Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
File: 0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json)
Hash identifier: tULDSxmUPEwOsD6cz6Zci0qrd5+3E0B4V+lr+7Qnwx4=
Subject key identifier: DF:80:9E:A4:5C:2F:1E:5F:09:8D:72:4D:19:A6:EB:2E:6E:4B:85:0B
Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Certificate serial: 0194BC04AFD95E0B7D426D61FE89F70998ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
Manifest number: 0537
Signing time: Fri 31 Jan 2025 11:00:11 +0000
Manifest this update: Fri 31 Jan 2025 11:00:11 +0000
Manifest next update: Sat 01 Feb 2025 11:00:11 +0000
Files and hashes: 1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: C2UifbtgF1bKlVrtBNwvGCiDxa2X987vicn3s1j8DgI=)
2: Z-dfosDrlzVSKVFTGJ7LYewGU6w.roa (hash: lSxGudn5Fs3j65oqD2ZSmu7gAATGql89N/KwokwP/NY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:af:d9:5e:0b:7d:42:6d:61:fe:89:f7:09:98:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Validity
Not Before: Jan 31 11:00:11 2025 GMT
Not After : Feb 1 11:00:11 2025 GMT
Subject: CN=df809ea45c2f1e5f098d724d19a6eb2e6e4b850b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:36:f4:67:07:4b:e4:90:02:e9:6c:14:73:
7f:39:62:89:87:f8:47:fd:d6:7a:8c:98:ed:b4:22:
6a:24:28:b1:9d:bd:e6:b4:96:88:63:7d:e2:23:8b:
cd:26:b0:43:f7:48:de:a6:bf:9e:6a:c0:2a:31:e2:
91:5a:0d:31:38:7c:e4:09:0e:b8:67:82:35:16:74:
c7:b8:8b:8f:a7:46:62:72:cb:ed:80:f7:4b:fd:cb:
c6:a4:e2:9f:b8:4b:03:af:da:5f:fc:6e:34:57:34:
f7:55:a4:a1:0e:6f:15:68:4a:d1:4a:c3:60:c3:76:
44:90:e4:10:5f:13:78:e5:3b:23:f5:2d:9e:4a:8b:
8a:97:53:3b:1f:ce:39:6c:e6:75:a3:21:db:2c:7f:
cc:87:e8:ca:93:de:47:bd:3d:62:03:24:17:5f:c3:
4d:22:98:18:7d:42:d5:a3:1d:40:a4:f1:38:ce:50:
dc:b9:5c:36:c2:87:06:8a:8d:ee:10:d2:2f:bf:14:
ea:8e:6e:4e:1f:11:01:30:09:0b:a8:e4:25:7a:d9:
f7:6f:3e:1a:04:cd:31:2e:c1:29:ee:07:68:cf:ad:
49:ab:2b:eb:3f:a5:15:80:10:85:44:da:14:c7:59:
4e:40:78:d0:c5:a3:0e:e4:df:f2:38:a0:7c:2f:1f:
11:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:80:9E:A4:5C:2F:1E:5F:09:8D:72:4D:19:A6:EB:2E:6E:4B:85:0B
X509v3 Authority Key Identifier:
keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c6:00:52:08:86:66:de:1e:06:78:64:e2:0b:b9:1f:d8:fb:
e4:fc:a3:df:74:88:64:17:73:f5:14:1f:6d:9b:8a:82:a0:5b:
b3:67:b2:83:f8:d4:aa:15:bf:fc:de:9a:d1:f7:82:f5:b7:62:
75:09:3d:a6:5b:25:17:d1:14:2d:fe:d1:29:87:55:ee:d6:e1:
d7:29:1b:96:f5:6d:7f:3d:bd:6a:83:be:4a:0b:0b:4a:e3:b9:
38:14:5d:0d:b2:b1:d5:ab:67:ac:91:95:3d:3d:77:37:75:c8:
7a:57:3c:91:36:e6:02:02:ee:1d:6d:e7:c9:7a:01:b2:72:f9:
83:4e:c9:dc:65:09:c5:0f:cb:7f:f3:b8:38:da:2d:23:25:b0:
71:0b:00:18:1c:bf:c3:fb:b6:f0:0e:38:8d:7d:9b:2c:6c:8c:
96:97:b5:97:32:48:73:e3:48:f1:ba:1e:ee:5a:26:91:61:cb:
c4:f6:3b:9c:a2:62:cf:a5:1d:13:da:85:4d:0f:85:90:53:a1:
74:f0:e6:ff:3d:ed:44:74:ce:9d:68:61:b1:d4:19:0a:1d:da:
d4:63:70:5e:ad:a2:80:81:23:43:ae:05:19:2b:4f:15:5b:24:
6f:a3:72:b0:5e:fa:87:8c:42:c6:b5:9a:03:ae:57:19:83:b9:
36:dc:10:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BK/ZXgt9Qm1h/on3CZjtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNTgxNDc5ZGVlM2I1OTk0ZjExYzlkOTU2NDYzMWJmNWE0
MDRjMDcwHhcNMjUwMTMxMTEwMDExWhcNMjUwMjAxMTEwMDExWjAzMTEwLwYDVQQD
EyhkZjgwOWVhNDVjMmYxZTVmMDk4ZDcyNGQxOWE2ZWIyZTZlNGI4NTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhA29GcHS+SQAulsFHN/OWKJh/hH
/dZ6jJjttCJqJCixnb3mtJaIY33iI4vNJrBD90jepr+easAqMeKRWg0xOHzkCQ64
Z4I1FnTHuIuPp0ZicsvtgPdL/cvGpOKfuEsDr9pf/G40VzT3VaShDm8VaErRSsNg
w3ZEkOQQXxN45Tsj9S2eSouKl1M7H845bOZ1oyHbLH/Mh+jKk95HvT1iAyQXX8NN
IpgYfULVox1ApPE4zlDcuVw2wocGio3uENIvvxTqjm5OHxEBMAkLqOQletn3bz4a
BM0xLsEp7gdoz61JqyvrP6UVgBCFRNoUx1lOQHjQxaMO5N/yOKB8Lx8RYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+AnqRcLx5fCY1yTRmm6y5uS4ULMB8GA1UdIwQY
MBaAFNJYFHne47WZTxHJ2VZGMb9aQEwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zMzZkYjMtNzFhOC00M2VmLTliOWYt
NmE2YzZlMDk2MDcxLzEvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zMzZkYjMtNzFhOC00M2VmLTliOWYtNmE2YzZlMDk2MDcx
LzEvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMsYAUgiG
Zt4eBnhk4gu5H9j75Pyj33SIZBdz9RQfbZuKgqBbs2eyg/jUqhW//N6a0feC9bdi
dQk9plslF9EULf7RKYdV7tbh1ykblvVtfz29aoO+SgsLSuO5OBRdDbKx1atnrJGV
PT13N3XIelc8kTbmAgLuHW3nyXoBsnL5g07J3GUJxQ/Lf/O4ONotIyWwcQsAGBy/
w/u28A44jX2bLGyMlpe1lzJIc+NI8boe7lomkWHLxPY7nKJiz6UdE9qFTQ+FkFOh
dPDm/z3tRHTOnWhhsdQZCh3a1GNwXq2igIEjQ64FGStPFVskb6NysF76h4xCxrWa
A65XGYO5NtwQIA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:42:00 2025 by rpki-client