Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
File: r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft (raw, json)
Hash identifier: feVf94usHzBIYqc0Shq6xJKzyDU6DKdUj9aDjLkb8Z0=
Subject key identifier: 2C:10:03:9F:E2:A8:B7:3E:07:56:C2:09:E5:B0:F9:62:04:D1:FB:0D
Authority key identifier: AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
Certificate issuer: /CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Certificate serial: 0194BD17A1A781C2F2D8CECA8169EF552818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:30 +0000
Manifest this update: Fri 31 Jan 2025 16:00:30 +0000
Manifest next update: Sat 01 Feb 2025 16:00:30 +0000
Files and hashes: 1: r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl (hash: YtG6TZuMhxu+KNSApqBa17McQBaH4wYI/g5YF/xIefY=)
2: tMXBcGUIKGTfYRMTtfG6biesR-c.roa (hash: JWcwNHGeY4nL5R6D6KA+SUTM4UCaSarGczrFPqLJ+XI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a1:a7:81:c2:f2:d8:ce:ca:81:69:ef:55:28:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Validity
Not Before: Jan 31 16:00:30 2025 GMT
Not After : Feb 1 16:00:30 2025 GMT
Subject: CN=2c10039fe2a8b73e0756c209e5b0f96204d1fb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d7:ea:6a:bb:06:7f:52:c0:e4:ec:dd:fc:94:
c7:20:6e:50:14:94:89:ca:5a:c9:19:a1:7a:25:80:
d2:71:5c:70:f4:14:09:3f:cd:70:96:cf:3a:7e:4b:
62:c9:92:f5:4f:96:b3:89:52:b7:75:e7:d9:21:c9:
05:b7:39:76:38:c8:f5:2a:80:2f:41:ee:ad:7d:b7:
6b:92:8d:86:92:63:4a:4a:71:ce:fa:6e:b4:84:a8:
88:17:f2:87:ad:17:e2:23:f1:6a:75:ac:54:fe:29:
59:31:8a:4d:ed:c5:6e:ac:c6:0d:1b:ce:73:57:fe:
8f:40:e3:0c:4c:26:08:ca:0c:c4:d1:e7:c7:13:65:
ac:96:e0:73:e2:7f:64:f4:6c:5d:95:17:f4:40:c1:
8b:e9:e0:5c:8d:61:a8:d1:58:93:1d:b0:84:58:30:
64:1d:fb:a3:3f:5d:76:ae:5d:48:d6:b6:f2:34:19:
fd:a9:69:f3:c3:fc:4f:4f:29:1b:30:fa:b1:f4:21:
17:92:ae:13:d7:35:46:e8:26:10:47:27:a4:be:10:
5a:4c:f5:62:a3:77:5a:fe:c9:5b:29:fb:e8:ed:a4:
f4:4f:cc:d2:b4:3b:ec:dd:f9:7f:e8:40:60:2f:8c:
4e:df:f8:00:f0:de:d9:f6:3c:4c:ba:05:87:b0:9b:
58:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:10:03:9F:E2:A8:B7:3E:07:56:C2:09:E5:B0:F9:62:04:D1:FB:0D
X509v3 Authority Key Identifier:
keyid:AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:4a:75:d2:da:3a:e8:ac:f2:90:f6:b1:0e:3e:15:bc:ff:7a:
db:1d:27:1d:98:49:e5:8c:68:03:d0:23:aa:61:86:4c:8b:d3:
51:f8:1f:f9:37:72:38:c9:98:60:de:47:55:12:a3:8a:05:85:
1c:7f:e2:ad:8a:0b:a4:48:7c:5d:9b:31:5c:85:c6:fb:53:9c:
99:67:11:04:4d:70:b6:46:81:28:77:f7:4c:88:2e:4e:03:b5:
eb:92:28:71:57:b5:5e:32:65:37:c2:d3:bb:26:9b:86:d9:53:
09:66:68:5d:fc:95:6b:bf:3c:00:3f:4b:ea:58:b7:99:05:8f:
7d:e6:de:34:97:e8:4e:50:21:ee:de:0e:c8:f3:1b:74:2b:e0:
51:94:70:74:48:91:d0:f0:40:ba:56:fe:49:e7:da:ec:21:80:
54:d5:6b:96:4a:3d:ce:25:f3:3d:1b:b2:03:da:4b:dd:40:d0:
1b:03:ea:02:60:94:b3:f7:4f:d8:37:08:ea:e0:0e:d4:41:5d:
55:e3:96:1c:52:a4:87:64:5a:53:e4:71:30:ce:8c:db:73:6c:
63:51:80:be:35:97:7c:6d:27:46:d1:4c:8f:a4:df:1e:ea:57:
d1:ba:e3:b0:77:76:ca:33:42:69:22:9b:59:9f:41:17:28:f7:
23:9d:f2:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F6GngcLy2M7KgWnvVSgYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZTRhMGQ1ZmRhNjAwYzVkNWI3ZjYxOGY2ODZkN2U5MzA1
MWI0ZDcwHhcNMjUwMTMxMTYwMDMwWhcNMjUwMjAxMTYwMDMwWjAzMTEwLwYDVQQD
EygyYzEwMDM5ZmUyYThiNzNlMDc1NmMyMDllNWIwZjk2MjA0ZDFmYjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtfqarsGf1LA5Ozd/JTHIG5QFJSJ
ylrJGaF6JYDScVxw9BQJP81wls86fktiyZL1T5aziVK3defZIckFtzl2OMj1KoAv
Qe6tfbdrko2GkmNKSnHO+m60hKiIF/KHrRfiI/FqdaxU/ilZMYpN7cVurMYNG85z
V/6PQOMMTCYIygzE0efHE2WsluBz4n9k9GxdlRf0QMGL6eBcjWGo0ViTHbCEWDBk
HfujP112rl1I1rbyNBn9qWnzw/xPTykbMPqx9CEXkq4T1zVG6CYQRyekvhBaTPVi
o3da/slbKfvo7aT0T8zStDvs3fl/6EBgL4xO3/gA8N7Z9jxMugWHsJtYjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwQA5/iqLc+B1bCCeWw+WIE0fsNMB8GA1UdIwQY
MBaAFK/koNX9pgDF1bf2GPaG1+kwUbTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvci1TZzFmMm1BTVhWdF9ZWTlvYlg2VEJSdE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85NDY3YzgtMGM5MC00NmUxLTkxYzAt
ZTEwN2Q5ZjE2YzJkLzEvci1TZzFmMm1BTVhWdF9ZWTlvYlg2VEJSdE5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85NDY3YzgtMGM5MC00NmUxLTkxYzAtZTEwN2Q5ZjE2YzJk
LzEvci1TZzFmMm1BTVhWdF9ZWTlvYlg2VEJSdE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyUp10to6
6KzykPaxDj4VvP962x0nHZhJ5YxoA9AjqmGGTIvTUfgf+TdyOMmYYN5HVRKjigWF
HH/irYoLpEh8XZsxXIXG+1OcmWcRBE1wtkaBKHf3TIguTgO165IocVe1XjJlN8LT
uyabhtlTCWZoXfyVa788AD9L6li3mQWPfebeNJfoTlAh7t4OyPMbdCvgUZRwdEiR
0PBAulb+Sefa7CGAVNVrlko9ziXzPRuyA9pL3UDQGwPqAmCUs/dP2DcI6uAO1EFd
VeOWHFKkh2RaU+RxMM6M23NsY1GAvjWXfG0nRtFMj6TfHupX0brjsHd2yjNCaSKb
WZ9BFyj3I53yTA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:28 2025 by rpki-client