Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
File: 37H24AFTpJGGEbFLawP2gS7YikM.mft (raw, json)
Hash identifier: j7o4f2jCKE92xrUmuNtjVUODtrK0fhSM7BrXllwviH4=
Subject key identifier: D9:E1:D4:C0:AA:80:8E:35:92:27:0B:F2:49:02:B5:0A:FD:AD:D6:FB
Authority key identifier: DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43
Certificate issuer: /CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
Certificate serial: 0194BCAA0AFDF5503CE9775C8638ADA2D6B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
Manifest number: 0D35
Signing time: Fri 31 Jan 2025 14:00:47 +0000
Manifest this update: Fri 31 Jan 2025 14:00:47 +0000
Manifest next update: Sat 01 Feb 2025 14:00:47 +0000
Files and hashes: 1: 37H24AFTpJGGEbFLawP2gS7YikM.crl (hash: Vdt+6TFGQVtDWtDLHAk1BpHjJ475MAUqrcTOqWL+DU0=)
2: BTmp1b2H10lDEyqaD6QbLg-QUfA.roa (hash: N5JJaG9nV6D42/n2t32zZB6XXWBTeaXuJO0OLEH8EXQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0a:fd:f5:50:3c:e9:77:5c:86:38:ad:a2:d6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
Validity
Not Before: Jan 31 14:00:47 2025 GMT
Not After : Feb 1 14:00:47 2025 GMT
Subject: CN=d9e1d4c0aa808e3592270bf24902b50afdadd6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:62:f4:2b:77:ca:40:aa:39:7f:ac:03:ca:c7:
7f:a6:2f:3b:5d:4e:d2:12:ce:01:06:11:aa:73:32:
41:f8:9d:96:35:55:44:18:b1:f7:f2:45:27:c4:5e:
98:d0:37:47:19:2d:a1:6d:fa:bb:bd:c4:ff:17:51:
b4:4a:46:58:89:15:76:7d:d2:35:52:6e:31:b1:00:
f5:22:df:62:9d:b7:89:63:4c:f8:b3:29:22:cb:0d:
3c:c9:3e:75:7a:31:ae:2a:d7:ec:ca:a0:d9:e1:9b:
1c:c3:af:46:14:35:8c:6f:b6:b6:d8:e6:46:36:c2:
a1:14:0e:c2:6b:76:51:1c:c0:3f:c0:cf:63:a6:46:
46:07:3e:10:de:be:31:9a:47:e9:ce:d6:fb:c4:90:
e3:7f:08:d2:52:75:ee:94:d4:de:6d:be:da:ba:66:
8e:cc:5b:44:ad:79:a3:f9:36:46:65:23:ec:2a:78:
8e:72:a9:3b:31:c5:03:ed:d4:fd:e0:26:5e:bc:21:
a4:b5:1e:76:ac:d5:73:2c:a4:be:56:bf:1b:46:cd:
44:14:18:1b:d0:2f:1b:2d:c3:dd:90:b8:56:f2:00:
51:32:ea:83:c6:31:07:25:d3:e2:f9:92:d0:64:f8:
b8:01:6b:ef:98:47:9d:fa:1f:e6:c0:10:e0:db:d9:
08:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E1:D4:C0:AA:80:8E:35:92:27:0B:F2:49:02:B5:0A:FD:AD:D6:FB
X509v3 Authority Key Identifier:
keyid:DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:9f:8c:a3:d0:83:00:30:a3:8d:fb:be:ed:42:6b:2c:44:d5:
17:4b:53:56:37:e0:11:80:70:e8:82:33:21:29:2e:a5:f4:42:
09:36:6f:79:0c:d8:32:7c:c0:3e:6c:1a:8c:c0:7a:0c:c1:3d:
1d:e7:4c:ae:db:3a:00:4d:19:05:1e:9b:71:e6:81:79:d0:4e:
7e:1b:42:06:3e:81:d9:4b:50:73:94:93:46:fc:70:9a:22:19:
f6:1a:18:49:cd:31:bd:75:fb:62:45:1e:6d:78:ab:66:55:35:
ef:d4:df:e4:85:a8:e9:7b:a3:26:41:97:45:d3:02:c0:99:0f:
cb:ba:0b:4f:49:b1:45:e8:bb:31:f6:12:7d:97:4a:4e:d3:90:
6c:7d:de:6f:21:59:19:d7:54:90:84:35:bf:7f:4d:09:25:43:
69:de:a8:32:42:87:ae:53:44:25:56:c5:c9:15:81:fd:31:65:
8a:6a:57:4c:ba:70:9e:8c:bf:a2:2c:02:89:de:2d:d6:a5:71:
43:a6:3e:cf:09:65:30:06:58:28:77:90:f9:08:7f:f1:be:02:
24:54:66:8e:38:5f:87:f1:49:93:75:97:95:29:fd:d2:9d:ed:
9a:34:bf:6f:7b:19:3a:7f:2e:63:ef:2f:49:a7:b7:2d:f4:1a:
f6:e1:5e:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qgr99VA86Xdchjitota1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYjFmNmUwMDE1M2E0OTE4NjExYjE0YjZiMDNmNjgxMmVk
ODhhNDMwHhcNMjUwMTMxMTQwMDQ3WhcNMjUwMjAxMTQwMDQ3WjAzMTEwLwYDVQQD
EyhkOWUxZDRjMGFhODA4ZTM1OTIyNzBiZjI0OTAyYjUwYWZkYWRkNmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmL0K3fKQKo5f6wDysd/pi87XU7S
Es4BBhGqczJB+J2WNVVEGLH38kUnxF6Y0DdHGS2hbfq7vcT/F1G0SkZYiRV2fdI1
Um4xsQD1It9inbeJY0z4sykiyw08yT51ejGuKtfsyqDZ4Zscw69GFDWMb7a22OZG
NsKhFA7Ca3ZRHMA/wM9jpkZGBz4Q3r4xmkfpztb7xJDjfwjSUnXulNTebb7aumaO
zFtErXmj+TZGZSPsKniOcqk7McUD7dT94CZevCGktR52rNVzLKS+Vr8bRs1EFBgb
0C8bLcPdkLhW8gBRMuqDxjEHJdPi+ZLQZPi4AWvvmEed+h/mwBDg29kIOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnh1MCqgI41kicL8kkCtQr9rdb7MB8GA1UdIwQY
MBaAFN+x9uABU6SRhhGxS2sD9oEu2IpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzdIMjRBRlRwSkdHRWJGTGF3UDJnUzdZaWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS81Mzc5ZTUtM2Q4NS00MWIxLTlkNzEt
ODEwNjI3ZmIyNjcxLzEvMzdIMjRBRlRwSkdHRWJGTGF3UDJnUzdZaWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS81Mzc5ZTUtM2Q4NS00MWIxLTlkNzEtODEwNjI3ZmIyNjcx
LzEvMzdIMjRBRlRwSkdHRWJGTGF3UDJnUzdZaWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJ+Mo9CD
ADCjjfu+7UJrLETVF0tTVjfgEYBw6IIzISkupfRCCTZveQzYMnzAPmwajMB6DME9
HedMrts6AE0ZBR6bceaBedBOfhtCBj6B2UtQc5STRvxwmiIZ9hoYSc0xvXX7YkUe
bXirZlU179Tf5IWo6XujJkGXRdMCwJkPy7oLT0mxRei7MfYSfZdKTtOQbH3ebyFZ
GddUkIQ1v39NCSVDad6oMkKHrlNEJVbFyRWB/TFlimpXTLpwnoy/oiwCid4t1qVx
Q6Y+zwllMAZYKHeQ+Qh/8b4CJFRmjjhfh/FJk3WXlSn90p3tmjS/b3sZOn8uY+8v
Sae3LfQa9uFeNQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:49 2025 by rpki-client