Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
File: cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft (raw, json)
Hash identifier: JV52wHC0lpyBI77CKj1U9HMI8qoV2ivXkGf0NqchZ5M=
Subject key identifier: EC:42:3E:92:BB:2D:05:1F:97:93:CE:1B:C4:4B:75:57:A8:A3:0F:40
Authority key identifier: 71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C
Certificate issuer: /CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
Certificate serial: 0194BCE0C0F6137F41356474CFBE28FF9380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
Manifest number: 0CB1
Signing time: Fri 31 Jan 2025 15:00:33 +0000
Manifest this update: Fri 31 Jan 2025 15:00:33 +0000
Manifest next update: Sat 01 Feb 2025 15:00:33 +0000
Files and hashes: 1: Y4BycvpgIPFrj5lhsii_AUvYAWw.roa (hash: brKO8LRrExe011Bv/UP5eEIq/IhdQ+O1vYEiLB6elCE=)
2: cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl (hash: CR/GIRNhLd56jeekMByntPkFeOeHEjA7drr8XEHTcBY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c0:f6:13:7f:41:35:64:74:cf:be:28:ff:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
Validity
Not Before: Jan 31 15:00:33 2025 GMT
Not After : Feb 1 15:00:33 2025 GMT
Subject: CN=ec423e92bb2d051f9793ce1bc44b7557a8a30f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:93:c5:08:a1:6a:2c:ff:d2:ba:a1:c5:53:
07:d3:51:71:12:dc:2b:e0:c1:87:2f:29:9d:8f:21:
e3:e6:5e:53:c8:86:99:54:e4:f9:2c:16:58:6a:b6:
c1:a9:92:14:41:d3:34:84:31:da:ba:58:49:7e:b8:
e8:16:93:fb:e1:89:20:e3:bd:4e:8a:81:36:67:05:
2b:ba:c5:f0:57:43:81:be:9d:be:bc:31:6e:93:84:
b7:76:03:f0:cd:f3:ab:9b:61:44:dd:c7:6f:e2:3f:
b2:14:d8:f0:2e:c0:fd:a3:fe:52:a3:7a:61:15:b5:
b6:00:a0:a0:58:d1:e0:50:a2:8f:bd:52:1d:b5:81:
cc:17:82:1d:0d:7d:d3:15:a8:13:30:26:95:30:57:
db:48:ee:a4:4e:fe:bf:3a:84:d8:b5:3a:17:ac:c2:
13:7e:9e:9e:a7:44:36:4c:f7:e8:5d:4f:c7:d7:e9:
a7:80:61:e0:92:b2:55:c0:b9:25:fb:5d:45:fc:18:
4d:62:30:3d:d6:9a:fe:a8:ea:63:9b:6f:d7:2e:3b:
dc:bb:a0:81:24:9b:28:71:ff:04:88:88:a1:41:05:
d0:5b:7a:63:f0:93:7f:05:d0:dd:7d:21:6b:54:d2:
ec:fc:aa:13:f2:0f:fe:c7:50:ca:f0:bd:80:96:a9:
d7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:42:3E:92:BB:2D:05:1F:97:93:CE:1B:C4:4B:75:57:A8:A3:0F:40
X509v3 Authority Key Identifier:
keyid:71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:ef:88:d9:79:27:16:8f:ea:1c:2e:39:5f:7c:65:f9:7b:df:
29:ed:bb:44:d9:52:e5:e3:92:4c:d8:d7:37:c7:64:d7:59:12:
f1:72:4a:c8:f2:50:b1:2c:d6:61:16:ca:ff:c1:c8:fa:f4:2a:
d8:cb:4d:6d:f5:fa:f5:e1:3b:80:44:76:69:50:fd:b5:65:5a:
07:2d:fe:d0:bd:23:84:5d:72:ca:57:4d:0a:32:d9:dc:81:e2:
57:eb:c7:77:cf:c3:98:4b:b3:0f:e8:06:b3:c1:a9:4d:f2:3e:
1e:40:71:ee:ad:db:c1:4a:92:ef:ed:c3:89:a0:92:e9:78:46:
67:ff:17:2b:54:43:97:a4:ac:ff:78:d4:97:8f:c0:de:53:9d:
46:36:02:95:53:9b:1e:12:cf:ca:3d:83:4d:16:20:2c:6a:fb:
cd:01:e4:eb:14:ce:5d:22:a7:c7:73:bb:fd:33:61:e5:a0:7f:
2f:39:38:86:dc:05:8a:81:80:7f:d9:f1:02:5d:34:81:49:63:
be:f7:07:44:30:ac:b1:0c:8c:b0:0b:90:f1:f3:9f:b8:0b:b1:
87:6d:27:01:f3:95:7d:f6:0b:e0:88:e9:d9:ea:9e:5a:47:ed:
07:cb:90:8f:34:be:2b:19:96:e5:bb:b6:82:0e:25:19:7d:8c:
15:a2:1a:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84MD2E39BNWR0z74o/5OAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxM2Y4M2RlZTkyZDhkM2UyOGQ3MzYyZGZjNzE4NzU1M2Q4
OGM3NWMwHhcNMjUwMTMxMTUwMDMzWhcNMjUwMjAxMTUwMDMzWjAzMTEwLwYDVQQD
EyhlYzQyM2U5MmJiMmQwNTFmOTc5M2NlMWJjNDRiNzU1N2E4YTMwZjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8OTxQihaiz/0rqhxVMH01FxEtwr
4MGHLymdjyHj5l5TyIaZVOT5LBZYarbBqZIUQdM0hDHaulhJfrjoFpP74Ykg471O
ioE2ZwUrusXwV0OBvp2+vDFuk4S3dgPwzfOrm2FE3cdv4j+yFNjwLsD9o/5So3ph
FbW2AKCgWNHgUKKPvVIdtYHMF4IdDX3TFagTMCaVMFfbSO6kTv6/OoTYtToXrMIT
fp6ep0Q2TPfoXU/H1+mngGHgkrJVwLkl+11F/BhNYjA91pr+qOpjm2/XLjvcu6CB
JJsocf8EiIihQQXQW3pj8JN/BdDdfSFrVNLs/KoT8g/+x1DK8L2AlqnX1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxCPpK7LQUfl5POG8RLdVeoow9AMB8GA1UdIwQY
MBaAFHE/g97pLY0+KNc2Lfxxh1U9iMdcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1QtRDN1a3RqVDRvMXpZdF9IR0hWVDJJeDF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xMzMxY2YtYjNmMC00N2Q5LTllNDAt
NzkxNDM4MzM2M2Y3LzEvY1QtRDN1a3RqVDRvMXpZdF9IR0hWVDJJeDF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8xMzMxY2YtYjNmMC00N2Q5LTllNDAtNzkxNDM4MzM2M2Y3
LzEvY1QtRDN1a3RqVDRvMXpZdF9IR0hWVDJJeDF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvO+I2Xkn
Fo/qHC45X3xl+XvfKe27RNlS5eOSTNjXN8dk11kS8XJKyPJQsSzWYRbK/8HI+vQq
2MtNbfX69eE7gER2aVD9tWVaBy3+0L0jhF1yyldNCjLZ3IHiV+vHd8/DmEuzD+gG
s8GpTfI+HkBx7q3bwUqS7+3DiaCS6XhGZ/8XK1RDl6Ss/3jUl4/A3lOdRjYClVOb
HhLPyj2DTRYgLGr7zQHk6xTOXSKnx3O7/TNh5aB/Lzk4htwFioGAf9nxAl00gUlj
vvcHRDCssQyMsAuQ8fOfuAuxh20nAfOVffYL4Ijp2eqeWkftB8uQjzS+KxmW5bu2
gg4lGX2MFaIa2g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:52 2025 by rpki-client