Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
File: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft (raw, json)
Hash identifier: EFCdPopMsje5v+AoNNqZj7GzKkRGFGnt4TPSXjyUMWc=
Subject key identifier: BA:C0:30:BF:B2:87:3A:30:8E:FC:00:9D:06:86:3D:1A:EA:E1:7F:98
Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Certificate issuer: /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Certificate serial: 0194BC3C1BEC38AC8696085530FB712890F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
Manifest number: 0CBF
Signing time: Fri 31 Jan 2025 12:00:43 +0000
Manifest this update: Fri 31 Jan 2025 12:00:43 +0000
Manifest next update: Sat 01 Feb 2025 12:00:43 +0000
Files and hashes: 1: RGqdJBDPEJ4NHCF91EROwq2LZhE.roa (hash: Hlulf3Fm39IzIDGq4R3bEURkvT1bInO2vsqwAXSwJiE=)
2: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl (hash: 4uDeqiZYgL3uUAN7y7ISK+Cw5sJ3GHfmS7uJHLfr5GU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1b:ec:38:ac:86:96:08:55:30:fb:71:28:90:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Validity
Not Before: Jan 31 12:00:43 2025 GMT
Not After : Feb 1 12:00:43 2025 GMT
Subject: CN=bac030bfb2873a308efc009d06863d1aeae17f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:70:42:a7:3f:df:cf:c7:66:97:4a:e8:a2:0d:
24:f5:5e:a2:b6:69:c3:2b:0e:62:c0:8d:01:6d:cf:
6a:f4:16:61:ff:c1:77:1b:59:df:91:84:5a:13:ec:
c2:ec:93:88:70:6e:c5:b7:bc:41:f0:b5:06:95:70:
e5:6d:9e:34:8d:d7:c5:92:db:00:0a:9e:00:20:e1:
14:70:50:52:df:ba:fc:bb:0a:09:8f:25:b6:86:d8:
a5:74:bf:bd:fc:0c:ec:1b:83:fa:8e:0c:ca:f8:8b:
85:95:3d:80:41:71:6f:9c:b7:d2:77:e6:18:d0:48:
d5:9c:30:a3:33:ac:c6:be:67:d4:78:ce:f3:e3:15:
0b:e4:37:18:c9:a5:83:81:a5:2b:61:8f:f0:92:d7:
5d:73:69:d4:22:d1:fe:50:09:90:2b:be:85:9d:90:
d1:e8:de:38:ad:2c:0f:6f:b4:6e:ba:9d:69:30:43:
5c:d6:4b:42:24:37:e6:d6:13:50:2e:ee:d5:10:5c:
7d:c5:44:4b:ce:df:51:b6:2c:f6:59:22:2c:84:10:
9b:97:c9:56:45:dd:fc:a2:fb:28:32:04:53:e9:99:
46:6e:33:91:e9:e7:e5:16:ca:71:2b:fd:71:cf:bb:
4e:51:c7:6a:91:7e:54:56:34:c8:c8:05:d7:1d:69:
34:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C0:30:BF:B2:87:3A:30:8E:FC:00:9D:06:86:3D:1A:EA:E1:7F:98
X509v3 Authority Key Identifier:
keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:68:02:7b:31:4c:c1:c9:f1:94:ef:bb:bc:33:1b:1f:cc:91:
26:79:3b:0a:79:f1:c3:f0:b0:10:41:65:6a:89:46:2c:d6:f0:
36:88:25:b8:ff:3d:bb:21:30:7f:dc:85:a9:19:03:29:5e:eb:
12:b8:76:dc:2a:ce:5b:bc:5a:5d:88:6e:b2:03:b3:a6:ac:3b:
39:6f:50:98:2d:41:25:e8:02:a3:4e:6d:cf:4e:94:96:28:7c:
ba:6d:85:2a:61:5f:49:29:b7:a1:c6:b7:d3:61:79:51:f5:89:
a5:1c:53:20:c6:6c:61:b6:cc:ff:26:f1:9c:c2:13:9c:e0:99:
de:43:9d:4f:cb:a4:a8:aa:23:df:cd:12:da:b1:af:f1:a3:78:
b6:50:6b:df:d6:95:32:b2:bc:1a:71:6c:e9:42:c6:97:3b:92:
c7:b1:3e:65:3f:9c:32:2c:0f:93:35:1d:4b:6c:79:81:15:15:
6b:68:56:9f:75:1f:2f:c2:ac:f6:8e:9d:da:06:36:03:70:19:
0f:4b:6a:90:cc:e1:1b:b7:e7:80:43:13:1b:9d:40:80:6c:6d:
c8:98:dd:76:41:41:e1:8a:58:35:8c:1d:0e:51:0b:4a:c2:20:
40:22:8b:56:31:21:c3:6a:63:03:c0:af:89:6b:99:8d:ac:02:
a9:8c:0b:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PBvsOKyGlghVMPtxKJD4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMzY3YmMxOWYwNjY5OTY0OTBhMjA2Njc0YzhkYThmNWVk
MmNkMGUwHhcNMjUwMTMxMTIwMDQzWhcNMjUwMjAxMTIwMDQzWjAzMTEwLwYDVQQD
EyhiYWMwMzBiZmIyODczYTMwOGVmYzAwOWQwNjg2M2QxYWVhZTE3Zjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHBCpz/fz8dml0roog0k9V6itmnD
Kw5iwI0Bbc9q9BZh/8F3G1nfkYRaE+zC7JOIcG7Ft7xB8LUGlXDlbZ40jdfFktsA
Cp4AIOEUcFBS37r8uwoJjyW2htildL+9/AzsG4P6jgzK+IuFlT2AQXFvnLfSd+YY
0EjVnDCjM6zGvmfUeM7z4xUL5DcYyaWDgaUrYY/wktddc2nUItH+UAmQK76FnZDR
6N44rSwPb7Ruup1pMENc1ktCJDfm1hNQLu7VEFx9xURLzt9Rtiz2WSIshBCbl8lW
Rd38ovsoMgRT6ZlGbjOR6eflFspxK/1xz7tOUcdqkX5UVjTIyAXXHWk0jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrAML+yhzowjvwAnQaGPRrq4X+YMB8GA1UdIwQY
MBaAFK02e8GfBmmWSQogZnTI2o9e0s0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zY2M4NDgtNzg2MS00Y2UxLTg3MGQt
ODRiNjdiNDcwYjA0LzEvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zY2M4NDgtNzg2MS00Y2UxLTg3MGQtODRiNjdiNDcwYjA0
LzEvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAymgCezFM
wcnxlO+7vDMbH8yRJnk7Cnnxw/CwEEFlaolGLNbwNogluP89uyEwf9yFqRkDKV7r
Erh23CrOW7xaXYhusgOzpqw7OW9QmC1BJegCo05tz06Ulih8um2FKmFfSSm3oca3
02F5UfWJpRxTIMZsYbbM/ybxnMITnOCZ3kOdT8ukqKoj380S2rGv8aN4tlBr39aV
MrK8GnFs6ULGlzuSx7E+ZT+cMiwPkzUdS2x5gRUVa2hWn3UfL8Ks9o6d2gY2A3AZ
D0tqkMzhG7fngEMTG51AgGxtyJjddkFB4YpYNYwdDlELSsIgQCKLVjEhw2pjA8Cv
iWuZjawCqYwLLA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:06:21 2025 by rpki-client