Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
File: D5x3odzbju1izTyoClFE3E4kP04.mft (raw, json)
Hash identifier: k9NczYF6AhGK2caWTkE40pLe6Y71NmGH1Js7JXBOtb4=
Subject key identifier: 36:E1:8B:19:14:89:33:D9:9C:BD:0E:42:F7:C0:76:8F:93:1E:03:E2
Authority key identifier: 0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
Certificate issuer: /CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Certificate serial: 0194BC04CAF213709A43D80C0B7BDE7B64DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
Manifest number: 1435
Signing time: Fri 31 Jan 2025 11:00:18 +0000
Manifest this update: Fri 31 Jan 2025 11:00:18 +0000
Manifest next update: Sat 01 Feb 2025 11:00:18 +0000
Files and hashes: 1: D5x3odzbju1izTyoClFE3E4kP04.crl (hash: 9G3AdsulKB9s9bsWqCwoQlzK/ofJkUCspsxn4gWuocU=)
2: EU9ZI9FwGK9Je2LIHv8oyryDbQ0.roa (hash: lg1hblUtV5bfdjAsYpP/FKql2pfxKFHlS2JkI4euny0=)
3: UttiV2rZhXbpiEroK90NOoWzeyo.roa (hash: clJAUfrgzlJXm2cn+fD7HIKwQaoQPkMOMFf6DpqSgo0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ca:f2:13:70:9a:43:d8:0c:0b:7b:de:7b:64:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Validity
Not Before: Jan 31 11:00:18 2025 GMT
Not After : Feb 1 11:00:18 2025 GMT
Subject: CN=36e18b19148933d99cbd0e42f7c0768f931e03e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9f:e3:d0:33:29:97:2f:eb:15:32:31:72:df:
ad:80:b0:f2:57:a7:2a:66:61:60:8a:6c:a8:fb:16:
91:c3:15:8f:7b:3b:01:55:c3:8a:1d:24:c1:2b:a7:
60:b1:12:54:11:2c:04:15:ee:36:61:94:cf:9f:e4:
74:1f:dd:48:e7:3e:c6:b0:c9:7e:9f:8b:ae:a1:89:
c6:28:fb:4a:d7:95:b1:00:c2:c6:d3:3d:bb:cc:ef:
43:9a:f5:05:9a:82:9b:4e:28:36:fc:40:82:2b:53:
ad:23:db:3f:72:27:8d:28:01:ac:a3:27:4e:7c:c8:
1e:d2:f3:be:43:82:1b:8e:d8:aa:3c:a3:39:4f:88:
e4:d2:5b:e4:f2:cb:83:21:c5:41:d5:b1:2a:dd:b2:
36:2a:41:ca:60:fa:7c:d4:7b:93:0b:95:cd:50:6b:
7a:e6:19:c2:23:6a:14:43:1c:95:07:44:bd:75:50:
ba:b6:02:5e:40:a7:59:76:c2:d1:41:4e:b1:b4:43:
f3:8c:54:c5:3c:13:e2:34:02:9f:ba:a8:11:da:07:
90:1b:f0:df:ce:5b:78:7f:80:34:a6:c0:1d:15:96:
f4:a7:b9:1a:0b:2e:91:66:d8:7c:d1:d5:25:af:96:
a1:cf:80:df:ec:5b:03:40:f4:9a:f3:51:1b:a3:ca:
f5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E1:8B:19:14:89:33:D9:9C:BD:0E:42:F7:C0:76:8F:93:1E:03:E2
X509v3 Authority Key Identifier:
keyid:0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:87:7e:b4:fa:ed:6b:f9:bc:f0:b4:77:d2:5c:9f:a7:92:2a:
6b:45:ad:9e:13:06:75:09:ea:bb:43:95:ea:09:c3:b2:87:bd:
0a:7e:04:bd:2f:46:fc:79:3a:74:86:6e:89:d7:0a:78:94:52:
87:80:7c:2d:34:cb:50:b9:cb:10:5b:8d:d3:fe:cd:5c:c8:2b:
a0:c7:e9:e2:a2:ea:5c:29:63:64:c1:6e:e3:70:73:2d:6f:d2:
20:68:00:ef:a0:e1:6e:57:7d:79:b2:ad:c5:a6:01:0a:f5:e1:
a8:80:27:e0:e6:b6:61:c5:58:e2:dd:04:6a:5b:98:08:ae:69:
6a:1d:4d:19:97:0c:0c:6d:d8:c1:9a:6b:c8:b8:c1:9b:fe:b6:
b7:4f:6c:19:87:2d:09:ed:2f:77:2a:a6:9e:5a:0b:e5:85:65:
ef:45:46:03:51:87:7b:ab:cf:56:11:fa:65:c3:2d:70:6d:62:
6d:ef:4e:84:24:e8:17:3f:db:1d:1c:d5:12:24:06:31:41:7a:
d7:fe:f7:0e:6a:ae:f1:e0:63:1e:67:b0:26:46:21:fc:1b:bf:
73:e4:f7:aa:a0:c6:3d:aa:5e:33:6c:21:dc:37:5e:d0:7e:3d:
98:7d:38:e6:6c:b5:02:22:93:46:03:0c:1e:62:51:7e:84:75:
c6:6c:c0:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BMryE3CaQ9gMC3vee2TeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOWM3N2ExZGNkYjhlZWQ2MmNkM2NhODBhNTE0NGRjNGUy
NDNmNGUwHhcNMjUwMTMxMTEwMDE4WhcNMjUwMjAxMTEwMDE4WjAzMTEwLwYDVQQD
EygzNmUxOGIxOTE0ODkzM2Q5OWNiZDBlNDJmN2MwNzY4ZjkzMWUwM2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ/j0DMply/rFTIxct+tgLDyV6cq
ZmFgimyo+xaRwxWPezsBVcOKHSTBK6dgsRJUESwEFe42YZTPn+R0H91I5z7GsMl+
n4uuoYnGKPtK15WxAMLG0z27zO9DmvUFmoKbTig2/ECCK1OtI9s/cieNKAGsoydO
fMge0vO+Q4IbjtiqPKM5T4jk0lvk8suDIcVB1bEq3bI2KkHKYPp81HuTC5XNUGt6
5hnCI2oUQxyVB0S9dVC6tgJeQKdZdsLRQU6xtEPzjFTFPBPiNAKfuqgR2geQG/Df
zlt4f4A0psAdFZb0p7kaCy6RZth80dUlr5ahz4Df7FsDQPSa81Ebo8r1/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbhixkUiTPZnL0OQvfAdo+THgPiMB8GA1UdIwQY
MBaAFA+cd6Hc247tYs08qApRRNxOJD9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85ZDBlMTQtMTEzYi00Y2JhLTgzMDgt
YWNjNTY5NzdiNmY0LzEvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85ZDBlMTQtMTEzYi00Y2JhLTgzMDgtYWNjNTY5NzdiNmY0
LzEvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyYd+tPrt
a/m88LR30lyfp5Iqa0WtnhMGdQnqu0OV6gnDsoe9Cn4EvS9G/Hk6dIZuidcKeJRS
h4B8LTTLULnLEFuN0/7NXMgroMfp4qLqXCljZMFu43BzLW/SIGgA76Dhbld9ebKt
xaYBCvXhqIAn4Oa2YcVY4t0EaluYCK5pah1NGZcMDG3YwZpryLjBm/62t09sGYct
Ce0vdyqmnloL5YVl70VGA1GHe6vPVhH6ZcMtcG1ibe9OhCToFz/bHRzVEiQGMUF6
1/73Dmqu8eBjHmewJkYh/Bu/c+T3qqDGPapeM2wh3Dde0H49mH045my1AiKTRgMM
HmJRfoR1xmzAGg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:23 2025 by rpki-client