Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
File: 4rHi5MUIxsepi2WYUodFyBP60x0.mft (raw, json)
Hash identifier: y/ic5e0f+WbB6RNjj+YpPetjh+cP57FkLgrd6Bu9KKo=
Subject key identifier: DE:16:B7:B1:CA:D5:5C:4F:54:0A:7C:89:BE:E6:CE:84:D4:C1:80:8C
Authority key identifier: E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
Certificate issuer: /CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Certificate serial: 0194BD85969D03A2D43B40CA805F845CEE85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 18:00:36 +0000
Manifest this update: Fri 31 Jan 2025 18:00:36 +0000
Manifest next update: Sat 01 Feb 2025 18:00:36 +0000
Files and hashes: 1: 4rHi5MUIxsepi2WYUodFyBP60x0.crl (hash: rk1ykrA+IcigbO1X5tSmMgXzwkYQDoY/imWRZrqB3K8=)
2: AnftS6a3tNRTfwARV2obSQtU-1Q.roa (hash: 1O5FkUYkHZKrQKTSneyG+jslWvu7oIHqq1i+yTKMvxI=)
3: lE2TPINVoSL881LdoolBNaY_JUc.roa (hash: Qw7FA0BgnLj9ipm0a5MjNE3Et6SvLKBGGJMjS6H7uVw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:96:9d:03:a2:d4:3b:40:ca:80:5f:84:5c:ee:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Validity
Not Before: Jan 31 18:00:36 2025 GMT
Not After : Feb 1 18:00:36 2025 GMT
Subject: CN=de16b7b1cad55c4f540a7c89bee6ce84d4c1808c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:76:9a:bc:86:e7:76:57:99:dd:a2:9b:29:07:
85:ae:9b:77:4f:a8:ab:17:cf:f7:15:a4:2e:d2:25:
72:98:c7:e8:f0:09:9f:fb:50:75:0c:26:96:06:85:
08:dd:7b:fe:59:89:b7:40:b5:fd:db:88:6d:a6:1a:
35:17:c5:8f:7d:6a:f5:96:a9:90:e1:8f:44:7b:36:
2f:bd:97:56:87:0d:b4:4f:07:e8:93:0e:80:15:33:
99:4a:b6:16:6e:f6:9e:a3:19:0c:6f:b4:f0:5e:18:
26:2d:51:ca:bf:98:f6:20:1a:83:41:7c:dc:8d:87:
5f:cb:7b:2c:e3:da:f0:15:81:1f:43:69:34:1b:42:
62:c9:25:b9:a1:c5:40:35:c3:db:72:c4:0c:c7:df:
af:c1:00:13:4a:a8:4e:06:98:66:2f:5a:ef:78:84:
83:4f:e2:67:e5:76:0d:40:fe:a2:d9:24:48:10:fa:
ff:e7:7d:ec:b1:79:d4:11:11:7b:b7:d5:e3:67:1c:
8e:29:18:4e:ca:20:95:76:54:09:91:62:d9:37:4f:
80:40:72:69:f6:99:0e:0a:6e:8b:26:e8:8c:fc:8e:
a9:83:be:c4:ae:66:1b:e3:2b:eb:ee:b4:08:53:6b:
7d:5e:6c:29:5a:31:6c:e2:0e:2f:d7:3c:ef:24:c1:
7c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:16:B7:B1:CA:D5:5C:4F:54:0A:7C:89:BE:E6:CE:84:D4:C1:80:8C
X509v3 Authority Key Identifier:
keyid:E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:bc:6a:7a:74:39:9e:f1:7d:68:f8:28:92:61:86:3d:da:eb:
bb:00:a6:22:b9:2a:79:62:51:45:a2:fe:3a:85:78:8f:7d:f4:
0c:f8:e4:ac:ca:81:58:8a:45:c7:32:76:9d:95:7c:ef:50:cc:
25:8a:c6:f2:7c:9f:56:1d:d5:dd:a4:17:34:60:a2:59:17:af:
fa:21:2b:91:99:28:a5:bb:73:ad:e5:23:c3:dd:2a:11:59:d0:
12:70:8f:68:f9:14:c3:e7:14:c1:6d:ee:51:b0:e1:71:10:f4:
0e:c4:ed:5f:df:85:f0:48:db:fe:60:47:92:7b:25:a0:1d:cc:
02:14:9f:d8:05:c1:d7:0f:9b:6a:99:d3:a9:ef:d2:cb:c7:ad:
93:33:83:66:31:5f:be:de:25:a3:1f:e4:78:eb:13:f4:84:61:
7f:ee:e6:32:46:3d:07:a1:31:9f:c9:fe:a4:7b:f9:14:d3:77:
ee:14:34:d2:a1:a7:4a:31:be:09:8b:3a:65:12:bb:a7:e2:04:
7c:d2:49:09:d8:fc:45:63:55:99:57:5a:71:41:08:c2:42:c0:
52:62:0d:3f:57:83:6f:22:c7:36:b9:12:b0:54:10:d7:10:1e:
9f:b1:b2:0e:f4:f7:01:ac:b5:22:a8:11:85:43:0f:01:bb:58:
13:5b:db:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hZadA6LUO0DKgF+EXO6FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYjFlMmU0YzUwOGM2YzdhOThiNjU5ODUyODc0NWM4MTNm
YWQzMWQwHhcNMjUwMTMxMTgwMDM2WhcNMjUwMjAxMTgwMDM2WjAzMTEwLwYDVQQD
EyhkZTE2YjdiMWNhZDU1YzRmNTQwYTdjODliZWU2Y2U4NGQ0YzE4MDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXaavIbndleZ3aKbKQeFrpt3T6ir
F8/3FaQu0iVymMfo8Amf+1B1DCaWBoUI3Xv+WYm3QLX924htpho1F8WPfWr1lqmQ
4Y9EezYvvZdWhw20Twfokw6AFTOZSrYWbvaeoxkMb7TwXhgmLVHKv5j2IBqDQXzc
jYdfy3ss49rwFYEfQ2k0G0JiySW5ocVANcPbcsQMx9+vwQATSqhOBphmL1rveISD
T+Jn5XYNQP6i2SRIEPr/533ssXnUERF7t9XjZxyOKRhOyiCVdlQJkWLZN0+AQHJp
9pkOCm6LJuiM/I6pg77ErmYb4yvr7rQIU2t9XmwpWjFs4g4v1zzvJMF8fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4Wt7HK1VxPVAp8ib7mzoTUwYCMMB8GA1UdIwQY
MBaAFOKx4uTFCMbHqYtlmFKHRcgT+tMdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHJIaTVNVUl4c2VwaTJXWVVvZEZ5QlA2MHgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9kMzFlNWYtMGY1Mi00NjIzLTg2N2Et
NTQzZDYxODJlMjk0LzEvNHJIaTVNVUl4c2VwaTJXWVVvZEZ5QlA2MHgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9kMzFlNWYtMGY1Mi00NjIzLTg2N2EtNTQzZDYxODJlMjk0
LzEvNHJIaTVNVUl4c2VwaTJXWVVvZEZ5QlA2MHgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLxqenQ5
nvF9aPgokmGGPdrruwCmIrkqeWJRRaL+OoV4j330DPjkrMqBWIpFxzJ2nZV871DM
JYrG8nyfVh3V3aQXNGCiWRev+iErkZkopbtzreUjw90qEVnQEnCPaPkUw+cUwW3u
UbDhcRD0DsTtX9+F8Ejb/mBHknsloB3MAhSf2AXB1w+bapnTqe/Sy8etkzODZjFf
vt4lox/keOsT9IRhf+7mMkY9B6Exn8n+pHv5FNN37hQ00qGnSjG+CYs6ZRK7p+IE
fNJJCdj8RWNVmVdacUEIwkLAUmINP1eDbyLHNrkSsFQQ1xAen7GyDvT3Aay1IqgR
hUMPAbtYE1vbwA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:35 2025 by rpki-client