Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
File: 43O80yVaDa1fSjUNEdyJH6C-BDc.mft (raw, json)
Hash identifier: vA20Dqea4S28Zhjfx5aQN+Fct36rzBx2pjBfcsl1Xtg=
Subject key identifier: 4E:52:FF:1A:D3:BF:DF:EE:72:AD:7B:6A:74:1B:88:D8:1B:4B:FB:15
Authority key identifier: E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
Certificate issuer: /CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Certificate serial: 0194BD1758670CA090B39F0A56C34D5B4E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
Manifest number: 04FA
Signing time: Fri 31 Jan 2025 16:00:11 +0000
Manifest this update: Fri 31 Jan 2025 16:00:11 +0000
Manifest next update: Sat 01 Feb 2025 16:00:11 +0000
Files and hashes: 1: 1-AKJmO9q5axmG2bLlo_CKWpT7rI.roa (hash: IzbOHhtlqnCQLwohTNVhlpmomMZIZO83L4rK6yCvODA=)
2: 43O80yVaDa1fSjUNEdyJH6C-BDc.crl (hash: pM9iFcNxj+sCMi4YFUdSCuPuUsFGJXbmpd2TnW+o8kk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:58:67:0c:a0:90:b3:9f:0a:56:c3:4d:5b:4e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Validity
Not Before: Jan 31 16:00:11 2025 GMT
Not After : Feb 1 16:00:11 2025 GMT
Subject: CN=4e52ff1ad3bfdfee72ad7b6a741b88d81b4bfb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:99:f1:9d:42:2a:44:63:b7:ad:23:c3:5b:6f:
6c:12:73:50:66:ce:aa:b4:2e:f9:4b:3c:70:c8:de:
5c:97:ab:f1:66:a1:14:3a:78:11:00:70:d7:9a:ac:
d2:2a:6a:5e:a4:1e:65:61:48:02:2d:f4:65:7c:ad:
af:40:d1:d4:81:57:8b:33:25:03:0c:b9:c7:1d:89:
17:46:95:e6:34:a1:0d:0c:2c:40:a9:62:c5:62:55:
ae:f1:b5:70:13:0f:1c:db:bc:d4:f8:9f:8d:3c:47:
bf:0f:46:da:1e:01:74:68:49:4f:16:74:ce:01:8c:
de:42:ec:93:45:e3:e7:a8:53:4d:e5:01:03:06:30:
b5:70:07:cd:2f:9c:45:01:8e:24:ad:d1:d2:53:87:
91:60:29:6e:1a:b5:ff:00:6a:9e:6d:93:0d:06:91:
1e:0b:70:8a:61:6a:e1:78:fe:65:19:7a:e7:c9:23:
26:31:b7:9c:e3:e3:3f:9e:ab:e2:07:f7:a6:74:d7:
6b:48:e3:11:0b:b8:f4:9e:be:96:94:d6:e0:95:e3:
ba:a2:6f:fa:37:7e:3f:77:b6:f6:29:9a:ce:0b:2c:
51:0f:41:c5:4b:cb:b6:80:0c:af:60:66:38:27:ef:
e5:c9:91:cb:fa:ee:4a:fc:6c:64:0a:01:2d:76:b9:
9a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:52:FF:1A:D3:BF:DF:EE:72:AD:7B:6A:74:1B:88:D8:1B:4B:FB:15
X509v3 Authority Key Identifier:
keyid:E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:16:a6:63:d7:d3:e5:0b:ff:1f:cc:6e:46:16:e9:f3:8d:87:
52:68:7c:fb:30:79:36:b6:64:d4:77:0c:ab:d8:20:b5:64:40:
99:64:0a:ef:b8:d4:b8:2c:ac:fd:91:59:a9:99:18:a3:49:cd:
f0:69:48:ce:c1:d0:28:f7:9b:a3:5a:a2:c2:7e:b4:74:79:83:
f2:bc:9b:e4:5e:5d:7f:20:3b:ce:c6:26:4c:0f:fb:01:e8:84:
b6:88:7a:cf:95:0b:80:73:93:0c:3d:ca:e8:d1:d1:84:bf:49:
86:69:79:5d:aa:ed:f9:2f:18:f7:ec:d0:01:20:6b:a0:f3:5c:
83:8f:59:b0:c7:82:58:fc:da:a1:29:5c:1a:f0:e2:60:c7:5a:
6f:c1:13:6d:26:74:ed:7d:80:a5:bf:5b:4b:33:c7:4f:a6:48:
fd:9d:29:85:24:5a:31:72:15:34:d8:60:2f:20:ed:5f:42:a6:
2f:f8:6c:6b:05:77:3e:bf:76:73:8c:c9:73:8e:90:cf:7a:95:
c6:c4:da:c6:d0:5b:86:3f:17:8f:c2:d5:a0:0d:0e:bd:e1:01:
b8:9f:d2:65:59:34:84:75:90:b5:22:a6:8d:78:50:b6:cf:06:
18:51:d4:2e:d1:7b:63:28:65:f2:be:37:a2:8f:8d:ab:a1:07:
c0:c4:d1:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F1hnDKCQs58KVsNNW06UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNzNiY2QzMjU1YTBkYWQ1ZjRhMzUwZDExZGM4OTFmYTBi
ZTA0MzcwHhcNMjUwMTMxMTYwMDExWhcNMjUwMjAxMTYwMDExWjAzMTEwLwYDVQQD
Eyg0ZTUyZmYxYWQzYmZkZmVlNzJhZDdiNmE3NDFiODhkODFiNGJmYjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJnxnUIqRGO3rSPDW29sEnNQZs6q
tC75SzxwyN5cl6vxZqEUOngRAHDXmqzSKmpepB5lYUgCLfRlfK2vQNHUgVeLMyUD
DLnHHYkXRpXmNKENDCxAqWLFYlWu8bVwEw8c27zU+J+NPEe/D0baHgF0aElPFnTO
AYzeQuyTRePnqFNN5QEDBjC1cAfNL5xFAY4krdHSU4eRYCluGrX/AGqebZMNBpEe
C3CKYWrheP5lGXrnySMmMbec4+M/nqviB/emdNdrSOMRC7j0nr6WlNbgleO6om/6
N34/d7b2KZrOCyxRD0HFS8u2gAyvYGY4J+/lyZHL+u5K/GxkCgEtdrmalwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5S/xrTv9/ucq17anQbiNgbS/sVMB8GA1UdIwQY
MBaAFONzvNMlWg2tX0o1DRHciR+gvgQ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNPODB5VmFEYTFmU2pVTkVkeUpINkMtQkRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kMjBkYmMtMmFiNC00M2ZiLTgwYTIt
MDRlN2IxYThjZTE4LzEvNDNPODB5VmFEYTFmU2pVTkVkeUpINkMtQkRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9kMjBkYmMtMmFiNC00M2ZiLTgwYTItMDRlN2IxYThjZTE4
LzEvNDNPODB5VmFEYTFmU2pVTkVkeUpINkMtQkRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxamY9fT
5Qv/H8xuRhbp842HUmh8+zB5NrZk1HcMq9ggtWRAmWQK77jUuCys/ZFZqZkYo0nN
8GlIzsHQKPebo1qiwn60dHmD8ryb5F5dfyA7zsYmTA/7AeiEtoh6z5ULgHOTDD3K
6NHRhL9Jhml5Xart+S8Y9+zQASBroPNcg49ZsMeCWPzaoSlcGvDiYMdab8ETbSZ0
7X2Apb9bSzPHT6ZI/Z0phSRaMXIVNNhgLyDtX0KmL/hsawV3Pr92c4zJc46Qz3qV
xsTaxtBbhj8Xj8LVoA0OveEBuJ/SZVk0hHWQtSKmjXhQts8GGFHULtF7Yyhl8r43
oo+Nq6EHwMTR7A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:18:22 2025 by rpki-client