Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
File: DLvQEU2XGWdQ1IxeElbtBVpeniw.mft (raw, json)
Hash identifier: cwKFGGkcchvCdfCP+NZ09zl5Ms+IRto/j6mRhlZI1Zs=
Subject key identifier: 4A:51:73:DC:B5:83:5F:95:43:2E:84:7A:68:FB:99:8A:21:82:13:27
Authority key identifier: 0C:BB:D0:11:4D:97:19:67:50:D4:8C:5E:12:56:ED:05:5A:5E:9E:2C
Certificate issuer: /CN=0cbbd0114d97196750d48c5e1256ed055a5e9e2c
Certificate serial: 0194BC04E7274B16B01EC1A6F74D6D9BAD82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLvQEU2XGWdQ1IxeElbtBVpeniw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
Manifest number: 0882
Signing time: Fri 31 Jan 2025 11:00:25 +0000
Manifest this update: Fri 31 Jan 2025 11:00:25 +0000
Manifest next update: Sat 01 Feb 2025 11:00:25 +0000
Files and hashes: 1: C1pdtFvgr0xoHUm63plkKuj-C_Y.roa (hash: b/y/wC9aBMLG4uCve6DdHlmgdXRsPrspZQT4HGYlIp0=)
2: DLvQEU2XGWdQ1IxeElbtBVpeniw.crl (hash: BnBlP6bruH5FGEGb+k4k2cKQcgGoEoXBrwBSG5nJVSM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e7:27:4b:16:b0:1e:c1:a6:f7:4d:6d:9b:ad:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cbbd0114d97196750d48c5e1256ed055a5e9e2c
Validity
Not Before: Jan 31 11:00:25 2025 GMT
Not After : Feb 1 11:00:25 2025 GMT
Subject: CN=4a5173dcb5835f95432e847a68fb998a21821327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:36:48:50:bb:48:2a:e7:70:81:54:23:aa:59:
92:ab:eb:de:ce:b3:8d:38:d4:44:0f:a3:9b:4e:50:
39:7b:f5:91:12:c3:6b:ff:50:95:ed:a4:fe:03:33:
de:47:37:49:c3:43:8e:e3:9b:ef:b0:6d:59:b3:66:
10:ab:e7:41:93:2c:d6:4f:c1:d8:fd:8d:28:12:c3:
d6:74:2d:22:11:c1:1c:e7:e8:90:54:d0:76:a0:13:
27:8b:79:75:ac:63:e8:ab:cb:e4:64:b0:61:7e:8a:
68:75:5e:53:e2:be:90:d7:2a:11:1c:d9:7e:b8:fd:
0a:e4:db:a4:a4:f5:70:59:5c:e4:5b:f3:6f:61:57:
64:ff:15:7d:a6:fa:fb:5e:59:56:99:a9:8f:a1:b8:
a6:9d:f2:f2:e5:4a:6a:b4:05:a3:8a:8b:e0:b8:87:
f2:17:a6:0d:06:af:cc:dd:5e:01:6f:04:4d:e5:77:
0c:10:f8:8b:57:74:2a:ad:5b:5a:49:46:f9:5d:48:
06:09:a9:35:08:59:d9:76:a3:b2:88:b5:90:ef:b4:
dd:e5:ea:ff:5d:6c:5d:e5:c8:24:bf:48:0a:26:cc:
73:1b:82:5a:50:bf:28:fc:2f:fb:b8:cd:be:ff:e6:
9b:dc:3f:69:8d:0c:5e:c0:67:03:af:85:10:32:82:
5b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:51:73:DC:B5:83:5F:95:43:2E:84:7A:68:FB:99:8A:21:82:13:27
X509v3 Authority Key Identifier:
keyid:0C:BB:D0:11:4D:97:19:67:50:D4:8C:5E:12:56:ED:05:5A:5E:9E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLvQEU2XGWdQ1IxeElbtBVpeniw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:84:44:62:81:9a:3a:e3:5c:6a:0c:b4:95:61:40:7f:f9:0b:
14:31:4c:28:d9:b6:26:54:61:47:60:de:0d:64:a7:65:33:c5:
3d:7a:36:1f:e9:15:b9:1a:bf:bf:fd:9e:16:4c:46:22:32:6a:
9a:59:3d:5a:34:67:4e:b8:02:58:5f:fc:ec:7a:03:d4:d9:d9:
8c:27:92:1a:58:47:b5:2e:c0:15:1f:1a:a9:d0:f2:e8:39:0b:
4e:f6:b9:48:75:79:d8:0f:9a:50:97:dc:ae:79:5b:28:55:e8:
5d:77:59:01:86:29:60:d9:b7:02:65:b7:d0:31:4a:c3:c5:f2:
4a:57:59:78:ed:e1:b4:07:c5:6a:0b:d6:28:6e:94:86:ff:0a:
57:c8:a6:2e:56:19:15:80:9d:e0:3e:d1:07:cd:7a:a3:72:cb:
60:e1:18:82:4e:fd:2c:68:cd:11:53:7f:27:96:e0:d5:13:75:
59:ef:82:24:4b:ed:5a:d0:59:83:62:cc:54:3d:3e:16:83:90:
74:be:2f:3e:36:7c:17:1b:a4:22:54:0f:c4:43:a3:e1:d7:01:
2b:98:76:b4:9c:7f:78:f5:e6:ff:2c:4e:ae:60:d3:e2:e1:5e:
e1:7d:6a:99:e1:ad:36:29:98:b3:2d:d4:91:fe:a9:19:d5:91:
04:08:b6:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BOcnSxawHsGm901tm62CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYmJkMDExNGQ5NzE5Njc1MGQ0OGM1ZTEyNTZlZDA1NWE1
ZTllMmMwHhcNMjUwMTMxMTEwMDI1WhcNMjUwMjAxMTEwMDI1WjAzMTEwLwYDVQQD
Eyg0YTUxNzNkY2I1ODM1Zjk1NDMyZTg0N2E2OGZiOTk4YTIxODIxMzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTZIULtIKudwgVQjqlmSq+vezrON
ONRED6ObTlA5e/WREsNr/1CV7aT+AzPeRzdJw0OO45vvsG1Zs2YQq+dBkyzWT8HY
/Y0oEsPWdC0iEcEc5+iQVNB2oBMni3l1rGPoq8vkZLBhfopodV5T4r6Q1yoRHNl+
uP0K5NukpPVwWVzkW/NvYVdk/xV9pvr7XllWmamPobimnfLy5UpqtAWjiovguIfy
F6YNBq/M3V4BbwRN5XcMEPiLV3QqrVtaSUb5XUgGCak1CFnZdqOyiLWQ77Td5er/
XWxd5cgkv0gKJsxzG4JaUL8o/C/7uM2+/+ab3D9pjQxewGcDr4UQMoJbzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpRc9y1g1+VQy6Eemj7mYohghMnMB8GA1UdIwQY
MBaAFAy70BFNlxlnUNSMXhJW7QVaXp4sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREx2UUVVMlhHV2RRMUl4ZUVsYnRCVnBlbml3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8yYTFiNGUtZDc1NC00NDNjLWEzNjAt
YWZiNTY2Y2RmYWM2LzEvREx2UUVVMlhHV2RRMUl4ZUVsYnRCVnBlbml3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8yYTFiNGUtZDc1NC00NDNjLWEzNjAtYWZiNTY2Y2RmYWM2
LzEvREx2UUVVMlhHV2RRMUl4ZUVsYnRCVnBlbml3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIREYoGa
OuNcagy0lWFAf/kLFDFMKNm2JlRhR2DeDWSnZTPFPXo2H+kVuRq/v/2eFkxGIjJq
mlk9WjRnTrgCWF/87HoD1NnZjCeSGlhHtS7AFR8aqdDy6DkLTva5SHV52A+aUJfc
rnlbKFXoXXdZAYYpYNm3AmW30DFKw8XySldZeO3htAfFagvWKG6Uhv8KV8imLlYZ
FYCd4D7RB816o3LLYOEYgk79LGjNEVN/J5bg1RN1We+CJEvtWtBZg2LMVD0+FoOQ
dL4vPjZ8FxukIlQPxEOj4dcBK5h2tJx/ePXm/yxOrmDT4uFe4X1qmeGtNimYsy3U
kf6pGdWRBAi2Nw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:10 2025 by rpki-client