Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
File: 4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft (raw, json)
Hash identifier: HbPr9YeA+3v/M+8lhVdVdjKgkkrHjpuX60FynorNnfQ=
Subject key identifier: 46:30:B7:2A:34:A1:06:DE:25:6A:4A:3B:20:3D:D3:4F:B3:45:05:6C
Authority key identifier: E1:4F:26:4F:A4:A4:C9:0D:CB:4A:99:CC:CE:C5:0C:55:08:F4:44:98
Certificate issuer: /CN=e14f264fa4a4c90dcb4a99cccec50c5508f44498
Certificate serial: 0194BCAA1E67A7E76200274574856E28D6FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: 4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl (hash: hxQ2Y/BByH7CVwohO+69gv3wbeyfGMZ29ApO9Df2kr0=)
2: Bc91mt-aFwpn9DwtZ394zqgnwAk.roa (hash: 4bDq/638WIm11nNJQQb6YF/e7JLWlty4w4akKWg+wAI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1e:67:a7:e7:62:00:27:45:74:85:6e:28:d6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14f264fa4a4c90dcb4a99cccec50c5508f44498
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=4630b72a34a106de256a4a3b203dd34fb345056c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2b:99:6e:4a:d3:e7:37:43:a3:3a:ce:82:cb:
51:5e:ef:5c:21:37:9b:1d:49:f4:3b:25:74:5d:d8:
17:a1:f7:70:9c:1c:23:0f:87:4e:31:42:f7:51:1d:
4e:28:c9:88:f7:ec:92:71:df:7b:0f:07:2f:f6:ab:
10:28:0c:c0:b0:03:f7:05:64:18:e4:18:17:91:e2:
69:f7:3e:c2:19:cb:b5:4d:d4:9b:94:19:76:8e:71:
72:62:0c:0b:c2:9a:db:d9:ca:a4:6d:e9:7c:ae:e1:
81:49:7a:b9:16:ba:aa:b2:e9:6b:4e:b0:2e:0b:1f:
4e:61:1f:59:2f:84:3f:2c:8e:8e:84:d0:a7:27:01:
7a:64:6a:02:fa:23:d5:1d:59:80:ec:ca:df:a8:7f:
6e:1a:8a:0f:34:76:d3:66:08:83:f1:27:1b:72:a2:
b1:f1:90:45:6e:0a:c1:05:88:89:42:72:38:a3:10:
5d:2f:ea:2b:eb:d5:eb:3f:37:e9:62:f3:46:0f:c4:
83:33:49:59:e3:8d:1d:94:7d:5f:1d:18:8d:00:61:
5b:c4:fe:7e:77:93:5c:95:86:25:d6:b4:c0:2b:a1:
10:0a:25:e7:6c:aa:9b:15:99:ad:91:a5:e0:f9:f8:
d7:c0:28:4e:c2:39:51:a5:79:50:7b:08:0d:d9:a8:
07:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:30:B7:2A:34:A1:06:DE:25:6A:4A:3B:20:3D:D3:4F:B3:45:05:6C
X509v3 Authority Key Identifier:
keyid:E1:4F:26:4F:A4:A4:C9:0D:CB:4A:99:CC:CE:C5:0C:55:08:F4:44:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5d:5a:f0:04:60:e0:5f:f2:28:70:9c:a2:cf:d6:e9:94:b0:
87:45:2f:12:de:9c:b9:f9:63:6f:f7:39:36:b2:7f:da:48:0e:
95:92:ba:8a:73:60:35:1d:42:ab:d2:8b:1f:a0:a3:97:42:3f:
b1:33:f7:26:e7:78:60:4c:99:ba:94:7d:de:39:1b:30:94:38:
17:42:32:ca:66:10:35:fe:e9:30:cd:6f:4c:30:da:30:2c:fa:
e9:eb:80:35:28:07:fa:e6:d5:61:21:6a:15:27:03:2b:ed:0f:
88:de:59:8f:45:a8:21:04:43:31:e5:28:58:73:29:73:99:d5:
39:6a:2d:e7:e6:73:03:3d:31:fd:97:5f:96:9e:fa:12:94:92:
2e:60:e5:a8:a5:89:b6:38:76:6f:cd:0e:1d:28:9b:1d:58:5b:
38:0d:eb:7d:2f:cf:15:84:5d:1d:ca:35:5b:0f:58:0c:98:f3:
ad:43:4b:4b:96:52:65:12:1b:ee:f3:ab:e5:81:20:dc:28:c9:
44:9e:45:e0:47:6e:bd:58:3e:11:76:57:bf:83:d2:51:5f:f7:
ff:e6:10:7f:0b:a5:eb:e7:91:69:9d:f1:c8:44:f1:b9:d8:37:
44:d8:b7:b1:15:c3:05:fa:56:59:07:47:88:e2:04:8c:3f:e4:
91:52:58:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qh5np+diACdFdIVuKNb8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNGYyNjRmYTRhNGM5MGRjYjRhOTljY2NlYzUwYzU1MDhm
NDQ0OTgwHhcNMjUwMTMxMTQwMDUzWhcNMjUwMjAxMTQwMDUzWjAzMTEwLwYDVQQD
Eyg0NjMwYjcyYTM0YTEwNmRlMjU2YTRhM2IyMDNkZDM0ZmIzNDUwNTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSuZbkrT5zdDozrOgstRXu9cITeb
HUn0OyV0XdgXofdwnBwjD4dOMUL3UR1OKMmI9+yScd97Dwcv9qsQKAzAsAP3BWQY
5BgXkeJp9z7CGcu1TdSblBl2jnFyYgwLwprb2cqkbel8ruGBSXq5FrqqsulrTrAu
Cx9OYR9ZL4Q/LI6OhNCnJwF6ZGoC+iPVHVmA7MrfqH9uGooPNHbTZgiD8ScbcqKx
8ZBFbgrBBYiJQnI4oxBdL+or69XrPzfpYvNGD8SDM0lZ440dlH1fHRiNAGFbxP5+
d5NclYYl1rTAK6EQCiXnbKqbFZmtkaXg+fjXwChOwjlRpXlQewgN2agHSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYwtyo0oQbeJWpKOyA900+zRQVsMB8GA1UdIwQY
MBaAFOFPJk+kpMkNy0qZzM7FDFUI9ESYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFU4bVQ2U2t5UTNMU3BuTXpzVU1WUWowUkpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80MTU5YzMtODE0ZC00MDAxLTg1Mjct
MTM5MDQzNzQ5YzQ4LzEvNFU4bVQ2U2t5UTNMU3BuTXpzVU1WUWowUkpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy80MTU5YzMtODE0ZC00MDAxLTg1MjctMTM5MDQzNzQ5YzQ4
LzEvNFU4bVQ2U2t5UTNMU3BuTXpzVU1WUWowUkpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj11a8ARg
4F/yKHCcos/W6ZSwh0UvEt6cufljb/c5NrJ/2kgOlZK6inNgNR1Cq9KLH6Cjl0I/
sTP3Jud4YEyZupR93jkbMJQ4F0IyymYQNf7pMM1vTDDaMCz66euANSgH+ubVYSFq
FScDK+0PiN5Zj0WoIQRDMeUoWHMpc5nVOWot5+ZzAz0x/Zdflp76EpSSLmDlqKWJ
tjh2b80OHSibHVhbOA3rfS/PFYRdHco1Ww9YDJjzrUNLS5ZSZRIb7vOr5YEg3CjJ
RJ5F4EduvVg+EXZXv4PSUV/3/+YQfwul6+eRaZ3xyETxudg3RNi3sRXDBfpWWQdH
iOIEjD/kkVJY/g==
-----END CERTIFICATE-----
Generated at Tue Apr 29 17:04:07 2025 by rpki-client