Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
File: C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft (raw, json)
Hash identifier: nJs5dqE7686Of3tupbUwB3fxMFwmBWVGp8xOg7+OjVU=
Subject key identifier: 46:67:D1:6B:C0:CC:00:9F:7A:8B:4F:E7:FA:D7:53:A2:A5:19:4D:0F
Authority key identifier: 0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90
Certificate issuer: /CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
Certificate serial: 0194BC3C1828BAFF04DD760895BA8AF04FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
Manifest number: 0458
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl (hash: za/KS4UFXhRM88Oh+uxOiJzoW5etixnqJlcyQsYbHPc=)
2: dy6V06G8CC2FK34EGVuxtzegKH4.roa (hash: gPhDzrN8RIm6TShQaGb5YzX92bCG0Thu0kMn08thu4Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:18:28:ba:ff:04:dd:76:08:95:ba:8a:f0:4f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=4667d16bc0cc009f7a8b4fe7fad753a2a5194d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cc:d4:0e:40:87:6c:d1:4a:f1:97:a4:9c:01:
17:d6:ae:50:d0:8d:06:88:69:f4:28:fd:f3:42:25:
2f:19:96:90:69:23:67:63:48:66:60:78:bb:ca:d1:
0b:aa:91:cf:62:94:aa:4d:fe:3b:d9:c4:3d:a9:49:
cc:6e:96:16:d9:54:00:7e:b3:b0:16:0b:84:e6:68:
65:42:0f:85:ec:a6:6c:67:ba:3f:6a:da:25:d2:88:
23:93:ea:70:1a:92:60:b8:98:8c:b9:19:ed:a3:c5:
58:ec:a0:07:65:20:57:f3:dd:3f:57:40:73:f6:0d:
7f:3b:36:93:2a:7b:9f:1d:fc:cc:92:46:59:73:0a:
d6:1b:cd:6d:06:6e:a8:74:45:8c:fb:15:85:27:7d:
7b:95:80:fa:c8:e2:39:5a:00:36:41:9d:a4:d1:91:
bb:8d:e8:5c:84:b9:c1:78:19:7e:a2:25:c5:6e:a3:
ac:26:37:e4:ce:0d:7d:cf:d0:8d:a0:97:17:d6:5e:
41:1e:79:57:3e:e8:3e:61:27:67:fc:43:09:54:7d:
c8:d6:09:96:f8:49:b2:84:40:27:10:26:bc:8f:3e:
5e:95:40:f1:1c:59:09:7c:aa:3e:f6:29:c5:37:c5:
ec:df:02:ce:d8:fd:eb:af:44:55:58:71:17:09:7c:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:67:D1:6B:C0:CC:00:9F:7A:8B:4F:E7:FA:D7:53:A2:A5:19:4D:0F
X509v3 Authority Key Identifier:
keyid:0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:7c:d5:83:56:86:e5:90:84:b7:1a:a2:ff:a1:75:e5:dd:07:
d2:1c:ab:ca:ec:6a:55:a0:35:cd:3f:81:67:78:68:e8:c5:a5:
ea:22:18:eb:44:9d:00:a8:49:4e:dd:dd:f1:b6:20:61:39:3e:
eb:83:a7:a2:07:04:3f:21:40:cd:f5:d7:96:5e:fa:d7:d5:94:
0d:75:ef:94:48:9a:be:dd:41:85:08:05:0d:d3:13:b7:5d:9d:
01:23:32:e7:10:18:d2:43:f4:d0:ca:63:3e:8c:a3:51:13:87:
ba:68:b2:1e:7f:24:8e:34:46:86:d3:bd:96:e9:63:d3:c1:76:
8b:2c:85:c3:20:b8:ba:0d:d9:77:52:99:66:a7:26:de:d6:e8:
4f:d6:00:88:74:d9:3f:5a:b4:a0:8a:a8:10:9a:4d:f9:c3:b5:
57:7b:17:74:4f:10:e3:18:c9:01:fe:68:42:95:92:86:ca:af:
5e:ac:b8:f3:96:7a:df:88:61:78:9e:54:04:7a:ed:d1:66:a3:
af:aa:ec:0e:42:73:8f:d9:ce:c8:0c:da:42:5d:00:5a:9e:5e:
14:d8:04:f9:ae:34:d8:89:63:de:14:e1:be:c3:f4:96:e5:2f:
44:6b:70:2c:a1:45:46:c3:fd:f2:b1:1b:c6:d5:55:e2:fc:73:
2a:1c:18:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PBgouv8E3XYIlbqK8E/uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNThjOTIxY2IzZTljODFkZGMzMTZmZjAzOWNiOWMzNmQy
YTQzOTAwHhcNMjUwMTMxMTIwMDQyWhcNMjUwMjAxMTIwMDQyWjAzMTEwLwYDVQQD
Eyg0NjY3ZDE2YmMwY2MwMDlmN2E4YjRmZTdmYWQ3NTNhMmE1MTk0ZDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMzUDkCHbNFK8ZeknAEX1q5Q0I0G
iGn0KP3zQiUvGZaQaSNnY0hmYHi7ytELqpHPYpSqTf472cQ9qUnMbpYW2VQAfrOw
FguE5mhlQg+F7KZsZ7o/atol0ogjk+pwGpJguJiMuRnto8VY7KAHZSBX890/V0Bz
9g1/OzaTKnufHfzMkkZZcwrWG81tBm6odEWM+xWFJ317lYD6yOI5WgA2QZ2k0ZG7
jehchLnBeBl+oiXFbqOsJjfkzg19z9CNoJcX1l5BHnlXPug+YSdn/EMJVH3I1gmW
+EmyhEAnECa8jz5elUDxHFkJfKo+9inFN8Xs3wLO2P3rr0RVWHEXCXwMHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZn0WvAzACfeotP5/rXU6KlGU0PMB8GA1UdIwQY
MBaAFAtYySHLPpyB3cMW/wOcucNtKkOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzFqSkljcy1uSUhkd3hiX0E1eTV3MjBxUTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9mNGFiNWYtZTZjMi00OGI4LTk0ZWMt
NDkxNzgyOTZkZTg2LzEvQzFqSkljcy1uSUhkd3hiX0E1eTV3MjBxUTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9mNGFiNWYtZTZjMi00OGI4LTk0ZWMtNDkxNzgyOTZkZTg2
LzEvQzFqSkljcy1uSUhkd3hiX0E1eTV3MjBxUTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3zVg1aG
5ZCEtxqi/6F15d0H0hyryuxqVaA1zT+BZ3ho6MWl6iIY60SdAKhJTt3d8bYgYTk+
64OnogcEPyFAzfXXll7619WUDXXvlEiavt1BhQgFDdMTt12dASMy5xAY0kP00Mpj
PoyjUROHumiyHn8kjjRGhtO9lulj08F2iyyFwyC4ug3Zd1KZZqcm3tboT9YAiHTZ
P1q0oIqoEJpN+cO1V3sXdE8Q4xjJAf5oQpWShsqvXqy485Z634hheJ5UBHrt0Waj
r6rsDkJzj9nOyAzaQl0AWp5eFNgE+a402Ilj3hThvsP0luUvRGtwLKFFRsP98rEb
xtVV4vxzKhwYrw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:55 2025 by rpki-client