Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
File: Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft (raw, json)
Hash identifier: k+0/ONvcaPxPpTBBdLPSKkhS6YA/kClAs1tKApnIJjw=
Subject key identifier: FE:69:9A:2C:49:9C:E1:5B:43:43:04:2E:DA:CE:B2:A9:B4:84:6F:E3
Authority key identifier: 4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
Certificate issuer: /CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Certificate serial: 0194BD17E670E608FC9D465C2FDD3AABDC2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
Manifest number: 0838
Signing time: Fri 31 Jan 2025 16:00:47 +0000
Manifest this update: Fri 31 Jan 2025 16:00:47 +0000
Manifest next update: Sat 01 Feb 2025 16:00:47 +0000
Files and hashes: 1: 63RWpTzYaUMklcl62HBy6xUd3L4.roa (hash: Un1n3GmyQj6VVqYhoRSHcYh85a7qnY1jg5MCSUwKUTc=)
2: Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl (hash: bJ91ahiOkNx8Wj7URRU4RKnlsnyD4FTISChZfDX4h+c=)
3: XoKGaT2Y4cimov2MwIZbMUFcNik.roa (hash: nUamhX6MnewzR6j8dYV1oqge5T4xxq+U39rAZAcBMTU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e6:70:e6:08:fc:9d:46:5c:2f:dd:3a:ab:dc:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Validity
Not Before: Jan 31 16:00:47 2025 GMT
Not After : Feb 1 16:00:47 2025 GMT
Subject: CN=fe699a2c499ce15b4343042edaceb2a9b4846fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:33:d2:da:31:80:e2:44:dd:d7:a4:02:84:14:
bc:af:b3:dd:f2:49:8f:3a:2a:79:aa:b7:be:ce:94:
e8:8e:67:1c:35:f8:62:a1:ca:ca:b6:30:0e:8c:80:
6d:5c:7d:ba:7c:26:39:9d:71:c0:c7:f2:19:cf:2b:
11:5e:c5:ac:22:27:49:ef:a5:e9:cf:aa:4e:31:f6:
5b:53:f6:75:3a:ce:fb:45:05:9c:c1:63:ca:9b:cb:
36:ca:4d:b5:0c:3a:3a:cf:d9:c1:bd:ff:9a:eb:e3:
5c:f5:3e:53:db:60:fa:a4:01:6a:89:c3:95:8d:f8:
57:8e:4c:f6:23:73:8a:e4:85:39:13:18:4a:1a:95:
23:24:ba:fe:90:48:54:e7:a9:1a:9b:87:9b:49:a8:
b2:2b:ce:4b:a3:3f:cc:13:42:37:9e:43:05:45:8d:
fd:c9:5a:c1:ec:0f:8d:6b:a9:89:cf:2d:54:51:f4:
26:c1:02:75:4e:6a:b3:16:6e:ee:cc:35:6e:28:1c:
a3:9e:18:b6:b2:6f:55:e6:6a:c6:43:b0:c0:6e:50:
57:f0:af:4f:c4:89:c9:bb:97:8a:a9:91:23:51:44:
e1:c0:05:9e:18:fc:50:2a:50:02:8b:5a:5a:a1:6b:
3a:27:45:9b:e7:b3:8f:2a:8f:d6:79:20:ac:81:16:
1b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:69:9A:2C:49:9C:E1:5B:43:43:04:2E:DA:CE:B2:A9:B4:84:6F:E3
X509v3 Authority Key Identifier:
keyid:4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ec:f8:18:1f:b1:97:8f:0c:f2:39:7a:e7:c1:a0:2b:b3:03:
32:4b:d5:db:ed:44:51:2a:cf:95:50:5b:a3:90:da:5c:3b:42:
9a:58:1f:32:b7:7f:a3:ad:3b:b4:08:f3:2b:42:72:e9:a5:a1:
56:09:b9:34:91:50:11:1f:10:65:2d:10:8a:44:d6:9c:58:09:
38:d0:72:a0:53:d8:0b:c3:6d:24:b4:67:be:6d:05:a7:f1:3d:
ce:ce:e8:21:8f:95:d1:ad:de:7a:d7:b3:f7:9c:a3:0c:ac:28:
59:2e:2a:ea:35:99:27:75:41:c0:76:2f:cc:d7:b4:19:0a:ad:
17:88:2d:89:60:2b:6b:52:d4:12:31:46:60:4d:2d:34:d0:10:
73:70:f7:e9:35:66:cf:30:38:31:38:2a:5a:6e:2d:5b:8f:db:
92:8a:7b:44:00:0a:a1:46:9c:47:10:1e:ff:d3:b1:95:95:fe:
e8:7a:57:b9:32:c1:aa:3f:69:e4:6d:95:3b:a4:11:37:ac:1d:
32:27:e5:8a:79:55:50:9c:49:39:48:39:b1:4c:74:b7:ae:70:
7e:ea:ce:16:7f:22:6b:e7:4d:d3:19:1a:84:cd:17:b6:b5:84:
6d:f0:fe:e4:55:e1:95:b5:9e:45:4f:07:a3:5e:fd:92:84:1b:
64:1c:68:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F+Zw5gj8nUZcL906q9wqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhOTdiYzUwNGYzMDc1ZmI0ZjM5MjM2NDA4YzFjMmQ1NDdi
NDRjMjYwHhcNMjUwMTMxMTYwMDQ3WhcNMjUwMjAxMTYwMDQ3WjAzMTEwLwYDVQQD
EyhmZTY5OWEyYzQ5OWNlMTViNDM0MzA0MmVkYWNlYjJhOWI0ODQ2ZmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9zPS2jGA4kTd16QChBS8r7Pd8kmP
Oip5qre+zpTojmccNfhiocrKtjAOjIBtXH26fCY5nXHAx/IZzysRXsWsIidJ76Xp
z6pOMfZbU/Z1Os77RQWcwWPKm8s2yk21DDo6z9nBvf+a6+Nc9T5T22D6pAFqicOV
jfhXjkz2I3OK5IU5ExhKGpUjJLr+kEhU56kam4ebSaiyK85Loz/ME0I3nkMFRY39
yVrB7A+Na6mJzy1UUfQmwQJ1TmqzFm7uzDVuKByjnhi2sm9V5mrGQ7DAblBX8K9P
xInJu5eKqZEjUUThwAWeGPxQKlACi1paoWs6J0Wb57OPKo/WeSCsgRYblwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5pmixJnOFbQ0MELtrOsqm0hG/jMB8GA1UdIwQY
MBaAFEqXvFBPMHX7TzkjZAjBwtVHtEwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3BlOFVFOHdkZnRQT1NOa0NNSEMxVWUwVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kNDUwMWItMThlYS00MjgwLTg1YTQt
OTMyOWY5MTc5ZmRhLzEvU3BlOFVFOHdkZnRQT1NOa0NNSEMxVWUwVENZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9kNDUwMWItMThlYS00MjgwLTg1YTQtOTMyOWY5MTc5ZmRh
LzEvU3BlOFVFOHdkZnRQT1NOa0NNSEMxVWUwVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOz4GB+x
l48M8jl658GgK7MDMkvV2+1EUSrPlVBbo5DaXDtCmlgfMrd/o607tAjzK0Jy6aWh
Vgm5NJFQER8QZS0QikTWnFgJONByoFPYC8NtJLRnvm0Fp/E9zs7oIY+V0a3eetez
95yjDKwoWS4q6jWZJ3VBwHYvzNe0GQqtF4gtiWAra1LUEjFGYE0tNNAQc3D36TVm
zzA4MTgqWm4tW4/bkop7RAAKoUacRxAe/9OxlZX+6HpXuTLBqj9p5G2VO6QRN6wd
MiflinlVUJxJOUg5sUx0t65wfurOFn8ia+dN0xkahM0XtrWEbfD+5FXhlbWeRU8H
o179koQbZBxo5A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:32 2025 by rpki-client