Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
File: 4bpLKGfa04tzpGkYJB78cqISYvc.mft (raw, json)
Hash identifier: Q4fsQczN2L6IEZkXZLfjfmP4ALfDKc8Q2P8idlMF91k=
Subject key identifier: 05:39:24:AE:AE:84:29:74:90:E4:A7:8A:C2:E3:EE:D3:70:33:4A:5E
Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Certificate serial: 0194BBCDFF88FFB6A2D06502C7A8862CD5B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:27 +0000
Manifest this update: Fri 31 Jan 2025 10:00:27 +0000
Manifest next update: Sat 01 Feb 2025 10:00:27 +0000
Files and hashes: 1: 4bpLKGfa04tzpGkYJB78cqISYvc.crl (hash: ngFQLKwtT5LPsRcv6ny6HaL7SXXGdXWkMFxGkmDphjk=)
2: MccPojCQ_5aiRX4Myokyw6v--7c.roa (hash: 6zT3oaRUJKtce125U7+EL/be9RKqr09GLQyUToqdrbc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ff:88:ff:b6:a2:d0:65:02:c7:a8:86:2c:d5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Validity
Not Before: Jan 31 10:00:27 2025 GMT
Not After : Feb 1 10:00:27 2025 GMT
Subject: CN=053924aeae84297490e4a78ac2e3eed370334a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:6c:8e:1c:07:23:17:9e:5f:5a:17:d4:b5:
56:e7:93:58:59:2a:a2:97:b1:76:39:7f:5c:e1:ed:
21:d9:0e:d4:d2:48:0f:32:3e:0e:31:27:00:ec:b2:
23:81:30:be:97:50:b3:18:ee:f1:15:fc:22:de:9a:
a7:46:9c:bf:04:1f:b5:06:4c:dc:b6:3b:9c:5e:31:
be:32:e3:52:42:29:0c:98:88:31:10:83:5a:ab:10:
fe:4d:36:4d:ee:ac:89:f8:83:49:69:7f:df:c4:d7:
f7:9b:bc:1e:16:a0:7a:2b:62:b7:47:7d:d1:e0:92:
74:00:a3:91:da:ac:b6:28:aa:94:11:04:ee:36:df:
5e:37:54:0d:85:9d:87:3c:a2:01:10:c8:cf:b5:78:
56:47:77:9e:9a:a4:da:a4:5b:8d:89:1d:3b:0c:1d:
1c:1b:1b:e2:23:7c:4c:a6:39:9a:83:18:e5:39:f0:
9a:98:df:32:aa:b9:34:03:6a:2b:e3:f7:d8:5b:51:
a1:79:c0:4c:66:17:48:5a:72:c1:86:07:1e:d3:33:
63:1b:0d:75:55:11:10:62:75:21:60:5c:3d:5a:46:
e4:49:6f:67:cb:0b:0f:ee:6e:e3:5b:e2:f8:68:dc:
05:b3:67:a2:b3:a9:69:0a:e6:1b:29:70:c7:19:8d:
3d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:39:24:AE:AE:84:29:74:90:E4:A7:8A:C2:E3:EE:D3:70:33:4A:5E
X509v3 Authority Key Identifier:
keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:48:4a:12:a6:94:44:e8:74:25:46:7b:14:fc:1c:42:79:41:
fd:47:80:9d:b2:b2:0a:5b:89:94:b4:7c:61:8c:3e:7a:e7:43:
bb:d1:04:b1:4b:11:4f:0a:b0:f8:21:d6:fb:86:4e:a4:d5:a8:
a2:ea:aa:b2:6f:21:87:d4:2d:82:67:83:d2:38:e8:f3:ac:19:
f2:84:be:99:2e:20:54:62:9e:d2:58:d2:df:c2:80:4e:6a:37:
0f:fd:78:c0:4c:5c:89:59:0e:1d:43:50:10:2e:a0:ba:42:a8:
06:07:ca:fe:c5:9c:f0:bc:6c:a4:6c:56:21:11:6e:f1:57:4b:
31:72:4b:0f:07:fe:ab:93:1d:0b:1d:63:c7:d2:27:3b:35:ff:
50:9b:05:79:ff:d0:ee:d9:d4:12:56:fd:2c:00:ff:b7:d6:09:
64:6e:45:f5:7a:82:44:30:43:b7:6d:94:95:0b:e5:24:e7:6c:
aa:f2:a0:92:3c:34:6a:9b:e5:f3:71:85:39:85:d2:53:54:4d:
6c:48:95:8a:2d:99:03:d6:88:85:b7:98:b3:bc:9c:95:e9:09:
03:da:5d:c3:dc:31:65:09:ed:14:09:ad:f5:c0:cd:54:f5:8d:
43:35:d5:b9:fa:e7:8e:8b:c1:d7:6b:c2:bf:bf:9f:b3:8f:33:
cd:29:e2:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zf+I/7ai0GUCx6iGLNW4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYmE0YjI4NjdkYWQzOGI3M2E0NjkxODI0MWVmYzcyYTIx
MjYyZjcwHhcNMjUwMTMxMTAwMDI3WhcNMjUwMjAxMTAwMDI3WjAzMTEwLwYDVQQD
EygwNTM5MjRhZWFlODQyOTc0OTBlNGE3OGFjMmUzZWVkMzcwMzM0YTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVtsjhwHIxeeX1oX1LVW55NYWSqi
l7F2OX9c4e0h2Q7U0kgPMj4OMScA7LIjgTC+l1CzGO7xFfwi3pqnRpy/BB+1Bkzc
tjucXjG+MuNSQikMmIgxEINaqxD+TTZN7qyJ+INJaX/fxNf3m7weFqB6K2K3R33R
4JJ0AKOR2qy2KKqUEQTuNt9eN1QNhZ2HPKIBEMjPtXhWR3eemqTapFuNiR07DB0c
GxviI3xMpjmagxjlOfCamN8yqrk0A2or4/fYW1GhecBMZhdIWnLBhgce0zNjGw11
VREQYnUhYFw9WkbkSW9nywsP7m7jW+L4aNwFs2eis6lpCuYbKXDHGY09BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAU5JK6uhCl0kOSnisLj7tNwM0peMB8GA1UdIwQY
MBaAFOG6Syhn2tOLc6RpGCQe/HKiEmL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGJwTEtHZmEwNHR6cEdrWUpCNzhjcUlTWXZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82ODkxMDktMTcyMy00YmYxLWI2M2Et
ZGM2NGFlNzI1NzhlLzEvNGJwTEtHZmEwNHR6cEdrWUpCNzhjcUlTWXZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC82ODkxMDktMTcyMy00YmYxLWI2M2EtZGM2NGFlNzI1Nzhl
LzEvNGJwTEtHZmEwNHR6cEdrWUpCNzhjcUlTWXZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXEhKEqaU
ROh0JUZ7FPwcQnlB/UeAnbKyCluJlLR8YYw+eudDu9EEsUsRTwqw+CHW+4ZOpNWo
ouqqsm8hh9QtgmeD0jjo86wZ8oS+mS4gVGKe0ljS38KATmo3D/14wExciVkOHUNQ
EC6gukKoBgfK/sWc8LxspGxWIRFu8VdLMXJLDwf+q5MdCx1jx9InOzX/UJsFef/Q
7tnUElb9LAD/t9YJZG5F9XqCRDBDt22UlQvlJOdsqvKgkjw0apvl83GFOYXSU1RN
bEiVii2ZA9aIhbeYs7yclekJA9pdw9wxZQntFAmt9cDNVPWNQzXVufrnjovB12vC
v7+fs48zzSnirw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:21:42 2025 by rpki-client