Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft
File: 2q_pD50IEzTMko7e6bxzFUBwjf0.mft (raw, json)
Hash identifier: of/9tqWr5VnwlA2F5N2eEWYh4alzEbQhBwM6AfxgVaE=
Subject key identifier: 20:54:1D:6C:A2:58:46:46:EC:81:48:78:0D:DD:B5:10:DE:D3:56:98
Authority key identifier: DA:AF:E9:0F:9D:08:13:34:CC:92:8E:DE:E9:BC:73:15:40:70:8D:FD
Certificate issuer: /CN=daafe90f9d081334cc928edee9bc731540708dfd
Certificate serial: 0194BD85260152BC49108DC811AA976F0A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q_pD50IEzTMko7e6bxzFUBwjf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft
Manifest number: 0780
Signing time: Fri 31 Jan 2025 18:00:07 +0000
Manifest this update: Fri 31 Jan 2025 18:00:07 +0000
Manifest next update: Sat 01 Feb 2025 18:00:07 +0000
Files and hashes: 1: 2q_pD50IEzTMko7e6bxzFUBwjf0.crl (hash: 5h9WrtkyzyDQ0CFqM7EhEJQAhWTYgTUBVQD3FlppwY8=)
2: ptCjyawSJ9frfP9fH_ikMswCnsI.roa (hash: qlAjQ7L6msxhMlwj1dEaHE32m8HH4N1buR0Bga+2/Qo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:26:01:52:bc:49:10:8d:c8:11:aa:97:6f:0a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daafe90f9d081334cc928edee9bc731540708dfd
Validity
Not Before: Jan 31 18:00:07 2025 GMT
Not After : Feb 1 18:00:07 2025 GMT
Subject: CN=20541d6ca2584646ec8148780dddb510ded35698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:24:97:ef:19:06:91:22:5f:ff:09:c3:38:
84:3b:df:f1:73:83:13:95:db:dc:99:03:dc:ed:0f:
d5:6c:83:af:c7:53:a9:d8:6d:c6:aa:d0:ea:48:05:
88:94:66:9f:20:d1:22:a3:b6:a4:b5:eb:fa:4f:77:
3b:d9:d4:8f:cf:81:7e:5f:83:38:85:43:77:dc:38:
c3:59:f8:ce:f7:a9:02:00:b2:68:b7:ad:1d:33:55:
66:b9:db:da:cf:b6:98:6d:72:af:87:1e:77:c5:55:
e6:80:c3:34:b8:7d:fc:93:ea:11:a3:16:92:72:39:
d0:9e:53:5d:61:4a:55:ee:cd:3d:27:7b:75:5e:3d:
61:4b:bd:47:e9:05:8e:e8:b0:6a:aa:7a:d7:5a:6e:
fc:ce:bd:2d:3e:38:73:3f:6d:3f:e2:72:4c:ed:19:
2a:f3:12:20:95:ad:30:b9:a1:e9:b7:97:0b:4a:1d:
ee:0a:89:8b:49:bf:54:8b:ff:af:48:55:b3:d2:46:
0e:39:dc:ce:6d:56:ee:09:40:24:ef:ec:0e:61:6f:
94:e2:b0:f0:2e:60:d7:a1:66:c3:ed:97:60:04:06:
f6:08:8a:14:3f:7b:0b:0d:2e:ae:e1:f2:eb:e2:74:
e2:45:39:e4:c2:fe:51:09:ce:48:f0:20:25:b4:bc:
ea:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:54:1D:6C:A2:58:46:46:EC:81:48:78:0D:DD:B5:10:DE:D3:56:98
X509v3 Authority Key Identifier:
keyid:DA:AF:E9:0F:9D:08:13:34:CC:92:8E:DE:E9:BC:73:15:40:70:8D:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q_pD50IEzTMko7e6bxzFUBwjf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f3:54:cc:09:5e:ed:46:95:f1:63:10:3f:d7:9b:d4:22:e6:
31:10:85:e7:0a:9d:6e:81:ae:5f:74:ef:2f:0b:49:5c:a6:48:
91:c5:a1:41:b7:e8:f4:b2:e2:03:28:be:ad:6a:25:d3:30:77:
82:93:4d:69:42:02:63:b5:cc:21:8e:16:80:03:89:6d:f0:96:
62:3b:d6:5e:2f:2f:19:31:77:77:d7:8d:d7:b9:f2:38:b4:08:
1b:80:60:50:41:97:0b:06:30:ad:ec:5a:32:f0:d0:04:69:9f:
28:cf:9d:5a:cf:bb:59:98:9a:9c:d1:a6:1e:67:13:e9:4d:87:
a6:e4:56:c5:9f:00:01:8c:d9:4e:54:b5:79:26:39:7f:91:2f:
b8:17:f2:45:d8:82:33:a6:8e:49:5a:ea:c4:7b:5f:d7:67:12:
9d:d2:20:b7:a1:c6:e4:04:f5:32:14:94:fe:41:31:5c:32:a9:
80:19:b7:2a:a0:8c:b2:e4:02:81:24:32:cc:28:9e:78:9c:03:
97:42:7b:70:c3:73:1a:b0:f1:a4:98:76:c3:ab:28:dc:96:c8:
04:2e:60:01:9f:74:75:3f:c7:3c:ea:0d:22:2f:0d:be:d2:cf:
a4:72:b6:91:34:8c:73:14:da:63:92:c1:f8:fd:62:ca:4a:40:
47:f9:2a:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hSYBUrxJEI3IEaqXbwoQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWZlOTBmOWQwODEzMzRjYzkyOGVkZWU5YmM3MzE1NDA3
MDhkZmQwHhcNMjUwMTMxMTgwMDA3WhcNMjUwMjAxMTgwMDA3WjAzMTEwLwYDVQQD
EygyMDU0MWQ2Y2EyNTg0NjQ2ZWM4MTQ4NzgwZGRkYjUxMGRlZDM1Njk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolkkl+8ZBpEiX/8JwziEO9/xc4MT
ldvcmQPc7Q/VbIOvx1Op2G3GqtDqSAWIlGafINEio7aktev6T3c72dSPz4F+X4M4
hUN33DjDWfjO96kCALJot60dM1Vmudvaz7aYbXKvhx53xVXmgMM0uH38k+oRoxaS
cjnQnlNdYUpV7s09J3t1Xj1hS71H6QWO6LBqqnrXWm78zr0tPjhzP20/4nJM7Rkq
8xIgla0wuaHpt5cLSh3uComLSb9Ui/+vSFWz0kYOOdzObVbuCUAk7+wOYW+U4rDw
LmDXoWbD7ZdgBAb2CIoUP3sLDS6u4fLr4nTiRTnkwv5RCc5I8CAltLzqsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBUHWyiWEZG7IFIeA3dtRDe01aYMB8GA1UdIwQY
MBaAFNqv6Q+dCBM0zJKO3um8cxVAcI39MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnFfcEQ1MElFelRNa283ZTZieHpGVUJ3amYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84YmIzYzEtMTk5ZC00NDliLWFjNDYt
YmJkOTJjY2FmYTg4LzEvMnFfcEQ1MElFelRNa283ZTZieHpGVUJ3amYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS84YmIzYzEtMTk5ZC00NDliLWFjNDYtYmJkOTJjY2FmYTg4
LzEvMnFfcEQ1MElFelRNa283ZTZieHpGVUJ3amYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFvNUzAle
7UaV8WMQP9eb1CLmMRCF5wqdboGuX3TvLwtJXKZIkcWhQbfo9LLiAyi+rWol0zB3
gpNNaUICY7XMIY4WgAOJbfCWYjvWXi8vGTF3d9eN17nyOLQIG4BgUEGXCwYwrexa
MvDQBGmfKM+dWs+7WZianNGmHmcT6U2HpuRWxZ8AAYzZTlS1eSY5f5EvuBfyRdiC
M6aOSVrqxHtf12cSndIgt6HG5AT1MhSU/kExXDKpgBm3KqCMsuQCgSQyzCieeJwD
l0J7cMNzGrDxpJh2w6so3JbIBC5gAZ90dT/HPOoNIi8NvtLPpHK2kTSMcxTaY5LB
+P1iykpAR/kqOA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:17 2025 by rpki-client