Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json)
Hash identifier: HAh0D4TNz6jIKse57+AFNS4/ebogqGT0Pb/jRhXckOk=
Subject key identifier: 40:DD:38:56:1C:43:89:AD:54:F6:90:10:A5:5E:F6:7B:4B:58:C1:60
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 0194BC727AF6AE2DBB8A6F918C7579446809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
Manifest number: 088B
Signing time: Fri 31 Jan 2025 13:00:06 +0000
Manifest this update: Fri 31 Jan 2025 13:00:06 +0000
Manifest next update: Sat 01 Feb 2025 13:00:06 +0000
Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: Vm0I0UfQ834W5mQEWJAmI/AoOHr630ZAe4zflV9fmg4=)
2: XrqeZlVPArjVN5_uF6vXdWiqnXY.roa (hash: HzAhZpTtsFcjrQoG9BcE+tsdXOYDnX7JekwCMYp1Fu0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7a:f6:ae:2d:bb:8a:6f:91:8c:75:79:44:68:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: Jan 31 13:00:06 2025 GMT
Not After : Feb 1 13:00:06 2025 GMT
Subject: CN=40dd38561c4389ad54f69010a55ef67b4b58c160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e1:20:ba:8f:81:37:de:52:82:42:91:30:76:
77:c5:98:cd:f8:83:ef:82:3a:e0:64:d6:09:f8:85:
41:03:7c:2f:3e:45:d8:64:08:91:01:5c:67:b0:b2:
2c:5a:db:56:3b:54:b5:32:fa:cf:3e:db:5e:2d:f3:
f2:57:e8:fe:3a:46:87:21:3f:ea:61:e1:73:50:85:
c0:db:50:ab:b5:4d:55:ac:36:b1:88:0b:11:5e:c2:
3b:2d:70:86:2b:e3:91:81:3c:44:be:0e:8c:54:b3:
80:bf:90:85:f3:61:02:f7:d7:b8:d5:35:f5:bd:5b:
73:f1:90:07:92:10:3d:95:bb:c3:8c:db:bc:ea:ce:
5e:19:35:6e:0c:0a:67:a6:65:41:2e:6d:8c:21:a2:
02:68:30:71:e4:cc:eb:07:c5:fa:db:66:06:f4:e1:
f3:37:73:ca:18:1d:a7:dd:ad:42:3a:34:63:1a:9b:
f4:7c:11:61:39:5c:0b:a2:a6:bc:6e:e7:62:0e:ab:
70:65:96:59:e1:4c:f8:3c:31:74:0f:b3:66:f1:42:
77:a9:44:bc:f0:54:4f:30:58:dd:d6:33:cf:6c:af:
8b:70:b5:61:1e:45:91:39:5e:47:9f:0b:d6:39:e9:
95:fe:8f:10:aa:08:f0:7e:28:04:31:ff:70:08:ea:
5b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DD:38:56:1C:43:89:AD:54:F6:90:10:A5:5E:F6:7B:4B:58:C1:60
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:18:bd:59:42:c7:38:b4:41:8d:37:be:4a:44:69:6f:38:6d:
e6:e6:ee:4a:4a:32:94:12:17:69:7e:ab:7c:a1:bc:2f:10:cb:
b6:c2:ca:44:cf:4c:7b:b7:92:84:f0:d9:2c:bc:be:e7:f7:7e:
d6:b3:07:34:22:f7:d1:31:35:42:98:3e:04:7d:4f:f6:7f:ae:
31:3c:c6:c0:f3:4b:41:3d:a7:26:07:dd:da:1b:ef:7b:ac:66:
6b:72:df:24:c5:e5:a7:0d:7a:10:19:b0:25:1f:fd:77:99:38:
d3:e8:31:6e:b9:68:63:a9:ac:4d:bc:a4:5c:ad:e4:b5:41:45:
ba:1e:64:c3:4a:26:5c:1f:cb:ef:23:cb:36:46:d4:c0:7f:fe:
8f:d2:5f:1e:22:90:7b:cd:09:d2:c0:27:3c:9e:31:a6:1b:68:
89:a7:c8:54:47:f8:33:08:da:dc:9d:fa:26:bf:c3:31:8b:ff:
2a:1c:93:84:4c:90:95:8c:85:c1:2b:5f:c6:e2:eb:ea:56:e1:
db:27:99:34:a6:60:0f:e6:1d:3a:89:65:cf:ad:0b:b0:3e:e0:
9b:08:f4:07:2b:ad:25:50:06:f8:d7:12:a9:30:5b:52:af:99:
65:83:71:3d:3d:3e:3c:b6:93:12:8a:7a:fd:62:ce:68:4e:0a:
b5:e5:2f:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cnr2ri27im+RjHV5RGgJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzOGNkOTQ0MDU1MmU3ZGFiOWNkNTYzMWQ0YWI4NzI0NTE1
MzViN2EwHhcNMjUwMTMxMTMwMDA2WhcNMjUwMjAxMTMwMDA2WjAzMTEwLwYDVQQD
Eyg0MGRkMzg1NjFjNDM4OWFkNTRmNjkwMTBhNTVlZjY3YjRiNThjMTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+Eguo+BN95SgkKRMHZ3xZjN+IPv
gjrgZNYJ+IVBA3wvPkXYZAiRAVxnsLIsWttWO1S1MvrPPtteLfPyV+j+OkaHIT/q
YeFzUIXA21CrtU1VrDaxiAsRXsI7LXCGK+ORgTxEvg6MVLOAv5CF82EC99e41TX1
vVtz8ZAHkhA9lbvDjNu86s5eGTVuDApnpmVBLm2MIaICaDBx5MzrB8X622YG9OHz
N3PKGB2n3a1COjRjGpv0fBFhOVwLoqa8budiDqtwZZZZ4Uz4PDF0D7Nm8UJ3qUS8
8FRPMFjd1jPPbK+LcLVhHkWROV5HnwvWOemV/o8QqgjwfigEMf9wCOpbrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDdOFYcQ4mtVPaQEKVe9ntLWMFgMB8GA1UdIwQY
MBaAFNOM2UQFUufauc1WMdSrhyRRU1t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDR6WlJBVlM1OXE1elZZeDFLdUhKRkZUVzNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80YzMxNjAtZGUxMi00OTI5LWE0ODMt
N2M2NWE4NTJmMDkyLzEvMDR6WlJBVlM1OXE1elZZeDFLdUhKRkZUVzNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi80YzMxNjAtZGUxMi00OTI5LWE0ODMtN2M2NWE4NTJmMDky
LzEvMDR6WlJBVlM1OXE1elZZeDFLdUhKRkZUVzNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxi9WULH
OLRBjTe+SkRpbzht5ubuSkoylBIXaX6rfKG8LxDLtsLKRM9Me7eShPDZLLy+5/d+
1rMHNCL30TE1Qpg+BH1P9n+uMTzGwPNLQT2nJgfd2hvve6xma3LfJMXlpw16EBmw
JR/9d5k40+gxbrloY6msTbykXK3ktUFFuh5kw0omXB/L7yPLNkbUwH/+j9JfHiKQ
e80J0sAnPJ4xphtoiafIVEf4Mwja3J36Jr/DMYv/KhyThEyQlYyFwStfxuLr6lbh
2yeZNKZgD+YdOollz60LsD7gmwj0ByutJVAG+NcSqTBbUq+ZZYNxPT0+PLaTEop6
/WLOaE4KteUv+Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:16 2025 by rpki-client