Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
File: riCckmRq40LKpdRtwdNzWg0uexQ.mft (raw, json)
Hash identifier: y14yhoUZ8qiqnd1k5YWUnLFy/HhVYguwkLIRs3BksC0=
Subject key identifier: 9C:67:EA:B1:7E:BE:F2:F5:FB:96:BD:AD:A7:AF:C7:35:E5:22:01:87
Authority key identifier: AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14
Certificate issuer: /CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14
Certificate serial: 0194BD4E5370604071C285517A4A40613C9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
Manifest number: 0C2E
Signing time: Fri 31 Jan 2025 17:00:14 +0000
Manifest this update: Fri 31 Jan 2025 17:00:14 +0000
Manifest next update: Sat 01 Feb 2025 17:00:14 +0000
Files and hashes: 1: WE4vStdUw7e2RexA2uVQrcHSC4Y.roa (hash: UJ9it5wcaDKphifUsLvzyU+8UhqAc1r+2HZRVAecKf8=)
2: riCckmRq40LKpdRtwdNzWg0uexQ.crl (hash: hYVXZm4yMfst4+Jyzn9JpRvWL3F9ONfeTCP6kxqwCDk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:53:70:60:40:71:c2:85:51:7a:4a:40:61:3c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14
Validity
Not Before: Jan 31 17:00:14 2025 GMT
Not After : Feb 1 17:00:14 2025 GMT
Subject: CN=9c67eab17ebef2f5fb96bdada7afc735e5220187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6d:59:da:bb:7c:2c:77:81:11:5c:d3:54:e2:
17:a4:ae:2e:ad:68:25:9e:bc:72:3e:d8:fd:8f:67:
b4:df:ff:03:f5:81:b5:ea:59:50:18:cc:a7:08:dd:
fb:76:bb:fb:a4:52:84:84:96:80:10:57:9b:39:a9:
2e:aa:49:30:21:91:c7:05:2c:8b:5c:7f:05:2a:75:
e1:ca:ba:80:87:ca:eb:fc:0f:36:55:2c:18:1a:95:
18:1e:91:80:7f:8e:04:ae:77:1d:0a:64:76:41:80:
30:49:fc:45:0c:b4:5f:13:73:57:ca:b8:81:53:f4:
dd:fd:df:bc:47:9e:fb:4a:b6:b8:54:fd:fb:d1:83:
7c:10:3b:3b:11:6b:d2:46:c3:65:3c:26:e9:4a:a4:
09:f4:dd:b6:12:69:e0:9f:b5:4c:15:63:16:a9:55:
9e:7e:17:37:e5:41:a8:6c:47:18:2f:90:66:64:e6:
0c:e9:73:dc:0c:21:d6:79:90:e6:ec:d4:d6:5b:eb:
46:50:e0:cd:91:de:41:1b:a7:37:cc:b3:f9:14:f3:
9b:06:16:6e:2c:02:fe:01:99:41:68:93:f8:53:3e:
b4:18:00:34:01:3b:34:ca:19:f3:78:c4:9f:f8:e5:
da:8e:a8:3c:1b:9f:e4:44:e7:06:76:d9:ae:93:37:
7c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:67:EA:B1:7E:BE:F2:F5:FB:96:BD:AD:A7:AF:C7:35:E5:22:01:87
X509v3 Authority Key Identifier:
keyid:AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:f3:e3:3b:6c:9f:02:3f:a9:ac:9f:96:e2:64:af:15:8e:1d:
0f:e4:71:9c:27:d4:6d:d5:09:4b:4b:68:0c:65:c0:8e:52:0a:
46:79:4b:d0:7b:44:d9:5d:32:e5:49:da:8c:dc:64:a3:bb:b5:
f4:9b:a2:67:5a:30:fe:5c:9a:7a:7f:79:97:02:16:ec:a3:e7:
d6:1e:6c:ef:6d:f8:3b:97:e5:0f:d9:a5:c6:05:96:69:cc:b6:
f4:34:cb:91:80:65:1d:c8:50:3a:b1:04:35:f0:c9:5b:3d:b0:
41:6e:20:73:ad:d4:3c:4d:9f:04:61:17:6f:ad:9e:85:0e:74:
20:e0:99:05:c8:92:60:b6:23:b4:51:42:4f:79:c5:77:04:7e:
96:fa:45:a3:d2:40:55:ea:38:85:00:e3:1d:68:42:03:00:e2:
29:00:1c:73:d4:0a:d9:02:bc:ba:b6:0b:dc:aa:e5:41:91:93:
9c:8a:82:76:fa:99:44:73:c0:be:d1:6f:e5:0e:66:14:d9:6f:
e8:21:e7:88:b6:c8:95:61:4e:04:38:fb:90:b1:c7:12:8e:bb:
4c:81:97:09:13:6e:bf:34:ba:3e:bf:a2:67:3a:4a:92:d7:43:
bd:66:b5:be:af:2a:d6:28:e1:f5:1f:d1:e8:76:c8:ab:11:61:
fc:86:b2:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TlNwYEBxwoVRekpAYTyaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMjA5YzkyNjQ2YWUzNDJjYWE1ZDQ2ZGMxZDM3MzVhMGQy
ZTdiMTQwHhcNMjUwMTMxMTcwMDE0WhcNMjUwMjAxMTcwMDE0WjAzMTEwLwYDVQQD
Eyg5YzY3ZWFiMTdlYmVmMmY1ZmI5NmJkYWRhN2FmYzczNWU1MjIwMTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3G1Z2rt8LHeBEVzTVOIXpK4urWgl
nrxyPtj9j2e03/8D9YG16llQGMynCN37drv7pFKEhJaAEFebOakuqkkwIZHHBSyL
XH8FKnXhyrqAh8rr/A82VSwYGpUYHpGAf44ErncdCmR2QYAwSfxFDLRfE3NXyriB
U/Td/d+8R577Sra4VP370YN8EDs7EWvSRsNlPCbpSqQJ9N22Emngn7VMFWMWqVWe
fhc35UGobEcYL5BmZOYM6XPcDCHWeZDm7NTWW+tGUODNkd5BG6c3zLP5FPObBhZu
LAL+AZlBaJP4Uz60GAA0ATs0yhnzeMSf+OXajqg8G5/kROcGdtmukzd83QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxn6rF+vvL1+5a9raevxzXlIgGHMB8GA1UdIwQY
MBaAFK4gnJJkauNCyqXUbcHTc1oNLnsUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmlDY2ttUnE0MExLcGRSdHdkTnpXZzB1ZXhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zZjNhMzAtM2U2NC00MzgwLWExNDgt
ZTBhMjNkYTVlNjI4LzEvcmlDY2ttUnE0MExLcGRSdHdkTnpXZzB1ZXhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zZjNhMzAtM2U2NC00MzgwLWExNDgtZTBhMjNkYTVlNjI4
LzEvcmlDY2ttUnE0MExLcGRSdHdkTnpXZzB1ZXhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3fPjO2yf
Aj+prJ+W4mSvFY4dD+RxnCfUbdUJS0toDGXAjlIKRnlL0HtE2V0y5UnajNxko7u1
9JuiZ1ow/lyaen95lwIW7KPn1h5s7234O5flD9mlxgWWacy29DTLkYBlHchQOrEE
NfDJWz2wQW4gc63UPE2fBGEXb62ehQ50IOCZBciSYLYjtFFCT3nFdwR+lvpFo9JA
Veo4hQDjHWhCAwDiKQAcc9QK2QK8urYL3KrlQZGTnIqCdvqZRHPAvtFv5Q5mFNlv
6CHniLbIlWFOBDj7kLHHEo67TIGXCRNuvzS6Pr+iZzpKktdDvWa1vq8q1ijh9R/R
6HbIqxFh/IayYQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:43 2025 by rpki-client