Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
File: D9zw7HuvNJ6JLVERXCLA29Q1C44.mft (raw, json)
Hash identifier: LfBfmjVxhDeHgky9YaZnOfOqpypP5SNzAHDMZGlat7w=
Subject key identifier: 59:CC:45:E9:46:50:FE:1E:D5:FE:65:B1:0E:DB:59:A9:A4:32:C6:BB
Authority key identifier: 0F:DC:F0:EC:7B:AF:34:9E:89:2D:51:11:5C:22:C0:DB:D4:35:0B:8E
Certificate issuer: /CN=0fdcf0ec7baf349e892d51115c22c0dbd4350b8e
Certificate serial: 0194BD857A1D4BE50D3400DB628C1B52D9F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
Manifest number: E3
Signing time: Fri 31 Jan 2025 18:00:28 +0000
Manifest this update: Fri 31 Jan 2025 18:00:28 +0000
Manifest next update: Sat 01 Feb 2025 18:00:28 +0000
Files and hashes: 1: D9zw7HuvNJ6JLVERXCLA29Q1C44.crl (hash: JnAmMcKcgo81krXxeNniqFrrJEHM6Pd/xAkS5UdoIj4=)
2: LkbZ9NbuqV8kVwW0R6t_W7E36SY.roa (hash: OFwtZ8nR+nHbeTcy4UO/g/3elRZlu1GMxchq0zT/W/U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7a:1d:4b:e5:0d:34:00:db:62:8c:1b:52:d9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fdcf0ec7baf349e892d51115c22c0dbd4350b8e
Validity
Not Before: Jan 31 18:00:28 2025 GMT
Not After : Feb 1 18:00:28 2025 GMT
Subject: CN=59cc45e94650fe1ed5fe65b10edb59a9a432c6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:81:6d:4b:4f:ca:cf:ae:e7:87:08:65:86:ca:
93:e5:a2:40:3c:9c:de:52:bf:54:17:1f:d8:72:be:
96:b8:2f:1c:08:91:0c:85:29:71:21:19:94:93:b5:
28:49:d4:6e:6b:72:4b:f8:04:aa:6f:44:17:03:f2:
c8:00:b4:fc:af:23:8d:e5:0f:ef:21:a5:0e:08:d2:
5c:de:cf:98:a3:eb:ce:50:68:e1:e5:4c:a6:3e:1d:
ff:0d:d0:c0:7e:35:2d:77:c9:45:74:cd:ef:8d:55:
f2:30:b1:5f:24:db:76:c7:84:ac:28:e5:35:d1:e8:
28:69:ac:0f:2a:ba:80:f6:55:1b:ae:38:12:ef:c5:
99:02:84:e0:3d:48:a1:de:64:4e:15:dc:48:be:c4:
a2:1f:e6:f3:66:27:c7:e4:de:ca:48:f3:3e:6a:21:
45:1d:95:0e:2b:1d:7d:cf:12:32:0c:75:22:dd:03:
92:86:79:58:49:30:e6:b3:51:91:9e:46:00:5e:1e:
d9:02:bf:e3:ee:20:e4:32:47:07:73:7e:dd:45:19:
fa:4d:27:97:c9:2b:51:84:0c:24:b4:b6:3f:4b:77:
08:9a:4f:19:2e:28:d4:c6:09:8a:53:f3:72:0c:18:
b3:a3:c8:1c:c3:81:48:aa:b7:f9:3c:5d:77:5b:e7:
d6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CC:45:E9:46:50:FE:1E:D5:FE:65:B1:0E:DB:59:A9:A4:32:C6:BB
X509v3 Authority Key Identifier:
keyid:0F:DC:F0:EC:7B:AF:34:9E:89:2D:51:11:5C:22:C0:DB:D4:35:0B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:9d:0f:7a:69:7e:d4:f3:7c:17:d6:2c:48:06:bc:ca:eb:da:
ec:e2:a7:c3:04:06:82:37:7a:eb:9e:3c:58:7b:01:24:68:b3:
df:b5:79:9d:5b:ef:4d:1e:b3:3e:5f:f7:b9:51:bf:57:42:98:
ff:72:0b:9a:c4:27:4e:36:b1:2c:a0:f8:7a:02:cc:85:e6:f0:
33:01:55:8e:49:61:a2:d9:c8:fa:18:77:27:ca:69:ac:a4:d5:
cb:26:4e:67:b1:91:b8:28:86:dd:8d:17:02:f7:14:0d:79:da:
f8:78:92:89:d7:41:89:5c:14:28:0a:f6:33:9b:a1:f1:10:a2:
d3:53:cc:a1:6b:28:23:50:a0:7e:42:b5:ce:79:4b:5b:86:47:
3a:87:89:27:e7:e5:63:38:1c:ff:c2:4a:d5:e5:9e:8c:d8:31:
cc:7f:83:03:9c:a8:f2:c5:95:aa:a8:ac:63:c1:29:cf:8f:4f:
1a:38:ef:1e:6d:a4:8a:4b:84:07:0b:bd:5b:9b:cd:80:be:0e:
6c:f9:2a:f4:f4:54:60:fc:2c:db:b8:e7:d0:9b:0b:8e:fb:00:
e1:e6:b3:4d:e9:fd:45:e5:21:21:c0:d7:f1:de:94:1b:92:f0:
48:b0:29:95:10:e5:2e:b9:23:1f:fa:e9:7a:09:56:58:f6:cc:
4d:31:0e:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hXodS+UNNADbYowbUtn5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZGNmMGVjN2JhZjM0OWU4OTJkNTExMTVjMjJjMGRiZDQz
NTBiOGUwHhcNMjUwMTMxMTgwMDI4WhcNMjUwMjAxMTgwMDI4WjAzMTEwLwYDVQQD
Eyg1OWNjNDVlOTQ2NTBmZTFlZDVmZTY1YjEwZWRiNTlhOWE0MzJjNmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YFtS0/Kz67nhwhlhsqT5aJAPJze
Ur9UFx/Ycr6WuC8cCJEMhSlxIRmUk7UoSdRua3JL+ASqb0QXA/LIALT8ryON5Q/v
IaUOCNJc3s+Yo+vOUGjh5UymPh3/DdDAfjUtd8lFdM3vjVXyMLFfJNt2x4SsKOU1
0egoaawPKrqA9lUbrjgS78WZAoTgPUih3mROFdxIvsSiH+bzZifH5N7KSPM+aiFF
HZUOKx19zxIyDHUi3QOShnlYSTDms1GRnkYAXh7ZAr/j7iDkMkcHc37dRRn6TSeX
yStRhAwktLY/S3cImk8ZLijUxgmKU/NyDBizo8gcw4FIqrf5PF13W+fWKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnMRelGUP4e1f5lsQ7bWamkMsa7MB8GA1UdIwQY
MBaAFA/c8Ox7rzSeiS1REVwiwNvUNQuOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDl6dzdIdXZOSjZKTFZFUlhDTEEyOVExQzQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNDgyYmEtNDFjZS00MDlhLThlN2Ut
YjI5NTgzOGFiYmQ5LzEvRDl6dzdIdXZOSjZKTFZFUlhDTEEyOVExQzQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yNDgyYmEtNDFjZS00MDlhLThlN2UtYjI5NTgzOGFiYmQ5
LzEvRDl6dzdIdXZOSjZKTFZFUlhDTEEyOVExQzQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY50Peml+
1PN8F9YsSAa8yuva7OKnwwQGgjd66548WHsBJGiz37V5nVvvTR6zPl/3uVG/V0KY
/3ILmsQnTjaxLKD4egLMhebwMwFVjklhotnI+hh3J8pprKTVyyZOZ7GRuCiG3Y0X
AvcUDXna+HiSiddBiVwUKAr2M5uh8RCi01PMoWsoI1CgfkK1znlLW4ZHOoeJJ+fl
Yzgc/8JK1eWejNgxzH+DA5yo8sWVqqisY8Epz49PGjjvHm2kikuEBwu9W5vNgL4O
bPkq9PRUYPws27jn0JsLjvsA4eazTen9ReUhIcDX8d6UG5LwSLAplRDlLrkjH/rp
eglWWPbMTTEOhA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:08:35 2025 by rpki-client