Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
File: R60fV24_cbT2wzkfL6ND1Qi2se4.mft (raw, json)
Hash identifier: ZPOnvpvPZqGyK/oVX1jGlpOj3b5bjY7jpmwUGjVHzWM=
Subject key identifier: 70:D4:A9:EE:B6:CB:AD:15:B0:2D:55:3B:16:F8:36:1C:33:D2:08:32
Authority key identifier: 47:AD:1F:57:6E:3F:71:B4:F6:C3:39:1F:2F:A3:43:D5:08:B6:B1:EE
Certificate issuer: /CN=47ad1f576e3f71b4f6c3391f2fa343d508b6b1ee
Certificate serial: 0194BC72B1B6605B597000BF6AA3EA146A1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 13:00:20 +0000
Manifest this update: Fri 31 Jan 2025 13:00:20 +0000
Manifest next update: Sat 01 Feb 2025 13:00:20 +0000
Files and hashes: 1: R60fV24_cbT2wzkfL6ND1Qi2se4.crl (hash: vOjs8YNzB1QCpGKvAiWng8hk+NOd7txPuIEGxoANdJM=)
2: aO3r11e9FzxFIAvzci6U1ugRCX4.roa (hash: RN1LPTFZ9dixQeq/j0V0Euzw3FqtnyCrfR7culnL03E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b1:b6:60:5b:59:70:00:bf:6a:a3:ea:14:6a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ad1f576e3f71b4f6c3391f2fa343d508b6b1ee
Validity
Not Before: Jan 31 13:00:20 2025 GMT
Not After : Feb 1 13:00:20 2025 GMT
Subject: CN=70d4a9eeb6cbad15b02d553b16f8361c33d20832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9d:f0:63:16:06:65:4f:44:7d:18:34:7c:49:
3b:fb:d3:b6:66:7e:f0:57:65:c4:e4:f8:74:fd:11:
25:ff:03:a3:9b:3f:f8:e0:4b:6a:67:4d:8c:ae:d6:
64:b0:e3:cf:18:42:60:aa:38:18:c2:9b:25:cd:d2:
2f:8c:a9:c2:d4:dc:fe:53:70:f1:47:80:f6:93:70:
ef:16:77:f8:d3:23:f9:97:db:23:7a:e9:3d:b4:58:
2e:b4:a6:ac:c2:10:d5:0f:1e:62:63:d5:9a:4b:31:
40:19:ac:5d:ae:87:e8:61:66:bd:fe:59:00:bc:32:
a3:f1:1e:0e:bb:83:01:fb:bb:a3:43:81:44:61:9c:
a7:03:97:a3:b2:79:25:63:f7:16:96:cc:9f:4d:c2:
16:ef:c8:99:32:a6:52:ef:62:a8:d8:92:4d:13:7e:
c0:27:83:c6:13:95:0b:75:c4:f3:d8:48:88:1b:f2:
73:3c:8d:63:2e:9a:c8:78:55:21:d8:1c:32:1e:2b:
92:a5:18:1d:30:1f:06:cc:4c:66:de:74:65:67:7f:
a3:ce:94:c6:9c:5c:43:a4:c5:22:8c:12:2c:8b:72:
4e:79:60:6d:45:ab:67:21:cb:0a:a7:54:6c:bd:e5:
9a:2d:04:51:a5:da:30:32:6f:4a:b2:1d:3c:07:66:
f2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D4:A9:EE:B6:CB:AD:15:B0:2D:55:3B:16:F8:36:1C:33:D2:08:32
X509v3 Authority Key Identifier:
keyid:47:AD:1F:57:6E:3F:71:B4:F6:C3:39:1F:2F:A3:43:D5:08:B6:B1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:49:77:27:cf:4f:8d:2f:f1:56:d3:d0:af:7c:ee:c7:bb:4c:
8b:d2:47:47:23:28:a1:56:a6:a2:ea:d0:27:a7:fa:d1:fc:a0:
13:c1:6c:42:45:1d:1d:51:61:9f:6a:b8:55:3d:cb:f7:a9:49:
5e:60:23:12:9f:82:d8:8c:44:a5:5b:37:18:17:0c:cb:b1:b0:
9b:5a:34:d8:56:1c:67:e2:da:bc:e2:de:09:c0:fb:e6:40:a9:
8c:b4:2f:bb:2d:21:45:e3:6b:42:bf:23:fe:51:52:54:ae:71:
ee:34:cc:ad:ed:17:0f:b5:36:1d:29:19:2e:34:66:1c:8b:70:
4b:63:b8:d9:b3:07:46:3a:fb:96:09:31:7f:c8:8a:ae:46:2c:
6d:17:ea:f3:88:2c:32:92:15:c7:d6:8c:fb:73:ca:e6:55:cc:
e9:1e:d8:f6:d8:71:86:f1:63:30:45:30:27:4e:ea:ef:f4:bb:
25:b9:b5:ef:e3:7e:a4:15:db:69:77:ac:19:25:e5:c4:8d:fe:
0b:9c:c1:d0:73:1a:56:99:15:25:1c:62:1c:9a:c6:c1:e5:a0:
34:ef:bb:89:b5:48:f7:19:7f:f0:3b:18:b0:5d:28:1a:41:09:
99:f4:2f:0d:d0:69:0d:3f:04:44:41:a5:f4:92:5e:b4:15:ef:
4e:64:2a:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8crG2YFtZcAC/aqPqFGoaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YWQxZjU3NmUzZjcxYjRmNmMzMzkxZjJmYTM0M2Q1MDhi
NmIxZWUwHhcNMjUwMTMxMTMwMDIwWhcNMjUwMjAxMTMwMDIwWjAzMTEwLwYDVQQD
Eyg3MGQ0YTllZWI2Y2JhZDE1YjAyZDU1M2IxNmY4MzYxYzMzZDIwODMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2p3wYxYGZU9EfRg0fEk7+9O2Zn7w
V2XE5Ph0/REl/wOjmz/44EtqZ02MrtZksOPPGEJgqjgYwpslzdIvjKnC1Nz+U3Dx
R4D2k3DvFnf40yP5l9sjeuk9tFgutKaswhDVDx5iY9WaSzFAGaxdrofoYWa9/lkA
vDKj8R4Ou4MB+7ujQ4FEYZynA5ejsnklY/cWlsyfTcIW78iZMqZS72Ko2JJNE37A
J4PGE5ULdcTz2EiIG/JzPI1jLprIeFUh2BwyHiuSpRgdMB8GzExm3nRlZ3+jzpTG
nFxDpMUijBIsi3JOeWBtRatnIcsKp1RsveWaLQRRpdowMm9Ksh08B2byJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDUqe62y60VsC1VOxb4Nhwz0ggyMB8GA1UdIwQY
MBaAFEetH1duP3G09sM5Hy+jQ9UItrHuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjYwZlYyNF9jYlQyd3prZkw2TkQxUWkyc2U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8yZTAyODYtNTYzOS00YTFjLThiZjIt
M2NjYjMwNzQwMjBmLzEvUjYwZlYyNF9jYlQyd3prZkw2TkQxUWkyc2U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8yZTAyODYtNTYzOS00YTFjLThiZjItM2NjYjMwNzQwMjBm
LzEvUjYwZlYyNF9jYlQyd3prZkw2TkQxUWkyc2U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkl3J89P
jS/xVtPQr3zux7tMi9JHRyMooVamourQJ6f60fygE8FsQkUdHVFhn2q4VT3L96lJ
XmAjEp+C2IxEpVs3GBcMy7Gwm1o02FYcZ+LavOLeCcD75kCpjLQvuy0hReNrQr8j
/lFSVK5x7jTMre0XD7U2HSkZLjRmHItwS2O42bMHRjr7lgkxf8iKrkYsbRfq84gs
MpIVx9aM+3PK5lXM6R7Y9thxhvFjMEUwJ07q7/S7Jbm17+N+pBXbaXesGSXlxI3+
C5zB0HMaVpkVJRxiHJrGweWgNO+7ibVI9xl/8DsYsF0oGkEJmfQvDdBpDT8EREGl
9JJetBXvTmQqVA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:30:32 2025 by rpki-client