Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
File: Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft (raw, json)
Hash identifier: qw6zOea44Q4sOfSrnDLjpR2vMtKEifO6cXrgscv6lp8=
Subject key identifier: D8:84:84:18:82:EC:BC:25:02:CC:08:4E:76:68:90:A5:1F:80:E2:91
Authority key identifier: 0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
Certificate issuer: /CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Certificate serial: 0194BD4E477E5D49C2F6869539C36A521705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl (hash: 9QZBavtEGSy6+rurtO229F38fxPRgclhtKjgV7r4CmY=)
2: jNQsNrl4OFuXyBApJXCWmUTjpZk.roa (hash: N8A4PApBA9zWi0+/3/LkUNmVkYXpRd84xcIjX23MSx8=)
3: sZIsfl2SHxbYgBp6wBGthOfYd7Q.roa (hash: XDzfTTG5ZalMDxihCFcFH9odfMn9DlFUshPNduKnlps=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:47:7e:5d:49:c2:f6:86:95:39:c3:6a:52:17:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=d884841882ecbc2502cc084e766890a51f80e291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6f:b9:a2:82:48:bf:09:14:33:87:ee:42:fb:
98:f4:b8:27:15:5b:ba:7d:2f:03:f2:b6:72:bf:d4:
38:55:4a:98:bc:db:bc:8c:53:0d:84:f9:b9:fd:a1:
61:ff:76:86:f0:98:25:1c:51:37:a3:ee:8f:8f:83:
dc:01:21:1c:1d:57:2c:35:1d:a8:c0:5a:0d:bf:0c:
c6:ff:d7:bc:bd:4c:1a:13:53:e5:c3:d4:92:1d:13:
f5:63:59:5f:f8:6f:59:cf:50:92:7f:5d:c4:c1:3d:
42:e4:a5:4b:9f:29:f1:46:6f:ef:3f:87:fb:7f:85:
1c:68:60:f3:c5:7a:ac:07:85:ac:10:6d:fa:9f:09:
67:20:d9:97:fe:84:59:e4:10:05:ef:58:0c:b4:63:
87:ad:49:bb:c1:91:29:8b:32:eb:bd:9c:d2:6b:5b:
9c:5d:76:a4:9c:aa:0c:cb:f1:11:a6:c6:19:a2:66:
7e:8b:9d:1c:3d:c8:7b:a9:a7:06:4d:f1:dd:0c:e3:
a1:f3:3f:da:79:9a:9b:f7:67:06:08:32:27:f1:c9:
7b:d4:46:dd:a5:18:82:00:c8:63:3a:a1:14:e9:ff:
60:c7:f4:e6:32:ca:e5:43:73:3e:51:21:fc:96:1f:
fb:e0:33:fb:aa:74:96:37:e5:fc:0c:64:4e:1c:5b:
a5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:84:84:18:82:EC:BC:25:02:CC:08:4E:76:68:90:A5:1F:80:E2:91
X509v3 Authority Key Identifier:
keyid:0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9c:34:3b:69:d1:be:2b:36:c4:2e:d9:56:f6:32:77:aa:da:
fc:2e:eb:65:83:13:cc:bc:bc:a2:8f:58:b8:b9:ba:ce:24:83:
75:15:b0:2b:8e:7d:16:30:a6:2a:42:ef:e5:9e:df:7b:ae:bd:
ec:04:ea:bc:d3:15:c8:3e:3d:98:5f:39:c6:f1:d9:6a:0e:56:
b6:64:51:ce:9d:21:aa:dd:0b:3e:c4:1d:dd:52:4d:47:b2:62:
2f:da:ed:90:65:c6:85:68:67:28:98:28:85:6d:2c:e8:8a:31:
b6:97:d2:6f:6b:d5:67:59:b4:f4:11:30:6d:ef:44:18:f9:3e:
f2:f8:fc:1d:a5:e1:b5:1e:d6:21:67:2f:60:1f:44:48:d1:13:
cd:7f:9c:d4:b5:dd:a9:ac:aa:b0:5f:9b:5e:6c:f2:a9:d2:69:
09:86:26:9d:cd:a6:6f:f0:22:83:d4:54:bf:51:9d:1e:35:ef:
83:c9:a8:54:5a:27:5c:56:64:0c:2f:c0:d1:08:c4:ae:70:1d:
e8:25:ef:cf:aa:0a:d4:ea:1a:5e:48:7e:2f:fd:7b:94:be:aa:
38:00:bd:9f:bb:47:ec:fc:db:35:8c:64:b6:31:d4:08:ab:9d:
1f:ab:be:93:1e:1e:11:f4:82:3a:c9:3e:f2:09:75:1d:53:af:
71:81:45:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tkd+XUnC9oaVOcNqUhcFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZWVhZWUwODYzZDFkY2E2MjRmNjFmMzliMjE4MWM3ZGI2
Y2JhM2YwHhcNMjUwMTMxMTcwMDExWhcNMjUwMjAxMTcwMDExWjAzMTEwLwYDVQQD
EyhkODg0ODQxODgyZWNiYzI1MDJjYzA4NGU3NjY4OTBhNTFmODBlMjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW+5ooJIvwkUM4fuQvuY9LgnFVu6
fS8D8rZyv9Q4VUqYvNu8jFMNhPm5/aFh/3aG8JglHFE3o+6Pj4PcASEcHVcsNR2o
wFoNvwzG/9e8vUwaE1Plw9SSHRP1Y1lf+G9Zz1CSf13EwT1C5KVLnynxRm/vP4f7
f4UcaGDzxXqsB4WsEG36nwlnINmX/oRZ5BAF71gMtGOHrUm7wZEpizLrvZzSa1uc
XXaknKoMy/ERpsYZomZ+i50cPch7qacGTfHdDOOh8z/aeZqb92cGCDIn8cl71Ebd
pRiCAMhjOqEU6f9gx/TmMsrlQ3M+USH8lh/74DP7qnSWN+X8DGROHFul3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNiEhBiC7LwlAswITnZokKUfgOKRMB8GA1UdIwQY
MBaAFAruruCGPR3KYk9h85shgcfbbLo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3U2dTRJWTlIY3BpVDJIem15R0J4OXRzdWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9iNjI4NzgtY2NjOC00ZDU3LTlmZTAt
N2ExMDRiODBjZDcxLzEvQ3U2dTRJWTlIY3BpVDJIem15R0J4OXRzdWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9iNjI4NzgtY2NjOC00ZDU3LTlmZTAtN2ExMDRiODBjZDcx
LzEvQ3U2dTRJWTlIY3BpVDJIem15R0J4OXRzdWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUpw0O2nR
vis2xC7ZVvYyd6ra/C7rZYMTzLy8oo9YuLm6ziSDdRWwK459FjCmKkLv5Z7fe669
7ATqvNMVyD49mF85xvHZag5WtmRRzp0hqt0LPsQd3VJNR7JiL9rtkGXGhWhnKJgo
hW0s6IoxtpfSb2vVZ1m09BEwbe9EGPk+8vj8HaXhtR7WIWcvYB9ESNETzX+c1LXd
qayqsF+bXmzyqdJpCYYmnc2mb/Aig9RUv1GdHjXvg8moVFonXFZkDC/A0QjErnAd
6CXvz6oK1OoaXkh+L/17lL6qOAC9n7tH7PzbNYxktjHUCKudH6u+kx4eEfSCOsk+
8gl1HVOvcYFFVg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:03 2025 by rpki-client