Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
File: R2bG2a0hzUEYoESCZNb7NdVfFMA.mft (raw, json)
Hash identifier: uQLk/Jj0e86W5i9SUDN0Zh30V/KLFk4TXzmr7USc2CA=
Subject key identifier: 9C:5B:D4:A2:74:43:2E:AD:6B:4E:90:41:05:80:5F:8B:95:AD:BE:25
Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
Certificate issuer: /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Certificate serial: 0194BD1763519219661F8455C625F14C34AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:14 +0000
Manifest this update: Fri 31 Jan 2025 16:00:14 +0000
Manifest next update: Sat 01 Feb 2025 16:00:14 +0000
Files and hashes: 1: R2bG2a0hzUEYoESCZNb7NdVfFMA.crl (hash: mDjKkkSOY5aQxxwnyhQidLW9zEPsOdQLGWqrKxktqow=)
2: fB3zFlody1nthwMkhJVJflJzOIE.roa (hash: J7sG0dYSoVKmJxeiq5++oBkxzchZIPPLFfINpg3QbHs=)
3: t7D4JJSP5z-u6M9bmWKtD19PybY.roa (hash: hgEfba4+416hOF8d8xJM4ix7obkJ8g22r+oy5Y4pB5Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:63:51:92:19:66:1f:84:55:c6:25:f1:4c:34:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Validity
Not Before: Jan 31 16:00:14 2025 GMT
Not After : Feb 1 16:00:14 2025 GMT
Subject: CN=9c5bd4a274432ead6b4e904105805f8b95adbe25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d0:d0:28:f8:4a:06:07:de:54:6f:e3:e7:6f:
4d:37:4b:af:a5:a2:3f:75:f8:58:46:e6:be:97:58:
43:7d:03:02:ff:5f:96:49:30:ac:73:d1:ed:20:bb:
48:be:27:ed:40:bb:bb:19:ce:bc:75:e4:5c:6b:cc:
d2:38:f7:9e:63:1a:d7:d2:29:a5:81:ff:cc:03:d3:
28:80:94:9a:96:64:d0:06:55:0f:0f:8f:7b:0b:1d:
c3:11:c1:0c:82:83:ff:29:a4:ef:3f:bf:23:50:e2:
81:ec:af:1c:59:61:bc:d4:75:dd:2f:8b:3c:88:17:
4b:54:8a:09:e0:61:27:6c:f8:44:26:a8:75:2c:02:
29:11:1b:fc:76:3b:c4:59:55:5c:4a:3c:98:66:71:
d6:81:ae:a3:b0:83:37:b5:ee:7a:6c:21:3d:1b:81:
fb:f0:eb:f6:c6:d2:73:e3:c2:19:67:e8:19:33:14:
12:85:c8:e1:3f:1d:fa:9f:c4:0a:1e:24:f5:81:31:
a7:b9:10:ea:96:92:c5:66:ad:4f:aa:69:9c:df:13:
b6:8d:e0:6b:0b:25:af:4d:35:89:b1:47:71:33:c9:
0f:f6:71:93:0f:9b:85:9d:5b:f7:d4:c7:ea:c1:57:
80:c4:1e:67:f1:56:e6:dd:11:1e:31:0d:d4:0b:36:
55:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5B:D4:A2:74:43:2E:AD:6B:4E:90:41:05:80:5F:8B:95:AD:BE:25
X509v3 Authority Key Identifier:
keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a7:f2:12:2d:ea:26:f3:b0:3e:84:76:60:a2:c9:f5:bd:2a:
e7:fc:08:95:81:69:5b:4b:6a:eb:c7:76:85:a1:37:af:aa:4c:
cb:fc:ae:90:ef:a7:55:6c:7e:96:6f:44:d4:e0:15:e1:21:3f:
8a:5b:a9:e4:4d:ad:fc:59:ac:85:4d:5a:ce:a6:aa:3a:54:3d:
a8:37:d3:0d:ee:7c:89:0f:56:96:4e:3d:79:c6:00:46:33:40:
68:e1:65:ab:aa:a4:c4:06:12:89:53:25:d0:1b:7f:a4:6b:fe:
de:e1:3a:a5:4c:91:01:9d:67:97:de:25:09:4d:7b:44:55:f6:
4d:f7:5d:e2:45:c1:9a:fb:e8:b0:4b:18:80:44:2c:1e:65:55:
14:5f:26:cd:6f:e0:81:c6:53:8e:a3:fc:fd:9d:ed:20:03:64:
1a:f7:2c:a7:0e:b2:61:0a:95:30:a9:0b:03:fa:55:8a:8a:79:
50:2e:94:18:7b:5b:91:be:86:ad:34:64:11:12:a2:5f:49:84:
f7:7f:fc:5d:ac:74:de:13:c1:60:d4:fe:30:f4:51:fb:70:24:
9e:db:7e:5a:d4:8e:19:e0:ae:e8:59:ab:cb:7c:04:7b:18:ee:
63:54:73:0b:20:79:5d:ca:13:24:85:0d:a2:48:54:e1:ef:ab:
78:07:d9:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F2NRkhlmH4RVxiXxTDSrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NjZjNmQ5YWQyMWNkNDExOGEwNDQ4MjY0ZDZmYjM1ZDU1
ZjE0YzAwHhcNMjUwMTMxMTYwMDE0WhcNMjUwMjAxMTYwMDE0WjAzMTEwLwYDVQQD
Eyg5YzViZDRhMjc0NDMyZWFkNmI0ZTkwNDEwNTgwNWY4Yjk1YWRiZTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztDQKPhKBgfeVG/j529NN0uvpaI/
dfhYRua+l1hDfQMC/1+WSTCsc9HtILtIviftQLu7Gc68deRca8zSOPeeYxrX0iml
gf/MA9MogJSalmTQBlUPD497Cx3DEcEMgoP/KaTvP78jUOKB7K8cWWG81HXdL4s8
iBdLVIoJ4GEnbPhEJqh1LAIpERv8djvEWVVcSjyYZnHWga6jsIM3te56bCE9G4H7
8Ov2xtJz48IZZ+gZMxQShcjhPx36n8QKHiT1gTGnuRDqlpLFZq1Pqmmc3xO2jeBr
CyWvTTWJsUdxM8kP9nGTD5uFnVv31MfqwVeAxB5n8Vbm3REeMQ3UCzZV3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxb1KJ0Qy6ta06QQQWAX4uVrb4lMB8GA1UdIwQY
MBaAFEdmxtmtIc1BGKBEgmTW+zXVXxTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80MWRjNzUtMWYzMi00ZWRkLWE5NGMt
ZjVlYzQwM2ZkYWNmLzEvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi80MWRjNzUtMWYzMi00ZWRkLWE5NGMtZjVlYzQwM2ZkYWNm
LzEvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKfyEi3q
JvOwPoR2YKLJ9b0q5/wIlYFpW0tq68d2haE3r6pMy/yukO+nVWx+lm9E1OAV4SE/
ilup5E2t/FmshU1azqaqOlQ9qDfTDe58iQ9Wlk49ecYARjNAaOFlq6qkxAYSiVMl
0Bt/pGv+3uE6pUyRAZ1nl94lCU17RFX2Tfdd4kXBmvvosEsYgEQsHmVVFF8mzW/g
gcZTjqP8/Z3tIANkGvcspw6yYQqVMKkLA/pViop5UC6UGHtbkb6GrTRkERKiX0mE
93/8Xax03hPBYNT+MPRR+3Akntt+WtSOGeCu6Fmry3wEexjuY1RzCyB5XcoTJIUN
okhU4e+reAfZag==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:09 2025 by rpki-client