Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
File: 4IEr3duyOb5jncddzS4pbE_PSpc.mft (raw, json)
Hash identifier: hEbIFYqtzxfHnepR1SYcD0OHuxcE4+P4iStFdzmHB2E=
Subject key identifier: 91:25:EC:42:51:9F:80:E7:44:0B:EC:65:AB:B4:D5:75:2E:FA:B9:F9
Authority key identifier: E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97
Certificate issuer: /CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
Certificate serial: 0194BC72B5686F8F721C5895647C5A64B090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
Manifest number: 10B0
Signing time: Fri 31 Jan 2025 13:00:21 +0000
Manifest this update: Fri 31 Jan 2025 13:00:21 +0000
Manifest next update: Sat 01 Feb 2025 13:00:21 +0000
Files and hashes: 1: 4IEr3duyOb5jncddzS4pbE_PSpc.crl (hash: QS3oiYwAucuZsYE6JHgP2aqIWmQrgllHSEYehRwZBeo=)
2: el5qFDMV5hMW1NAGRbmjGI68Zeg.roa (hash: u+tO/pc49AyT7XnqsS0vc/mFjJM4zzaHLzr71ZyNaRI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b5:68:6f:8f:72:1c:58:95:64:7c:5a:64:b0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
Validity
Not Before: Jan 31 13:00:21 2025 GMT
Not After : Feb 1 13:00:21 2025 GMT
Subject: CN=9125ec42519f80e7440bec65abb4d5752efab9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:84:e6:0b:9c:74:c5:9c:07:15:1b:54:2a:df:
39:e0:12:2d:1a:1f:28:e4:96:2f:30:5c:23:1d:70:
29:56:28:62:2b:5d:d9:f8:e1:b5:b9:a9:15:c2:57:
5b:38:c9:55:16:8b:1b:0d:9b:4b:4e:5a:b4:f2:ce:
be:76:ed:4a:d1:ce:93:61:46:67:71:e1:2f:d9:04:
b6:3d:cd:f2:2a:cc:ab:e9:ff:24:c8:82:42:0b:1e:
71:eb:e9:6d:81:7b:74:df:e7:0b:59:d7:da:07:1c:
4e:18:02:0e:0b:be:25:d5:eb:d5:b6:d1:e5:5f:25:
6b:71:a2:1e:c0:78:03:ea:e7:71:95:43:2b:1c:8f:
54:b0:bb:25:3f:18:f4:c3:1c:20:61:c1:95:69:ed:
ee:28:6b:a3:95:f0:09:77:c7:1f:98:57:88:73:0b:
b6:44:86:98:9b:19:04:8e:73:d8:8f:37:fd:6f:35:
01:46:54:23:06:0a:34:8d:03:9a:ac:d0:f0:0d:c5:
fe:1e:e3:2c:05:39:72:c8:69:8a:2d:e5:0b:d8:b4:
fd:20:37:7a:a6:41:d4:bb:42:61:cb:1e:67:36:95:
21:48:4a:95:03:60:c7:54:51:ac:68:51:f8:13:4a:
cf:5d:29:c5:05:11:0f:3e:01:9f:3c:c6:6e:09:39:
b2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:25:EC:42:51:9F:80:E7:44:0B:EC:65:AB:B4:D5:75:2E:FA:B9:F9
X509v3 Authority Key Identifier:
keyid:E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:3f:f9:28:da:b6:d6:99:dc:df:22:d3:62:0b:ac:d6:fb:0f:
3d:cc:b7:47:2c:3e:ca:8e:91:5b:9b:49:ed:cc:ed:88:29:af:
60:a7:96:8c:91:b0:d4:be:b1:50:1b:63:95:ef:f5:82:87:90:
7a:8d:9f:37:b8:e7:e1:f7:55:3b:37:b0:c3:b9:55:fe:59:c2:
6a:d4:53:ba:18:76:ae:60:1a:65:35:cf:ac:d1:59:11:24:ba:
48:cc:60:94:01:89:da:f1:c8:28:57:d6:34:49:12:31:2e:25:
62:09:da:56:2d:49:5e:2d:b9:5a:32:b4:5f:ae:32:bd:4f:da:
04:b4:93:fa:f8:60:5c:a2:21:ea:2c:9a:da:4e:c4:57:e6:bb:
30:dc:c8:e2:01:17:c6:67:75:64:02:3a:10:1f:c6:d3:7c:ff:
fe:02:e8:ab:e1:c0:64:f4:1e:55:e7:da:a9:9b:f4:20:97:0a:
33:30:f8:6e:07:1f:8c:d5:cb:72:35:e9:af:86:f4:c5:ad:dd:
19:03:09:b1:20:94:33:c5:6f:ef:a6:6b:9e:61:ce:26:42:51:
9f:18:aa:4e:c0:de:2b:93:7c:50:e7:8c:be:eb:bf:88:4d:83:
3f:61:8e:64:ea:28:eb:a7:82:d1:71:ea:7f:3f:ac:67:ac:b8:
a3:9d:07:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8crVob49yHFiVZHxaZLCQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwODEyYmRkZGJiMjM5YmU2MzlkYzc1ZGNkMmUyOTZjNGZj
ZjRhOTcwHhcNMjUwMTMxMTMwMDIxWhcNMjUwMjAxMTMwMDIxWjAzMTEwLwYDVQQD
Eyg5MTI1ZWM0MjUxOWY4MGU3NDQwYmVjNjVhYmI0ZDU3NTJlZmFiOWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxITmC5x0xZwHFRtUKt854BItGh8o
5JYvMFwjHXApVihiK13Z+OG1uakVwldbOMlVFosbDZtLTlq08s6+du1K0c6TYUZn
ceEv2QS2Pc3yKsyr6f8kyIJCCx5x6+ltgXt03+cLWdfaBxxOGAIOC74l1evVttHl
XyVrcaIewHgD6udxlUMrHI9UsLslPxj0wxwgYcGVae3uKGujlfAJd8cfmFeIcwu2
RIaYmxkEjnPYjzf9bzUBRlQjBgo0jQOarNDwDcX+HuMsBTlyyGmKLeUL2LT9IDd6
pkHUu0Jhyx5nNpUhSEqVA2DHVFGsaFH4E0rPXSnFBREPPgGfPMZuCTmyzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEl7EJRn4DnRAvsZau01XUu+rn5MB8GA1UdIwQY
MBaAFOCBK93bsjm+Y53HXc0uKWxPz0qXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNElFcjNkdXlPYjVqbmNkZHpTNHBiRV9QU3BjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xZjY4YTgtNDlkZC00MTJiLWJiYTkt
MGJmNTM5YjNiNzE0LzEvNElFcjNkdXlPYjVqbmNkZHpTNHBiRV9QU3BjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8xZjY4YTgtNDlkZC00MTJiLWJiYTktMGJmNTM5YjNiNzE0
LzEvNElFcjNkdXlPYjVqbmNkZHpTNHBiRV9QU3BjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtT/5KNq2
1pnc3yLTYgus1vsPPcy3Ryw+yo6RW5tJ7cztiCmvYKeWjJGw1L6xUBtjle/1goeQ
eo2fN7jn4fdVOzeww7lV/lnCatRTuhh2rmAaZTXPrNFZESS6SMxglAGJ2vHIKFfW
NEkSMS4lYgnaVi1JXi25WjK0X64yvU/aBLST+vhgXKIh6iya2k7EV+a7MNzI4gEX
xmd1ZAI6EB/G03z//gLoq+HAZPQeVefaqZv0IJcKMzD4bgcfjNXLcjXpr4b0xa3d
GQMJsSCUM8Vv76ZrnmHOJkJRnxiqTsDeK5N8UOeMvuu/iE2DP2GOZOoo66eC0XHq
fz+sZ6y4o50HLQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:21 2025 by rpki-client