Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
File: dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft (raw, json)
Hash identifier: mn1nYYdFlvMNdiyo74nb4JyzVGNmfmgBGt+r+CrRrJs=
Subject key identifier: 08:FB:25:77:AE:26:E9:EF:BE:7C:52:3C:9E:4E:D1:E8:00:22:EF:1E
Authority key identifier: 74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
Certificate issuer: /CN=740f65f302335baa90ed81c05384d53f2332391a
Certificate serial: 0194BC3C09ADCB2E7CE61BCE42E76E73CA7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
Manifest number: 053C
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: WofWi7AY2voZ8zuxEwCCF11Li9Y.roa (hash: SwJtYvJm5nh+3634W4p5oPoXAQ3iVFOZXE2jIXt509U=)
2: dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl (hash: 0tv2chthNC3+rpQc5aHHMk5yaFNAYixZxj0XtupfVbc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:09:ad:cb:2e:7c:e6:1b:ce:42:e7:6e:73:ca:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=740f65f302335baa90ed81c05384d53f2332391a
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=08fb2577ae26e9efbe7c523c9e4ed1e80022ef1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3f:52:b6:11:9f:0d:55:d2:a3:2e:2b:64:a9:
e3:ed:15:99:42:a2:a8:0d:f1:f6:60:95:34:08:30:
65:12:36:36:f3:35:00:ca:d1:d0:18:71:96:66:71:
18:3a:13:a5:1c:47:b0:d2:11:92:7d:4d:7a:0a:34:
fb:3d:a2:b6:c5:4c:23:79:ff:a2:c7:42:01:76:31:
5e:1b:46:3e:95:6d:c9:10:1c:a9:0a:7d:0c:ae:a2:
85:52:e7:9c:18:5c:04:97:b0:44:8b:3a:d0:1f:19:
ae:ae:d0:a3:04:10:da:fd:be:1b:35:e1:de:46:08:
29:89:66:97:2d:88:bc:58:4b:c6:b1:ae:db:5a:b5:
c7:da:d6:0b:3b:11:cf:9d:82:bc:41:0b:e6:d5:f7:
d8:bd:0e:3e:4d:94:9a:93:0a:81:bb:0e:ca:06:b1:
36:23:8d:b8:f8:10:32:88:3d:90:86:3a:d4:36:08:
f5:77:4c:c1:00:51:11:4d:02:b8:7f:bf:76:29:3c:
e3:f0:31:5c:ae:87:38:9f:99:60:23:9e:74:99:e1:
ca:8f:0b:b0:2f:8e:84:4b:f7:1e:33:31:8f:30:bc:
48:3c:0e:c1:c4:08:63:f0:e6:6d:63:ed:7f:23:51:
2a:50:4e:03:fd:d3:fd:89:e4:3b:df:e4:e0:9d:d1:
7b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FB:25:77:AE:26:E9:EF:BE:7C:52:3C:9E:4E:D1:E8:00:22:EF:1E
X509v3 Authority Key Identifier:
keyid:74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:44:d0:af:25:01:e3:b1:b5:95:10:75:da:12:02:12:3c:3e:
27:31:88:85:2a:1b:37:5e:8e:e9:ef:93:e3:d6:b3:a2:bd:60:
4e:8a:67:cf:98:84:c8:59:88:d7:de:e5:fc:09:4e:0b:a8:06:
b0:cc:7b:2e:9a:33:e6:94:92:dc:3e:33:b0:95:eb:8f:87:5c:
cc:88:40:84:46:d4:5e:de:ca:a6:16:ef:34:19:7b:48:61:eb:
cc:f2:cc:76:de:42:fa:b1:67:0e:4a:31:d4:9b:47:79:02:e8:
d4:2f:e7:11:5f:9c:ea:10:f9:2f:da:69:99:45:51:9c:9d:e8:
7b:00:91:62:9c:1f:7e:81:18:53:92:fa:37:a8:4e:c9:ab:1d:
b5:78:47:3f:d8:e4:aa:7e:1f:07:74:4b:04:4e:9e:18:7d:26:
34:28:5b:8e:cd:0d:b9:38:0f:48:c6:52:cb:90:e5:1d:47:32:
5a:6a:6b:7e:d1:8e:ac:aa:8a:4b:d2:7e:1e:ba:f8:81:fe:d7:
d2:d7:3a:61:23:78:7b:46:ad:79:9a:41:57:58:79:40:04:a4:
5d:3b:ab:3e:2b:f3:86:84:5f:be:6d:c4:99:8d:b4:09:ad:c2:
43:2f:90:cf:84:52:6d:65:2b:b9:fc:b3:d0:22:c7:1f:36:90:
71:2e:2f:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PAmtyy585hvOQuduc8p9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MGY2NWYzMDIzMzViYWE5MGVkODFjMDUzODRkNTNmMjMz
MjM5MWEwHhcNMjUwMTMxMTIwMDM4WhcNMjUwMjAxMTIwMDM4WjAzMTEwLwYDVQQD
EygwOGZiMjU3N2FlMjZlOWVmYmU3YzUyM2M5ZTRlZDFlODAwMjJlZjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD9SthGfDVXSoy4rZKnj7RWZQqKo
DfH2YJU0CDBlEjY28zUAytHQGHGWZnEYOhOlHEew0hGSfU16CjT7PaK2xUwjef+i
x0IBdjFeG0Y+lW3JEBypCn0MrqKFUuecGFwEl7BEizrQHxmurtCjBBDa/b4bNeHe
RggpiWaXLYi8WEvGsa7bWrXH2tYLOxHPnYK8QQvm1ffYvQ4+TZSakwqBuw7KBrE2
I424+BAyiD2QhjrUNgj1d0zBAFERTQK4f792KTzj8DFcroc4n5lgI550meHKjwuw
L46ES/ceMzGPMLxIPA7BxAhj8OZtY+1/I1EqUE4D/dP9ieQ73+TgndF7WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAj7JXeuJunvvnxSPJ5O0egAIu8eMB8GA1UdIwQY
MBaAFHQPZfMCM1uqkO2BwFOE1T8jMjkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEE5bDh3SXpXNnFRN1lIQVU0VFZQeU15T1JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8zYjFjMWYtMmQ4Yy00ODYxLWI3MWQt
ZDAzYTJjNDM1YWVjLzEvZEE5bDh3SXpXNnFRN1lIQVU0VFZQeU15T1JvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8zYjFjMWYtMmQ4Yy00ODYxLWI3MWQtZDAzYTJjNDM1YWVj
LzEvZEE5bDh3SXpXNnFRN1lIQVU0VFZQeU15T1JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlkTQryUB
47G1lRB12hICEjw+JzGIhSobN16O6e+T49azor1gTopnz5iEyFmI197l/AlOC6gG
sMx7Lpoz5pSS3D4zsJXrj4dczIhAhEbUXt7KphbvNBl7SGHrzPLMdt5C+rFnDkox
1JtHeQLo1C/nEV+c6hD5L9ppmUVRnJ3oewCRYpwffoEYU5L6N6hOyasdtXhHP9jk
qn4fB3RLBE6eGH0mNChbjs0NuTgPSMZSy5DlHUcyWmprftGOrKqKS9J+Hrr4gf7X
0tc6YSN4e0ateZpBV1h5QASkXTurPivzhoRfvm3EmY20Ca3CQy+Qz4RSbWUrufyz
0CLHHzaQcS4vgQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:18:26 2025 by rpki-client