Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
File: 52m60wYYMt6bfXw3Nzf0NGxsBuY.mft (raw, json)
Hash identifier: KZcM+JMtDX7HAOPX+NPxQKqgVrtsVCOXiGqlUZ0Vs/w=
Subject key identifier: 26:97:DE:15:72:90:DA:2B:21:62:F9:05:88:32:33:C9:04:4A:B2:65
Authority key identifier: E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6
Certificate issuer: /CN=e769bad3061832de9b7d7c373737f4346c6c06e6
Certificate serial: 0194BD853BE8495A603452B6128F1FECC2CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
Manifest number: 08D1
Signing time: Fri 31 Jan 2025 18:00:12 +0000
Manifest this update: Fri 31 Jan 2025 18:00:12 +0000
Manifest next update: Sat 01 Feb 2025 18:00:12 +0000
Files and hashes: 1: 52m60wYYMt6bfXw3Nzf0NGxsBuY.crl (hash: duXodXvp+o6qXn/utgNMHUlZzwOm8BDalT5w13LbLTg=)
2: lxXNUCeQItpUU-WIqT27d6PPlu0.roa (hash: gRV2uGVItKOTTis9BRa/lRn5duot/VIpG4JMEM2dMPg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3b:e8:49:5a:60:34:52:b6:12:8f:1f:ec:c2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e769bad3061832de9b7d7c373737f4346c6c06e6
Validity
Not Before: Jan 31 18:00:12 2025 GMT
Not After : Feb 1 18:00:12 2025 GMT
Subject: CN=2697de157290da2b2162f905883233c9044ab265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:83:1f:a7:ff:37:58:86:16:9e:44:d0:2a:98:
97:13:40:74:30:c8:43:f1:1b:9b:c0:5a:5f:96:03:
c3:13:a3:b5:74:b7:86:2b:f2:21:56:56:fb:5b:03:
df:07:00:5b:6f:12:e6:8a:6d:8f:54:0a:01:3e:37:
eb:46:70:ef:ad:23:d2:cc:3b:e0:9f:a4:f2:23:b6:
4b:55:8f:96:f3:a9:6d:92:7d:52:b7:25:1a:9c:2c:
8b:0e:d4:59:94:98:cb:ed:3e:c2:3c:4d:08:ec:2c:
f5:e7:b3:67:7a:22:a8:c0:37:a8:ef:cd:a9:54:38:
56:85:c0:31:a0:df:0f:f1:cc:f1:f1:9e:e6:08:9a:
f9:e3:91:d9:b3:28:f3:39:28:5c:c3:92:ae:83:55:
14:38:03:14:37:f5:c0:7f:16:89:f2:51:11:c7:60:
d4:ab:0e:c3:ff:c6:e2:fd:1e:de:1e:a8:05:02:d8:
89:18:79:eb:9a:41:a2:5a:e0:f9:19:70:d9:16:e0:
66:9e:30:dd:b7:b5:88:35:1c:17:2f:2c:0b:29:1f:
fa:16:c2:79:01:29:9e:72:96:98:45:44:f7:91:39:
8c:e8:b4:40:07:c4:0e:9c:bd:51:64:da:5e:60:c5:
9e:e0:32:00:ef:60:69:5c:34:a5:56:0e:81:71:6d:
1a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:97:DE:15:72:90:DA:2B:21:62:F9:05:88:32:33:C9:04:4A:B2:65
X509v3 Authority Key Identifier:
keyid:E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:af:6d:66:41:9f:15:5e:c7:ec:24:51:15:af:d6:5d:c2:7d:
e9:a2:08:42:a0:1e:8e:38:77:66:cc:25:fa:40:43:46:66:b0:
39:81:ec:25:31:e1:67:90:54:ca:da:60:8d:e3:de:5f:b2:84:
b1:cf:de:0b:cb:ad:32:3c:f9:3c:3f:51:bd:6f:e0:9f:f4:34:
a7:f2:66:ec:6d:0b:21:75:9a:07:99:88:cf:76:99:d7:ff:da:
17:48:b6:40:b5:79:26:28:50:1d:bd:ba:34:05:df:e8:be:46:
5c:46:0c:ab:c0:a1:a1:a9:45:1a:3f:01:0d:74:e8:01:91:fb:
ec:1f:64:b4:95:00:84:15:a8:a6:24:a5:cb:54:67:5a:69:4f:
c1:6e:58:e3:70:3e:85:86:f2:6f:fc:20:23:fa:a1:bc:3d:a6:
4e:89:61:02:01:67:3d:f7:45:9c:bb:25:5f:fd:94:59:00:93:
50:a1:2f:49:29:c6:dc:e6:f3:a3:ca:00:fb:ba:62:79:50:81:
5d:fc:9e:74:d0:d0:38:b4:1a:07:89:af:1d:c4:64:48:db:83:
bd:af:29:75:a5:63:f6:39:07:c6:6d:2b:cb:e3:2c:bb:da:c3:
99:f3:a8:13:3f:62:5a:eb:8c:15:a0:16:8e:7d:b0:40:a4:64:
e0:1f:56:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hTvoSVpgNFK2Eo8f7MLMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjliYWQzMDYxODMyZGU5YjdkN2MzNzM3MzdmNDM0NmM2
YzA2ZTYwHhcNMjUwMTMxMTgwMDEyWhcNMjUwMjAxMTgwMDEyWjAzMTEwLwYDVQQD
EygyNjk3ZGUxNTcyOTBkYTJiMjE2MmY5MDU4ODMyMzNjOTA0NGFiMjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oMfp/83WIYWnkTQKpiXE0B0MMhD
8RubwFpflgPDE6O1dLeGK/IhVlb7WwPfBwBbbxLmim2PVAoBPjfrRnDvrSPSzDvg
n6TyI7ZLVY+W86ltkn1StyUanCyLDtRZlJjL7T7CPE0I7Cz157NneiKowDeo782p
VDhWhcAxoN8P8czx8Z7mCJr545HZsyjzOShcw5Kug1UUOAMUN/XAfxaJ8lERx2DU
qw7D/8bi/R7eHqgFAtiJGHnrmkGiWuD5GXDZFuBmnjDdt7WINRwXLywLKR/6FsJ5
ASmecpaYRUT3kTmM6LRAB8QOnL1RZNpeYMWe4DIA72BpXDSlVg6BcW0a9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaX3hVykNorIWL5BYgyM8kESrJlMB8GA1UdIwQY
MBaAFOdputMGGDLem318Nzc39DRsbAbmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJtNjB3WVlNdDZiZlh3M056ZjBOR3hzQnVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kMWJjZGEtOTI3MC00M2EzLWJhYWUt
MmNjOGRjNGYwMjIwLzEvNTJtNjB3WVlNdDZiZlh3M056ZjBOR3hzQnVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kMWJjZGEtOTI3MC00M2EzLWJhYWUtMmNjOGRjNGYwMjIw
LzEvNTJtNjB3WVlNdDZiZlh3M056ZjBOR3hzQnVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnK9tZkGf
FV7H7CRRFa/WXcJ96aIIQqAejjh3Zswl+kBDRmawOYHsJTHhZ5BUytpgjePeX7KE
sc/eC8utMjz5PD9RvW/gn/Q0p/Jm7G0LIXWaB5mIz3aZ1//aF0i2QLV5JihQHb26
NAXf6L5GXEYMq8ChoalFGj8BDXToAZH77B9ktJUAhBWopiSly1RnWmlPwW5Y43A+
hYbyb/wgI/qhvD2mTolhAgFnPfdFnLslX/2UWQCTUKEvSSnG3Obzo8oA+7pieVCB
XfyedNDQOLQaB4mvHcRkSNuDva8pdaVj9jkHxm0ry+Msu9rDmfOoEz9iWuuMFaAW
jn2wQKRk4B9WSQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:08 2025 by rpki-client