Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
File: tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft (raw, json)
Hash identifier: k3nXVkP8TVFqRuO+oo5/tiMkcMAYHag+jcAHbEuiMDg=
Subject key identifier: 79:39:49:B1:EC:D4:53:EF:45:DF:EA:FB:D6:77:37:AF:8D:31:53:8B
Authority key identifier: B4:0D:84:9C:C4:3B:73:2D:AB:66:41:FC:6F:D5:A4:DB:3A:2D:B9:47
Certificate issuer: /CN=b40d849cc43b732dab6641fc6fd5a4db3a2db947
Certificate serial: 0194BBCDDB3D15720AB532B1C8941301A608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
Manifest number: 07C2
Signing time: Fri 31 Jan 2025 10:00:17 +0000
Manifest this update: Fri 31 Jan 2025 10:00:17 +0000
Manifest next update: Sat 01 Feb 2025 10:00:17 +0000
Files and hashes: 1: tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl (hash: 9OwdvF3XUqKSjFWcHxfIfKXg+4ffF5Gbl239A3j/PoY=)
2: x7aEXzfMRzlzp6VorB64R028Jvk.roa (hash: 3aOt7CTs1p/zJJSbWQR2//U36Y0+Zh2Kxl00BzPCEXA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:db:3d:15:72:0a:b5:32:b1:c8:94:13:01:a6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d849cc43b732dab6641fc6fd5a4db3a2db947
Validity
Not Before: Jan 31 10:00:17 2025 GMT
Not After : Feb 1 10:00:17 2025 GMT
Subject: CN=793949b1ecd453ef45dfeafbd67737af8d31538b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:08:8a:79:33:4f:b5:14:40:8e:43:1e:77:78:
78:51:99:ef:48:fd:13:0a:f6:9f:f8:f5:aa:2a:f3:
56:93:88:66:ae:67:e1:92:45:c5:67:57:eb:25:21:
8c:41:d6:70:3e:c7:f9:9d:4f:4d:c9:15:6a:8e:f0:
f8:73:8b:40:8c:68:f8:2d:b9:13:ce:3a:5a:10:20:
6a:c4:a8:4e:82:95:a5:80:15:76:8c:e1:12:52:6a:
22:c1:9c:d5:87:18:98:e5:69:d1:c6:7a:76:68:4e:
ba:de:ef:7f:ea:a6:83:b8:47:32:ec:21:3c:81:ee:
76:e6:f1:49:d9:09:3e:61:b5:75:6d:84:c0:f2:34:
c1:e1:21:ac:ef:a8:a6:38:36:16:75:12:3e:7d:d9:
6d:8f:b5:f9:b3:d2:ac:c0:ea:63:b3:ac:5c:a9:2b:
b3:5f:31:d6:af:d3:21:48:0f:c5:f3:45:04:d8:4b:
97:3a:71:80:fd:d2:c1:1e:7b:9b:46:28:58:71:6a:
72:88:53:e4:89:c1:7b:69:ea:ca:56:7c:f6:f7:58:
99:ec:88:dd:5e:01:68:d4:ec:80:22:36:22:51:b5:
41:15:d9:e4:7b:4c:ff:03:12:de:09:38:c6:f6:9e:
14:55:db:52:02:74:36:09:4b:9e:6b:d7:4c:f8:1a:
d5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:39:49:B1:EC:D4:53:EF:45:DF:EA:FB:D6:77:37:AF:8D:31:53:8B
X509v3 Authority Key Identifier:
keyid:B4:0D:84:9C:C4:3B:73:2D:AB:66:41:FC:6F:D5:A4:DB:3A:2D:B9:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d8:8b:f5:cb:e8:6e:97:b3:e3:37:b0:d9:9f:79:60:e6:e7:
2e:11:cb:41:8f:d0:8a:6d:a6:ff:36:ad:dd:7a:2c:de:ca:0c:
2f:4c:40:51:65:dc:6b:aa:e8:60:d1:0c:a1:58:21:ca:fa:47:
3c:4d:a3:0b:c5:f7:a1:f8:70:39:a5:d9:39:6c:da:bc:49:55:
d1:23:84:67:fc:10:1e:e6:04:e3:39:fe:8f:ee:d5:29:fa:f6:
d8:40:cb:86:e7:45:8c:d9:c8:26:a2:68:ea:de:78:f8:80:84:
e9:ef:06:1c:78:04:02:1a:93:5c:89:3f:b0:e4:55:5f:43:f3:
cc:cc:ed:aa:3c:63:fc:68:af:08:65:5f:0e:a4:a9:96:18:b2:
b6:43:1b:d6:16:20:da:22:b5:8c:e8:82:06:5d:af:4a:35:28:
7a:5f:fe:55:75:8c:97:d0:51:63:bf:d2:82:76:04:62:5a:7a:
24:fb:ee:04:3e:91:57:c1:87:ae:6f:76:39:cf:6a:7c:70:cf:
cc:b0:ac:a7:c4:39:c0:95:55:d1:be:2e:dc:2a:8f:f8:6e:40:
2d:ec:e1:61:6f:18:d5:74:c5:93:24:98:06:34:ae:54:f0:f1:
39:35:57:c6:80:d5:e8:5b:ca:69:b3:0b:0a:f5:15:83:75:16:
0b:09:85:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zds9FXIKtTKxyJQTAaYIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MGQ4NDljYzQzYjczMmRhYjY2NDFmYzZmZDVhNGRiM2Ey
ZGI5NDcwHhcNMjUwMTMxMTAwMDE3WhcNMjUwMjAxMTAwMDE3WjAzMTEwLwYDVQQD
Eyg3OTM5NDliMWVjZDQ1M2VmNDVkZmVhZmJkNjc3MzdhZjhkMzE1MzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwiKeTNPtRRAjkMed3h4UZnvSP0T
Cvaf+PWqKvNWk4hmrmfhkkXFZ1frJSGMQdZwPsf5nU9NyRVqjvD4c4tAjGj4LbkT
zjpaECBqxKhOgpWlgBV2jOESUmoiwZzVhxiY5WnRxnp2aE663u9/6qaDuEcy7CE8
ge525vFJ2Qk+YbV1bYTA8jTB4SGs76imODYWdRI+fdltj7X5s9KswOpjs6xcqSuz
XzHWr9MhSA/F80UE2EuXOnGA/dLBHnubRihYcWpyiFPkicF7aerKVnz291iZ7Ijd
XgFo1OyAIjYiUbVBFdnke0z/AxLeCTjG9p4UVdtSAnQ2CUuea9dM+BrVLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHk5SbHs1FPvRd/q+9Z3N6+NMVOLMB8GA1UdIwQY
MBaAFLQNhJzEO3Mtq2ZB/G/VpNs6LblHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEEyRW5NUTdjeTJyWmtIOGI5V2syem90dVVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xMzRjY2ItYjBhYi00NDZiLTgxNzIt
NjJlMjdjZDFlOTc1LzEvdEEyRW5NUTdjeTJyWmtIOGI5V2syem90dVVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8xMzRjY2ItYjBhYi00NDZiLTgxNzItNjJlMjdjZDFlOTc1
LzEvdEEyRW5NUTdjeTJyWmtIOGI5V2syem90dVVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkNiL9cvo
bpez4zew2Z95YObnLhHLQY/Qim2m/zat3Xos3soML0xAUWXca6roYNEMoVghyvpH
PE2jC8X3ofhwOaXZOWzavElV0SOEZ/wQHuYE4zn+j+7VKfr22EDLhudFjNnIJqJo
6t54+ICE6e8GHHgEAhqTXIk/sORVX0PzzMztqjxj/GivCGVfDqSplhiytkMb1hYg
2iK1jOiCBl2vSjUoel/+VXWMl9BRY7/SgnYEYlp6JPvuBD6RV8GHrm92Oc9qfHDP
zLCsp8Q5wJVV0b4u3CqP+G5ALezhYW8Y1XTFkySYBjSuVPDxOTVXxoDV6FvKabML
CvUVg3UWCwmFCw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:24 2025 by rpki-client