Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
File: 435f8SPqfS6DzidSDJh9A35knQM.mft (raw, json)
Hash identifier: bh+dSiRY7Gkyajq0uTDqACO7vpMhOqtGXFCalzHUG0Q=
Subject key identifier: F8:05:A2:81:E8:4E:F2:B6:59:D8:B8:E0:88:E2:33:AC:9D:29:6F:6E
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Certificate issuer: /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial: 0194BC72DD5E61FBDC8C8550330C1F798FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
Manifest number: 0ECD
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: 435f8SPqfS6DzidSDJh9A35knQM.crl (hash: NIV5M6DfWFQPe31dPXdRn2XtsBmPDCeukjXxby+wwz0=)
2: tCjXyqFlakOJKQogp8h2votSD1A.roa (hash: m/O4S6Sl2dQY6fRE2qRWrRG8qwZhPhRAmDPSjwX0exE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:dd:5e:61:fb:dc:8c:85:50:33:0c:1f:79:8f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=f805a281e84ef2b659d8b8e088e233ac9d296f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1e:da:b5:6e:95:8f:5c:69:3a:43:4b:f5:d2:
91:65:92:de:dd:47:ec:f3:ca:c4:03:36:c6:70:7e:
7d:dc:7e:24:7d:89:70:30:67:26:df:69:09:a5:82:
38:e7:d6:2f:4c:e0:5c:64:2e:bd:8e:40:68:19:72:
ec:77:92:f7:96:86:10:bd:9d:e7:0c:d8:51:13:8c:
ee:42:55:55:0d:16:85:e1:b7:f5:f4:1b:92:1f:f8:
2b:a2:09:5f:d8:29:db:cb:b8:f3:89:c8:9a:33:26:
24:6c:e6:11:ef:39:b5:c3:30:47:e1:ee:eb:25:4d:
b1:9c:95:e6:cd:89:e1:04:cb:1e:e2:e2:29:c7:2d:
fa:f7:84:ce:12:13:86:f3:a2:22:52:8b:03:9c:52:
2c:2a:d5:10:36:bb:b5:b7:b4:06:54:6e:c9:47:16:
27:46:e5:77:83:7a:f2:b1:d7:0d:e7:56:29:d0:74:
97:f1:18:1b:98:b1:96:31:a5:25:74:d1:73:3e:dd:
2f:de:54:50:88:f2:5c:29:8b:fe:fc:7a:9c:e9:4f:
3c:cb:a7:56:b2:b6:96:a3:df:fc:92:b5:74:f5:87:
15:0d:83:e7:9e:00:ab:b5:71:2f:c0:82:d7:d8:ae:
00:c0:af:2c:ab:4d:ba:2d:30:62:5d:ef:98:f3:52:
c6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:05:A2:81:E8:4E:F2:B6:59:D8:B8:E0:88:E2:33:AC:9D:29:6F:6E
X509v3 Authority Key Identifier:
keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:89:2a:3b:f3:39:cb:db:d0:b1:00:8d:43:b2:8f:f2:1d:66:
97:eb:06:c5:93:7b:60:61:9d:12:22:6b:d0:43:3b:b9:7b:1e:
1a:18:1d:c1:8a:72:4c:ca:a3:2b:0b:30:39:e6:1a:a6:77:c9:
34:85:23:ac:ef:19:54:ea:2d:09:4b:52:68:14:31:48:9c:7a:
65:7a:c7:8c:3d:a0:e1:4b:b8:3f:b2:cb:40:3d:cc:3e:d1:8d:
48:ef:43:1f:d8:d7:f0:d6:ff:d6:64:b8:b1:de:df:05:c2:70:
a2:18:c4:e6:7e:26:02:60:8a:5d:9c:93:76:88:d3:27:fe:aa:
8e:b3:37:35:19:b2:be:13:22:79:d2:25:97:6f:45:ae:9b:03:
98:d6:1d:f4:01:d9:6c:35:02:29:9b:6d:0e:67:41:2c:97:1c:
fd:ae:f9:0c:1d:20:0e:78:0a:a4:77:74:38:f6:c2:68:5a:c0:
d1:69:f7:7a:76:5a:3d:43:25:24:e3:0b:24:c7:9f:55:52:49:
7b:2c:f4:2a:8d:57:47:52:a9:27:ff:4e:db:c5:44:d0:07:f0:
4b:96:2a:3a:c7:fb:4f:72:98:f4:b4:6e:0b:8a:82:15:b1:a4:
3b:50:07:a7:29:2a:18:a8:c7:78:c6:20:d7:2b:a4:3b:c2:2a:
cc:14:5e:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8ct1eYfvcjIVQMwwfeY/5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzN2U1ZmYxMjNlYTdkMmU4M2NlMjc1MjBjOTg3ZDAzN2U2
NDlkMDMwHhcNMjUwMTMxMTMwMDMxWhcNMjUwMjAxMTMwMDMxWjAzMTEwLwYDVQQD
EyhmODA1YTI4MWU4NGVmMmI2NTlkOGI4ZTA4OGUyMzNhYzlkMjk2ZjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh7atW6Vj1xpOkNL9dKRZZLe3Ufs
88rEAzbGcH593H4kfYlwMGcm32kJpYI459YvTOBcZC69jkBoGXLsd5L3loYQvZ3n
DNhRE4zuQlVVDRaF4bf19BuSH/groglf2Cnby7jziciaMyYkbOYR7zm1wzBH4e7r
JU2xnJXmzYnhBMse4uIpxy3694TOEhOG86IiUosDnFIsKtUQNru1t7QGVG7JRxYn
RuV3g3rysdcN51Yp0HSX8RgbmLGWMaUldNFzPt0v3lRQiPJcKYv+/Hqc6U88y6dW
sraWo9/8krV09YcVDYPnngCrtXEvwILX2K4AwK8sq026LTBiXe+Y81LG4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgFooHoTvK2Wdi44IjiM6ydKW9uMB8GA1UdIwQY
MBaAFON+X/Ej6n0ug84nUgyYfQN+ZJ0DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDM1ZjhTUHFmUzZEemlkU0RKaDlBMzVrblFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kZmMxMGMtZjg4OS00NTVhLTgyYTAt
YjMwNDA4OTQ4Y2NlLzEvNDM1ZjhTUHFmUzZEemlkU0RKaDlBMzVrblFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9kZmMxMGMtZjg4OS00NTVhLTgyYTAtYjMwNDA4OTQ4Y2Nl
LzEvNDM1ZjhTUHFmUzZEemlkU0RKaDlBMzVrblFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw4kqO/M5
y9vQsQCNQ7KP8h1ml+sGxZN7YGGdEiJr0EM7uXseGhgdwYpyTMqjKwswOeYapnfJ
NIUjrO8ZVOotCUtSaBQxSJx6ZXrHjD2g4Uu4P7LLQD3MPtGNSO9DH9jX8Nb/1mS4
sd7fBcJwohjE5n4mAmCKXZyTdojTJ/6qjrM3NRmyvhMiedIll29FrpsDmNYd9AHZ
bDUCKZttDmdBLJcc/a75DB0gDngKpHd0OPbCaFrA0Wn3enZaPUMlJOMLJMefVVJJ
eyz0Ko1XR1KpJ/9O28VE0AfwS5YqOsf7T3KY9LRuC4qCFbGkO1AHpykqGKjHeMYg
1yukO8IqzBReGA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:16 2025 by rpki-client