Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
File: c2iuvB1FhbmzYS7MIgNFTWWocuM.mft (raw, json)
Hash identifier: rSXy6xu4HovBg6gv7y04B3nG4P2Gwb/kKbuy0KbBYJs=
Subject key identifier: BA:E7:29:EC:E6:CE:BD:55:70:92:0F:97:32:46:E8:3D:62:FA:F5:3D
Authority key identifier: 73:68:AE:BC:1D:45:85:B9:B3:61:2E:CC:22:03:45:4D:65:A8:72:E3
Certificate issuer: /CN=7368aebc1d4585b9b3612ecc2203454d65a872e3
Certificate serial: 0194BC3BD065E3629D616A59386A5207E764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:00:23 +0000
Manifest this update: Fri 31 Jan 2025 12:00:23 +0000
Manifest next update: Sat 01 Feb 2025 12:00:23 +0000
Files and hashes: 1: I9vgIWuaiEwVbrWFIv7mFggy9a0.roa (hash: CuGCVrXCD5akH61wJYu8Ar6/+5VEgpmtOisQYkqg0kQ=)
2: c2iuvB1FhbmzYS7MIgNFTWWocuM.crl (hash: nragADIPSqup7DB+fyO391X5ausuU89vMCYb3pIHDIs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d0:65:e3:62:9d:61:6a:59:38:6a:52:07:e7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7368aebc1d4585b9b3612ecc2203454d65a872e3
Validity
Not Before: Jan 31 12:00:23 2025 GMT
Not After : Feb 1 12:00:23 2025 GMT
Subject: CN=bae729ece6cebd5570920f973246e83d62faf53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d9:52:c6:99:b0:72:c9:e1:97:42:a6:15:25:
2c:fb:34:ed:5b:ab:47:13:f6:eb:e9:a3:1a:88:3a:
4d:1a:73:1e:f2:cf:f5:55:1b:cb:0c:74:d7:cf:59:
12:c0:a4:e6:86:ae:67:0f:c6:49:58:9b:a7:bf:21:
c9:3e:2c:be:b5:b7:5a:62:23:10:e0:6b:31:9f:29:
d4:1e:2f:a9:45:34:a9:7f:24:42:ba:ca:32:f9:45:
49:ae:c8:fc:25:92:c4:bd:c4:cc:b2:c1:d8:96:4d:
fc:4e:eb:d6:d3:4a:34:b1:ff:17:aa:28:63:9c:d4:
46:48:fa:6c:b4:aa:bd:20:55:2c:cf:06:b3:d9:de:
55:bb:c4:cb:55:27:cd:98:0f:ad:8c:bd:fb:4b:3a:
1e:5c:23:3e:98:3c:ff:5a:3e:35:68:c6:d3:15:0d:
d2:da:08:72:29:f4:c6:17:c6:96:93:e4:ab:55:ee:
0d:a3:50:16:88:7d:01:50:aa:15:d7:1d:4e:2e:4b:
ba:89:ca:73:08:33:26:40:88:61:91:1f:92:44:1f:
68:ca:2d:80:fd:31:61:73:f0:ad:fc:f1:e0:cf:37:
ad:18:65:51:dc:0e:3b:2a:05:e3:d3:71:dd:cd:9f:
a6:5f:bf:8e:80:38:c5:3a:ef:4b:c5:63:85:26:ef:
ae:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E7:29:EC:E6:CE:BD:55:70:92:0F:97:32:46:E8:3D:62:FA:F5:3D
X509v3 Authority Key Identifier:
keyid:73:68:AE:BC:1D:45:85:B9:B3:61:2E:CC:22:03:45:4D:65:A8:72:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:40:2a:cd:1f:b7:4e:30:71:0b:ff:6e:33:01:3f:e8:32:44:
85:0b:c3:2d:50:de:4b:f6:dc:e0:e8:82:a3:30:57:20:2f:6b:
59:cf:13:cb:7a:f6:1c:24:e3:21:7e:62:9b:5d:da:bc:aa:ab:
9f:62:c3:b5:eb:d4:f2:cc:f7:d5:ab:67:c6:20:7d:49:c2:d3:
44:9b:e5:5c:d3:03:72:4d:c8:a7:47:80:64:74:31:08:3c:dc:
e5:2c:f9:62:16:8b:5a:94:eb:e6:a2:6e:3b:f4:b1:38:b5:79:
af:88:90:0e:b8:da:2d:74:f5:9d:50:01:f3:c1:d2:53:c9:43:
3e:59:de:ef:2b:f0:f2:1d:af:d3:ae:fc:dc:19:04:6f:13:9b:
75:17:3b:79:d3:9d:91:a1:0a:a3:9a:3d:b4:d9:f8:43:da:60:
2a:9e:11:0b:e6:b8:db:d3:d9:36:5a:9c:99:8e:94:7b:59:47:
29:69:b0:ac:d2:6b:5a:f5:d4:31:3b:b7:c5:c2:66:15:d0:5b:
00:7c:cf:cb:bf:9b:c3:a6:35:d6:88:79:75:6c:b2:36:83:87:
a8:86:05:02:38:b0:df:04:7a:cc:51:2a:c1:b6:ac:5e:a9:a8:
85:ac:99:a2:17:a9:f5:af:cf:5b:4f:62:21:28:49:57:0b:6f:
c7:99:e5:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9Bl42KdYWpZOGpSB+dkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNjhhZWJjMWQ0NTg1YjliMzYxMmVjYzIyMDM0NTRkNjVh
ODcyZTMwHhcNMjUwMTMxMTIwMDIzWhcNMjUwMjAxMTIwMDIzWjAzMTEwLwYDVQQD
EyhiYWU3MjllY2U2Y2ViZDU1NzA5MjBmOTczMjQ2ZTgzZDYyZmFmNTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9lSxpmwcsnhl0KmFSUs+zTtW6tH
E/br6aMaiDpNGnMe8s/1VRvLDHTXz1kSwKTmhq5nD8ZJWJunvyHJPiy+tbdaYiMQ
4GsxnynUHi+pRTSpfyRCusoy+UVJrsj8JZLEvcTMssHYlk38TuvW00o0sf8Xqihj
nNRGSPpstKq9IFUszwaz2d5Vu8TLVSfNmA+tjL37SzoeXCM+mDz/Wj41aMbTFQ3S
2ghyKfTGF8aWk+SrVe4No1AWiH0BUKoV1x1OLku6icpzCDMmQIhhkR+SRB9oyi2A
/TFhc/Ct/PHgzzetGGVR3A47KgXj03HdzZ+mX7+OgDjFOu9LxWOFJu+ujwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrnKezmzr1VcJIPlzJG6D1i+vU9MB8GA1UdIwQY
MBaAFHNorrwdRYW5s2EuzCIDRU1lqHLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzJpdXZCMUZoYm16WVM3TUlnTkZUV1dvY3VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hMDFlYmItZWUxOC00ZmI3LWE3M2It
ZjU5NTFjN2NjYmQzLzEvYzJpdXZCMUZoYm16WVM3TUlnTkZUV1dvY3VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9hMDFlYmItZWUxOC00ZmI3LWE3M2ItZjU5NTFjN2NjYmQz
LzEvYzJpdXZCMUZoYm16WVM3TUlnTkZUV1dvY3VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkAqzR+3
TjBxC/9uMwE/6DJEhQvDLVDeS/bc4OiCozBXIC9rWc8Ty3r2HCTjIX5im13avKqr
n2LDtevU8sz31atnxiB9ScLTRJvlXNMDck3Ip0eAZHQxCDzc5Sz5YhaLWpTr5qJu
O/SxOLV5r4iQDrjaLXT1nVAB88HSU8lDPlne7yvw8h2v06783BkEbxObdRc7edOd
kaEKo5o9tNn4Q9pgKp4RC+a429PZNlqcmY6Ue1lHKWmwrNJrWvXUMTu3xcJmFdBb
AHzPy7+bw6Y11oh5dWyyNoOHqIYFAjiw3wR6zFEqwbasXqmohayZohep9a/PW09i
IShJVwtvx5nlUw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:34:31 2025 by rpki-client