Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
File: rQt55LWcX82kk6IK0Y6UVYWdAxs.mft (raw, json)
Hash identifier: 5WQ0pG6x7337s0B8rzA4m0iPkZH69iZuWm8SYLHFZPo=
Subject key identifier: 51:FC:85:7A:74:7C:C0:C9:96:F5:A1:A3:65:08:CE:1B:00:64:EF:D7
Authority key identifier: AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B
Certificate issuer: /CN=ad0b79e4b59c5fcda493a20ad18e9455859d031b
Certificate serial: 0194BC72BF3ED6868FC3967D81931CB3FAE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: rQt55LWcX82kk6IK0Y6UVYWdAxs.crl (hash: r+dw3lTa2un969koiho7Y3jJjdQ461D+Cbg+pHuOovg=)
2: u-TIzzCbIsSdGOd1CtfNEcgemko.roa (hash: DN7JFzlpz7Go6ldmAhoYI+Qwq1vNoGjP9zoXjX6dqwg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:bf:3e:d6:86:8f:c3:96:7d:81:93:1c:b3:fa:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0b79e4b59c5fcda493a20ad18e9455859d031b
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=51fc857a747cc0c996f5a1a36508ce1b0064efd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:1c:98:51:da:40:4b:82:3c:c6:f1:ae:b9:
ce:c2:19:df:c4:e0:44:e4:46:6f:7f:e8:52:4f:e0:
b0:e7:24:98:ef:fd:22:94:6a:b9:df:78:e9:90:cf:
07:28:f8:6a:0d:53:bc:24:30:13:02:81:53:e1:51:
a2:74:d5:a4:4e:7a:67:27:97:28:7a:c2:ef:7c:f5:
63:f2:49:a0:6b:26:b8:a7:e1:fa:45:f0:99:b3:4a:
36:97:aa:db:65:be:c1:da:88:1b:ff:8a:74:8b:2b:
79:f4:0c:a1:fd:ff:de:35:a1:7e:f7:5a:f9:14:af:
14:b4:6c:ba:70:70:55:7a:20:7c:c7:22:f8:9b:9e:
2e:15:fd:20:5b:dd:2c:b2:e5:bd:9f:f4:74:06:79:
d3:b4:8d:3c:5c:b0:c9:53:24:41:c6:3c:fd:d5:76:
b3:a3:5a:9a:02:dd:5d:76:55:d9:02:01:e2:1c:8a:
a4:96:aa:9d:11:8b:dc:fd:c9:5a:e1:93:be:2d:c0:
9d:91:0a:a5:de:30:18:5a:76:da:68:d1:3c:f8:8a:
83:d4:d3:2d:39:aa:54:a1:fa:d5:8f:2d:71:9d:fa:
b8:d3:f0:2b:ed:97:ce:bb:52:16:76:54:56:40:3b:
89:d4:51:34:bc:f3:34:98:80:b0:c1:e4:2c:0c:b4:
cb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FC:85:7A:74:7C:C0:C9:96:F5:A1:A3:65:08:CE:1B:00:64:EF:D7
X509v3 Authority Key Identifier:
keyid:AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:98:fe:75:f8:1e:0e:d7:70:b4:f1:99:85:10:51:0e:51:38:
e5:5c:48:88:b6:c5:ba:13:7c:f4:a4:94:3d:a4:10:76:16:2d:
90:fc:6b:66:0c:26:8d:70:47:a6:c9:40:0f:89:be:b5:dd:57:
03:2b:e2:a5:9c:35:51:d1:ff:09:89:c2:0a:6e:f4:ce:2b:30:
8e:78:e4:e8:ff:b0:33:ef:92:d0:87:62:6b:de:4d:ba:ef:6a:
d2:45:1b:b1:d8:31:08:a6:99:26:89:db:ea:22:b6:a6:d5:ab:
17:f2:7a:ac:78:ab:00:77:ea:3d:78:48:96:71:f9:32:7d:b2:
55:43:42:5f:09:cf:8b:0c:32:ab:2b:bd:58:87:81:b3:f9:cb:
a0:90:dc:8a:08:0b:8b:75:cc:96:6b:2e:68:fe:0b:b7:01:1c:
c7:2c:f0:81:50:3a:73:f9:7a:04:5a:f7:40:1b:63:7b:61:78:
cc:17:ad:57:32:6c:6d:e9:b9:2f:2c:69:07:8a:74:ed:d0:f6:
60:bf:82:56:f0:fe:27:3f:52:68:46:a6:94:b5:7f:28:dc:c4:
5e:ae:92:1d:b7:38:be:b9:78:6c:c5:e1:1e:9b:9a:30:b0:13:
a9:51:82:fa:b2:fa:11:a3:14:da:e5:41:17:8b:27:39:e5:d1:
5f:c2:35:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cr8+1oaPw5Z9gZMcs/rjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMGI3OWU0YjU5YzVmY2RhNDkzYTIwYWQxOGU5NDU1ODU5
ZDAzMWIwHhcNMjUwMTMxMTMwMDI0WhcNMjUwMjAxMTMwMDI0WjAzMTEwLwYDVQQD
Eyg1MWZjODU3YTc0N2NjMGM5OTZmNWExYTM2NTA4Y2UxYjAwNjRlZmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjgcmFHaQEuCPMbxrrnOwhnfxOBE
5EZvf+hST+Cw5ySY7/0ilGq533jpkM8HKPhqDVO8JDATAoFT4VGidNWkTnpnJ5co
esLvfPVj8kmgaya4p+H6RfCZs0o2l6rbZb7B2ogb/4p0iyt59Ayh/f/eNaF+91r5
FK8UtGy6cHBVeiB8xyL4m54uFf0gW90ssuW9n/R0BnnTtI08XLDJUyRBxjz91Xaz
o1qaAt1ddlXZAgHiHIqklqqdEYvc/cla4ZO+LcCdkQql3jAYWnbaaNE8+IqD1NMt
OapUofrVjy1xnfq40/Ar7ZfOu1IWdlRWQDuJ1FE0vPM0mICwweQsDLTLlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFH8hXp0fMDJlvWho2UIzhsAZO/XMB8GA1UdIwQY
MBaAFK0LeeS1nF/NpJOiCtGOlFWFnQMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclF0NTVMV2NYODJrazZJSzBZNlVWWVdkQXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jZDU1NWItZjczZS00OGFkLWI1NDQt
ZTNlYjRlOGEzOGRiLzEvclF0NTVMV2NYODJrazZJSzBZNlVWWVdkQXhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9jZDU1NWItZjczZS00OGFkLWI1NDQtZTNlYjRlOGEzOGRi
LzEvclF0NTVMV2NYODJrazZJSzBZNlVWWVdkQXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpj+dfge
DtdwtPGZhRBRDlE45VxIiLbFuhN89KSUPaQQdhYtkPxrZgwmjXBHpslAD4m+td1X
AyvipZw1UdH/CYnCCm70ziswjnjk6P+wM++S0Idia95Nuu9q0kUbsdgxCKaZJonb
6iK2ptWrF/J6rHirAHfqPXhIlnH5Mn2yVUNCXwnPiwwyqyu9WIeBs/nLoJDciggL
i3XMlmsuaP4LtwEcxyzwgVA6c/l6BFr3QBtje2F4zBetVzJsbem5LyxpB4p07dD2
YL+CVvD+Jz9SaEamlLV/KNzEXq6SHbc4vrl4bMXhHpuaMLATqVGC+rL6EaMU2uVB
F4snOeXRX8I1LA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:50:47 2025 by rpki-client