Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft
File: lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft (raw, json)
Hash identifier: xBjoRSCTOkraqGyfioZxsoKROuW95EhOJd2b4I1M6LE=
Subject key identifier: 66:EF:DB:F8:CE:ED:38:35:EA:1B:E7:5A:B6:37:45:BE:45:B4:09:A2
Authority key identifier: 95:14:DF:9F:DC:3A:0B:12:8C:20:EE:8C:06:62:8C:43:C9:58:BB:F0
Certificate issuer: /CN=9514df9fdc3a0b128c20ee8c06628c43c958bbf0
Certificate serial: 0194BD4E931ADA8CAD16CD878F4FD01532A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft
Manifest number: 0514
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: cCGgeXQG7w7JJ0VVtoCaqK0Nuk0.roa (hash: OWS86sPN3Xs5u+J3GeHiIwJ0UACEogG9zbUxH/qhnWU=)
2: lRTfn9w6CxKMIO6MBmKMQ8lYu_A.crl (hash: YiAj7ETOc5T9bDgZzwliuDOdb942Z7N/rfk8xbzh67g=)
3: x4XI86xuT3wsfzGO7m_2JB-s4p4.roa (hash: Dt7gE1TI/UXgmAj9V+d2Jv58edUR433oJyH6DVwQHcw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:93:1a:da:8c:ad:16:cd:87:8f:4f:d0:15:32:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9514df9fdc3a0b128c20ee8c06628c43c958bbf0
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=66efdbf8ceed3835ea1be75ab63745be45b409a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:72:f3:09:df:84:9a:d0:35:4e:c5:74:fa:
d8:74:67:4b:d3:04:62:2a:32:84:a3:32:1f:a0:30:
f5:69:87:00:35:37:8f:58:22:23:2d:4c:54:eb:83:
38:b4:61:d2:0e:c0:ee:3b:ef:23:34:5e:4d:a0:30:
26:01:3e:0b:a1:2e:94:9d:15:43:b5:40:32:a4:09:
c9:37:eb:71:f9:07:02:23:2c:54:9b:d2:fb:36:1e:
42:fb:1b:66:a8:00:9c:91:03:c7:49:da:bb:41:bc:
95:13:f6:ae:ca:fd:dc:2d:96:3b:7f:f8:3a:0d:07:
08:68:ef:8b:36:3e:3b:6d:4d:64:db:eb:25:92:10:
42:d6:3c:28:34:3d:da:98:0b:18:b5:16:76:10:b4:
a4:18:86:5e:ec:87:2e:ac:0f:ba:6a:a0:23:f3:1d:
3d:e6:e5:bc:54:e7:43:00:98:e2:fe:00:20:92:5f:
bf:27:9d:79:cf:c9:e2:4b:4a:ff:75:25:81:8a:6c:
cf:d0:76:1c:be:57:30:a4:7e:d4:f5:35:ca:33:26:
e2:f3:ae:7e:86:21:ab:b9:9a:d1:cd:79:4a:2c:a8:
c0:6b:2f:ae:77:86:eb:e9:41:b5:35:7f:97:4f:89:
2d:25:ca:29:15:20:1b:91:0b:4e:3f:0b:78:ad:d2:
17:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EF:DB:F8:CE:ED:38:35:EA:1B:E7:5A:B6:37:45:BE:45:B4:09:A2
X509v3 Authority Key Identifier:
keyid:95:14:DF:9F:DC:3A:0B:12:8C:20:EE:8C:06:62:8C:43:C9:58:BB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:08:66:b0:51:c6:8f:f6:8d:5f:21:aa:ec:39:ee:14:10:9b:
87:ce:37:1a:29:9c:0e:48:8b:de:60:eb:eb:5d:9e:08:4f:f4:
8b:b2:4b:0c:b7:99:fe:1c:cc:38:04:f4:aa:75:21:c1:55:1b:
0f:8c:c0:83:cb:10:2d:82:1b:ee:95:12:9b:48:5a:20:16:00:
f4:bc:41:d6:96:d3:5c:f9:60:22:1a:bf:97:a9:b1:9c:89:82:
e4:a3:2f:1e:3f:52:99:66:6b:68:3f:66:ea:27:c4:84:7d:22:
c8:ea:3d:2a:1a:6c:30:19:ca:e2:7b:53:3f:8c:c8:3d:60:d0:
ed:ff:cd:64:60:21:b3:c0:49:d8:02:7f:e6:58:02:eb:47:80:
69:13:28:7a:52:0a:fc:49:67:9d:ce:e9:bb:24:c8:d6:1e:71:
fe:10:94:55:88:db:d2:4e:cc:db:33:a5:68:e3:20:df:4d:96:
85:e8:a4:2b:70:4f:b4:63:6b:4a:14:6e:89:fe:8f:1b:2a:19:
f3:bf:ee:8a:1b:1c:d5:f8:62:db:25:11:e6:42:ac:7e:22:60:
55:a2:2c:9c:21:70:1f:35:4c:00:af:01:f0:d2:de:23:2e:6f:
51:0b:0b:14:0a:1f:65:5c:66:71:ad:a8:41:ed:76:ab:78:2f:
7f:a1:de:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TpMa2oytFs2Hj0/QFTKgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MTRkZjlmZGMzYTBiMTI4YzIwZWU4YzA2NjI4YzQzYzk1
OGJiZjAwHhcNMjUwMTMxMTcwMDMwWhcNMjUwMjAxMTcwMDMwWjAzMTEwLwYDVQQD
Eyg2NmVmZGJmOGNlZWQzODM1ZWExYmU3NWFiNjM3NDViZTQ1YjQwOWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnNy8wnfhJrQNU7FdPrYdGdL0wRi
KjKEozIfoDD1aYcANTePWCIjLUxU64M4tGHSDsDuO+8jNF5NoDAmAT4LoS6UnRVD
tUAypAnJN+tx+QcCIyxUm9L7Nh5C+xtmqACckQPHSdq7QbyVE/auyv3cLZY7f/g6
DQcIaO+LNj47bU1k2+slkhBC1jwoND3amAsYtRZ2ELSkGIZe7IcurA+6aqAj8x09
5uW8VOdDAJji/gAgkl+/J515z8niS0r/dSWBimzP0HYcvlcwpH7U9TXKMybi865+
hiGruZrRzXlKLKjAay+ud4br6UG1NX+XT4ktJcopFSAbkQtOPwt4rdIXuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbv2/jO7Tg16hvnWrY3Rb5FtAmiMB8GA1UdIwQY
MBaAFJUU35/cOgsSjCDujAZijEPJWLvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFJUZm45dzZDeEtNSU82TUJtS01ROGxZdV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85N2ZiMGQtZDc3Zi00NDY3LTg2Mjct
ZTIyMmJmODUyOWI4LzEvbFJUZm45dzZDeEtNSU82TUJtS01ROGxZdV9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi85N2ZiMGQtZDc3Zi00NDY3LTg2MjctZTIyMmJmODUyOWI4
LzEvbFJUZm45dzZDeEtNSU82TUJtS01ROGxZdV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAhmsFHG
j/aNXyGq7DnuFBCbh843GimcDkiL3mDr612eCE/0i7JLDLeZ/hzMOAT0qnUhwVUb
D4zAg8sQLYIb7pUSm0haIBYA9LxB1pbTXPlgIhq/l6mxnImC5KMvHj9SmWZraD9m
6ifEhH0iyOo9KhpsMBnK4ntTP4zIPWDQ7f/NZGAhs8BJ2AJ/5lgC60eAaRMoelIK
/Elnnc7puyTI1h5x/hCUVYjb0k7M2zOlaOMg302WheikK3BPtGNrShRuif6PGyoZ
87/uihsc1fhi2yUR5kKsfiJgVaIsnCFwHzVMAK8B8NLeIy5vUQsLFAofZVxmca2o
Qe12q3gvf6HeYA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:34:55 2025 by rpki-client