Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
File: j7YTPVwhCdim-bvKpJbb6uNHl1w.mft (raw, json)
Hash identifier: mZGOcOvJWqTNOCFdefGqzmcIMTvZGXKytZDPj537e3I=
Subject key identifier: 4C:3E:5E:9F:80:E7:0B:9C:1F:14:22:81:29:9D:0D:8F:D9:58:4B:89
Authority key identifier: 8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
Certificate issuer: /CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Certificate serial: 0194BCAA0B406CC427C6BD069D4592F40095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 14:00:48 +0000
Manifest this update: Fri 31 Jan 2025 14:00:48 +0000
Manifest next update: Sat 01 Feb 2025 14:00:48 +0000
Files and hashes: 1: Y7eKY9L9f9B1QlpP7Px14Uk4KN0.roa (hash: Ti8fjG26nfzvszXNq8D1c3nuNhyRNxvinzWzoAh4fqQ=)
2: j7YTPVwhCdim-bvKpJbb6uNHl1w.crl (hash: WM18grb+Ss6GeOffJKEFT0g3o/MHiiw0Y/BgNfaj63k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0b:40:6c:c4:27:c6:bd:06:9d:45:92:f4:00:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Validity
Not Before: Jan 31 14:00:48 2025 GMT
Not After : Feb 1 14:00:48 2025 GMT
Subject: CN=4c3e5e9f80e70b9c1f142281299d0d8fd9584b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4c:ba:3e:6c:e2:82:a1:36:f2:20:0d:bb:49:
6e:65:e0:79:96:b2:cf:74:82:39:fd:65:db:3b:5a:
9d:b7:18:c1:f4:2f:3f:94:9d:aa:f1:a8:ea:e5:d8:
c8:57:b4:c0:c0:0f:ec:37:c9:d2:f7:3e:24:0f:f3:
72:55:bb:9c:4d:aa:b6:cc:a8:75:6c:bf:74:2b:72:
6e:eb:fa:f0:d1:e6:87:61:14:bd:ee:fb:2f:9f:6a:
e5:67:dc:a9:55:48:c0:10:eb:21:7b:c3:77:f6:aa:
31:05:72:90:3a:27:dc:16:33:67:66:1a:e6:f1:0b:
90:f3:a7:1d:0c:34:cb:1d:b3:c9:14:1b:14:fd:f4:
79:a8:aa:f1:ee:67:63:9a:88:a7:0b:25:25:bf:ba:
ed:f4:e6:27:c6:24:c9:88:a5:cb:f6:7e:ea:f3:10:
e2:0d:52:a2:57:63:72:19:68:7c:d5:26:a1:cd:81:
dd:19:37:de:a9:54:a3:29:6f:17:20:a0:37:84:6a:
67:ca:8c:d0:93:69:8b:e3:47:53:14:dc:07:d0:da:
49:37:f0:ec:b9:79:1a:4e:76:eb:44:8d:fd:59:c2:
34:e7:b4:7b:e6:a6:4f:de:7e:75:e2:d3:e1:d5:ea:
8e:00:e0:5b:60:3e:c3:f0:a0:bb:4c:8c:ad:cc:a3:
aa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3E:5E:9F:80:E7:0B:9C:1F:14:22:81:29:9D:0D:8F:D9:58:4B:89
X509v3 Authority Key Identifier:
keyid:8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:99:66:97:72:5b:39:d5:09:21:91:b5:af:61:23:74:c0:e8:
5b:14:10:2b:32:3c:c3:74:fb:89:4f:ee:40:8c:43:4d:8a:c4:
8c:73:81:84:d1:18:04:a8:27:e9:3d:15:c4:b0:a8:eb:a0:0e:
a9:87:61:6d:51:cf:dd:48:54:53:b5:f8:ad:10:b2:e6:4e:05:
c9:a8:77:de:66:03:a4:8a:8d:14:34:ee:44:04:d6:33:9d:08:
26:87:1f:0b:a5:19:03:e9:3e:6e:a8:7a:d2:57:6e:72:35:1a:
3b:2d:22:3a:5b:3a:ad:22:fb:4f:c0:f6:63:7a:0f:11:33:6a:
52:9c:4e:0e:ce:d6:cf:57:70:74:e4:52:81:9e:7b:36:ca:16:
9f:01:9c:f2:f9:a1:fc:7b:43:99:43:b2:fc:89:c4:a8:47:b5:
25:1e:26:24:7a:c4:ac:31:88:8e:61:e0:c5:3c:d4:96:cd:ee:
34:75:4d:ea:28:ea:a0:dd:cd:4a:fc:15:de:52:cd:f4:fb:68:
72:39:f2:6a:64:5f:e8:05:4d:07:63:da:3c:13:53:8e:6e:19:
09:58:67:d5:14:81:98:58:ef:df:b8:88:9d:59:31:36:c5:1f:
fb:fa:c6:81:b7:d1:b4:67:75:58:1c:b7:c9:ac:38:61:2d:18:
df:65:62:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qgtAbMQnxr0GnUWS9ACVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYjYxMzNkNWMyMTA5ZDhhNmY5YmJjYWE0OTZkYmVhZTM0
Nzk3NWMwHhcNMjUwMTMxMTQwMDQ4WhcNMjUwMjAxMTQwMDQ4WjAzMTEwLwYDVQQD
Eyg0YzNlNWU5ZjgwZTcwYjljMWYxNDIyODEyOTlkMGQ4ZmQ5NTg0Yjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0y6PmzigqE28iANu0luZeB5lrLP
dII5/WXbO1qdtxjB9C8/lJ2q8ajq5djIV7TAwA/sN8nS9z4kD/NyVbucTaq2zKh1
bL90K3Ju6/rw0eaHYRS97vsvn2rlZ9ypVUjAEOshe8N39qoxBXKQOifcFjNnZhrm
8QuQ86cdDDTLHbPJFBsU/fR5qKrx7mdjmoinCyUlv7rt9OYnxiTJiKXL9n7q8xDi
DVKiV2NyGWh81SahzYHdGTfeqVSjKW8XIKA3hGpnyozQk2mL40dTFNwH0NpJN/Ds
uXkaTnbrRI39WcI057R75qZP3n514tPh1eqOAOBbYD7D8KC7TIytzKOqxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEw+Xp+A5wucHxQigSmdDY/ZWEuJMB8GA1UdIwQY
MBaAFI+2Ez1cIQnYpvm7yqSW2+rjR5dcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajdZVFBWd2hDZGltLWJ2S3BKYmI2dU5IbDF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hZGU0MTAtNGU4Yy00MTJlLTk3NTQt
NDUxYTlhZTRjZTUxLzEvajdZVFBWd2hDZGltLWJ2S3BKYmI2dU5IbDF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9hZGU0MTAtNGU4Yy00MTJlLTk3NTQtNDUxYTlhZTRjZTUx
LzEvajdZVFBWd2hDZGltLWJ2S3BKYmI2dU5IbDF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZlml3Jb
OdUJIZG1r2EjdMDoWxQQKzI8w3T7iU/uQIxDTYrEjHOBhNEYBKgn6T0VxLCo66AO
qYdhbVHP3UhUU7X4rRCy5k4Fyah33mYDpIqNFDTuRATWM50IJocfC6UZA+k+bqh6
0lducjUaOy0iOls6rSL7T8D2Y3oPETNqUpxODs7Wz1dwdORSgZ57NsoWnwGc8vmh
/HtDmUOy/InEqEe1JR4mJHrErDGIjmHgxTzUls3uNHVN6ijqoN3NSvwV3lLN9Pto
cjnyamRf6AVNB2PaPBNTjm4ZCVhn1RSBmFjv37iInVkxNsUf+/rGgbfRtGd1WBy3
yaw4YS0Y32ViOw==
-----END CERTIFICATE-----
Generated at Thu May 1 05:52:36 2025 by rpki-client