Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
File: u4K408Gw94w6GfYWTrKCHiMM_k4.mft (raw, json)
Hash identifier: 9D8OW2PTAf2WRbKb/25V7Cv4c9Y7j+VAI38Rk6frSUM=
Subject key identifier: 2B:93:0F:CA:D5:F2:00:3B:60:D5:70:46:A6:7E:10:FA:BF:37:95:C2
Authority key identifier: BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
Certificate issuer: /CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Certificate serial: 0194BCE0E99F55B0BE811F7F1860E022E4D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
Manifest number: 0E24
Signing time: Fri 31 Jan 2025 15:00:43 +0000
Manifest this update: Fri 31 Jan 2025 15:00:43 +0000
Manifest next update: Sat 01 Feb 2025 15:00:43 +0000
Files and hashes: 1: sZvwZMkTNt-iUTiQmQ2RW61JCrY.roa (hash: ILtUTNlj+OmXDu1giFXN+JTJafdCM0FAh4hCT6vGfZc=)
2: u4K408Gw94w6GfYWTrKCHiMM_k4.crl (hash: c9zJtQPGDEtb0GvuqtNHhqVGsdJxV3A95AWcpyNMaEU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e9:9f:55:b0:be:81:1f:7f:18:60:e0:22:e4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Validity
Not Before: Jan 31 15:00:43 2025 GMT
Not After : Feb 1 15:00:43 2025 GMT
Subject: CN=2b930fcad5f2003b60d57046a67e10fabf3795c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8c:25:95:71:2b:c7:6b:6e:c2:e1:03:60:0d:
ae:e6:6f:80:1e:93:ac:2f:df:ab:bb:7e:07:0a:8e:
bd:db:d9:1f:b0:64:6b:15:9e:6b:64:90:15:40:64:
6d:ff:57:ec:4d:87:05:6d:53:cb:f9:ce:fc:7d:0b:
4d:4d:1e:e3:1d:20:5d:a2:6d:92:5e:19:7b:61:15:
3f:7f:03:62:34:53:c0:e3:4b:a1:2a:ac:8c:dc:a0:
16:84:d6:c8:8b:39:84:c2:1f:4c:ee:df:10:62:d4:
23:3a:4c:2f:f0:a2:d2:c6:b6:79:8b:41:04:4d:c8:
af:ff:46:92:e8:3c:bd:f7:8e:df:87:63:4d:b3:79:
4c:0a:63:9b:bd:bd:34:f2:ea:5e:60:a0:db:ee:62:
c5:54:48:7d:60:9f:00:db:7e:ec:3c:b1:2e:9e:4b:
19:97:6b:ff:01:f9:d2:8a:bc:37:df:86:25:2f:34:
4a:8d:f7:c2:4c:d3:2a:38:97:ae:5b:67:e2:fc:66:
75:07:3f:65:86:1c:28:ba:0b:14:b7:21:0f:8b:47:
f7:e6:9f:47:5d:b9:27:47:f3:57:46:4f:37:c2:b2:
30:61:d4:eb:74:0a:59:75:d6:48:32:43:72:7e:20:
8e:64:c3:a3:1a:b6:4a:e6:48:a5:94:d1:3b:3f:e4:
91:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:93:0F:CA:D5:F2:00:3B:60:D5:70:46:A6:7E:10:FA:BF:37:95:C2
X509v3 Authority Key Identifier:
keyid:BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d6:0e:40:47:a6:09:1d:b3:5f:5a:f0:79:50:d6:f4:b6:46:
ae:52:c1:40:f5:e6:c1:65:56:7a:68:b3:91:49:8e:30:92:1f:
2e:eb:f7:09:18:29:f8:7a:cc:37:77:2f:25:c5:bb:55:8c:77:
72:9d:52:d5:87:e1:be:f3:10:9d:00:49:10:70:12:fd:2a:eb:
4e:12:17:aa:e4:7e:37:41:eb:b7:0c:5a:5b:9c:aa:a2:50:2e:
51:5b:37:e9:f7:b6:39:74:09:25:81:c5:fd:e6:c7:3b:b0:72:
1c:19:f7:fd:f2:83:fe:a1:54:1a:48:42:26:64:4e:dd:f5:b8:
cf:46:7e:51:5c:ee:e9:f8:32:c9:bf:56:d1:d3:c9:ed:47:dc:
cc:fc:eb:80:b6:6a:ce:81:13:8d:89:8c:c5:12:92:ca:bd:71:
74:9b:ab:b3:ca:d9:96:90:eb:72:f3:8c:40:eb:60:f9:d1:97:
54:f9:a8:3f:09:a0:98:4f:36:41:25:3f:59:35:88:8d:36:b0:
6a:e5:e4:e3:8b:24:b1:74:ba:8e:8f:71:b6:07:aa:4f:b6:64:
41:46:db:f0:a3:60:82:a7:0f:c7:cf:cb:26:d0:a0:fc:32:b3:
76:62:ae:0a:ed:5c:67:e1:e8:11:2f:88:e8:79:4e:4a:49:42:
54:56:d9:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84OmfVbC+gR9/GGDgIuTVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiODJiOGQzYzFiMGY3OGMzYTE5ZjYxNjRlYjI4MjFlMjMw
Y2ZlNGUwHhcNMjUwMTMxMTUwMDQzWhcNMjUwMjAxMTUwMDQzWjAzMTEwLwYDVQQD
EygyYjkzMGZjYWQ1ZjIwMDNiNjBkNTcwNDZhNjdlMTBmYWJmMzc5NWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4wllXErx2tuwuEDYA2u5m+AHpOs
L9+ru34HCo6929kfsGRrFZ5rZJAVQGRt/1fsTYcFbVPL+c78fQtNTR7jHSBdom2S
Xhl7YRU/fwNiNFPA40uhKqyM3KAWhNbIizmEwh9M7t8QYtQjOkwv8KLSxrZ5i0EE
Tciv/0aS6Dy9947fh2NNs3lMCmObvb008upeYKDb7mLFVEh9YJ8A237sPLEunksZ
l2v/AfnSirw334YlLzRKjffCTNMqOJeuW2fi/GZ1Bz9lhhwougsUtyEPi0f35p9H
XbknR/NXRk83wrIwYdTrdApZddZIMkNyfiCOZMOjGrZK5killNE7P+SRyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuTD8rV8gA7YNVwRqZ+EPq/N5XCMB8GA1UdIwQY
MBaAFLuCuNPBsPeMOhn2Fk6ygh4jDP5OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTRLNDA4R3c5NHc2R2ZZV1RyS0NIaU1NX2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yODBjYTktZjdkOC00ZmZhLWJhMzQt
YTEzZjQ0ODFiYzZjLzEvdTRLNDA4R3c5NHc2R2ZZV1RyS0NIaU1NX2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8yODBjYTktZjdkOC00ZmZhLWJhMzQtYTEzZjQ0ODFiYzZj
LzEvdTRLNDA4R3c5NHc2R2ZZV1RyS0NIaU1NX2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmNYOQEem
CR2zX1rweVDW9LZGrlLBQPXmwWVWemizkUmOMJIfLuv3CRgp+HrMN3cvJcW7VYx3
cp1S1YfhvvMQnQBJEHAS/SrrThIXquR+N0HrtwxaW5yqolAuUVs36fe2OXQJJYHF
/ebHO7ByHBn3/fKD/qFUGkhCJmRO3fW4z0Z+UVzu6fgyyb9W0dPJ7UfczPzrgLZq
zoETjYmMxRKSyr1xdJurs8rZlpDrcvOMQOtg+dGXVPmoPwmgmE82QSU/WTWIjTaw
auXk44sksXS6jo9xtgeqT7ZkQUbb8KNggqcPx8/LJtCg/DKzdmKuCu1cZ+HoES+I
6HlOSklCVFbZZQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:32:17 2025 by rpki-client