Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
File: Co59_NIAyF6zysZvhZtxEKuZsQo.mft (raw, json)
Hash identifier: IA3G1xgSGCV1o1Htlg9MqqfLt8T29uRw+EOp6frhUy0=
Subject key identifier: 7B:E5:5F:74:75:FE:55:D1:C9:FB:0D:5B:A7:25:C0:A3:9F:E2:D1:77
Authority key identifier: 0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A
Certificate issuer: /CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a
Certificate serial: 0194BD4E8703E2C761F56B60AC60E65C1616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
Manifest number: 010E
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: Co59_NIAyF6zysZvhZtxEKuZsQo.crl (hash: 3m3vc7QuQMaxRjYTnr1MS5fJDZZKiD341mod3O99jmw=)
2: ZnFCz6rKLcZRx4oWRqGX1WP5row.roa (hash: Fg68tw9/QoQIkz8jU0UgngyMGnhnkYCZ0zRagw9xxDc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:87:03:e2:c7:61:f5:6b:60:ac:60:e6:5c:16:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=7be55f7475fe55d1c9fb0d5ba725c0a39fe2d177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2f:56:bf:59:1a:e8:33:db:cf:28:0c:76:54:
9d:7c:44:fc:d3:95:12:5c:56:00:cb:ef:00:cf:00:
6d:2b:34:7a:36:af:d9:93:92:ab:c9:28:14:0b:5d:
fc:fa:77:d6:6a:5b:ba:6a:c2:96:c2:46:61:86:bc:
01:e0:96:e2:24:3f:53:16:ad:77:54:1c:c8:31:da:
41:6a:2b:e7:77:f4:7a:be:e2:44:9b:36:54:95:d6:
e2:05:57:b4:5c:aa:88:f1:0f:89:18:2f:bc:eb:31:
a5:77:a1:ac:fb:9d:0c:0d:2e:a5:91:38:93:f5:a0:
d8:69:2c:9f:d2:8e:2f:a8:cd:1e:28:b6:99:b7:fe:
96:b9:b3:74:52:89:83:f7:b2:45:73:97:74:c1:10:
16:2c:fc:d0:2a:68:7b:98:48:93:53:4e:c1:03:fa:
6e:8d:78:9e:a7:67:25:f9:eb:5e:28:af:a4:dc:d7:
ed:f8:c4:99:ae:28:2b:74:dd:14:66:05:7d:67:1a:
9f:70:4a:68:35:f9:e3:92:d6:9a:de:9a:41:87:dc:
14:cd:91:59:8e:04:a4:0e:50:fe:92:ba:e8:a5:40:
0b:ac:c5:c6:af:e8:0a:a3:5a:79:81:b0:82:f6:64:
08:7c:a1:1d:b0:43:9c:d9:2e:4c:1e:5e:b8:53:20:
57:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E5:5F:74:75:FE:55:D1:C9:FB:0D:5B:A7:25:C0:A3:9F:E2:D1:77
X509v3 Authority Key Identifier:
keyid:0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f4:8e:7c:cc:78:45:a1:cb:8f:53:aa:11:3d:f6:8d:57:30:
91:ef:eb:16:51:ca:c7:36:cb:01:65:b3:86:52:68:dd:a3:48:
1b:23:42:91:08:2f:84:14:e6:46:12:01:9c:e1:5f:21:09:fc:
8c:86:09:15:b9:8f:93:16:0d:12:0b:75:2d:36:8a:d1:0f:7c:
5d:b7:54:8d:2a:5c:fb:3e:0e:21:61:24:06:b4:76:4a:15:3d:
37:2c:9a:b4:6b:63:20:48:dd:30:53:1e:50:e2:9b:30:e6:ba:
cf:c8:2f:e5:77:35:f0:1c:e8:d5:7b:9c:d3:4a:a7:5c:b6:58:
aa:20:b6:b5:d8:a3:a4:ef:d3:86:87:63:47:54:b5:f6:0f:13:
8a:7c:38:57:27:3f:4e:76:7b:d6:00:eb:33:5d:f0:dc:80:f3:
6a:5e:f7:4c:9f:08:0a:a3:2f:38:07:ed:fe:24:12:2d:5f:a2:
15:7a:8e:cf:21:0c:ca:72:f8:0d:f5:a0:74:78:f4:36:a3:30:
88:42:24:2c:06:7f:df:fa:7e:d2:84:92:95:73:df:24:04:7b:
8c:2b:9b:8c:cf:35:95:92:8e:18:1d:19:fc:23:b1:b8:be:86:
84:f5:10:64:92:72:a5:b1:f4:e0:7d:1e:d7:43:a6:cc:00:51:
d0:6b:43:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TocD4sdh9WtgrGDmXBYWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhOGU3ZGZjZDIwMGM4NWViM2NhYzY2Zjg1OWI3MTEwYWI5
OWIxMGEwHhcNMjUwMTMxMTcwMDI3WhcNMjUwMjAxMTcwMDI3WjAzMTEwLwYDVQQD
Eyg3YmU1NWY3NDc1ZmU1NWQxYzlmYjBkNWJhNzI1YzBhMzlmZTJkMTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC9Wv1ka6DPbzygMdlSdfET805US
XFYAy+8AzwBtKzR6Nq/Zk5KrySgUC138+nfWalu6asKWwkZhhrwB4JbiJD9TFq13
VBzIMdpBaivnd/R6vuJEmzZUldbiBVe0XKqI8Q+JGC+86zGld6Gs+50MDS6lkTiT
9aDYaSyf0o4vqM0eKLaZt/6WubN0UomD97JFc5d0wRAWLPzQKmh7mEiTU07BA/pu
jXiep2cl+eteKK+k3Nft+MSZrigrdN0UZgV9ZxqfcEpoNfnjktaa3ppBh9wUzZFZ
jgSkDlD+krropUALrMXGr+gKo1p5gbCC9mQIfKEdsEOc2S5MHl64UyBXiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvlX3R1/lXRyfsNW6clwKOf4tF3MB8GA1UdIwQY
MBaAFAqOffzSAMhes8rGb4WbcRCrmbEKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ281OV9OSUF5RjZ6eXNadmhadHhFS3Vac1FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wZjllZmYtYjYwOC00MWRmLTkxZDQt
YTQ3ZWI5MzI5NTk3LzEvQ281OV9OSUF5RjZ6eXNadmhadHhFS3Vac1FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8wZjllZmYtYjYwOC00MWRmLTkxZDQtYTQ3ZWI5MzI5NTk3
LzEvQ281OV9OSUF5RjZ6eXNadmhadHhFS3Vac1FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEfSOfMx4
RaHLj1OqET32jVcwke/rFlHKxzbLAWWzhlJo3aNIGyNCkQgvhBTmRhIBnOFfIQn8
jIYJFbmPkxYNEgt1LTaK0Q98XbdUjSpc+z4OIWEkBrR2ShU9NyyatGtjIEjdMFMe
UOKbMOa6z8gv5Xc18Bzo1Xuc00qnXLZYqiC2tdijpO/ThodjR1S19g8Tinw4Vyc/
TnZ71gDrM13w3IDzal73TJ8ICqMvOAft/iQSLV+iFXqOzyEMynL4DfWgdHj0NqMw
iEIkLAZ/3/p+0oSSlXPfJAR7jCubjM81lZKOGB0Z/COxuL6GhPUQZJJypbH04H0e
10OmzABR0GtDEg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:06 2025 by rpki-client