Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft
File: a4d_CC_1_vSwfPj3wPcTNLyLhII.mft (raw, json)
Hash identifier: FEG0OkwslbVwwMP4ceYJ0sxr0zxHjRMJwF9hHvP+XU4=
Subject key identifier: 25:54:47:01:B0:59:98:2B:5F:F1:29:3C:AB:47:BD:47:F3:09:FC:30
Authority key identifier: 6B:87:7F:08:2F:F5:FE:F4:B0:7C:F8:F7:C0:F7:13:34:BC:8B:84:82
Certificate issuer: /CN=6b877f082ff5fef4b07cf8f7c0f71334bc8b8482
Certificate serial: 0194BC3CA54AB3D4C63F46B8ABFB029427CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4d_CC_1_vSwfPj3wPcTNLyLhII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft
Manifest number: 0A7A
Signing time: Fri 31 Jan 2025 12:01:18 +0000
Manifest this update: Fri 31 Jan 2025 12:01:18 +0000
Manifest next update: Sat 01 Feb 2025 12:01:18 +0000
Files and hashes: 1: WCDr0C7BpS_ig7DZMYGJWIavE9c.roa (hash: ZsfN2PWj+HvImmXbTTvAz0j0hR2wbZeR5zuw9m+NkaI=)
2: a4d_CC_1_vSwfPj3wPcTNLyLhII.crl (hash: EaGVN0KBTl4021FA+Nkb2tRUollAn96lyxKsrzctFeU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a5:4a:b3:d4:c6:3f:46:b8:ab:fb:02:94:27:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b877f082ff5fef4b07cf8f7c0f71334bc8b8482
Validity
Not Before: Jan 31 12:01:18 2025 GMT
Not After : Feb 1 12:01:18 2025 GMT
Subject: CN=25544701b059982b5ff1293cab47bd47f309fc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:48:6b:66:8b:e7:70:b4:28:28:f5:af:db:e6:
62:90:86:c0:7d:37:1c:93:27:c9:a2:27:10:d0:e4:
67:94:d6:1c:13:65:9d:03:60:da:74:4f:89:c1:c8:
bc:30:10:d7:f4:27:fd:29:40:f7:6f:43:fd:47:0e:
ac:22:95:c3:e2:4e:13:ac:60:a7:17:f1:bf:94:71:
0f:80:28:1c:72:7d:1e:01:3d:e7:60:15:4e:55:48:
4e:5a:fc:88:77:e2:8e:47:0b:cd:5c:ae:87:d5:03:
c6:b1:e7:b5:2e:f0:b7:79:ad:4e:8b:02:49:bc:d9:
42:53:62:b6:e2:f8:10:7b:91:64:45:19:de:50:1b:
6a:8c:ea:3a:f9:f7:e2:9c:3a:2a:e2:cc:c0:4e:05:
f4:58:53:41:34:7b:ff:da:df:45:0d:db:22:3a:62:
32:d9:27:1b:ab:d6:34:d0:28:18:03:1c:1f:7a:6c:
eb:6d:67:75:d6:9b:1d:a2:2a:6f:c9:8a:9e:e3:52:
29:e3:84:cf:f8:ab:7a:d7:c3:de:48:b5:7b:88:02:
f7:f6:b0:f3:95:fb:b5:bc:7d:85:ab:f1:2f:e2:88:
fe:89:f2:12:f0:94:da:74:4e:68:94:92:dc:4e:be:
99:21:d1:73:dd:9a:9c:2c:e7:39:f3:16:5f:70:4b:
31:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:54:47:01:B0:59:98:2B:5F:F1:29:3C:AB:47:BD:47:F3:09:FC:30
X509v3 Authority Key Identifier:
keyid:6B:87:7F:08:2F:F5:FE:F4:B0:7C:F8:F7:C0:F7:13:34:BC:8B:84:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4d_CC_1_vSwfPj3wPcTNLyLhII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:8c:11:12:96:c8:46:11:a7:b7:34:61:d0:ca:8a:68:81:69:
69:cd:5d:d0:7e:a3:f7:8f:f2:63:02:d9:aa:08:29:22:c0:8a:
f0:ff:20:d7:05:14:fb:d4:7f:30:e8:0f:12:c5:aa:21:51:d4:
97:61:a4:ba:9d:cb:70:0f:58:e6:93:a6:13:0d:4f:f1:d0:ef:
24:a0:7c:92:2b:ef:b9:3b:6b:3f:76:89:10:58:01:48:3a:57:
25:bf:29:fc:39:15:24:20:ed:51:09:c8:be:ec:4c:2d:39:a9:
52:10:90:b1:15:d5:89:a5:6e:b6:29:16:31:09:3e:2e:dd:e5:
97:2f:d9:08:a3:9b:9a:6c:40:75:1d:e0:18:ae:8e:2f:d6:8d:
2d:ed:49:92:d4:5b:06:f0:9f:fc:79:fd:54:02:6f:86:50:d5:
7f:6c:0f:74:98:18:0e:c3:5f:cb:8c:d7:a3:a0:aa:cd:6c:2e:
d3:9e:23:35:cd:86:3b:78:a0:9e:26:8e:c8:0a:4f:81:7a:2d:
f2:5b:0a:1f:8a:d9:be:3e:62:3a:f0:69:f6:78:29:24:66:8d:
6a:f2:7b:33:95:b7:23:5e:37:c4:e2:b7:13:1a:a3:b1:92:8f:
11:a2:43:02:cc:82:92:d9:e4:66:c3:a3:e6:46:01:ef:fb:56:
64:b8:88:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PKVKs9TGP0a4q/sClCfOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiODc3ZjA4MmZmNWZlZjRiMDdjZjhmN2MwZjcxMzM0YmM4
Yjg0ODIwHhcNMjUwMTMxMTIwMTE4WhcNMjUwMjAxMTIwMTE4WjAzMTEwLwYDVQQD
EygyNTU0NDcwMWIwNTk5ODJiNWZmMTI5M2NhYjQ3YmQ0N2YzMDlmYzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEhrZovncLQoKPWv2+ZikIbAfTcc
kyfJoicQ0ORnlNYcE2WdA2DadE+Jwci8MBDX9Cf9KUD3b0P9Rw6sIpXD4k4TrGCn
F/G/lHEPgCgccn0eAT3nYBVOVUhOWvyId+KORwvNXK6H1QPGsee1LvC3ea1OiwJJ
vNlCU2K24vgQe5FkRRneUBtqjOo6+ffinDoq4szATgX0WFNBNHv/2t9FDdsiOmIy
2Scbq9Y00CgYAxwfemzrbWd11psdoipvyYqe41Ip44TP+Kt618PeSLV7iAL39rDz
lfu1vH2Fq/Ev4oj+ifIS8JTadE5olJLcTr6ZIdFz3ZqcLOc58xZfcEsxPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVURwGwWZgrX/EpPKtHvUfzCfwwMB8GA1UdIwQY
MBaAFGuHfwgv9f70sHz498D3EzS8i4SCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTRkX0NDXzFfdlN3ZlBqM3dQY1ROTHlMaElJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xMWNmNGUtNjBhMy00NjIyLWIyMTIt
NzMxNGU2OTRiYWM5LzEvYTRkX0NDXzFfdlN3ZlBqM3dQY1ROTHlMaElJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8xMWNmNGUtNjBhMy00NjIyLWIyMTItNzMxNGU2OTRiYWM5
LzEvYTRkX0NDXzFfdlN3ZlBqM3dQY1ROTHlMaElJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIwREpbI
RhGntzRh0MqKaIFpac1d0H6j94/yYwLZqggpIsCK8P8g1wUU+9R/MOgPEsWqIVHU
l2Gkup3LcA9Y5pOmEw1P8dDvJKB8kivvuTtrP3aJEFgBSDpXJb8p/DkVJCDtUQnI
vuxMLTmpUhCQsRXViaVutikWMQk+Lt3lly/ZCKObmmxAdR3gGK6OL9aNLe1JktRb
BvCf/Hn9VAJvhlDVf2wPdJgYDsNfy4zXo6CqzWwu054jNc2GO3igniaOyApPgXot
8lsKH4rZvj5iOvBp9ngpJGaNavJ7M5W3I143xOK3ExqjsZKPEaJDAsyCktnkZsOj
5kYB7/tWZLiIUw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:36 2025 by rpki-client