Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
File: 1pFUReDotwOKo9ekUX6Qtpx_cgo.mft (raw, json)
Hash identifier: W3Vl9y6tIsQSDMPz2Ruk0plB5hVDor/0pMMBtMQ1z1c=
Subject key identifier: 8B:29:C3:A4:A3:C0:44:68:BB:85:15:4C:15:4B:B7:3A:82:57:1D:B0
Authority key identifier: D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
Certificate issuer: /CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Certificate serial: 0194BCE0DDA35CE729AC493ECC9649101FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
Manifest number: 0662
Signing time: Fri 31 Jan 2025 15:00:40 +0000
Manifest this update: Fri 31 Jan 2025 15:00:40 +0000
Manifest next update: Sat 01 Feb 2025 15:00:40 +0000
Files and hashes: 1: 1pFUReDotwOKo9ekUX6Qtpx_cgo.crl (hash: EQo3zun6nrqtZp/hZ+naUqj/FTaXcC9cbZc8gaimqPI=)
2: JAyc3IZZlhE05kFH0gGLLaWCHBs.roa (hash: BPAa+FA4FmMjmalDh9g/vYV5efTsypi7ozqO1bsspFY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:dd:a3:5c:e7:29:ac:49:3e:cc:96:49:10:1f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Validity
Not Before: Jan 31 15:00:40 2025 GMT
Not After : Feb 1 15:00:40 2025 GMT
Subject: CN=8b29c3a4a3c04468bb85154c154bb73a82571db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:16:8e:6e:81:25:de:27:de:5d:75:ad:11:b0:
e2:b9:ad:c8:96:75:6d:59:44:e1:c4:0a:ad:34:3a:
1e:29:8d:72:45:15:b6:5d:2d:5d:2c:54:30:eb:3a:
62:93:67:e6:22:9e:3d:ed:ca:24:bb:ed:9c:7b:56:
c0:1e:31:8e:66:cf:d3:43:29:6d:57:15:4b:66:09:
4e:8f:8c:ac:1f:a2:2e:d1:4b:be:9a:88:03:62:10:
3e:b8:b8:9a:cf:31:f0:42:68:34:31:d5:a2:58:81:
06:e3:a7:8d:a7:d8:a5:ce:a0:57:19:38:d1:f7:fd:
e5:85:8c:8b:11:91:63:12:e3:a9:bb:dc:30:0c:9d:
fb:31:65:25:7a:ae:bf:19:5d:2f:cb:f1:ef:c0:05:
7d:3b:29:24:3b:99:e7:70:3e:68:3d:26:91:2a:cb:
06:d1:d4:80:7c:57:e2:40:1e:c1:5a:6a:67:5f:ad:
e6:9a:83:59:a6:5d:6d:4d:9e:da:6a:7f:7b:cd:d4:
11:9f:57:a7:ab:e3:69:38:fd:53:5a:8d:9c:04:cc:
eb:5b:a3:b3:2a:b8:69:51:d5:09:8a:6b:dc:82:e8:
dd:17:b1:a2:c6:24:3f:84:04:02:66:75:25:fe:19:
ce:b0:eb:3f:d6:76:d2:3b:93:22:52:5c:11:7f:4a:
2b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:29:C3:A4:A3:C0:44:68:BB:85:15:4C:15:4B:B7:3A:82:57:1D:B0
X509v3 Authority Key Identifier:
keyid:D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:ed:ea:b1:ba:f7:8e:1c:5a:2e:aa:24:ac:7d:d1:33:ad:14:
41:91:95:c6:41:1a:22:af:4c:6f:77:ba:b1:27:7d:96:3c:77:
1d:9d:2e:58:64:57:95:6a:aa:49:81:8c:5c:6f:68:6b:cd:85:
34:85:b9:25:79:da:87:a0:b3:b7:61:2a:dd:df:43:be:cd:0c:
c0:9b:4c:55:d4:2e:c6:af:3f:53:16:0c:b7:0d:cc:26:c9:e8:
6d:48:89:a4:4c:c7:de:5d:21:b1:b7:5e:2f:23:3e:36:83:6d:
76:5b:ba:a6:f4:9c:8b:f7:2c:6c:73:9e:b6:60:46:0f:8c:be:
8a:b6:76:90:78:33:86:1a:6c:52:b8:85:3d:88:05:ea:83:64:
23:58:1e:35:2e:8c:f3:4b:c8:d5:aa:d7:51:42:37:e1:d7:d9:
5e:d3:69:98:48:bf:f6:76:ce:79:5d:31:f5:1d:31:3a:98:3c:
5f:88:de:88:f2:7f:31:dc:5e:b8:c8:3f:7f:51:d5:ed:1a:8d:
b0:6d:c7:a7:9f:5b:9b:19:5e:f0:b5:f1:c3:94:55:01:db:ec:
86:11:82:a0:b8:31:5b:3e:a3:78:5c:9b:a2:b8:df:b1:c0:5b:
96:5b:97:9e:4e:7d:dc:94:94:08:02:4b:d2:97:df:15:b9:e1:
c9:03:6c:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84N2jXOcprEk+zJZJEB+oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2OTE1NDQ1ZTBlOGI3MDM4YWEzZDdhNDUxN2U5MGI2OWM3
ZjcyMGEwHhcNMjUwMTMxMTUwMDQwWhcNMjUwMjAxMTUwMDQwWjAzMTEwLwYDVQQD
Eyg4YjI5YzNhNGEzYzA0NDY4YmI4NTE1NGMxNTRiYjczYTgyNTcxZGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhaOboEl3ifeXXWtEbDiua3IlnVt
WUThxAqtNDoeKY1yRRW2XS1dLFQw6zpik2fmIp497coku+2ce1bAHjGOZs/TQylt
VxVLZglOj4ysH6Iu0Uu+mogDYhA+uLiazzHwQmg0MdWiWIEG46eNp9ilzqBXGTjR
9/3lhYyLEZFjEuOpu9wwDJ37MWUleq6/GV0vy/HvwAV9OykkO5nncD5oPSaRKssG
0dSAfFfiQB7BWmpnX63mmoNZpl1tTZ7aan97zdQRn1enq+NpOP1TWo2cBMzrW6Oz
KrhpUdUJimvcgujdF7GixiQ/hAQCZnUl/hnOsOs/1nbSO5MiUlwRf0orRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIspw6SjwERou4UVTBVLtzqCVx2wMB8GA1UdIwQY
MBaAFNaRVEXg6LcDiqPXpFF+kLacf3IKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83YmUyZDktYTE4NS00ODExLWJjOTMt
YzNjNjdmZmZkYWFkLzEvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83YmUyZDktYTE4NS00ODExLWJjOTMtYzNjNjdmZmZkYWFk
LzEvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs+3qsbr3
jhxaLqokrH3RM60UQZGVxkEaIq9Mb3e6sSd9ljx3HZ0uWGRXlWqqSYGMXG9oa82F
NIW5JXnah6Czt2Eq3d9Dvs0MwJtMVdQuxq8/UxYMtw3MJsnobUiJpEzH3l0hsbde
LyM+NoNtdlu6pvSci/csbHOetmBGD4y+irZ2kHgzhhpsUriFPYgF6oNkI1geNS6M
80vI1arXUUI34dfZXtNpmEi/9nbOeV0x9R0xOpg8X4jeiPJ/MdxeuMg/f1HV7RqN
sG3Hp59bmxle8LXxw5RVAdvshhGCoLgxWz6jeFyborjfscBblluXnk593JSUCAJL
0pffFbnhyQNslg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:39:59 2025 by rpki-client