Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
File: 4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft (raw, json)
Hash identifier: V0pGWOvxkQsCxrdarLkmkMI3doDkMQlALnNyY7vXobA=
Subject key identifier: 99:78:95:D9:1C:DF:9B:7A:C8:A2:AA:69:C5:79:5B:A0:F5:19:7E:A6
Authority key identifier: E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99
Certificate issuer: /CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
Certificate serial: 0194BC04D2C5C794270C32E5CB11C4479356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
Manifest number: 0845
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: 4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl (hash: jNY3qK9LfxKfJDetIoKkeOncgGaAyf6kWkyyPqAyTjY=)
2: cK4llrkBdLlV4HeILjRyQ98esEM.roa (hash: MuU2BWlfRFj75k9zGngWfQu7w/ZtaYOQ1aHN3Tj8NDI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d2:c5:c7:94:27:0c:32:e5:cb:11:c4:47:93:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=997895d91cdf9b7ac8a2aa69c5795ba0f5197ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:95:c4:89:57:3b:57:d9:1c:14:57:bb:a4:39:
cb:60:53:91:0f:fd:33:7f:6d:59:31:3b:1f:9d:99:
3d:97:48:8f:0f:22:28:64:d9:3e:cd:29:3d:2b:65:
9c:17:94:97:0c:65:46:1f:19:91:dd:a6:db:b1:0c:
05:11:d4:21:ed:87:9a:b2:9c:8b:9b:d2:2f:23:dc:
ed:c3:5f:85:c2:75:d2:a4:ff:05:2f:25:6b:3a:68:
75:3a:2c:02:48:8c:1b:48:08:f6:a2:44:34:0a:7c:
bf:23:82:84:67:76:9a:34:7c:21:77:aa:f4:8b:46:
5a:a4:e2:ba:27:db:82:32:ec:e3:dc:63:5a:2f:33:
d7:fc:e6:df:2d:b3:62:93:58:c1:f2:17:df:07:d2:
42:fb:8d:35:9c:76:7b:bb:cc:98:a7:43:95:67:73:
ab:2d:a8:bb:87:bb:3e:96:6d:ba:70:a0:8c:2c:54:
9d:d5:74:15:47:1d:d6:00:a5:1a:39:ba:47:cc:f6:
6d:7f:5a:f6:9d:6b:de:24:c7:be:f0:23:cc:cc:42:
a1:73:0f:a8:3e:7c:eb:5f:18:0c:83:59:0b:80:c9:
27:0e:44:fc:e1:e1:cb:b3:4b:d2:8e:2a:85:a3:51:
d7:24:01:7b:82:ed:74:f4:0f:0b:d9:32:e4:b0:54:
e5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:78:95:D9:1C:DF:9B:7A:C8:A2:AA:69:C5:79:5B:A0:F5:19:7E:A6
X509v3 Authority Key Identifier:
keyid:E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:20:48:5a:b8:70:42:b3:51:12:2f:44:f1:2e:3b:ca:f7:30:
76:f6:a9:c2:68:d5:53:d9:59:da:d8:5e:f3:91:54:4d:6c:26:
ea:92:22:d9:02:a9:30:72:80:a4:5d:af:49:c8:cb:20:22:b6:
35:4b:47:35:13:9d:9c:fb:dc:78:62:0f:1c:c2:a3:58:a2:1b:
db:43:93:1d:72:48:cb:90:f1:c8:d1:ff:9f:9a:05:6e:23:f5:
7b:da:12:5b:32:55:f7:38:e8:99:cf:a9:3e:90:e9:2f:9d:2f:
73:59:04:bc:42:6a:08:ac:99:b5:c8:1b:83:9e:a7:d4:2e:53:
6b:be:10:06:f4:5d:33:60:27:a6:70:0a:28:5d:a8:24:79:bf:
5f:5a:3a:f7:61:ae:43:d4:01:c2:4e:78:86:25:f2:b3:92:91:
28:1e:a9:97:64:69:29:da:2f:05:ff:c3:28:ee:a5:43:11:2d:
89:d5:57:10:f1:8d:fc:6a:86:73:39:c7:4b:ea:f8:cb:8a:88:
0d:44:55:ba:62:d5:f6:fa:40:06:dc:70:98:aa:34:05:14:f8:
f1:7e:96:2e:f4:27:99:62:95:7f:31:e0:fd:c4:89:b4:9e:3d:
29:cb:47:39:0b:fe:6e:40:78:b6:07:f9:a7:18:d1:16:86:2d:
30:9d:a7:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BNLFx5QnDDLlyxHER5NWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZTM5NzZkOWVjYjgzMDlhODE4MWZiZDAyNWNhNTJmZWYx
NjE5OTkwHhcNMjUwMTMxMTEwMDIwWhcNMjUwMjAxMTEwMDIwWjAzMTEwLwYDVQQD
Eyg5OTc4OTVkOTFjZGY5YjdhYzhhMmFhNjljNTc5NWJhMGY1MTk3ZWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJXEiVc7V9kcFFe7pDnLYFORD/0z
f21ZMTsfnZk9l0iPDyIoZNk+zSk9K2WcF5SXDGVGHxmR3abbsQwFEdQh7YeaspyL
m9IvI9ztw1+FwnXSpP8FLyVrOmh1OiwCSIwbSAj2okQ0Cny/I4KEZ3aaNHwhd6r0
i0ZapOK6J9uCMuzj3GNaLzPX/ObfLbNik1jB8hffB9JC+401nHZ7u8yYp0OVZ3Or
Lai7h7s+lm26cKCMLFSd1XQVRx3WAKUaObpHzPZtf1r2nWveJMe+8CPMzEKhcw+o
PnzrXxgMg1kLgMknDkT84eHLs0vSjiqFo1HXJAF7gu109A8L2TLksFTlewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJl4ldkc35t6yKKqacV5W6D1GX6mMB8GA1UdIwQY
MBaAFODjl22ey4MJqBgfvQJcpS/vFhmZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE9PWGJaN0xnd21vR0ItOUFseWxMLThXR1prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9kNjEyYTMtNDYzMS00N2RlLTk0MGQt
OGJlMGQ5NzY4MmFiLzEvNE9PWGJaN0xnd21vR0ItOUFseWxMLThXR1prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9kNjEyYTMtNDYzMS00N2RlLTk0MGQtOGJlMGQ5NzY4MmFi
LzEvNE9PWGJaN0xnd21vR0ItOUFseWxMLThXR1prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmiBIWrhw
QrNREi9E8S47yvcwdvapwmjVU9lZ2the85FUTWwm6pIi2QKpMHKApF2vScjLICK2
NUtHNROdnPvceGIPHMKjWKIb20OTHXJIy5DxyNH/n5oFbiP1e9oSWzJV9zjomc+p
PpDpL50vc1kEvEJqCKyZtcgbg56n1C5Ta74QBvRdM2AnpnAKKF2oJHm/X1o692Gu
Q9QBwk54hiXys5KRKB6pl2RpKdovBf/DKO6lQxEtidVXEPGN/GqGcznHS+r4y4qI
DURVumLV9vpABtxwmKo0BRT48X6WLvQnmWKVfzHg/cSJtJ49KctHOQv+bkB4tgf5
pxjRFoYtMJ2nAQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:02:55 2025 by rpki-client