Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
File: 4oPErS_YckqMfV6vQxgUyz0VEn4.mft (raw, json)
Hash identifier: 0Gzy35nolsdG/ZExGStrxoR3GU2dYsbmGYnczz7wThI=
Subject key identifier: 68:D1:D7:02:4D:E2:6E:20:8D:9A:F4:11:5C:BA:FD:35:D2:F2:A2:00
Authority key identifier: E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E
Certificate issuer: /CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e
Certificate serial: 0194BD17C489E93CFD1361192F16A873E739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
Manifest number: 026F
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: 4oPErS_YckqMfV6vQxgUyz0VEn4.crl (hash: 6iJVZHyOFBm58W4Vaka43SBly+yGQOv8X66b6IhvpOk=)
2: f-egB3l-EDxvsW6G_3sHcV0KHX4.roa (hash: JtBE12d9bxExTSrRbQgShdNCUpSoJH+tA4uA0zrPLYQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c4:89:e9:3c:fd:13:61:19:2f:16:a8:73:e7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=68d1d7024de26e208d9af4115cbafd35d2f2a200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:31:6a:be:ae:9b:ff:c4:37:72:5c:a0:d7:f1:
d8:39:e3:4e:c3:9b:2e:4e:fa:b3:94:4d:e2:4b:ab:
d9:2e:a3:b5:fb:cf:77:f7:72:f0:42:33:94:73:88:
15:a6:ee:48:3a:8e:bc:e3:79:03:02:cc:f0:35:d8:
97:ea:88:0a:a5:f1:6f:85:e4:3b:a2:c6:45:f1:f3:
6f:15:e4:02:00:2a:c1:4e:43:bf:42:be:a6:87:be:
fc:7f:f8:e7:9a:9c:54:fd:49:26:77:b4:bc:19:f4:
e5:1d:81:57:94:24:8d:c0:e9:48:ea:98:17:81:cb:
e9:32:e7:b0:13:c7:e3:17:79:4a:ab:ad:ea:33:48:
9c:8b:03:29:da:bf:fa:a6:2a:96:2e:2b:b9:59:71:
b9:9e:80:6e:07:c1:bd:d7:50:e2:a1:5d:09:96:ba:
54:d8:e9:e6:27:36:9f:79:2d:ae:d9:09:07:8c:f9:
c8:65:1c:11:91:e6:f8:23:70:c4:be:80:68:5e:f7:
c3:8c:47:1a:e1:9f:be:e7:2a:93:7f:3d:de:74:83:
17:c0:ea:4e:8e:b5:c8:c3:56:6f:ad:8b:b2:be:d9:
29:75:d8:20:1d:18:ba:48:15:18:96:9c:35:fd:51:
f0:0f:ee:00:8b:0f:6f:7a:f3:94:50:df:01:fe:f2:
50:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D1:D7:02:4D:E2:6E:20:8D:9A:F4:11:5C:BA:FD:35:D2:F2:A2:00
X509v3 Authority Key Identifier:
keyid:E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:dc:1e:71:cd:80:d0:02:5d:dd:34:f9:bf:7a:7a:18:4f:a7:
b6:5f:d0:5c:6a:c1:53:fb:84:1c:7d:9b:0c:fb:83:bb:d0:e2:
4c:a7:cb:70:0e:82:ff:fe:16:32:7c:c2:9a:5c:70:6c:0a:e4:
59:55:de:86:ac:06:8b:5e:39:15:5b:31:87:66:46:e9:81:a7:
2d:6f:10:ef:58:9b:d6:0b:36:8c:1c:22:c8:1c:d9:09:40:61:
29:f4:f4:36:3b:49:dd:6c:7c:13:06:1c:f4:83:c0:3f:e2:8e:
3f:68:5b:a8:5e:96:2d:de:af:ed:00:12:c7:90:eb:18:59:4a:
9f:8b:32:3a:64:20:bd:e0:09:d0:4e:2e:82:cd:68:a3:ae:88:
4b:df:4a:1e:18:c5:e2:33:8c:09:35:e6:c5:21:df:8b:df:cc:
c5:3b:89:d9:e2:83:90:57:59:2e:11:3f:37:02:4b:e1:fe:4e:
16:8d:eb:d3:e5:e4:0f:b5:5d:d8:94:f2:f3:2c:3c:45:0e:ba:
25:f3:80:cb:71:f6:bf:06:50:e1:e6:5f:3e:18:8c:97:d8:f1:
75:32:c3:41:17:93:1b:36:c4:14:e5:d8:7c:61:75:7c:db:53:
2f:e0:a3:06:51:4e:49:39:36:06:1e:bc:b6:0a:6c:ee:03:d7:
9a:a0:66:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F8SJ6Tz9E2EZLxaoc+c5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyODNjNGFkMmZkODcyNGE4YzdkNWVhZjQzMTgxNGNiM2Qx
NTEyN2UwHhcNMjUwMTMxMTYwMDM4WhcNMjUwMjAxMTYwMDM4WjAzMTEwLwYDVQQD
Eyg2OGQxZDcwMjRkZTI2ZTIwOGQ5YWY0MTE1Y2JhZmQzNWQyZjJhMjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DFqvq6b/8Q3clyg1/HYOeNOw5su
TvqzlE3iS6vZLqO1+89393LwQjOUc4gVpu5IOo6843kDAszwNdiX6ogKpfFvheQ7
osZF8fNvFeQCACrBTkO/Qr6mh778f/jnmpxU/Ukmd7S8GfTlHYFXlCSNwOlI6pgX
gcvpMuewE8fjF3lKq63qM0iciwMp2r/6piqWLiu5WXG5noBuB8G911DioV0JlrpU
2OnmJzafeS2u2QkHjPnIZRwRkeb4I3DEvoBoXvfDjEca4Z++5yqTfz3edIMXwOpO
jrXIw1ZvrYuyvtkpddggHRi6SBUYlpw1/VHwD+4Aiw9vevOUUN8B/vJQkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjR1wJN4m4gjZr0EVy6/TXS8qIAMB8GA1UdIwQY
MBaAFOKDxK0v2HJKjH1er0MYFMs9FRJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG9QRXJTX1lja3FNZlY2dlF4Z1V5ejBWRW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iOGNjNjYtY2M2NS00ZGMyLWFlODYt
NjFjMWVjYWFiNTVmLzEvNG9QRXJTX1lja3FNZlY2dlF4Z1V5ejBWRW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9iOGNjNjYtY2M2NS00ZGMyLWFlODYtNjFjMWVjYWFiNTVm
LzEvNG9QRXJTX1lja3FNZlY2dlF4Z1V5ejBWRW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNwecc2A
0AJd3TT5v3p6GE+ntl/QXGrBU/uEHH2bDPuDu9DiTKfLcA6C//4WMnzCmlxwbArk
WVXehqwGi145FVsxh2ZG6YGnLW8Q71ib1gs2jBwiyBzZCUBhKfT0NjtJ3Wx8EwYc
9IPAP+KOP2hbqF6WLd6v7QASx5DrGFlKn4syOmQgveAJ0E4ugs1oo66IS99KHhjF
4jOMCTXmxSHfi9/MxTuJ2eKDkFdZLhE/NwJL4f5OFo3r0+XkD7Vd2JTy8yw8RQ66
JfOAy3H2vwZQ4eZfPhiMl9jxdTLDQReTGzbEFOXYfGF1fNtTL+CjBlFOSTk2Bh68
tgps7gPXmqBm2Q==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:15:20 2025 by rpki-client