Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
File: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft (raw, json)
Hash identifier: B9CzdUSR/rgNvgqhr2olOGF7AhMI2QEHd80VQlGcccE=
Subject key identifier: B6:4C:3D:6A:49:78:C9:0B:8E:EE:E1:A3:A1:D0:A6:E4:BF:6B:67:18
Authority key identifier: E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4
Certificate issuer: /CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
Certificate serial: 0194BC0516D0B508538D6C7F94F19F7068ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
Manifest number: 0E8C
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl (hash: O7DKSQGoFMoI10HEi/I2JU/iTHz3QZOK7S7wzpD1GhA=)
2: lEkuEW8EviMetjsHoH1cfPquirw.roa (hash: a862beX9o/VH2MAJR1fguEQH5T+CIEuXUqOcrtZ0/zw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:16:d0:b5:08:53:8d:6c:7f:94:f1:9f:70:68:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=b64c3d6a4978c90b8eeee1a3a1d0a6e4bf6b6718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:02:b9:da:2f:ad:fd:5b:7c:3c:fa:03:f7:
d0:5b:68:cc:dd:b7:17:5f:fa:66:fb:42:d9:cf:70:
05:6a:e2:cb:a2:f0:07:8f:ee:36:45:2f:02:23:fd:
00:e7:79:e5:5c:6f:04:a8:ad:1f:1d:f6:ff:28:59:
ae:ed:6b:27:66:e6:2f:9e:d5:ce:29:55:b8:c6:62:
62:70:3b:0d:1a:0e:15:df:1e:f4:47:0d:b8:0b:45:
cc:66:9c:af:ba:ce:3f:d0:47:a0:23:ed:69:51:e3:
a3:53:fb:64:1a:a2:c8:85:10:d8:0b:53:ec:b4:34:
d7:42:78:5d:2e:a1:c9:30:22:83:78:1f:cc:cf:8a:
2c:de:6a:61:b7:8e:17:a2:ad:90:37:29:c7:b0:b7:
39:61:a3:4f:03:cf:b0:c2:cb:64:35:b8:95:04:8f:
4c:fb:c7:66:ad:fb:65:e7:3c:29:61:6b:7c:5b:d7:
a8:15:31:15:f4:3b:0d:7f:d9:c1:90:6c:61:5c:4e:
8e:72:7b:02:9c:3f:fc:98:c9:f9:53:90:fe:2d:99:
4c:10:f9:f7:39:8c:ab:3b:ff:48:e2:0e:a1:72:6a:
0e:70:b5:24:be:bb:6d:08:4a:ae:6e:ef:90:56:d4:
6d:fa:ca:d9:be:e5:30:e0:a5:53:ee:f9:2b:a2:a6:
a6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4C:3D:6A:49:78:C9:0B:8E:EE:E1:A3:A1:D0:A6:E4:BF:6B:67:18
X509v3 Authority Key Identifier:
keyid:E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:cf:2e:c1:d3:80:bb:09:05:df:cb:31:d9:aa:fe:3c:00:ac:
cc:5c:f6:6a:86:d8:85:56:fd:8b:e0:28:0f:8c:f7:7d:9f:56:
cc:20:1b:28:d3:47:c5:fa:b3:e5:cc:fd:91:e3:b1:be:0d:23:
7a:2d:cf:e9:cd:b3:1b:72:f1:98:e1:df:cf:cb:db:46:bc:48:
4e:81:aa:05:68:47:ec:c1:18:66:54:4f:41:7b:6d:7f:45:1e:
00:a6:74:0f:12:43:6a:3e:04:5d:0d:60:f0:20:31:46:f1:d2:
e4:bd:84:e2:4f:64:4c:b7:c0:81:75:f3:bc:72:2f:bf:20:b5:
26:e3:22:44:a3:05:7c:12:e6:84:c9:5b:a2:2e:8e:b5:4c:87:
d9:53:c3:81:8f:61:35:2c:80:a0:d9:a5:76:16:54:ee:26:28:
45:e1:27:2d:83:8e:e0:9f:74:32:7e:f5:41:3e:f0:80:3a:ce:
d8:97:04:ba:ce:f3:1e:49:6d:df:73:10:a3:43:44:ea:81:64:
0e:d3:26:da:f3:7c:26:54:81:83:7e:dc:f2:ed:cc:da:8d:24:
e2:52:30:f1:cf:db:0b:c9:1f:c7:9f:e7:ce:f3:12:8d:88:0a:
f8:20:17:6b:c1:6f:40:a0:04:08:7f:f4:e8:54:ec:49:1c:b0:
05:e1:ab:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BRbQtQhTjWx/lPGfcGjtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyM2MwYzNlMDEwNmM5NjVkNDYwY2QwYzNjYmM1ZTIzNGY4
MmE2YjQwHhcNMjUwMTMxMTEwMDM3WhcNMjUwMjAxMTEwMDM3WjAzMTEwLwYDVQQD
EyhiNjRjM2Q2YTQ5NzhjOTBiOGVlZWUxYTNhMWQwYTZlNGJmNmI2NzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2UCudovrf1bfDz6A/fQW2jM3bcX
X/pm+0LZz3AFauLLovAHj+42RS8CI/0A53nlXG8EqK0fHfb/KFmu7WsnZuYvntXO
KVW4xmJicDsNGg4V3x70Rw24C0XMZpyvus4/0EegI+1pUeOjU/tkGqLIhRDYC1Ps
tDTXQnhdLqHJMCKDeB/Mz4os3mpht44Xoq2QNynHsLc5YaNPA8+wwstkNbiVBI9M
+8dmrftl5zwpYWt8W9eoFTEV9DsNf9nBkGxhXE6OcnsCnD/8mMn5U5D+LZlMEPn3
OYyrO/9I4g6hcmoOcLUkvrttCEqubu+QVtRt+srZvuUw4KVT7vkroqamVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZMPWpJeMkLju7ho6HQpuS/a2cYMB8GA1UdIwQY
MBaAFOI8DD4BBsll1GDNDDy8XiNPgqa0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGp3TVBnRUd5V1hVWU0wTVBMeGVJMC1DcHJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82NDdmMjgtNTljZi00ZDY4LWE1MGYt
MTc2NGIwMzYxOGZjLzEvNGp3TVBnRUd5V1hVWU0wTVBMeGVJMC1DcHJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82NDdmMjgtNTljZi00ZDY4LWE1MGYtMTc2NGIwMzYxOGZj
LzEvNGp3TVBnRUd5V1hVWU0wTVBMeGVJMC1DcHJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfs8uwdOA
uwkF38sx2ar+PACszFz2aobYhVb9i+AoD4z3fZ9WzCAbKNNHxfqz5cz9keOxvg0j
ei3P6c2zG3LxmOHfz8vbRrxIToGqBWhH7MEYZlRPQXttf0UeAKZ0DxJDaj4EXQ1g
8CAxRvHS5L2E4k9kTLfAgXXzvHIvvyC1JuMiRKMFfBLmhMlboi6OtUyH2VPDgY9h
NSyAoNmldhZU7iYoReEnLYOO4J90Mn71QT7wgDrO2JcEus7zHklt33MQo0NE6oFk
DtMm2vN8JlSBg37c8u3M2o0k4lIw8c/bC8kfx5/nzvMSjYgK+CAXa8FvQKAECH/0
6FTsSRywBeGrpQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:19 2025 by rpki-client