Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
File: 4qhjHttIETIyWh0Yb73gH6FXeRA.mft (raw, json)
Hash identifier: a+LYePJJz/AdTjUGl1JIudlReYzoDPbjNpm8kG3DFqg=
Subject key identifier: 82:4C:C3:74:98:8C:72:03:2D:56:44:5C:4A:5B:42:FF:C5:3D:EB:6B
Authority key identifier: E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
Certificate issuer: /CN=e2a8631edb481132325a1d186fbde01fa1577910
Certificate serial: 0194BC3BC40E4C6659305E7D91B4215340C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
Manifest number: 03AD
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: 4qhjHttIETIyWh0Yb73gH6FXeRA.crl (hash: cbXTAqvAHn18vHavzEzmxP9NvUAaHRZh0QWJiKaM0kA=)
2: h3E6-zfi_xyDMKZ-mjqCgktKu5o.roa (hash: jFGY2eFUS/f/RiSzQYMsT/EoV/0tdGrsjyAMY/vYpEg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c4:0e:4c:66:59:30:5e:7d:91:b4:21:53:40:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a8631edb481132325a1d186fbde01fa1577910
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=824cc374988c72032d56445c4a5b42ffc53deb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:f5:40:86:80:83:27:80:3f:1e:e2:79:da:4e:
3f:05:a1:71:a0:64:fc:15:26:f6:d4:a0:4c:eb:3f:
22:e5:ee:ce:f1:00:65:4c:8c:dc:34:91:9b:7e:af:
59:8f:89:ec:11:2e:bc:10:2a:ce:10:11:d5:e7:e1:
54:35:7b:2b:59:68:5e:f4:a6:32:97:8c:cd:ae:08:
35:59:67:fb:6e:36:62:1f:e0:bd:67:c2:3b:d7:20:
51:d5:e9:da:98:7d:ec:7d:fe:50:09:06:88:d1:46:
08:82:72:39:2c:c9:b6:d8:df:f4:38:40:73:ad:ea:
24:de:9f:b8:8b:03:26:43:76:a5:c7:dd:93:e4:7a:
88:3e:66:1b:9a:31:ce:ae:b0:18:10:23:a0:33:cd:
e7:3e:a5:a1:90:ec:08:b0:43:78:d4:60:c2:4d:08:
e4:75:d4:23:11:08:06:c4:34:07:b0:3b:dd:f9:8a:
fa:f9:33:05:9f:67:e8:e4:68:80:bd:a4:4d:1c:cb:
33:4e:d1:6d:b0:c7:89:6b:31:95:49:de:9b:3f:68:
23:ec:4c:b5:22:98:56:cb:13:77:db:98:49:f4:0b:
88:62:09:08:db:cd:58:55:63:90:a5:c8:40:ef:c5:
7d:f0:f3:ac:d1:03:cc:2e:18:d4:c8:c7:f8:ce:ad:
27:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4C:C3:74:98:8C:72:03:2D:56:44:5C:4A:5B:42:FF:C5:3D:EB:6B
X509v3 Authority Key Identifier:
keyid:E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:37:91:06:5c:83:22:97:27:1a:cd:63:8a:73:07:f0:20:f8:
5b:d1:28:1f:96:ee:16:e0:98:9a:e2:3d:97:ce:62:ff:89:5a:
e8:f5:b9:02:53:3f:20:7c:b8:1b:d6:2d:f7:4c:68:cf:0d:51:
6d:69:ed:09:81:08:11:a1:3b:39:71:b1:cc:42:76:51:d2:35:
10:d4:6c:64:28:c4:91:95:77:e4:78:b4:6e:1e:f4:18:f0:00:
f2:41:43:fa:0c:05:e8:0e:1c:11:bf:b2:27:92:c0:db:12:0a:
00:ce:40:fe:4c:d6:72:a9:b3:21:43:04:ae:69:cd:0a:61:91:
cc:80:96:e9:95:87:1f:b5:c2:37:e9:9c:c5:fe:e2:58:d8:2e:
d2:84:88:7d:b1:e9:18:24:19:da:66:2f:89:9c:c7:57:88:27:
c3:f7:27:f4:bb:21:c6:8e:06:d1:38:a4:26:62:59:b2:c3:90:
32:56:5e:05:17:12:9c:12:96:82:41:e6:ba:f1:1f:16:a8:bc:
d9:2e:44:17:b5:fc:11:7c:bd:3f:f7:40:8f:7c:ce:0d:2f:12:
ad:1c:05:ce:b8:09:ac:d6:55:94:11:2a:0a:30:b7:2e:58:b4:
5c:0c:d2:41:dc:50:bc:ee:61:a2:b6:38:73:e8:f6:20:24:5c:
48:43:44:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O8QOTGZZMF59kbQhU0DAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYTg2MzFlZGI0ODExMzIzMjVhMWQxODZmYmRlMDFmYTE1
Nzc5MTAwHhcNMjUwMTMxMTIwMDIwWhcNMjUwMjAxMTIwMDIwWjAzMTEwLwYDVQQD
Eyg4MjRjYzM3NDk4OGM3MjAzMmQ1NjQ0NWM0YTViNDJmZmM1M2RlYjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+PVAhoCDJ4A/HuJ52k4/BaFxoGT8
FSb21KBM6z8i5e7O8QBlTIzcNJGbfq9Zj4nsES68ECrOEBHV5+FUNXsrWWhe9KYy
l4zNrgg1WWf7bjZiH+C9Z8I71yBR1enamH3sff5QCQaI0UYIgnI5LMm22N/0OEBz
reok3p+4iwMmQ3alx92T5HqIPmYbmjHOrrAYECOgM83nPqWhkOwIsEN41GDCTQjk
ddQjEQgGxDQHsDvd+Yr6+TMFn2fo5GiAvaRNHMszTtFtsMeJazGVSd6bP2gj7Ey1
IphWyxN325hJ9AuIYgkI281YVWOQpchA78V98POs0QPMLhjUyMf4zq0nEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJMw3SYjHIDLVZEXEpbQv/FPetrMB8GA1UdIwQY
MBaAFOKoYx7bSBEyMlodGG+94B+hV3kQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHFoakh0dElFVEl5V2gwWWI3M2dINkZYZVJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82YWMwNTYtYmFhNC00YzcxLWI5NDAt
NDZkNmJhZWZkYWIxLzEvNHFoakh0dElFVEl5V2gwWWI3M2dINkZYZVJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS82YWMwNTYtYmFhNC00YzcxLWI5NDAtNDZkNmJhZWZkYWIx
LzEvNHFoakh0dElFVEl5V2gwWWI3M2dINkZYZVJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1TeRBlyD
IpcnGs1jinMH8CD4W9EoH5buFuCYmuI9l85i/4la6PW5AlM/IHy4G9Yt90xozw1R
bWntCYEIEaE7OXGxzEJ2UdI1ENRsZCjEkZV35Hi0bh70GPAA8kFD+gwF6A4cEb+y
J5LA2xIKAM5A/kzWcqmzIUMErmnNCmGRzICW6ZWHH7XCN+mcxf7iWNgu0oSIfbHp
GCQZ2mYviZzHV4gnw/cn9Lshxo4G0TikJmJZssOQMlZeBRcSnBKWgkHmuvEfFqi8
2S5EF7X8EXy9P/dAj3zODS8SrRwFzrgJrNZVlBEqCjC3Lli0XAzSQdxQvO5horY4
c+j2ICRcSENEVw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:03 2025 by rpki-client