Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
File: 0ffNDsTDvFTFlDEwfuw27wOCdzM.mft (raw, json)
Hash identifier: XcgJTQo8mUxIdYm4xfkuM4O8gEndkiyux2mnmdoRSwU=
Subject key identifier: 2D:3B:6D:56:EE:4D:5F:ED:C2:46:72:DE:FB:B3:AE:26:35:26:90:D0
Authority key identifier: D1:F7:CD:0E:C4:C3:BC:54:C5:94:31:30:7E:EC:36:EF:03:82:77:33
Certificate issuer: /CN=d1f7cd0ec4c3bc54c59431307eec36ef03827733
Certificate serial: 0194BC3C409C01FCA069DA8703FFF21CCD17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: 0ffNDsTDvFTFlDEwfuw27wOCdzM.crl (hash: CXNddox4JZLVSQr3vnvCMGfoYhF2sM/OS3yXhZQL4EE=)
2: On0cxXdpQvZ_jJI1Rkh3ZfuLUxc.roa (hash: 9kDdHzwM7pfMm0bFoQEb02mFtUGZEAgcsF0RvK2rnzM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:40:9c:01:fc:a0:69:da:87:03:ff:f2:1c:cd:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f7cd0ec4c3bc54c59431307eec36ef03827733
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=2d3b6d56ee4d5fedc24672defbb3ae26352690d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:22:c3:ba:8e:f7:cc:6d:df:85:fd:57:1e:38:
77:29:4f:6e:ab:6d:91:66:5a:2c:e5:ad:82:28:79:
b6:63:bb:70:5a:3c:64:33:d6:a7:39:03:53:75:ea:
4d:b9:51:df:b9:13:10:d4:a1:7d:d6:b4:8e:23:a1:
2a:5b:0d:9f:e0:f1:e1:2c:c8:0f:9b:6f:ed:d9:3b:
35:e3:e1:8c:22:79:c2:f0:67:ca:d4:ea:e9:58:44:
40:1f:13:4d:43:d4:3a:67:d9:35:e7:9d:3f:86:40:
69:01:b3:02:2c:2d:f5:27:ff:f4:9b:2b:02:38:9a:
16:3b:42:b7:6e:34:f3:bd:49:dd:13:73:ee:73:c9:
93:69:d9:00:83:ec:9e:03:bc:d4:e1:1f:cc:be:61:
a5:63:22:e1:82:41:14:0c:be:e4:92:9f:4d:96:a0:
5e:e9:5b:2f:1e:75:89:c8:b1:d0:99:1d:b5:d0:d8:
30:28:67:06:c0:e5:c9:1d:2a:b2:ba:02:b9:6a:07:
cb:1f:59:87:b6:bc:02:a8:47:f5:c3:54:39:eb:76:
57:45:a2:bd:b0:63:9f:98:19:e8:a3:98:ce:b1:06:
5b:d3:da:ab:bf:68:6b:28:77:55:6a:10:8b:26:d9:
26:70:14:29:ca:8c:c7:41:0f:05:e5:94:ad:b4:64:
ea:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3B:6D:56:EE:4D:5F:ED:C2:46:72:DE:FB:B3:AE:26:35:26:90:D0
X509v3 Authority Key Identifier:
keyid:D1:F7:CD:0E:C4:C3:BC:54:C5:94:31:30:7E:EC:36:EF:03:82:77:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:10:80:3a:24:b9:a4:f7:3d:3a:97:29:4a:6b:1b:dd:39:60:
c4:77:f1:b0:78:4c:b8:26:3b:96:dc:0a:5f:71:e6:ef:81:3c:
0f:59:18:60:e3:1f:12:ca:b5:3a:e7:c8:f2:f2:52:66:4c:b9:
7b:12:d1:32:f0:3a:22:76:6c:50:e1:4b:a6:48:02:fc:bd:33:
07:3d:45:29:45:f4:88:ab:1e:20:b5:12:39:a7:06:d4:58:68:
a9:a7:1d:35:c6:1c:b7:b2:8d:45:4e:0c:38:08:7d:69:1a:53:
2e:6f:b1:72:66:7c:f1:30:5f:7a:79:73:4a:aa:d8:30:0e:45:
38:55:f7:bd:51:31:04:40:75:51:b4:2b:bf:8b:64:e0:30:00:
d0:fe:d7:74:54:e5:ec:f0:7c:66:5d:90:9a:5d:56:fb:b2:26:
94:c3:5c:b1:24:01:55:37:68:5f:91:17:78:36:db:02:5b:30:
4e:55:99:42:dd:c7:3b:5d:25:a1:b6:75:b3:e7:d5:fc:c3:53:
02:01:2a:85:d0:00:59:d2:4d:66:90:bd:b5:47:b1:75:4a:a9:
e6:c0:fe:22:02:26:2d:44:22:2d:28:cd:96:4e:70:60:ad:4a:
68:d2:c9:5c:85:c1:1e:cd:2b:14:fe:96:f5:2e:3a:08:d4:11:
bb:c4:69:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PECcAfygadqHA//yHM0XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZjdjZDBlYzRjM2JjNTRjNTk0MzEzMDdlZWMzNmVmMDM4
Mjc3MzMwHhcNMjUwMTMxMTIwMDUyWhcNMjUwMjAxMTIwMDUyWjAzMTEwLwYDVQQD
EygyZDNiNmQ1NmVlNGQ1ZmVkYzI0NjcyZGVmYmIzYWUyNjM1MjY5MGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSLDuo73zG3fhf1XHjh3KU9uq22R
Zlos5a2CKHm2Y7twWjxkM9anOQNTdepNuVHfuRMQ1KF91rSOI6EqWw2f4PHhLMgP
m2/t2Ts14+GMInnC8GfK1OrpWERAHxNNQ9Q6Z9k1550/hkBpAbMCLC31J//0mysC
OJoWO0K3bjTzvUndE3Puc8mTadkAg+yeA7zU4R/MvmGlYyLhgkEUDL7kkp9NlqBe
6VsvHnWJyLHQmR210NgwKGcGwOXJHSqyugK5agfLH1mHtrwCqEf1w1Q563ZXRaK9
sGOfmBnoo5jOsQZb09qrv2hrKHdVahCLJtkmcBQpyozHQQ8F5ZSttGTqSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC07bVbuTV/twkZy3vuzriY1JpDQMB8GA1UdIwQY
MBaAFNH3zQ7Ew7xUxZQxMH7sNu8DgnczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGZmTkRzVER2RlRGbERFd2Z1dzI3d09DZHpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wMjRkNDctNDdiMi00MGI1LWEyYjgt
OWNiNWQ4OGZkZDM5LzEvMGZmTkRzVER2RlRGbERFd2Z1dzI3d09DZHpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8wMjRkNDctNDdiMi00MGI1LWEyYjgtOWNiNWQ4OGZkZDM5
LzEvMGZmTkRzVER2RlRGbERFd2Z1dzI3d09DZHpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxCAOiS5
pPc9OpcpSmsb3TlgxHfxsHhMuCY7ltwKX3Hm74E8D1kYYOMfEsq1OufI8vJSZky5
exLRMvA6InZsUOFLpkgC/L0zBz1FKUX0iKseILUSOacG1FhoqacdNcYct7KNRU4M
OAh9aRpTLm+xcmZ88TBfenlzSqrYMA5FOFX3vVExBEB1UbQrv4tk4DAA0P7XdFTl
7PB8Zl2Qml1W+7ImlMNcsSQBVTdoX5EXeDbbAlswTlWZQt3HO10lobZ1s+fV/MNT
AgEqhdAAWdJNZpC9tUexdUqp5sD+IgImLUQiLSjNlk5wYK1KaNLJXIXBHs0rFP6W
9S46CNQRu8RpBg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:18 2025 by rpki-client