Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
File: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft (raw, json)
Hash identifier: AWtFW4vbfH+xLMPmV+wZy0TCWIwEYbDUjDOBexqeQrY=
Subject key identifier: 71:27:F1:1C:0D:A6:04:CD:08:38:5A:1D:7C:24:67:75:C6:DF:4C:BA
Authority key identifier: 09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
Certificate issuer: /CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Certificate serial: 0194BBCDCDDDD2DEF1525973A249EC87AE06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
Manifest number: 011D
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl (hash: oUf8z8o3QUtHuQl2+Mc9kUU2tXRTY0JyW6/elW9Ev+E=)
2: oDzw6scHjTvVUxNbd-QUot4DsM0.roa (hash: wtt4piWURYUGaUVkeFPj0sScj6sbR4E+qyw2r+vT/ds=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cd:dd:d2:de:f1:52:59:73:a2:49:ec:87:ae:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=7127f11c0da604cd08385a1d7c246775c6df4cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bb:34:cc:a2:bf:99:6a:dc:bd:32:55:6e:78:
24:eb:f8:a7:35:1a:ce:12:27:a3:d8:30:1e:06:7a:
a3:9a:6a:d8:97:23:41:27:a4:8e:c3:fe:94:d2:d3:
6a:c7:12:84:2b:e8:87:fe:69:ec:11:43:d4:b4:32:
90:6c:e1:23:c2:eb:39:6c:12:c9:89:2d:96:ac:2e:
4f:28:20:e7:93:5a:22:0a:fb:87:77:bd:a9:3e:30:
39:f3:7d:b8:63:35:d3:1b:d8:8e:2e:3f:3e:ce:6a:
3d:03:c0:5d:a5:46:cc:a1:c5:41:89:65:a6:1f:96:
bb:6e:35:17:69:e1:87:8a:1b:12:5c:41:30:45:bb:
a5:ab:0d:5e:08:50:90:54:37:c2:6e:68:dc:f9:4b:
21:ca:f5:0d:93:7e:74:b8:94:98:00:95:5c:e3:4f:
3d:dc:09:da:45:c8:4a:82:71:27:9e:af:9f:4a:a2:
13:23:63:ed:26:64:29:49:32:36:50:2b:b0:3c:7e:
05:2c:d7:83:b1:37:12:bc:be:2e:70:cc:f0:5e:44:
4d:0e:2b:26:7d:cf:e7:23:26:26:b6:a7:58:5e:25:
92:2d:9a:25:ea:aa:ac:2d:ea:50:a2:67:e7:89:27:
db:7f:27:c1:cc:39:38:f9:b7:59:3d:a9:7b:c2:c9:
c9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:27:F1:1C:0D:A6:04:CD:08:38:5A:1D:7C:24:67:75:C6:DF:4C:BA
X509v3 Authority Key Identifier:
keyid:09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:4c:f9:a4:bb:a1:1d:44:2a:91:4e:20:77:1b:e4:19:03:20:
35:64:c4:ef:7d:2a:a9:2c:03:84:97:f5:5f:04:a9:24:bc:29:
3c:72:27:62:ef:95:69:e0:1a:83:5d:73:b6:5d:44:94:46:a0:
da:40:7d:66:8a:2e:5f:29:c4:26:f2:89:c2:84:0c:33:17:8c:
be:9c:d4:60:47:03:50:e9:a1:a3:5d:96:98:ae:c9:bf:7d:48:
f6:ad:9e:f4:1b:49:e9:51:9e:79:7f:32:95:c3:d6:43:64:8d:
db:da:77:34:2d:e0:b4:50:dc:5b:d5:21:93:e0:d6:0b:1c:9b:
8c:70:54:a2:e7:98:a8:9f:57:da:e9:6a:a1:7e:4c:9a:b7:21:
73:2d:35:ab:9f:ed:96:62:78:5e:ea:ac:eb:10:77:c9:32:a8:
c1:cc:b1:16:f4:13:ce:10:fb:8b:99:bc:d1:e9:9e:31:91:3e:
06:48:7c:c2:8d:87:f7:9e:3c:ad:8c:72:a4:2a:42:58:79:1b:
6d:33:61:85:2f:69:3f:cc:84:27:dd:30:2c:ad:4f:be:4f:92:
cd:94:7b:51:a2:05:11:74:1a:50:ab:ff:41:d6:63:b4:e3:a3:
88:dd:d9:c9:dc:df:15:ac:23:a8:88:44:84:42:95:2d:a0:47:
6a:6f:f3:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zc3d0t7xUllzoknsh64GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZWYwYjhlNWJiYWIyOWExMzMwZmEwZTc0OTNmMmExNzk4
NDdiYjIwHhcNMjUwMTMxMTAwMDE0WhcNMjUwMjAxMTAwMDE0WjAzMTEwLwYDVQQD
Eyg3MTI3ZjExYzBkYTYwNGNkMDgzODVhMWQ3YzI0Njc3NWM2ZGY0Y2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLs0zKK/mWrcvTJVbngk6/inNRrO
Eiej2DAeBnqjmmrYlyNBJ6SOw/6U0tNqxxKEK+iH/mnsEUPUtDKQbOEjwus5bBLJ
iS2WrC5PKCDnk1oiCvuHd72pPjA58324YzXTG9iOLj8+zmo9A8BdpUbMocVBiWWm
H5a7bjUXaeGHihsSXEEwRbulqw1eCFCQVDfCbmjc+UshyvUNk350uJSYAJVc4089
3AnaRchKgnEnnq+fSqITI2PtJmQpSTI2UCuwPH4FLNeDsTcSvL4ucMzwXkRNDism
fc/nIyYmtqdYXiWSLZol6qqsLepQomfniSfbfyfBzDk4+bdZPal7wsnJnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEn8RwNpgTNCDhaHXwkZ3XG30y6MB8GA1UdIwQY
MBaAFAnvC45burKaEzD6DnST8qF5hHuyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2U4TGpsdTZzcG9UTVBvT2RKUHlvWG1FZTdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80MDU0M2UtMTk1YS00MzMyLWE4ZWQt
MzczNzRlMzk2YzdkLzEvQ2U4TGpsdTZzcG9UTVBvT2RKUHlvWG1FZTdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC80MDU0M2UtMTk1YS00MzMyLWE4ZWQtMzczNzRlMzk2Yzdk
LzEvQ2U4TGpsdTZzcG9UTVBvT2RKUHlvWG1FZTdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkz5pLuh
HUQqkU4gdxvkGQMgNWTE730qqSwDhJf1XwSpJLwpPHInYu+VaeAag11ztl1ElEag
2kB9ZoouXynEJvKJwoQMMxeMvpzUYEcDUOmho12WmK7Jv31I9q2e9BtJ6VGeeX8y
lcPWQ2SN29p3NC3gtFDcW9Uhk+DWCxybjHBUoueYqJ9X2ulqoX5Mmrchcy01q5/t
lmJ4Xuqs6xB3yTKowcyxFvQTzhD7i5m80emeMZE+Bkh8wo2H9548rYxypCpCWHkb
bTNhhS9pP8yEJ90wLK1Pvk+SzZR7UaIFEXQaUKv/QdZjtOOjiN3ZydzfFawjqIhE
hEKVLaBHam/zkQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:47 2025 by rpki-client