Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
File: _ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft (raw, json)
Hash identifier: Ctlh0I2gc61B7zlv+RDS44Kl0o9mh4+LoMhZw6JPB6E=
Subject key identifier: 9A:0B:D8:D2:9B:1D:41:F0:5B:37:88:A6:D5:BC:09:F9:5F:25:9C:38
Authority key identifier: FD:E7:2D:43:F4:C8:2B:11:46:73:7B:11:61:97:23:18:30:BF:65:D6
Certificate issuer: /CN=fde72d43f4c82b1146737b116197231830bf65d6
Certificate serial: 0194BBCE4F1A650CC8B53D28260CD0FF54A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: NEbsKu77gYfpibY3_TC8dQH80XA.roa (hash: aeVQJbng3C7RHWncwne+AehQ3FDANQdssqp/Bjc9vag=)
2: _ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl (hash: 28yx6L7Qd3/sCPhS+6KwLoMd9lhk6/loIRfMF38h210=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4f:1a:65:0c:c8:b5:3d:28:26:0c:d0:ff:54:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde72d43f4c82b1146737b116197231830bf65d6
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=9a0bd8d29b1d41f05b3788a6d5bc09f95f259c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:be:2a:71:e7:44:4b:5b:a6:f4:61:02:c8:ee:
15:37:da:03:1f:ea:80:6e:35:e5:d4:02:c8:58:15:
62:ca:a4:76:b9:98:62:9c:09:38:e2:7f:12:84:ac:
25:c2:63:c8:2a:95:a3:58:de:6c:1f:0b:28:c0:0c:
cd:79:f7:77:94:28:09:0a:ba:1c:a5:d9:bc:27:a4:
4e:b3:30:87:26:7a:3e:ff:6b:46:74:d0:93:62:3d:
e1:9f:99:92:e8:54:e9:87:f9:78:9f:4c:66:8c:57:
30:3b:77:5a:4a:81:49:95:71:a9:a2:34:71:f3:c1:
9f:13:da:6c:1a:a4:8d:af:f0:1b:e7:f9:95:70:b0:
11:04:43:8a:0f:52:d7:8f:75:95:1a:25:aa:1c:9e:
ae:6a:e7:c5:63:e4:ff:69:ec:f5:89:70:98:cb:bd:
5e:9d:fa:40:1b:7a:90:35:a1:5d:44:12:0c:66:37:
58:05:ad:08:65:e5:b1:11:c1:5e:b2:3e:60:ac:0f:
55:91:18:fa:e4:a4:09:6f:72:55:c7:d4:82:c6:b8:
fd:d0:d9:86:7f:e2:fd:e7:04:7d:63:ff:29:ea:ac:
b2:4e:27:bf:72:93:01:0c:5e:07:7d:17:d2:d0:78:
0a:0d:42:68:82:f7:5c:5f:31:04:56:fb:f4:81:2e:
6f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0B:D8:D2:9B:1D:41:F0:5B:37:88:A6:D5:BC:09:F9:5F:25:9C:38
X509v3 Authority Key Identifier:
keyid:FD:E7:2D:43:F4:C8:2B:11:46:73:7B:11:61:97:23:18:30:BF:65:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ae:92:69:da:87:47:d8:9a:f0:a2:d3:80:d8:78:ce:8f:42:
5b:39:84:19:f1:95:8a:a1:5c:74:ca:e7:b2:49:ea:ad:a3:a0:
d4:83:4b:6a:f1:6e:a0:a6:a8:d2:43:19:79:c7:ca:d7:52:5f:
b8:ac:20:a3:b0:15:1d:0a:f9:e8:31:4f:cd:af:1b:5a:28:ab:
69:9d:69:9a:af:a3:9c:c2:ad:f4:8d:4b:d1:18:a9:7e:ad:cc:
81:86:c1:d2:10:76:35:37:f8:ff:0d:82:43:2e:0a:8d:fc:9e:
77:33:5b:5e:70:6b:ab:4e:b9:fd:19:2a:20:45:10:0f:2a:f4:
0c:f1:31:5a:63:c5:ef:c8:7f:dd:ae:5b:dd:d7:e1:b1:8d:88:
4b:91:5d:36:3c:95:2a:41:f3:1e:7d:d0:79:0f:d2:11:b9:f5:
48:90:45:8c:96:3f:ce:47:12:a4:39:2f:9c:da:59:91:40:eb:
61:8e:11:3c:51:34:9b:72:a9:91:80:c6:44:7a:0a:e1:c5:77:
87:47:9e:d2:1b:16:f3:36:e1:f5:af:a4:67:b1:f6:21:e6:64:
d0:51:09:b9:dd:31:c7:b6:3a:90:20:1a:72:e4:e9:fd:78:9b:
ed:45:75:cd:3f:e6:c4:a2:ca:95:38:bf:cf:d8:af:b5:6e:76:
77:cc:5e:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zk8aZQzItT0oJgzQ/1SnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZTcyZDQzZjRjODJiMTE0NjczN2IxMTYxOTcyMzE4MzBi
ZjY1ZDYwHhcNMjUwMTMxMTAwMDQ3WhcNMjUwMjAxMTAwMDQ3WjAzMTEwLwYDVQQD
Eyg5YTBiZDhkMjliMWQ0MWYwNWIzNzg4YTZkNWJjMDlmOTVmMjU5YzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq74qcedES1um9GECyO4VN9oDH+qA
bjXl1ALIWBViyqR2uZhinAk44n8ShKwlwmPIKpWjWN5sHwsowAzNefd3lCgJCroc
pdm8J6ROszCHJno+/2tGdNCTYj3hn5mS6FTph/l4n0xmjFcwO3daSoFJlXGpojRx
88GfE9psGqSNr/Ab5/mVcLARBEOKD1LXj3WVGiWqHJ6uaufFY+T/aez1iXCYy71e
nfpAG3qQNaFdRBIMZjdYBa0IZeWxEcFesj5grA9VkRj65KQJb3JVx9SCxrj90NmG
f+L95wR9Y/8p6qyyTie/cpMBDF4HfRfS0HgKDUJogvdcXzEEVvv0gS5vHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJoL2NKbHUHwWzeIptW8CflfJZw4MB8GA1UdIwQY
MBaAFP3nLUP0yCsRRnN7EWGXIxgwv2XWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2VjdFFfVElLeEZHYzNzUllaY2pHRENfWmRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9kZWJjMjktNWIyYi00YmFiLWI0Zjct
ZTFjOTE5OGNkZDg4LzEvX2VjdFFfVElLeEZHYzNzUllaY2pHRENfWmRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9kZWJjMjktNWIyYi00YmFiLWI0ZjctZTFjOTE5OGNkZDg4
LzEvX2VjdFFfVElLeEZHYzNzUllaY2pHRENfWmRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm66SadqH
R9ia8KLTgNh4zo9CWzmEGfGViqFcdMrnsknqraOg1INLavFuoKao0kMZecfK11Jf
uKwgo7AVHQr56DFPza8bWiiraZ1pmq+jnMKt9I1L0Ripfq3MgYbB0hB2NTf4/w2C
Qy4KjfyedzNbXnBrq065/RkqIEUQDyr0DPExWmPF78h/3a5b3dfhsY2IS5FdNjyV
KkHzHn3QeQ/SEbn1SJBFjJY/zkcSpDkvnNpZkUDrYY4RPFE0m3KpkYDGRHoK4cV3
h0ee0hsW8zbh9a+kZ7H2IeZk0FEJud0xx7Y6kCAacuTp/Xib7UV1zT/mxKLKlTi/
z9ivtW52d8xexQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:20 2025 by rpki-client