Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
File: 4saBbgo6L2FsOqd6NrTK96kiQDQ.mft (raw, json)
Hash identifier: qn1eG7kbMMFHoVBvvuhuo2adtYHRruw5OQVQTo8bPos=
Subject key identifier: 75:A6:FC:67:C8:F3:B4:B2:6E:00:A1:C1:DA:AF:C8:36:96:B5:11:18
Authority key identifier: E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34
Certificate issuer: /CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
Certificate serial: 0194BC3C7451A29DF266A852182E6818BFB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:06 +0000
Manifest this update: Fri 31 Jan 2025 12:01:06 +0000
Manifest next update: Sat 01 Feb 2025 12:01:06 +0000
Files and hashes: 1: 4saBbgo6L2FsOqd6NrTK96kiQDQ.crl (hash: 5+65+yUNNmQH6hddoRw6covM0gva/TQWHmbXss4AbTc=)
2: ulLbtOc6Qp1yKXQQUOt_f70BmFE.roa (hash: YXCw2FZd5PginHPRvRNBgQK3YOd2UnylrB+hjikSz1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:74:51:a2:9d:f2:66:a8:52:18:2e:68:18:bf:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
Validity
Not Before: Jan 31 12:01:06 2025 GMT
Not After : Feb 1 12:01:06 2025 GMT
Subject: CN=75a6fc67c8f3b4b26e00a1c1daafc83696b51118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e2:27:67:3a:fa:a9:fa:0b:55:21:7e:c1:23:
27:ad:36:2e:0a:69:62:44:df:50:c0:4b:e1:fe:08:
4f:6f:8a:d7:f6:33:45:d0:9a:84:fd:cd:c0:3c:aa:
ec:ec:73:c2:8d:72:25:c7:e0:78:09:14:de:25:cf:
21:45:cc:61:fb:7c:7f:46:c9:84:b9:c1:ef:aa:16:
bd:ba:7c:76:83:f5:77:34:34:02:7e:fe:ea:c5:fe:
f4:4c:05:0c:62:8f:d0:c6:8a:d9:f6:63:27:39:e1:
89:c5:aa:f1:51:60:f3:2a:65:7f:50:51:38:8c:b4:
4a:46:dc:45:7e:e9:e2:39:71:2e:25:de:56:02:a8:
8f:31:6d:c2:ab:eb:fd:74:a4:43:a6:f6:eb:c5:ef:
3a:03:a7:02:ce:15:3c:1f:5d:3c:b9:41:80:ea:9f:
2b:49:57:f9:60:c8:8e:e6:a0:70:86:05:19:78:10:
36:c8:ad:5d:b1:0c:68:26:fa:dd:39:69:e1:da:f5:
90:38:af:14:12:3e:29:78:2f:b2:22:c5:2c:22:a7:
ab:43:fa:76:33:e2:58:6c:7e:41:19:b5:68:75:eb:
57:92:ff:92:60:a4:18:97:60:6f:f2:af:48:82:32:
86:c2:96:71:c3:96:65:bd:ec:72:8d:28:a9:26:61:
ef:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A6:FC:67:C8:F3:B4:B2:6E:00:A1:C1:DA:AF:C8:36:96:B5:11:18
X509v3 Authority Key Identifier:
keyid:E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:55:be:05:91:a4:3d:61:23:87:31:df:18:97:f3:41:4a:aa:
c8:c3:b1:69:9e:c7:bb:08:b1:26:78:3b:f9:ab:17:09:6c:83:
99:74:dd:5d:1a:cd:f4:5d:38:29:d4:a3:20:1c:a9:af:64:58:
79:5e:24:da:a6:e3:fa:ac:c2:70:e5:6d:d4:26:ec:ae:28:7b:
90:22:38:7e:7c:81:71:18:10:61:a1:8f:c1:48:d4:e0:b6:5d:
5b:0c:ed:83:c2:49:10:09:b2:1d:df:bb:6a:97:4f:87:a5:41:
29:03:69:f2:d3:19:01:93:6d:dc:33:3e:6d:d3:58:23:e9:14:
62:9c:1b:2b:58:2e:60:70:9f:66:6d:a3:ef:de:0d:01:af:da:
d7:29:8a:df:4c:42:f9:36:cb:86:c6:42:6c:a9:78:32:6d:ec:
7d:d3:20:fc:7a:d3:2e:ab:30:dc:dd:bd:cf:fb:f9:72:35:38:
14:61:15:82:20:6d:87:5d:54:c5:65:0f:1c:3c:1e:2d:20:49:
3d:e3:76:8e:9a:4d:14:b2:27:2b:f6:73:a7:08:8f:6a:5e:1c:
0c:45:d0:69:c7:6d:cd:01:a2:c7:56:e2:d2:f2:17:92:af:84:
1d:72:46:8f:9f:f3:18:e0:2e:07:71:a6:77:ce:5c:cd:9d:ff:
f4:4e:19:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PHRRop3yZqhSGC5oGL+4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzY4MTZlMGEzYTJmNjE2YzNhYTc3YTM2YjRjYWY3YTky
MjQwMzQwHhcNMjUwMTMxMTIwMTA2WhcNMjUwMjAxMTIwMTA2WjAzMTEwLwYDVQQD
Eyg3NWE2ZmM2N2M4ZjNiNGIyNmUwMGExYzFkYWFmYzgzNjk2YjUxMTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOInZzr6qfoLVSF+wSMnrTYuCmli
RN9QwEvh/ghPb4rX9jNF0JqE/c3APKrs7HPCjXIlx+B4CRTeJc8hRcxh+3x/RsmE
ucHvqha9unx2g/V3NDQCfv7qxf70TAUMYo/QxorZ9mMnOeGJxarxUWDzKmV/UFE4
jLRKRtxFfuniOXEuJd5WAqiPMW3Cq+v9dKRDpvbrxe86A6cCzhU8H108uUGA6p8r
SVf5YMiO5qBwhgUZeBA2yK1dsQxoJvrdOWnh2vWQOK8UEj4peC+yIsUsIqerQ/p2
M+JYbH5BGbVodetXkv+SYKQYl2Bv8q9IgjKGwpZxw5ZlvexyjSipJmHvJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWm/GfI87SybgChwdqvyDaWtREYMB8GA1UdIwQY
MBaAFOLGgW4KOi9hbDqneja0yvepIkA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNhQmJnbzZMMkZzT3FkNk5yVEs5NmtpUURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zYmE3Y2QtZTgxNS00NWNlLTkyZTEt
MjAyYzUxNzIwYWI3LzEvNHNhQmJnbzZMMkZzT3FkNk5yVEs5NmtpUURRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zYmE3Y2QtZTgxNS00NWNlLTkyZTEtMjAyYzUxNzIwYWI3
LzEvNHNhQmJnbzZMMkZzT3FkNk5yVEs5NmtpUURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZlW+BZGk
PWEjhzHfGJfzQUqqyMOxaZ7HuwixJng7+asXCWyDmXTdXRrN9F04KdSjIBypr2RY
eV4k2qbj+qzCcOVt1Cbsrih7kCI4fnyBcRgQYaGPwUjU4LZdWwztg8JJEAmyHd+7
apdPh6VBKQNp8tMZAZNt3DM+bdNYI+kUYpwbK1guYHCfZm2j794NAa/a1ymK30xC
+TbLhsZCbKl4Mm3sfdMg/HrTLqsw3N29z/v5cjU4FGEVgiBth11UxWUPHDweLSBJ
PeN2jppNFLInK/ZzpwiPal4cDEXQacdtzQGix1bi0vIXkq+EHXJGj5/zGOAuB3Gm
d85czZ3/9E4Zqg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:28 2025 by rpki-client