Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
File: rd0qgVBgqn5iGiCUNJdYsgNolvA.mft (raw, json)
Hash identifier: 5ooSMSVh6tWQr81ISGRQ0U/CmjL3GgJ0f++4d6TdUzo=
Subject key identifier: D4:37:17:C5:83:B6:6E:F4:BC:FE:36:8A:12:7B:2C:FA:83:11:A5:9D
Authority key identifier: AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
Certificate issuer: /CN=addd2a815060aa7e621a2094349758b2036896f0
Certificate serial: 0194BCAA3B02FBEA76984C644D5AB2FA2E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
Manifest number: 7E
Signing time: Fri 31 Jan 2025 14:01:00 +0000
Manifest this update: Fri 31 Jan 2025 14:01:00 +0000
Manifest next update: Sat 01 Feb 2025 14:01:00 +0000
Files and hashes: 1: 1-B4mnYUsJDtWU5_HUQ7FJC6tCSw.roa (hash: sHcyd6IuGZiLkLEHDVFO8zkeKGMSe2epXGrDt7jtZiY=)
2: nI5NCdmtStkGl8PmX4sZl4lJ0d0.roa (hash: cjYM2aQq4v8XueF1UgYd4H++DRsq/Hpr+SQGx9rrRlE=)
3: rd0qgVBgqn5iGiCUNJdYsgNolvA.crl (hash: dH1aP64jNHxCAL5EvY2jxJb9059dLTKRVnbxIy+7m3A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3b:02:fb:ea:76:98:4c:64:4d:5a:b2:fa:2e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=addd2a815060aa7e621a2094349758b2036896f0
Validity
Not Before: Jan 31 14:01:00 2025 GMT
Not After : Feb 1 14:01:00 2025 GMT
Subject: CN=d43717c583b66ef4bcfe368a127b2cfa8311a59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:05:e4:bb:3c:45:26:2f:8b:28:0c:48:3c:48:
79:37:fa:44:60:a4:ca:e5:dd:fd:93:44:ca:82:e4:
2c:f1:8a:51:6c:c3:ca:33:48:95:21:4b:43:d3:55:
fd:c7:e3:d7:c1:82:93:44:39:5c:85:9b:14:98:a1:
6c:f1:93:7c:c1:f5:1c:64:cc:91:aa:ac:0c:fd:aa:
0d:95:49:51:30:c7:27:14:f2:81:18:81:24:15:20:
c8:fe:30:6c:54:fc:5e:7c:91:84:82:7c:a0:6f:da:
eb:4a:97:b8:eb:ca:0d:43:ad:93:a5:e8:53:be:0b:
8a:38:be:af:cd:52:fe:e2:0c:23:89:21:73:95:b3:
6a:d8:03:d5:95:f9:8b:f5:ed:3f:93:c9:2c:0c:c0:
c6:f9:24:37:dc:c8:54:bf:91:08:29:eb:e8:aa:45:
df:e7:46:88:36:b4:4f:a3:b0:d7:03:be:7f:76:e1:
c9:11:b9:ed:5d:7e:23:49:a8:7b:0e:fb:44:ae:1e:
1f:ce:7f:dc:7e:3c:11:9d:a3:75:b9:bd:55:dd:46:
5a:0c:60:11:4b:81:1d:da:69:21:cc:c7:71:be:a5:
10:d1:43:b4:2f:af:43:4f:d4:50:6b:a7:0f:71:b8:
2d:ab:09:1d:4f:bd:9a:8f:90:c6:b7:80:07:7c:68:
4a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:37:17:C5:83:B6:6E:F4:BC:FE:36:8A:12:7B:2C:FA:83:11:A5:9D
X509v3 Authority Key Identifier:
keyid:AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:6d:38:72:f7:63:4c:8c:26:7c:95:f2:7f:60:a7:ec:21:4d:
6d:7d:ad:8f:7e:56:6c:d6:89:59:48:4a:cf:34:fa:5a:d7:7a:
e6:db:5e:f7:c4:2e:e3:21:99:66:6f:a0:0e:2d:92:02:44:06:
c4:fc:0b:00:60:dc:7a:5e:46:24:7b:d9:ee:ca:47:52:aa:a8:
d3:be:73:36:8e:74:e0:d7:8c:7c:8c:d1:15:b5:06:a2:5b:66:
60:7d:75:80:7f:4f:d0:49:e5:84:df:18:33:0c:95:2f:f2:70:
66:ed:f4:f6:9c:e6:73:fe:86:d4:d5:ab:2f:32:6d:b0:1a:4b:
1a:fb:27:84:66:c1:65:6a:f1:72:85:79:9d:9a:95:c6:7d:bd:
d6:18:06:93:4f:23:b6:de:c7:b4:c4:7c:70:2e:d7:c4:4c:e8:
c9:ca:54:ee:cc:03:9b:75:43:f4:ef:e6:7e:1c:e4:47:ef:0d:
81:80:ff:45:44:86:7a:4a:b6:d0:94:b3:39:45:ee:b6:84:12:
39:5f:9b:af:80:62:80:8c:e3:0b:12:27:c6:92:f9:fa:03:3c:
3d:7f:d7:88:2e:0f:f4:bb:0a:44:aa:ee:fd:05:09:52:bd:d4:
01:9a:d3:36:81:0c:b8:71:65:66:39:d7:c7:46:00:cb:88:e5:
32:3d:95:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qjsC++p2mExkTVqy+i6IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZGQyYTgxNTA2MGFhN2U2MjFhMjA5NDM0OTc1OGIyMDM2
ODk2ZjAwHhcNMjUwMTMxMTQwMTAwWhcNMjUwMjAxMTQwMTAwWjAzMTEwLwYDVQQD
EyhkNDM3MTdjNTgzYjY2ZWY0YmNmZTM2OGExMjdiMmNmYTgzMTFhNTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QXkuzxFJi+LKAxIPEh5N/pEYKTK
5d39k0TKguQs8YpRbMPKM0iVIUtD01X9x+PXwYKTRDlchZsUmKFs8ZN8wfUcZMyR
qqwM/aoNlUlRMMcnFPKBGIEkFSDI/jBsVPxefJGEgnygb9rrSpe468oNQ62TpehT
vguKOL6vzVL+4gwjiSFzlbNq2APVlfmL9e0/k8ksDMDG+SQ33MhUv5EIKevoqkXf
50aINrRPo7DXA75/duHJEbntXX4jSah7DvtErh4fzn/cfjwRnaN1ub1V3UZaDGAR
S4Ed2mkhzMdxvqUQ0UO0L69DT9RQa6cPcbgtqwkdT72aj5DGt4AHfGhKVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQ3F8WDtm70vP42ihJ7LPqDEaWdMB8GA1UdIwQY
MBaAFK3dKoFQYKp+YhoglDSXWLIDaJbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmQwcWdWQmdxbjVpR2lDVU5KZFlzZ05vbHZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lNGZhNDgtM2JlOC00ZmEzLWE0MzYt
OGEwZDBiZjBiNTc3LzEvcmQwcWdWQmdxbjVpR2lDVU5KZFlzZ05vbHZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lNGZhNDgtM2JlOC00ZmEzLWE0MzYtOGEwZDBiZjBiNTc3
LzEvcmQwcWdWQmdxbjVpR2lDVU5KZFlzZ05vbHZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN204cvdj
TIwmfJXyf2Cn7CFNbX2tj35WbNaJWUhKzzT6Wtd65tte98Qu4yGZZm+gDi2SAkQG
xPwLAGDcel5GJHvZ7spHUqqo075zNo504NeMfIzRFbUGoltmYH11gH9P0EnlhN8Y
MwyVL/JwZu309pzmc/6G1NWrLzJtsBpLGvsnhGbBZWrxcoV5nZqVxn291hgGk08j
tt7HtMR8cC7XxEzoycpU7swDm3VD9O/mfhzkR+8NgYD/RUSGekq20JSzOUXutoQS
OV+br4BigIzjCxInxpL5+gM8PX/XiC4P9LsKRKru/QUJUr3UAZrTNoEMuHFlZjnX
x0YAy4jlMj2VNQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:41:08 2025 by rpki-client