Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
File: cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft (raw, json)
Hash identifier: P7hRTYQEL8Huka2DAhmqvVyurz6zssgx+6qvV19+D8s=
Subject key identifier: 44:C0:EC:FC:2E:F6:F6:86:82:FF:49:2E:70:B1:37:A4:9B:09:F0:DF
Authority key identifier: 72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
Certificate issuer: /CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Certificate serial: 0194BC72ACDC87CF74C581E75A0C75195EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl (hash: i9zIkSt3VX8OFzquk4sHyzTPJqh/UZJMvVTGcMHTZjw=)
2: lmn9m784OLvYNEmoODCEhtK7M6Y.roa (hash: SMHhc3f9U107wkgd7T3SBk2Npa8W1MMzuYgHU/NZOn8=)
3: thiVarAMBeEnqBDpZfGbu3w4ANA.roa (hash: dysQvxWNncFFefbso/9XEjKk2c3ldxSqvGZG35iip3E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ac:dc:87:cf:74:c5:81:e7:5a:0c:75:19:5e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=44c0ecfc2ef6f68682ff492e70b137a49b09f0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:65:f0:dd:0c:bf:0e:80:44:4f:bb:49:5d:c3:
74:88:44:b9:ef:52:ad:56:75:e4:74:15:12:9e:25:
ad:96:68:31:26:ae:05:6d:1c:fc:5c:fe:8d:e2:b5:
01:17:7c:98:9f:95:e0:47:91:16:aa:d2:5c:0d:00:
c2:7d:23:79:c6:fc:0a:0a:bd:de:33:a3:62:37:57:
4a:ef:a6:92:4b:53:14:51:02:9f:53:b0:36:cf:07:
0a:d3:af:77:3e:2e:87:61:7c:ec:99:e8:5a:d1:42:
09:c5:c1:1a:9f:8e:4d:e1:81:2f:24:b0:bb:7c:6a:
da:d5:63:43:56:aa:32:7f:b0:ef:de:44:e2:04:09:
63:4e:e0:ce:43:b5:7e:e8:ab:45:51:b4:d4:6f:d3:
81:f2:b5:94:10:c7:5f:fc:53:7a:2e:e2:b0:5a:78:
c9:d5:82:b3:b9:87:1a:fc:72:9c:9d:13:c3:65:89:
12:5a:39:2e:51:01:37:93:47:f6:7e:a9:ea:04:da:
68:d8:f2:0a:d5:ea:b9:03:1d:c3:43:fa:9f:0a:25:
33:59:86:78:60:dd:1f:0b:1c:3a:b0:88:a0:64:5d:
dc:0c:f8:58:6f:10:c8:4e:31:a0:ee:26:66:86:e3:
3d:4b:13:07:e0:1d:29:ae:69:88:ae:b1:0a:d3:ff:
e6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C0:EC:FC:2E:F6:F6:86:82:FF:49:2E:70:B1:37:A4:9B:09:F0:DF
X509v3 Authority Key Identifier:
keyid:72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:18:7a:79:83:f4:62:7d:e8:16:8a:ee:d3:52:9c:c9:9d:da:
f7:86:89:5c:34:6d:0a:64:b0:af:96:b6:bd:c6:fe:10:a0:be:
a7:7d:c2:a6:74:ff:33:e0:24:19:1c:a3:50:d8:ce:e7:45:0b:
44:48:fc:e0:f8:93:f8:93:ca:10:6a:8d:57:c9:f7:a2:ab:41:
20:19:ba:db:25:b3:48:53:c0:64:17:47:7c:e0:b1:38:0b:4f:
41:c8:ce:ea:a8:5c:c9:0d:d8:94:e1:ad:77:3e:2f:87:e3:89:
44:22:a5:ba:f5:1e:41:d7:5e:e7:45:d1:d6:26:30:72:74:99:
73:ef:ff:eb:db:1c:c3:27:e0:cd:83:0b:96:1a:67:1a:ad:9c:
73:1f:37:5e:4d:a3:a2:a4:72:bd:11:0c:de:b8:d2:74:0a:85:
f6:f4:87:08:b7:1a:fd:f9:5c:2f:7c:77:0f:91:6f:72:6c:11:
b4:33:e5:ce:74:f1:fe:4e:a1:19:ab:da:4f:23:26:4e:fe:ab:
b8:ce:c0:22:21:38:c7:d6:7e:d1:89:18:70:61:35:2e:3b:91:
52:fc:49:aa:da:96:e8:90:06:7e:69:fa:e1:09:8b:f0:db:f0:
dc:3a:d7:a4:f5:6e:ba:62:dc:a1:a0:d3:40:10:a5:7b:cc:2c:
80:36:c5:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cqzch890xYHnWgx1GV7eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZjQ3NTM5ZjE5ZjBmNWExM2IwYjY5YmM3OTYyNzhmMGJm
NGFlYTQwHhcNMjUwMTMxMTMwMDE5WhcNMjUwMjAxMTMwMDE5WjAzMTEwLwYDVQQD
Eyg0NGMwZWNmYzJlZjZmNjg2ODJmZjQ5MmU3MGIxMzdhNDliMDlmMGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWXw3Qy/DoBET7tJXcN0iES571Kt
VnXkdBUSniWtlmgxJq4FbRz8XP6N4rUBF3yYn5XgR5EWqtJcDQDCfSN5xvwKCr3e
M6NiN1dK76aSS1MUUQKfU7A2zwcK0693Pi6HYXzsmeha0UIJxcEan45N4YEvJLC7
fGra1WNDVqoyf7Dv3kTiBAljTuDOQ7V+6KtFUbTUb9OB8rWUEMdf/FN6LuKwWnjJ
1YKzuYca/HKcnRPDZYkSWjkuUQE3k0f2fqnqBNpo2PIK1eq5Ax3DQ/qfCiUzWYZ4
YN0fCxw6sIigZF3cDPhYbxDITjGg7iZmhuM9SxMH4B0prmmIrrEK0//mYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETA7Pwu9vaGgv9JLnCxN6SbCfDfMB8GA1UdIwQY
MBaAFHL0dTnxnw9aE7C2m8eWJ48L9K6kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3ZSMU9mR2ZEMW9Uc0xhYng1WW5qd3YwcnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81NzNkOWQtMzJhZC00NmZmLWFlMjMt
MmVhNmVjMjg1YTE1LzEvY3ZSMU9mR2ZEMW9Uc0xhYng1WW5qd3YwcnFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81NzNkOWQtMzJhZC00NmZmLWFlMjMtMmVhNmVjMjg1YTE1
LzEvY3ZSMU9mR2ZEMW9Uc0xhYng1WW5qd3YwcnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxh6eYP0
Yn3oForu01KcyZ3a94aJXDRtCmSwr5a2vcb+EKC+p33CpnT/M+AkGRyjUNjO50UL
REj84PiT+JPKEGqNV8n3oqtBIBm62yWzSFPAZBdHfOCxOAtPQcjO6qhcyQ3YlOGt
dz4vh+OJRCKluvUeQdde50XR1iYwcnSZc+//69scwyfgzYMLlhpnGq2ccx83Xk2j
oqRyvREM3rjSdAqF9vSHCLca/flcL3x3D5FvcmwRtDPlznTx/k6hGavaTyMmTv6r
uM7AIiE4x9Z+0YkYcGE1LjuRUvxJqtqW6JAGfmn64QmL8Nvw3DrXpPVuumLcoaDT
QBCle8wsgDbFrA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:19 2025 by rpki-client