Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
File: _-cGk0VLwzSF3sadIZ0FAmVKwEo.mft (raw, json)
Hash identifier: fSLHjgy+fr1duCYgEQ7MWwIkwjf+8Ywupk+cI+kI5BU=
Subject key identifier: 2D:DB:88:A5:8B:40:17:E0:7E:E5:6B:49:B6:24:3C:FB:DE:26:FD:F5
Authority key identifier: FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
Certificate issuer: /CN=ffe70693454bc33485dec69d219d0502654ac04a
Certificate serial: 0194BD4E7A30257529426014B0EA5C7509AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
Manifest number: 0EBC
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: _-cGk0VLwzSF3sadIZ0FAmVKwEo.crl (hash: 8IsiSynlUJuYtlRl703TDWt3kIGBkCUPBxhS1cCu5+I=)
2: _0sjthYRaAet3JbRp0XUDRbz-GA.roa (hash: ul8jawKmMZl7pMGLxI/c/PCpmLqBlcwBurtPIn7OQwg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7a:30:25:75:29:42:60:14:b0:ea:5c:75:09:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe70693454bc33485dec69d219d0502654ac04a
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=2ddb88a58b4017e07ee56b49b6243cfbde26fdf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7a:d3:c5:07:f5:51:ab:da:cd:c2:c7:72:91:
28:8e:c3:3a:5a:bb:66:70:ac:25:36:e3:11:1e:e7:
9d:e4:4e:ab:9b:cc:0d:5c:78:92:b6:e3:3f:43:1e:
30:52:0b:cd:2a:8f:ed:9f:4b:61:79:b1:c9:5e:c9:
f4:45:bc:52:60:d4:26:4a:9c:6c:d5:4a:0d:4d:80:
0c:88:f5:9b:96:41:ea:64:22:76:75:2f:7e:5e:c0:
0c:2d:53:33:f7:c0:7e:3d:91:9e:df:23:86:99:e2:
05:8e:30:33:d5:c0:43:af:00:cc:be:42:9d:12:3e:
98:a0:65:a9:9d:1f:5a:bf:1d:26:55:7e:72:d6:27:
30:5a:8e:4a:8c:ef:f5:d3:99:70:51:54:78:f5:23:
5c:6c:f5:60:6b:c1:69:e4:f3:e1:21:d2:d5:c6:39:
b5:d0:8e:fc:7e:67:f9:4c:d6:d4:cf:0d:c3:9e:4b:
21:09:92:e2:b1:3d:7f:32:d6:12:35:a6:04:c6:bc:
ca:29:f5:67:5c:3b:b5:c8:6c:e8:8d:79:b5:05:43:
76:49:bd:6b:ac:5d:5d:18:06:6f:e7:ab:75:32:e0:
6f:4d:52:81:0f:24:52:38:b5:a0:e4:87:64:d7:68:
ce:da:ba:2d:94:15:5b:2e:57:28:96:2e:4c:95:aa:
09:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DB:88:A5:8B:40:17:E0:7E:E5:6B:49:B6:24:3C:FB:DE:26:FD:F5
X509v3 Authority Key Identifier:
keyid:FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:38:cd:45:e7:05:85:a8:8c:f3:6f:45:4a:68:4a:0c:73:1b:
2b:61:ce:27:81:8c:ee:19:f1:c9:2b:70:ad:f2:8e:3c:83:d9:
12:2c:f4:e9:eb:df:00:81:6a:07:0f:8a:d7:e5:83:d1:f4:0a:
4a:3c:b0:9b:8b:99:79:18:f7:39:ae:56:04:9d:72:3b:71:c9:
13:3e:93:53:71:b8:85:d0:bb:37:b5:c0:c5:36:02:95:cf:ca:
f3:83:46:32:b6:da:1c:95:e0:03:f9:b1:a3:74:2a:15:fc:f8:
e6:71:03:f1:b0:99:4c:3b:5d:85:70:a7:aa:3c:e1:47:cc:4a:
cd:67:7d:6e:55:2f:48:78:2e:96:b7:cd:0d:21:df:ec:94:d0:
33:21:c3:f1:40:d6:f6:14:3a:9c:c1:2f:34:87:e5:dd:24:40:
3e:79:f5:9b:8e:8d:bb:83:bb:a6:ba:ff:1b:3f:d3:7b:05:b8:
a6:c2:0e:ef:17:b1:93:b7:da:9f:56:42:cc:66:ae:ea:3d:76:
2d:b7:22:e9:78:5e:8f:a8:b3:4d:bc:33:0b:fe:cd:94:ae:93:
4f:6d:29:3e:d5:e0:fc:1d:b1:c7:04:17:84:40:81:29:fe:68:
ce:b6:03:9a:21:d2:4c:9b:1b:ea:0a:f6:33:28:d9:44:4f:ac:
c0:64:f4:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TnowJXUpQmAUsOpcdQmqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZTcwNjkzNDU0YmMzMzQ4NWRlYzY5ZDIxOWQwNTAyNjU0
YWMwNGEwHhcNMjUwMTMxMTcwMDI0WhcNMjUwMjAxMTcwMDI0WjAzMTEwLwYDVQQD
EygyZGRiODhhNThiNDAxN2UwN2VlNTZiNDliNjI0M2NmYmRlMjZmZGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznrTxQf1UavazcLHcpEojsM6Wrtm
cKwlNuMRHued5E6rm8wNXHiStuM/Qx4wUgvNKo/tn0thebHJXsn0RbxSYNQmSpxs
1UoNTYAMiPWblkHqZCJ2dS9+XsAMLVMz98B+PZGe3yOGmeIFjjAz1cBDrwDMvkKd
Ej6YoGWpnR9avx0mVX5y1icwWo5KjO/105lwUVR49SNcbPVga8Fp5PPhIdLVxjm1
0I78fmf5TNbUzw3DnkshCZLisT1/MtYSNaYExrzKKfVnXDu1yGzojXm1BUN2Sb1r
rF1dGAZv56t1MuBvTVKBDyRSOLWg5Idk12jO2rotlBVbLlcoli5MlaoJmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3biKWLQBfgfuVrSbYkPPveJv31MB8GA1UdIwQY
MBaAFP/nBpNFS8M0hd7GnSGdBQJlSsBKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXy1jR2swVkx3elNGM3NhZElaMEZBbVZLd0VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8wM2U0ZjctMTBmMy00MTE0LWExZTUt
MzUwMjY1OGFlNmY1LzEvXy1jR2swVkx3elNGM3NhZElaMEZBbVZLd0VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8wM2U0ZjctMTBmMy00MTE0LWExZTUtMzUwMjY1OGFlNmY1
LzEvXy1jR2swVkx3elNGM3NhZElaMEZBbVZLd0VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzjNRecF
haiM829FSmhKDHMbK2HOJ4GM7hnxyStwrfKOPIPZEiz06evfAIFqBw+K1+WD0fQK
Sjywm4uZeRj3Oa5WBJ1yO3HJEz6TU3G4hdC7N7XAxTYClc/K84NGMrbaHJXgA/mx
o3QqFfz45nED8bCZTDtdhXCnqjzhR8xKzWd9blUvSHgulrfNDSHf7JTQMyHD8UDW
9hQ6nMEvNIfl3SRAPnn1m46Nu4O7prr/Gz/TewW4psIO7xexk7fan1ZCzGau6j12
Lbci6Xhej6izTbwzC/7NlK6TT20pPtXg/B2xxwQXhECBKf5ozrYDmiHSTJsb6gr2
MyjZRE+swGT0HQ==
-----END CERTIFICATE-----
Generated at Sun May 4 00:29:59 2025 by rpki-client