Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
File: 201SqwmxbXL0w-SMxLSQJdCDZ20.mft (raw, json)
Hash identifier: FhYK4oML5Fqd57htIuXGQ/zK8UeM4jMrJmO37iewcXE=
Subject key identifier: 17:8E:A7:1F:AF:27:32:0A:52:EC:32:98:0F:7C:88:FE:C1:72:99:C0
Authority key identifier: DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
Certificate issuer: /CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Certificate serial: 0194BC0510E67ADA849702C9582019F60728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: 201SqwmxbXL0w-SMxLSQJdCDZ20.crl (hash: X3xC4w4ZnqFxxsIclYXyr0d5yxmzg1c5nPSrZ7MT/qk=)
2: p7ugqnkl0eeyrlpJX13_lCmtLp0.roa (hash: f1GZebrpy+RrPUG5oAnHmyhNSF3EcTIUbcYbxWqO8rs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:10:e6:7a:da:84:97:02:c9:58:20:19:f6:07:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=178ea71faf27320a52ec32980f7c88fec17299c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2b:29:e2:07:57:a0:6e:75:35:75:35:1b:9e:
74:55:57:eb:87:05:b6:72:bb:d4:1a:16:a4:5e:38:
5d:da:83:76:67:e7:1e:43:c2:ba:7c:46:8a:7e:5a:
1c:90:d1:f7:08:c5:18:f4:98:86:3e:04:45:0d:23:
6a:dd:a1:7d:25:28:32:07:d6:cf:e7:52:5c:fd:cc:
2d:ee:51:0d:7b:f1:6b:a8:d4:13:44:5b:95:8e:ee:
be:9d:97:fc:d9:19:3f:a9:6d:ee:37:41:fb:e7:c4:
cf:69:78:17:21:e5:b5:79:6b:12:7f:d8:72:2e:80:
ed:78:21:d6:bd:1c:b0:31:16:85:ba:82:23:6d:e3:
5f:84:60:76:b7:a4:73:30:fb:f7:2a:d9:fc:89:ca:
6d:47:0b:8b:a3:80:b4:f5:45:81:46:6b:eb:71:85:
11:02:f2:bb:b3:de:7f:9f:d9:c2:25:69:9d:67:4f:
59:fd:4b:d4:a2:3e:3e:10:32:1d:9d:93:28:4b:c1:
1f:10:a7:68:ff:5c:b3:dd:78:0b:3a:fb:5d:a0:6c:
7e:36:31:eb:dc:19:99:73:06:ff:0c:1c:1c:94:5a:
3d:3f:04:aa:17:8b:fa:67:f5:9c:4f:28:0d:25:9e:
80:17:e6:30:63:a3:05:ca:85:55:38:ed:03:28:6d:
68:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8E:A7:1F:AF:27:32:0A:52:EC:32:98:0F:7C:88:FE:C1:72:99:C0
X509v3 Authority Key Identifier:
keyid:DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:92:83:f8:86:92:c1:c5:11:8b:8c:25:47:58:c3:7d:36:6e:
81:f7:47:d0:a3:ed:9b:f0:4f:56:59:d5:b3:5e:40:bb:bb:e5:
75:3d:c9:e5:24:72:d1:17:8b:cb:77:0d:9d:e8:79:81:c3:2a:
28:57:3f:b6:33:6f:c2:5e:17:db:11:b0:f2:38:17:aa:56:8e:
f4:e4:15:5c:34:11:1d:fd:8b:98:dd:0c:39:0d:be:64:35:7b:
a8:ed:95:4c:c9:69:25:49:b9:7f:5d:c9:66:c7:03:30:a2:66:
de:9c:36:fb:2a:44:bd:90:37:8f:4f:e5:7f:13:5b:f4:9f:94:
ee:16:9d:19:7c:08:ae:c6:64:36:ea:d7:8c:a8:2b:8d:80:21:
f9:de:bf:4c:41:8b:39:02:6c:18:ce:d3:6a:33:36:f1:ce:a2:
91:b0:ce:ba:12:06:50:b2:5a:50:43:94:7e:9b:cd:20:7d:54:
9b:0c:4f:f6:3e:e6:13:4d:9c:ba:11:3a:8e:3b:43:1b:ef:fc:
a7:29:c3:4a:ed:3c:a8:3f:fb:11:ae:01:10:e3:09:cf:fa:02:
2c:83:46:9e:22:34:f3:ea:9d:de:07:25:dc:36:32:ef:df:53:
42:c4:52:66:f7:17:0b:c7:a3:25:f6:31:68:a5:45:1e:d9:87:
ff:75:8c:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BRDmetqElwLJWCAZ9gcoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNGQ1MmFiMDliMTZkNzJmNGMzZTQ4Y2M0YjQ5MDI1ZDA4
MzY3NmQwHhcNMjUwMTMxMTEwMDM1WhcNMjUwMjAxMTEwMDM1WjAzMTEwLwYDVQQD
EygxNzhlYTcxZmFmMjczMjBhNTJlYzMyOTgwZjdjODhmZWMxNzI5OWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ysp4gdXoG51NXU1G550VVfrhwW2
crvUGhakXjhd2oN2Z+ceQ8K6fEaKflockNH3CMUY9JiGPgRFDSNq3aF9JSgyB9bP
51Jc/cwt7lENe/FrqNQTRFuVju6+nZf82Rk/qW3uN0H758TPaXgXIeW1eWsSf9hy
LoDteCHWvRywMRaFuoIjbeNfhGB2t6RzMPv3Ktn8icptRwuLo4C09UWBRmvrcYUR
AvK7s95/n9nCJWmdZ09Z/UvUoj4+EDIdnZMoS8EfEKdo/1yz3XgLOvtdoGx+NjHr
3BmZcwb/DBwclFo9PwSqF4v6Z/WcTygNJZ6AF+YwY6MFyoVVOO0DKG1omwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBeOpx+vJzIKUuwymA98iP7BcpnAMB8GA1UdIwQY
MBaAFNtNUqsJsW1y9MPkjMS0kCXQg2dtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjAxU3F3bXhiWEwwdy1TTXhMU1FKZENEWjIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iYTJiYWQtZWQzNS00NWMzLWI4NGUt
MjJiZGVmOTliY2VhLzEvMjAxU3F3bXhiWEwwdy1TTXhMU1FKZENEWjIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9iYTJiYWQtZWQzNS00NWMzLWI4NGUtMjJiZGVmOTliY2Vh
LzEvMjAxU3F3bXhiWEwwdy1TTXhMU1FKZENEWjIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5KD+IaS
wcURi4wlR1jDfTZugfdH0KPtm/BPVlnVs15Au7vldT3J5SRy0ReLy3cNneh5gcMq
KFc/tjNvwl4X2xGw8jgXqlaO9OQVXDQRHf2LmN0MOQ2+ZDV7qO2VTMlpJUm5f13J
ZscDMKJm3pw2+ypEvZA3j0/lfxNb9J+U7hadGXwIrsZkNurXjKgrjYAh+d6/TEGL
OQJsGM7TajM28c6ikbDOuhIGULJaUEOUfpvNIH1UmwxP9j7mE02cuhE6jjtDG+/8
pynDSu08qD/7Ea4BEOMJz/oCLINGniI08+qd3gcl3DYy799TQsRSZvcXC8ejJfYx
aKVFHtmH/3WMvg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:03 2025 by rpki-client