Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
File: CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft (raw, json)
Hash identifier: UvPEgbWG9xPqddAhMVZQ4tsrwshdtIw6D6ldGMgwnYA=
Subject key identifier: 01:71:01:BE:1C:C9:48:09:FE:BD:92:34:DD:08:38:05:1F:66:A7:3C
Authority key identifier: 09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B
Certificate issuer: /CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
Certificate serial: 0194BBCDCFE2E66A0B6BA8FC2038019F7CE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
Manifest number: 10A0
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl (hash: fR/IowxcdQ1SxW+Y1CMgr6HWafJQlYVNYsYcJn2WOmo=)
2: jusxHEEIsrLZpxHa35fyPkAqK7s.roa (hash: ZFDdzLmEvnMxmWT9XlxYhopgvJv0aQjuJRSBRhLyOC0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cf:e2:e6:6a:0b:6b:a8:fc:20:38:01:9f:7c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=017101be1cc94809febd9234dd0838051f66a73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b4:e6:31:d2:36:c7:a0:eb:8f:b2:20:b4:9c:
96:5b:b6:75:b6:b4:53:76:4b:e3:10:cf:be:e8:97:
d3:4b:bc:7a:f5:c7:b2:1f:a4:ae:bf:f9:31:70:79:
23:fe:52:94:9e:2e:f1:f3:7d:8f:e1:23:2d:7d:c1:
23:ae:fd:12:7a:ec:1e:7f:0d:4c:84:af:6c:1b:bb:
47:8f:e2:3a:3f:50:f4:44:72:5a:6a:e7:72:e4:b8:
19:3f:ba:db:a8:ba:34:f4:c2:d0:ce:91:82:de:37:
d2:d9:73:23:96:4f:ba:73:ea:f1:13:15:5f:90:c7:
d3:57:dd:a5:ee:f9:46:6e:d2:d6:4f:d4:8a:fa:2d:
8d:7a:6d:10:cf:09:08:00:3d:e8:dd:ce:68:7d:be:
d5:b3:2c:df:e8:e0:9c:8b:d0:29:a3:62:d7:cd:f1:
dd:c3:18:08:5e:74:32:0e:d0:c0:9b:5c:ad:61:2b:
43:b9:d7:38:2f:47:f4:1b:3e:f3:16:88:5f:c8:fb:
f6:20:73:d6:99:ad:36:42:ce:d9:34:3b:36:5e:fa:
f7:27:bd:cc:27:5c:32:7a:e4:1a:a2:04:f6:ac:56:
bf:89:ad:5e:6e:62:97:63:c4:7c:0f:1c:10:44:76:
ab:7e:4c:7c:29:b2:2f:dc:4d:c7:a7:9b:5d:f1:3b:
be:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:71:01:BE:1C:C9:48:09:FE:BD:92:34:DD:08:38:05:1F:66:A7:3C
X509v3 Authority Key Identifier:
keyid:09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e1:63:03:83:ea:5f:bb:54:af:8b:64:bf:52:df:f2:5e:a1:
3a:ee:01:0b:9b:e8:bc:d1:f7:09:63:2b:a7:d7:a9:4f:99:f4:
65:11:80:20:42:7c:df:23:12:4e:82:50:5f:72:9c:8e:fd:cf:
86:be:37:5a:9d:89:ba:04:f1:21:a0:67:95:f8:23:93:71:32:
64:9b:ea:d9:92:28:69:f8:8c:8c:88:07:98:73:e5:ac:93:86:
78:b2:9c:c8:f3:d3:e9:c7:89:00:cb:d6:b6:b4:b3:9b:f3:b6:
83:ff:34:46:8d:37:72:12:db:35:a9:70:14:23:cc:1a:77:95:
49:0a:13:3d:9f:4c:7b:8a:20:f9:0d:1a:8a:7c:29:f1:60:d5:
ed:45:bb:93:9f:37:5c:b7:41:38:aa:e3:15:08:8a:dc:90:46:
ac:0b:3b:2d:a5:86:23:f4:f6:20:1f:6f:8a:04:40:c8:11:e3:
84:87:cd:53:e4:78:5f:d7:57:f4:20:95:68:47:06:d5:03:99:
cf:b5:76:9c:4c:27:4c:b2:27:7f:07:c9:6a:cd:89:db:20:ab:
8e:a2:93:36:af:6c:f6:5c:33:c0:e6:ff:64:4f:73:83:71:b5:
b0:2b:bf:20:2a:4b:f1:e7:d7:a0:f6:b6:ae:09:b3:fe:5a:7e:
3f:10:07:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zc/i5moLa6j8IDgBn3zpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZTRhOGQ2NzA2ZDlkMGY5YzEwOTFjYTY5OTUxZjRhYmQ1
OWQ0MmIwHhcNMjUwMTMxMTAwMDE0WhcNMjUwMjAxMTAwMDE0WjAzMTEwLwYDVQQD
EygwMTcxMDFiZTFjYzk0ODA5ZmViZDkyMzRkZDA4MzgwNTFmNjZhNzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrTmMdI2x6Drj7IgtJyWW7Z1trRT
dkvjEM++6JfTS7x69ceyH6Suv/kxcHkj/lKUni7x832P4SMtfcEjrv0Seuwefw1M
hK9sG7tHj+I6P1D0RHJaaudy5LgZP7rbqLo09MLQzpGC3jfS2XMjlk+6c+rxExVf
kMfTV92l7vlGbtLWT9SK+i2Nem0QzwkIAD3o3c5ofb7Vsyzf6OCci9Apo2LXzfHd
wxgIXnQyDtDAm1ytYStDudc4L0f0Gz7zFohfyPv2IHPWma02Qs7ZNDs2Xvr3J73M
J1wyeuQaogT2rFa/ia1ebmKXY8R8DxwQRHarfkx8KbIv3E3Hp5td8Tu+EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFxAb4cyUgJ/r2SNN0IOAUfZqc8MB8GA1UdIwQY
MBaAFAnkqNZwbZ0PnBCRymmVH0q9WdQrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2VTbzFuQnRuUS1jRUpIS2FaVWZTcjFaMUNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80N2ViN2ItYzNiYS00NzhhLTgxNzgt
NDA0ZDMxMjgwZTYxLzEvQ2VTbzFuQnRuUS1jRUpIS2FaVWZTcjFaMUNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80N2ViN2ItYzNiYS00NzhhLTgxNzgtNDA0ZDMxMjgwZTYx
LzEvQ2VTbzFuQnRuUS1jRUpIS2FaVWZTcjFaMUNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVeFjA4Pq
X7tUr4tkv1Lf8l6hOu4BC5vovNH3CWMrp9epT5n0ZRGAIEJ83yMSToJQX3Kcjv3P
hr43Wp2JugTxIaBnlfgjk3EyZJvq2ZIoafiMjIgHmHPlrJOGeLKcyPPT6ceJAMvW
trSzm/O2g/80Ro03chLbNalwFCPMGneVSQoTPZ9Me4og+Q0ainwp8WDV7UW7k583
XLdBOKrjFQiK3JBGrAs7LaWGI/T2IB9vigRAyBHjhIfNU+R4X9dX9CCVaEcG1QOZ
z7V2nEwnTLInfwfJas2J2yCrjqKTNq9s9lwzwOb/ZE9zg3G1sCu/ICpL8efXoPa2
rgmz/lp+PxAHQA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:52 2025 by rpki-client