Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
File: ARmUscWuj1grvs9ndysUttl3uqw.mft (raw, json)
Hash identifier: 33F349E/8YU6ZQfr/dH3jVSTpLFD1elYgQhe6/T1tKU=
Subject key identifier: C1:31:AE:6E:F5:15:D1:D2:FB:76:5A:92:26:81:A1:E4:AB:96:90:D4
Authority key identifier: 01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC
Certificate issuer: /CN=011994b1c5ae8f582bbecf67772b14b6d977baac
Certificate serial: 0194BC72AB3B4396CC1372BF286F8B2C8004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
Manifest number: 0342
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: ARmUscWuj1grvs9ndysUttl3uqw.crl (hash: e16igsFU2e9vIEj3b4sddnp3Wmtv82GV3Gn7yQUbUnQ=)
2: NFxIuk4KnMOoaK7t1Cp4prQGCpc.roa (hash: qLz7+g7LrMIsBpRTz+960ZyB6BF4g8W2iE+TmwJoilE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ab:3b:43:96:cc:13:72:bf:28:6f:8b:2c:80:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011994b1c5ae8f582bbecf67772b14b6d977baac
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=c131ae6ef515d1d2fb765a922681a1e4ab9690d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0d:ce:35:d6:66:94:93:b4:ce:d0:92:33:e1:
44:ca:63:3b:df:76:df:84:f5:2a:3b:15:cc:33:92:
c5:a3:c3:66:89:17:ff:9c:47:08:a7:a5:56:c1:08:
04:3f:26:02:ed:80:12:4c:13:94:8a:3f:40:35:d7:
e6:d0:16:6f:3e:4d:11:e0:46:fb:25:2e:cd:cb:1e:
3b:ee:ef:d3:62:44:d8:fb:b3:96:d4:5b:fc:90:8b:
dd:46:e5:81:c2:c9:96:d2:5e:17:c7:c1:73:a0:d3:
a4:34:c8:27:09:01:ca:63:90:16:f4:46:87:61:4a:
13:71:35:57:6d:87:6b:70:5d:69:ec:32:99:2b:2b:
08:58:d4:c1:db:3b:79:bf:ab:ec:ff:a3:d4:b6:90:
7a:cf:1a:20:46:47:6a:0d:66:b0:4e:bf:26:a4:84:
9c:3d:b5:0e:1b:ba:15:58:ba:57:9e:98:ed:04:d8:
75:50:6f:25:18:de:3a:28:c4:b5:3b:70:a9:0f:fa:
0a:98:4b:d1:3a:54:ee:61:4c:d2:f1:48:dd:5e:30:
e7:7d:3e:b0:b6:9a:fb:89:4b:f1:7a:39:69:a5:1f:
43:65:8b:48:a4:ee:69:5d:f9:0c:47:ec:ef:cf:0b:
ad:94:7c:cd:d7:31:07:4e:39:22:09:82:4b:6c:c0:
0b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:31:AE:6E:F5:15:D1:D2:FB:76:5A:92:26:81:A1:E4:AB:96:90:D4
X509v3 Authority Key Identifier:
keyid:01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6d:50:6a:83:40:87:c8:43:41:37:98:f8:ad:de:6c:fd:8d:
a3:1a:90:06:c5:0d:02:33:07:17:fb:31:be:1c:ac:e8:c8:38:
e6:a7:89:8e:1c:ca:69:a8:71:65:17:af:5e:35:a1:59:06:f2:
c9:aa:d1:8b:9d:41:cd:cc:d6:ab:d6:b3:48:63:4b:c7:88:cb:
ef:85:c8:9e:83:87:5e:56:dd:0a:53:77:ed:5b:59:0c:a0:5a:
1a:2a:94:72:26:ff:5c:d8:eb:9c:a5:c0:ca:ba:8a:0f:e9:4a:
d5:3d:83:74:81:15:56:d5:84:35:c6:bd:22:18:f2:95:01:c8:
2e:23:44:6f:78:f2:b4:d3:0c:b7:96:6b:ac:b2:2e:a7:c6:b5:
b5:49:c5:79:93:08:03:ce:64:7f:f6:62:e6:51:d8:0f:ad:2a:
28:75:b4:d2:5f:0c:97:75:f1:c4:79:2c:75:53:b6:be:ac:b4:
be:ed:ef:15:f2:0d:24:11:0e:81:68:25:cf:c0:bb:62:50:33:
e5:68:f2:94:4c:d4:4a:96:d4:b4:c9:3c:ef:d2:f4:38:ca:b5:
91:e7:46:7c:34:5b:e2:ac:54:d9:50:63:02:7a:69:3b:6d:40:
61:67:09:35:dd:7c:fa:02:d3:68:df:8e:03:77:72:08:11:6a:
f5:29:18:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cqs7Q5bME3K/KG+LLIAEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMTk5NGIxYzVhZThmNTgyYmJlY2Y2Nzc3MmIxNGI2ZDk3
N2JhYWMwHhcNMjUwMTMxMTMwMDE5WhcNMjUwMjAxMTMwMDE5WjAzMTEwLwYDVQQD
EyhjMTMxYWU2ZWY1MTVkMWQyZmI3NjVhOTIyNjgxYTFlNGFiOTY5MGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA3ONdZmlJO0ztCSM+FEymM733bf
hPUqOxXMM5LFo8NmiRf/nEcIp6VWwQgEPyYC7YASTBOUij9ANdfm0BZvPk0R4Eb7
JS7Nyx477u/TYkTY+7OW1Fv8kIvdRuWBwsmW0l4Xx8FzoNOkNMgnCQHKY5AW9EaH
YUoTcTVXbYdrcF1p7DKZKysIWNTB2zt5v6vs/6PUtpB6zxogRkdqDWawTr8mpISc
PbUOG7oVWLpXnpjtBNh1UG8lGN46KMS1O3CpD/oKmEvROlTuYUzS8UjdXjDnfT6w
tpr7iUvxejlppR9DZYtIpO5pXfkMR+zvzwutlHzN1zEHTjkiCYJLbMAL3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMExrm71FdHS+3ZakiaBoeSrlpDUMB8GA1UdIwQY
MBaAFAEZlLHFro9YK77PZ3crFLbZd7qsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVJtVXNjV3VqMWdydnM5bmR5c1V0dGwzdXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9kYTNlNWEtMzAwMi00MWIwLWFmOWEt
M2E3M2MzMzNlN2U3LzEvQVJtVXNjV3VqMWdydnM5bmR5c1V0dGwzdXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9kYTNlNWEtMzAwMi00MWIwLWFmOWEtM2E3M2MzMzNlN2U3
LzEvQVJtVXNjV3VqMWdydnM5bmR5c1V0dGwzdXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASm1QaoNA
h8hDQTeY+K3ebP2NoxqQBsUNAjMHF/sxvhys6Mg45qeJjhzKaahxZRevXjWhWQby
yarRi51BzczWq9azSGNLx4jL74XInoOHXlbdClN37VtZDKBaGiqUcib/XNjrnKXA
yrqKD+lK1T2DdIEVVtWENca9IhjylQHILiNEb3jytNMMt5ZrrLIup8a1tUnFeZMI
A85kf/Zi5lHYD60qKHW00l8Ml3XxxHksdVO2vqy0vu3vFfINJBEOgWglz8C7YlAz
5WjylEzUSpbUtMk879L0OMq1kedGfDRb4qxU2VBjAnppO21AYWcJNd18+gLTaN+O
A3dyCBFq9SkYPg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:53 2025 by rpki-client