:38 +0000
Manifest this update: Fri 31 Jan 2025 18:00:38 +0000
Manifest next update: Sat 01 Feb 2025 18:00:38 +0000
Files and hashes: 1: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl (hash: lPK73Z890I2OlPaA1YICPQAa8cqUONuUSdh2nLFZXDE=)
2: 6MpCaf0UOBYn8TQkxejiZakptqM.roa (hash: ng/NGbK8yrrWtQu9zhuJZevZ0uFrzLg7FL/FvO6/2MU=)
3: VEU2Xx_W7oXurM3BP9vIKZCMG4o.roa (hash: o9K/DHxqI5B4HDKoeQx+W7Rwvv3Sj+2t3qcauvi8Xig=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9d:e0:70:7b:b2:9c:4c:d9:10:b8:21:7f:cb:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
Validity
Not Before: Jan 31 18:00:38 2025 GMT
Not After : Feb 1 18:00:38 2025 GMT
Subject: CN=3662f4af10d2bb437cbf3918d29eed13313ce2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:19:b0:ef:48:d2:6d:f4:84:05:29:87:a5:f0:
4e:bb:9e:7f:85:91:73:1a:04:14:8c:7b:d6:16:4f:
7b:dd:3e:7e:a9:d7:90:f9:56:6c:33:6d:70:9e:b3:
13:d6:24:5d:d5:8b:86:80:66:21:30:18:88:3f:e8:
5d:df:5e:a4:8c:a8:86:1e:dc:1c:d8:93:cc:dc:e4:
de:1b:b1:e4:1b:83:fd:2e:c5:1e:41:09:32:83:1e:
30:df:ea:08:2b:1e:b7:aa:ca:61:2d:19:26:d3:a9:
ce:2f:7d:88:80:de:48:77:77:b6:f3:7a:f0:57:38:
56:36:fd:86:04:a0:8f:0f:f5:f7:93:0a:19:ab:52:
b1:03:5f:bd:a9:44:1a:fd:2a:b1:c5:40:25:36:02:
89:d9:35:96:18:b2:b0:02:da:00:6c:8b:f9:76:c5:
06:09:b1:47:d1:a0:8e:34:5b:6f:11:31:2f:e0:3b:
c8:f4:33:24:01:a6:15:14:33:96:a6:ed:aa:f0:46:
e8:c0:f5:7e:1f:c8:2f:63:84:1e:a4:5f:cb:c9:e7:
4b:48:24:a3:0e:0f:27:aa:ff:20:a5:4b:05:49:27:
2b:23:55:5c:52:41:85:42:a3:f5:6e:8b:12:e3:52:
1b:d7:b7:2a:c2:c2:2b:bb:24:8b:1b:9b:8f:a1:d4:
3a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:62:F4:AF:10:D2:BB:43:7C:BF:39:18:D2:9E:ED:13:31:3C:E2:D5
X509v3 Authority Key Identifier:
keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:2e:e6:39:dd:ef:1f:2b:c8:df:1a:bf:5b:94:a2:aa:50:93:
5e:4a:34:f0:f3:fd:52:00:bf:aa:c1:a1:e8:c5:00:15:65:5e:
84:f4:7a:80:e6:88:5b:c0:0b:82:1c:2f:66:80:01:de:d2:b5:
52:d1:d4:52:c5:ab:34:3a:50:ae:a7:fa:cc:4d:ef:54:53:45:
6a:e9:8d:ab:2e:b2:9a:72:b0:b3:cd:5f:24:d7:2c:0f:eb:f8:
6a:9f:d7:e0:c3:f4:b2:9a:8b:25:05:9a:51:4a:42:83:ee:5d:
02:46:37:f7:59:65:9a:e0:1a:aa:fc:bc:71:6b:d0:b5:22:95:
f5:0d:4e:6c:83:43:af:60:e1:c7:a5:a8:be:2b:54:a2:5b:06:
b6:f9:03:ae:29:1b:33:1a:87:77:92:8d:03:57:15:6b:a2:f5:
7c:cc:a5:fb:a6:96:83:ba:d4:1b:d5:88:22:d5:30:9d:33:64:
bc:3d:aa:2f:5f:d4:d5:fb:81:4b:a7:ec:8a:21:99:6d:67:47:
2f:b2:47:28:8d:88:d6:3b:06:4f:f8:61:6b:1b:e1:98:76:b8:
b9:5b:fc:d3:53:75:3f:16:b2:95:80:14:c4:45:95:17:e9:49:
c0:74:a1:fa:d6:d7:6a:7e:58:d9:19:cf:7b:52:a9:6e:7f:ce:
d2:4f:7c:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hZ3gcHuynEzZELghf8spMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzBjNDQxZmI4OTJiOGM5ODE2NTM0ODg1MDY5ZmNkMzMw
MGM5YTQwHhcNMjUwMTMxMTgwMDM4WhcNMjUwMjAxMTgwMDM4WjAzMTEwLwYDVQQD
EygzNjYyZjRhZjEwZDJiYjQzN2NiZjM5MThkMjllZWQxMzMxM2NlMmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xmw70jSbfSEBSmHpfBOu55/hZFz
GgQUjHvWFk973T5+qdeQ+VZsM21wnrMT1iRd1YuGgGYhMBiIP+hd316kjKiGHtwc
2JPM3OTeG7HkG4P9LsUeQQkygx4w3+oIKx63qsphLRkm06nOL32IgN5Id3e283rw
VzhWNv2GBKCPD/X3kwoZq1KxA1+9qUQa/SqxxUAlNgKJ2TWWGLKwAtoAbIv5dsUG
CbFH0aCONFtvETEv4DvI9DMkAaYVFDOWpu2q8EbowPV+H8gvY4QepF/LyedLSCSj
Dg8nqv8gpUsFSScrI1VcUkGFQqP1bosS41Ib17cqwsIruySLG5uPodQ6MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZi9K8Q0rtDfL85GNKe7RMxPOLVMB8GA1UdIwQY
MBaAFNpwxEH7iSuMmBZTSIUGn80zAMmkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lNTNkZTUtMWI1Zi00NDY3LWE2OGMt
MTVmYzBiNjhmODQ0LzEvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9lNTNkZTUtMWI1Zi00NDY3LWE2OGMtMTVmYzBiNjhmODQ0
LzEvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZC7mOd3v
HyvI3xq/W5SiqlCTXko08PP9UgC/qsGh6MUAFWVehPR6gOaIW8ALghwvZoAB3tK1
UtHUUsWrNDpQrqf6zE3vVFNFaumNqy6ymnKws81fJNcsD+v4ap/X4MP0spqLJQWa
UUpCg+5dAkY391llmuAaqvy8cWvQtSKV9Q1ObINDr2Dhx6WovitUolsGtvkDrikb
MxqHd5KNA1cVa6L1fMyl+6aWg7rUG9WIItUwnTNkvD2qL1/U1fuBS6fsiiGZbWdH
L7JHKI2I1jsGT/hhaxvhmHa4uVv801N1PxaylYAUxEWVF+lJwHSh+tbXan5Y2RnP
e1Kpbn/O0k98HQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:46 2025 by rpki-client