Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
File: 4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft (raw, json)
Hash identifier: /anRsFjRZ6GJSh17mHgLOKp4mC4NZFMGLelb974hUc0=
Subject key identifier: 5E:3C:EC:AA:E4:2C:CB:93:44:5F:AA:70:19:EE:D6:C8:DA:39:27:3F
Authority key identifier: E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43
Certificate issuer: /CN=e334ec393448d83bf1515f4967a448098e55fb43
Certificate serial: 0194BC04E8E8FF27D912BEEACDA6763C4CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:25 +0000
Manifest this update: Fri 31 Jan 2025 11:00:25 +0000
Manifest next update: Sat 01 Feb 2025 11:00:25 +0000
Files and hashes: 1: 3i7bDwmXfkGeboYerA9gz4okFig.roa (hash: fWhHLCsrKiodDbQX5MlZg8yk8IDQZFwIAhXPpQk2VnY=)
2: 4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl (hash: ltYtpQ4FwV9i5T5Ptvv1T7zO5QthgPraHep82HI6ybU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e8:e8:ff:27:d9:12:be:ea:cd:a6:76:3c:4c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e334ec393448d83bf1515f4967a448098e55fb43
Validity
Not Before: Jan 31 11:00:25 2025 GMT
Not After : Feb 1 11:00:25 2025 GMT
Subject: CN=5e3cecaae42ccb93445faa7019eed6c8da39273f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:a5:8f:9c:23:c8:4c:63:d1:30:dd:5c:43:
39:8b:5e:55:87:59:97:05:0d:e9:37:5f:99:78:40:
cd:eb:9e:35:b1:b8:c2:c8:f6:f2:36:71:44:3f:0a:
76:e2:92:af:81:95:1e:7c:5c:50:15:19:18:ab:15:
a6:01:c7:7b:e3:97:74:cc:a9:29:96:ab:63:43:f6:
c5:16:9c:30:bf:ab:66:b5:99:61:66:7f:05:dd:5d:
d6:7e:8f:bb:35:59:02:43:0b:a3:fe:59:7a:ea:c4:
40:63:87:7f:32:36:ca:b6:b7:31:08:64:28:d0:ff:
ee:a5:9c:38:2c:99:c7:27:80:a1:86:75:ef:71:05:
eb:b0:c6:ad:a2:0c:c8:82:98:78:a0:a2:75:01:0d:
1c:1f:42:35:63:3a:39:6c:ba:53:c5:f0:4f:0b:08:
f1:44:d0:04:1d:ae:ee:54:0d:0d:15:1a:66:fd:fa:
e9:61:06:c2:a7:db:bd:61:3c:48:f1:6b:17:c0:b6:
92:c6:52:f3:d1:29:b4:7e:16:3b:68:5c:16:cf:76:
4e:33:8d:27:26:ec:50:5d:ae:8a:1c:6d:dc:f6:a2:
86:7a:d2:da:15:23:3a:63:eb:0b:ce:0c:de:f9:eb:
66:fa:58:56:f2:80:2b:cc:9d:b1:c8:95:36:1a:28:
8c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3C:EC:AA:E4:2C:CB:93:44:5F:AA:70:19:EE:D6:C8:DA:39:27:3F
X509v3 Authority Key Identifier:
keyid:E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e6:40:20:35:d5:d8:98:41:f9:c6:71:6d:7f:25:60:cd:fe:
a2:d9:4c:f2:7c:27:0b:70:cc:a9:fd:04:d6:9c:86:5d:b2:69:
d2:74:6a:44:5c:aa:39:73:a7:bd:fb:af:29:be:68:cb:2d:9d:
e9:26:fd:59:be:82:53:91:9b:f1:41:70:d8:97:94:ed:46:15:
6c:46:60:15:50:87:49:97:1d:92:b9:39:09:12:01:11:e2:0c:
f5:33:b9:e5:5c:84:be:02:a7:84:3c:18:3a:a0:92:84:81:bd:
34:06:cb:89:09:50:c8:fe:db:35:10:29:f2:48:f9:89:3a:3a:
c3:e7:a5:2b:12:f9:1d:ea:eb:b3:9a:e1:2b:37:ae:ae:85:50:
91:01:90:8e:74:b0:47:73:5e:6e:94:18:82:ce:2f:3c:ac:1a:
2f:91:ae:fa:40:22:e8:f4:8c:ba:7f:44:3b:fb:4d:63:b0:d3:
11:b7:67:51:63:a6:81:81:1f:63:e6:bc:c2:6e:f7:c7:30:9c:
3f:d1:5c:e1:95:64:c7:07:3a:14:01:5f:90:9a:64:9c:88:76:
9d:2b:59:a6:d7:a9:35:01:04:1c:c6:f0:bb:79:77:48:ff:40:
77:f3:6e:4e:c3:7d:68:b1:37:7c:66:50:aa:da:53:b4:90:70:
76:0a:db:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BOjo/yfZEr7qzaZ2PEzhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMzRlYzM5MzQ0OGQ4M2JmMTUxNWY0OTY3YTQ0ODA5OGU1
NWZiNDMwHhcNMjUwMTMxMTEwMDI1WhcNMjUwMjAxMTEwMDI1WjAzMTEwLwYDVQQD
Eyg1ZTNjZWNhYWU0MmNjYjkzNDQ1ZmFhNzAxOWVlZDZjOGRhMzkyNzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2Olj5wjyExj0TDdXEM5i15Vh1mX
BQ3pN1+ZeEDN6541sbjCyPbyNnFEPwp24pKvgZUefFxQFRkYqxWmAcd745d0zKkp
lqtjQ/bFFpwwv6tmtZlhZn8F3V3Wfo+7NVkCQwuj/ll66sRAY4d/MjbKtrcxCGQo
0P/upZw4LJnHJ4ChhnXvcQXrsMatogzIgph4oKJ1AQ0cH0I1Yzo5bLpTxfBPCwjx
RNAEHa7uVA0NFRpm/frpYQbCp9u9YTxI8WsXwLaSxlLz0Sm0fhY7aFwWz3ZOM40n
JuxQXa6KHG3c9qKGetLaFSM6Y+sLzgze+etm+lhW8oArzJ2xyJU2GiiMyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF487KrkLMuTRF+qcBnu1sjaOSc/MB8GA1UdIwQY
MBaAFOM07Dk0SNg78VFfSWekSAmOVftDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHpUc09UUkkyRHZ4VVY5Slo2UklDWTVWLTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xOWJkOGEtYzZmMS00MmUyLTg0NjAt
Y2RhYjE5YTNmZGViLzEvNHpUc09UUkkyRHZ4VVY5Slo2UklDWTVWLTBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8xOWJkOGEtYzZmMS00MmUyLTg0NjAtY2RhYjE5YTNmZGVi
LzEvNHpUc09UUkkyRHZ4VVY5Slo2UklDWTVWLTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdOZAIDXV
2JhB+cZxbX8lYM3+otlM8nwnC3DMqf0E1pyGXbJp0nRqRFyqOXOnvfuvKb5oyy2d
6Sb9Wb6CU5Gb8UFw2JeU7UYVbEZgFVCHSZcdkrk5CRIBEeIM9TO55VyEvgKnhDwY
OqCShIG9NAbLiQlQyP7bNRAp8kj5iTo6w+elKxL5Herrs5rhKzeuroVQkQGQjnSw
R3NebpQYgs4vPKwaL5Gu+kAi6PSMun9EO/tNY7DTEbdnUWOmgYEfY+a8wm73xzCc
P9Fc4ZVkxwc6FAFfkJpknIh2nStZptepNQEEHMbwu3l3SP9Ad/NuTsN9aLE3fGZQ
qtpTtJBwdgrbOA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:46 2025 by rpki-client