Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
File: cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft (raw, json)
Hash identifier: AhXkAt7pjEp8a3kkEJK6bBzBluvw6vgXAEnIFgS/Jfk=
Subject key identifier: AE:66:A1:93:DE:3D:6C:28:12:18:74:14:45:4A:06:FB:51:3A:82:74
Authority key identifier: 70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40
Certificate issuer: /CN=700c030930a9d2e4da88d81852a44c3f78bfb440
Certificate serial: 0194BBCDEE6E23D85A5E18F1540C8B138603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:22 +0000
Manifest this update: Fri 31 Jan 2025 10:00:22 +0000
Manifest next update: Sat 01 Feb 2025 10:00:22 +0000
Files and hashes: 1: cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl (hash: PbKn/EikUyioKfm6akVTivguXtwDRKCuG641xT8nf7k=)
2: iXldcpMNtu5kim9vQXhjht5Ha_0.roa (hash: OZZlPHrzKaaexsTtY7l0u4aOhC15J2UaGXg/fHHU/6k=)
3: o3Ruly6xo3HjQfyltbyyXFgE2AY.roa (hash: 83gTacIwQrempq02V5LTV8DoLs2npW478Kw0EoVa9VM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ee:6e:23:d8:5a:5e:18:f1:54:0c:8b:13:86:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700c030930a9d2e4da88d81852a44c3f78bfb440
Validity
Not Before: Jan 31 10:00:22 2025 GMT
Not After : Feb 1 10:00:22 2025 GMT
Subject: CN=ae66a193de3d6c2812187414454a06fb513a8274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1d:d2:48:59:4a:6e:96:d6:92:c1:8c:8f:f4:
38:64:68:e1:d8:3f:db:3a:dd:6b:c0:af:89:e6:07:
e4:1f:a4:44:41:34:ec:b9:f6:77:d7:63:b1:4e:6a:
ab:47:50:be:08:18:1d:f6:d2:27:22:e8:ed:b6:f9:
66:20:2b:df:f3:47:a1:b2:45:d5:79:fa:29:87:79:
6a:2e:69:21:3c:11:df:13:6c:bf:83:71:e9:e4:42:
a0:13:e4:a7:3d:2d:c0:8a:e3:82:12:47:38:2d:51:
e4:e6:3a:d6:f9:01:73:8d:9a:0d:37:2d:a3:5f:0c:
0c:04:10:a6:5c:49:30:bb:eb:f9:95:40:fa:e7:42:
2f:9d:cc:ba:9a:3b:3c:f0:26:12:d8:f3:71:87:78:
64:71:d1:ca:dc:21:c0:a7:fe:75:92:0a:d7:72:bd:
77:24:fd:85:9a:df:fc:87:4a:19:03:11:82:22:57:
97:51:31:0a:94:4f:00:77:f7:a7:d7:30:4f:07:74:
0c:44:26:00:dc:46:25:2f:82:b5:b2:3d:0d:b7:a9:
a4:56:72:2d:57:96:56:50:f7:44:0d:91:3b:5f:d1:
b4:19:dd:2c:25:ca:63:6e:48:8e:ae:a9:3e:ba:93:
63:b6:40:87:2a:e9:61:98:d7:22:29:7f:25:c7:f7:
83:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:66:A1:93:DE:3D:6C:28:12:18:74:14:45:4A:06:FB:51:3A:82:74
X509v3 Authority Key Identifier:
keyid:70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:68:78:ce:aa:3f:59:50:fe:ee:e6:3a:d6:93:5e:ac:00:e4:
04:fc:03:c1:64:0a:b0:86:cd:32:b6:b7:8d:53:c6:62:06:f9:
4e:95:84:1e:a9:7d:86:1a:b7:cf:fb:01:20:19:45:05:98:da:
23:a1:c5:bf:bf:6f:17:a1:2e:91:38:a1:b5:47:0c:96:01:52:
ec:b6:66:4c:5e:66:01:f4:39:f2:59:8d:3b:9e:8d:82:13:44:
3f:92:42:1d:4a:0a:4c:51:0f:dd:3a:d9:80:80:65:40:45:57:
1b:67:44:75:75:cb:43:a3:79:1e:b3:70:d1:b6:5d:91:61:b7:
86:19:dd:df:46:a3:31:45:fb:c9:45:31:7c:af:9d:78:31:4e:
04:a7:58:85:90:29:4b:bc:83:15:9e:5a:17:27:e1:18:1e:e8:
98:ca:f5:d8:a1:c2:45:db:55:aa:2f:37:b1:31:82:03:80:7f:
ee:51:c2:b3:a5:66:62:90:e4:78:8a:19:3b:cd:33:13:7e:d4:
0b:31:9b:d1:ad:09:79:d1:c8:80:32:c0:fa:3a:b0:31:54:ad:
19:be:8f:64:f8:b1:54:2d:b0:06:64:a9:dc:87:a1:c3:43:b7:
d0:b9:da:f8:c4:7b:57:0b:87:73:3c:40:4b:b1:27:d5:e5:78:
41:2d:01:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ze5uI9haXhjxVAyLE4YDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMGMwMzA5MzBhOWQyZTRkYTg4ZDgxODUyYTQ0YzNmNzhi
ZmI0NDAwHhcNMjUwMTMxMTAwMDIyWhcNMjUwMjAxMTAwMDIyWjAzMTEwLwYDVQQD
EyhhZTY2YTE5M2RlM2Q2YzI4MTIxODc0MTQ0NTRhMDZmYjUxM2E4Mjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx3SSFlKbpbWksGMj/Q4ZGjh2D/b
Ot1rwK+J5gfkH6REQTTsufZ312OxTmqrR1C+CBgd9tInIujttvlmICvf80ehskXV
efoph3lqLmkhPBHfE2y/g3Hp5EKgE+SnPS3AiuOCEkc4LVHk5jrW+QFzjZoNNy2j
XwwMBBCmXEkwu+v5lUD650Ivncy6mjs88CYS2PNxh3hkcdHK3CHAp/51kgrXcr13
JP2Fmt/8h0oZAxGCIleXUTEKlE8Ad/en1zBPB3QMRCYA3EYlL4K1sj0Nt6mkVnIt
V5ZWUPdEDZE7X9G0Gd0sJcpjbkiOrqk+upNjtkCHKulhmNciKX8lx/eDlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5moZPePWwoEhh0FEVKBvtROoJ0MB8GA1UdIwQY
MBaAFHAMAwkwqdLk2ojYGFKkTD94v7RAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0F3RENUQ3AwdVRhaU5nWVVxUk1QM2lfdEVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8wNjhjYjktNmNiYS00NTNkLTg1OGEt
YzViYmY5NWY4NTg0LzEvY0F3RENUQ3AwdVRhaU5nWVVxUk1QM2lfdEVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8wNjhjYjktNmNiYS00NTNkLTg1OGEtYzViYmY5NWY4NTg0
LzEvY0F3RENUQ3AwdVRhaU5nWVVxUk1QM2lfdEVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABmh4zqo/
WVD+7uY61pNerADkBPwDwWQKsIbNMra3jVPGYgb5TpWEHql9hhq3z/sBIBlFBZja
I6HFv79vF6EukTihtUcMlgFS7LZmTF5mAfQ58lmNO56NghNEP5JCHUoKTFEP3TrZ
gIBlQEVXG2dEdXXLQ6N5HrNw0bZdkWG3hhnd30ajMUX7yUUxfK+deDFOBKdYhZAp
S7yDFZ5aFyfhGB7omMr12KHCRdtVqi83sTGCA4B/7lHCs6VmYpDkeIoZO80zE37U
CzGb0a0JedHIgDLA+jqwMVStGb6PZPixVC2wBmSp3Iehw0O30Lna+MR7VwuHczxA
S7En1eV4QS0BCA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:46 2025 by rpki-client