Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
File: inQVrmNNYTFZy9LOdKwmGn1axNQ.mft (raw, json)
Hash identifier: KtVDwOEN3bEoMCj33w8rahfmNtlE3rlS3+SmQ4Mptm0=
Subject key identifier: 87:49:9E:8C:CB:4D:60:5A:93:8E:B3:58:C5:DE:B8:61:A3:63:F2:98
Authority key identifier: 8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4
Certificate issuer: /CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4
Certificate serial: 0194BC3BF1E102800FF4746155670C120873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: inQVrmNNYTFZy9LOdKwmGn1axNQ.crl (hash: GyzOYcT/dnwsEYWKG2eXd5Stvt0yQynzkngvUozfSPg=)
2: oIUHNd2flzQuApFJl7WS3G_Ds7Q.roa (hash: r9vW54cG8T4ZtS4qpMsUDsSVtPyOl8cyq1L4laCQ/ag=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f1:e1:02:80:0f:f4:74:61:55:67:0c:12:08:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=87499e8ccb4d605a938eb358c5deb861a363f298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:99:3f:5b:20:3e:84:2b:23:c9:26:9e:27:81:
90:67:dc:45:fb:4a:ca:97:7b:91:7b:fc:bc:67:84:
62:4d:6d:05:56:29:25:1e:fd:cd:b6:be:77:3d:81:
f1:02:d1:66:be:ce:b3:f9:7d:8f:4f:03:76:1d:f8:
02:ff:84:54:b9:5e:b4:07:fd:83:29:79:7a:fe:a3:
40:b2:f3:3c:30:81:d8:96:93:d9:2d:9d:e3:bf:0d:
38:9d:c3:44:57:8b:8d:a5:5a:d3:99:1d:27:9f:45:
fa:0e:20:a5:27:bf:38:96:56:b2:2a:97:96:31:02:
a5:a6:c1:c2:cc:8a:c1:8b:50:36:d4:f3:d9:a7:ee:
9c:fa:78:05:c6:16:d9:7b:fb:31:84:cf:e3:cc:3d:
b4:17:e8:89:37:e2:e9:1a:e8:2e:1d:d2:cf:46:2d:
1b:6b:a8:f8:be:ab:e1:7d:c5:28:20:1d:17:a4:8e:
da:dc:6f:c0:20:d2:7f:4f:c5:17:a5:a0:f5:d9:f1:
1d:96:7e:bc:0a:9f:f0:78:cc:df:27:28:e5:a7:f3:
df:22:80:49:45:a0:9e:13:cb:7b:4d:f6:64:96:e5:
09:c7:5c:e4:80:1b:8a:4f:a3:fd:60:9f:fa:f8:d3:
6b:cb:6f:34:d1:a4:25:f5:a8:9d:af:d4:3b:7c:94:
fb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:49:9E:8C:CB:4D:60:5A:93:8E:B3:58:C5:DE:B8:61:A3:63:F2:98
X509v3 Authority Key Identifier:
keyid:8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:56:1c:5d:79:eb:2e:d7:aa:17:ce:a5:b6:da:6e:93:2f:1a:
e6:fb:25:61:1e:c8:eb:ff:23:90:2e:a7:b3:06:90:b9:fe:23:
c4:50:4b:e3:32:86:cd:e8:20:c7:cb:0e:8e:38:46:14:70:8c:
14:a1:6f:cf:2a:44:ce:db:8c:78:f4:7d:01:b8:4b:1b:c4:c2:
37:70:36:e2:c4:b9:df:39:66:e5:e3:b1:43:41:7a:38:36:3b:
ef:5c:f4:a9:95:4b:b8:97:2d:09:77:06:be:cb:e0:4a:38:05:
22:e9:96:28:9b:9a:e3:46:41:f7:71:4a:05:9d:0b:35:9e:a7:
8f:ce:ec:12:89:94:cd:69:9d:4a:e0:32:dc:1b:3c:87:b0:e3:
c2:8e:88:f0:31:7a:1e:38:05:89:86:4c:bd:74:48:b6:63:60:
9d:8e:7f:2d:e5:24:a5:6a:a0:99:47:97:49:0d:bd:52:a8:b2:
fb:eb:51:e2:15:2b:77:91:09:7d:14:8d:42:07:83:f1:e6:57:
8b:b2:90:c8:b3:66:da:98:04:c3:c0:35:08:64:96:2c:78:f6:
31:21:95:ab:8f:05:fe:ad:02:c6:d6:67:1c:e5:e2:da:52:d7:
b1:19:ba:b7:01:53:12:95:15:cf:a9:e5:3d:04:8b:74:ce:66:
7d:df:58:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O/HhAoAP9HRhVWcMEghzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNzQxNWFlNjM0ZDYxMzE1OWNiZDJjZTc0YWMyNjFhN2Q1
YWM0ZDQwHhcNMjUwMTMxMTIwMDMyWhcNMjUwMjAxMTIwMDMyWjAzMTEwLwYDVQQD
Eyg4NzQ5OWU4Y2NiNGQ2MDVhOTM4ZWIzNThjNWRlYjg2MWEzNjNmMjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5k/WyA+hCsjySaeJ4GQZ9xF+0rK
l3uRe/y8Z4RiTW0FViklHv3Ntr53PYHxAtFmvs6z+X2PTwN2HfgC/4RUuV60B/2D
KXl6/qNAsvM8MIHYlpPZLZ3jvw04ncNEV4uNpVrTmR0nn0X6DiClJ784llayKpeW
MQKlpsHCzIrBi1A21PPZp+6c+ngFxhbZe/sxhM/jzD20F+iJN+LpGuguHdLPRi0b
a6j4vqvhfcUoIB0XpI7a3G/AINJ/T8UXpaD12fEdln68Cp/weMzfJyjlp/PfIoBJ
RaCeE8t7TfZkluUJx1zkgBuKT6P9YJ/6+NNry2800aQl9aidr9Q7fJT7hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdJnozLTWBak46zWMXeuGGjY/KYMB8GA1UdIwQY
MBaAFIp0Fa5jTWExWcvSznSsJhp9WsTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW5RVnJtTk5ZVEZaeTlMT2RLd21HbjFheE5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83ZGJmZTctMzYxNC00NTZlLWJmNGMt
ZWY3ZjU2ODQyNTQ2LzEvaW5RVnJtTk5ZVEZaeTlMT2RLd21HbjFheE5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS83ZGJmZTctMzYxNC00NTZlLWJmNGMtZWY3ZjU2ODQyNTQ2
LzEvaW5RVnJtTk5ZVEZaeTlMT2RLd21HbjFheE5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlYcXXnr
LteqF86lttpuky8a5vslYR7I6/8jkC6nswaQuf4jxFBL4zKGzeggx8sOjjhGFHCM
FKFvzypEztuMePR9AbhLG8TCN3A24sS53zlm5eOxQ0F6ODY771z0qZVLuJctCXcG
vsvgSjgFIumWKJua40ZB93FKBZ0LNZ6nj87sEomUzWmdSuAy3Bs8h7Djwo6I8DF6
HjgFiYZMvXRItmNgnY5/LeUkpWqgmUeXSQ29Uqiy++tR4hUrd5EJfRSNQgeD8eZX
i7KQyLNm2pgEw8A1CGSWLHj2MSGVq48F/q0CxtZnHOXi2lLXsRm6twFTEpUVz6nl
PQSLdM5mfd9YAw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:02 2025 by rpki-client