Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/4VxQYDX6jdYJG0Ok6Il2f83MSPE.mft
File: 4VxQYDX6jdYJG0Ok6Il2f83MSPE.mft (raw, json)
Hash identifier: v6a74qZAUeXJY218Iv6q57fatgEUrJ9xm9bY2P/ECas=
Subject key identifier: D5:25:F4:BC:B6:F9:21:FC:5C:59:A1:59:E5:A5:96:3D:87:B0:97:58
Authority key identifier: E1:5C:50:60:35:FA:8D:D6:09:1B:43:A4:E8:89:76:7F:CD:CC:48:F1
Certificate issuer: /CN=e15c506035fa8dd6091b43a4e889767fcdcc48f1
Certificate serial: 0194BBCE4F5F53E46B6B8B6EDB60E40C6DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VxQYDX6jdYJG0Ok6Il2f83MSPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/4VxQYDX6jdYJG0Ok6Il2f83MSPE.mft
Manifest number: 1033
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: 4VxQYDX6jdYJG0Ok6Il2f83MSPE.crl (hash: yILOk+wf44INAjDYTVVqsJ2ElGsRqDyWyyQVuLbApsI=)
2: NRZ_lCVhABHz5b_Z8IxEc9d_jK0.roa (hash: JVDWSg5rVEKkwzjQ42dtSUP/iC2fUlHw3otcwoq/p38=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4f:5f:53:e4:6b:6b:8b:6e:db:60:e4:0c:6d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15c506035fa8dd6091b43a4e889767fcdcc48f1
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=d525f4bcb6f921fc5c59a159e5a5963d87b09758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:44:52:09:c4:9e:a0:bf:e1:6f:a5:f3:72:0c:
62:b1:57:95:5e:23:38:1a:b9:4b:fe:0c:ce:fa:27:
32:51:22:a6:14:ae:b1:2c:d1:03:9e:ba:c6:c3:d2:
c7:d7:6e:46:90:f2:a5:23:94:fc:f2:30:e6:f4:5e:
a1:5a:71:83:10:9b:c3:99:0e:a4:18:84:86:82:6d:
ea:e6:fb:51:7d:5f:8c:85:b9:ec:25:ee:89:64:4e:
2f:24:be:62:62:ad:9a:7a:3a:4a:07:cc:72:bb:4a:
34:8a:9e:cc:6c:85:51:4b:7f:da:7c:2d:d9:9e:6d:
58:5b:73:87:26:10:18:34:2c:18:45:60:df:7f:e3:
46:1b:3a:74:52:75:86:0a:18:f2:c7:f0:1f:6d:f1:
52:0f:38:a8:d1:00:3e:07:94:34:ef:27:3e:9d:25:
e5:00:e0:fd:a9:9a:9e:af:4f:96:a5:ac:e0:37:f8:
a2:f5:f8:d1:7e:f5:df:72:59:f9:20:d7:69:3a:87:
eb:69:f2:36:96:72:21:d6:bd:d4:8e:55:0c:2d:91:
68:8f:b9:a1:b1:c2:0e:d1:b7:a7:88:4f:4f:ef:0e:
76:53:26:fb:cf:bc:5c:78:11:c1:12:ca:90:f5:28:
5a:a2:b0:e4:41:8d:78:55:36:86:e8:81:80:ad:e6:
43:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:25:F4:BC:B6:F9:21:FC:5C:59:A1:59:E5:A5:96:3D:87:B0:97:58
X509v3 Authority Key Identifier:
keyid:E1:5C:50:60:35:FA:8D:D6:09:1B:43:A4:E8:89:76:7F:CD:CC:48:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VxQYDX6jdYJG0Ok6Il2f83MSPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/4VxQYDX6jdYJG0Ok6Il2f83MSPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/4VxQYDX6jdYJG0Ok6Il2f83MSPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:f3:f4:fc:6e:9b:8f:01:fc:67:77:00:e0:dd:55:82:6f:0a:
1d:4a:f7:00:13:10:a9:fc:23:37:17:c4:c1:0b:6d:7f:92:64:
ba:4a:03:07:e6:6d:c0:9d:90:bf:6b:c5:23:78:fb:1a:5c:ab:
6c:d2:70:6a:e6:ae:e8:78:a9:01:a4:7a:42:e5:25:4e:5c:05:
a1:c5:87:20:f6:82:d3:f0:e2:95:12:23:ee:a2:1c:ca:3d:09:
5e:ba:06:36:75:46:8d:79:57:ca:a0:b2:92:e3:73:4a:0c:9f:
17:e5:5a:98:00:ce:10:8d:2f:bf:00:96:04:75:7c:c9:94:d7:
f4:03:11:f3:f1:c6:95:ef:b6:b5:a0:c5:e8:4f:83:00:75:0d:
12:7c:c3:b0:3e:a3:c7:94:44:d2:e8:f5:82:7b:a0:80:e7:ad:
0c:3e:ef:95:38:75:f9:b3:3b:3a:2f:e4:43:10:a6:dd:19:59:
b3:76:74:42:67:32:18:17:75:31:07:8c:63:38:3b:12:60:ba:
ff:8f:df:d5:d4:59:33:2d:1a:02:6e:f4:ec:b2:af:1d:d6:45:
b6:cb:f3:5a:dd:91:86:1d:0d:c3:e5:91:d5:46:fb:17:95:e5:
e7:e1:c6:33:44:a0:76:ec:72:a6:17:81:d4:58:81:db:f5:4c:
90:e0:a3:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zk9fU+Rra4tu22DkDG3LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNWM1MDYwMzVmYThkZDYwOTFiNDNhNGU4ODk3NjdmY2Rj
YzQ4ZjEwHhcNMjUwMTMxMTAwMDQ3WhcNMjUwMjAxMTAwMDQ3WjAzMTEwLwYDVQQD
EyhkNTI1ZjRiY2I2ZjkyMWZjNWM1OWExNTllNWE1OTYzZDg3YjA5NzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0RSCcSeoL/hb6XzcgxisVeVXiM4
GrlL/gzO+icyUSKmFK6xLNEDnrrGw9LH125GkPKlI5T88jDm9F6hWnGDEJvDmQ6k
GISGgm3q5vtRfV+MhbnsJe6JZE4vJL5iYq2aejpKB8xyu0o0ip7MbIVRS3/afC3Z
nm1YW3OHJhAYNCwYRWDff+NGGzp0UnWGChjyx/AfbfFSDzio0QA+B5Q07yc+nSXl
AOD9qZqer0+WpazgN/ii9fjRfvXfcln5INdpOofrafI2lnIh1r3UjlUMLZFoj7mh
scIO0beniE9P7w52Uyb7z7xceBHBEsqQ9ShaorDkQY14VTaG6IGAreZDlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUl9Ly2+SH8XFmhWeWllj2HsJdYMB8GA1UdIwQY
MBaAFOFcUGA1+o3WCRtDpOiJdn/NzEjxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZ4UVlEWDZqZFlKRzBPazZJbDJmODNNU1BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80MTIzNDUtOTAzZS00Y2MxLTk5N2Et
ZTg2ODJmMzIyOTQwLzEvNFZ4UVlEWDZqZFlKRzBPazZJbDJmODNNU1BFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80MTIzNDUtOTAzZS00Y2MxLTk5N2EtZTg2ODJmMzIyOTQw
LzEvNFZ4UVlEWDZqZFlKRzBPazZJbDJmODNNU1BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzPP0/G6b
jwH8Z3cA4N1Vgm8KHUr3ABMQqfwjNxfEwQttf5JkukoDB+ZtwJ2Qv2vFI3j7Glyr
bNJwauau6HipAaR6QuUlTlwFocWHIPaC0/DilRIj7qIcyj0JXroGNnVGjXlXyqCy
kuNzSgyfF+VamADOEI0vvwCWBHV8yZTX9AMR8/HGle+2taDF6E+DAHUNEnzDsD6j
x5RE0uj1gnuggOetDD7vlTh1+bM7Oi/kQxCm3RlZs3Z0QmcyGBd1MQeMYzg7EmC6
/4/f1dRZMy0aAm707LKvHdZFtsvzWt2Rhh0Nw+WR1Ub7F5Xl5+HGM0SgduxypheB
1FiB2/VMkOCjVA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:28 2025 by rpki-client