Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
File: 2671wyvqS1TRfiQbXMyvB7wKjuk.mft (raw, json)
Hash identifier: ubD2RNGUAyIRv5yhxv+MQM88KFwK0NB54DfhfsYGO4I=
Subject key identifier: 7F:36:39:D4:72:30:FE:C4:39:5F:FC:FF:32:23:66:25:E4:A9:75:6B
Authority key identifier: DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9
Certificate issuer: /CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9
Certificate serial: 0194BCE0ABCA410904DC9F3A68E5FA22A702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
Manifest number: 0DA4
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: 1K5S67uusJJll8Ab0hq1pL5liKA.roa (hash: StmRzvzcRi3NdAfCMsQ2aiXFRAlDcm1+BCF0RfR6JW8=)
2: 2671wyvqS1TRfiQbXMyvB7wKjuk.crl (hash: jmMgzU9lmhm/q/GmXz5p4C4YR8NPkALjbcEnXY4RF3A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ab:ca:41:09:04:dc:9f:3a:68:e5:fa:22:a7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=7f3639d47230fec4395ffcff32236625e4a9756b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e3:8c:60:04:51:66:1a:04:be:f1:f4:9d:21:
10:18:af:34:b5:64:ef:8d:8a:bb:42:2b:26:e3:da:
6f:03:e5:3d:b4:d4:25:8d:a2:62:aa:66:d0:cb:82:
26:3c:ab:3b:56:77:ca:83:ea:bb:d0:47:5b:ad:5b:
8f:6b:ef:41:a0:06:3e:24:7d:9a:30:bc:cc:6a:f7:
e5:29:2b:59:ba:6a:b4:cc:8b:9b:73:fc:bb:2b:e9:
44:a0:40:6e:48:7b:c6:c8:68:63:f0:8f:4e:18:2e:
78:5b:a8:ca:23:45:c7:04:0b:b6:a9:2a:85:38:0d:
ee:7a:22:c0:07:43:04:ef:19:e2:3c:b7:49:91:db:
25:9a:c6:72:0c:93:a4:1a:19:01:2e:60:ed:58:f4:
6b:25:24:49:67:87:5f:a2:60:c9:0a:bf:e3:ac:e7:
22:fc:02:5c:33:91:59:91:7c:55:ad:d7:42:1c:47:
37:3e:88:8a:ab:71:74:51:a8:b3:10:4a:87:eb:75:
de:49:d5:42:5e:be:69:7a:30:69:a0:9a:5f:a6:0a:
7a:ef:d7:dc:6a:0e:47:1b:a5:51:a1:e9:24:de:98:
21:0e:23:12:90:6e:2a:c2:e3:70:37:29:18:36:56:
be:1a:39:e2:83:72:ff:92:49:20:24:de:3c:ee:c7:
60:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:36:39:D4:72:30:FE:C4:39:5F:FC:FF:32:23:66:25:E4:A9:75:6B
X509v3 Authority Key Identifier:
keyid:DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:61:bd:a1:7b:29:e3:44:22:aa:2e:e1:78:2e:ad:1c:51:4e:
56:cc:91:11:9d:c9:5f:22:d4:02:8b:3f:83:77:f8:20:5b:be:
c6:ba:22:c1:c7:15:83:ab:d9:51:cb:4d:1f:aa:2e:9a:d7:23:
39:59:fe:63:8d:12:4e:ed:2c:b6:bc:6d:7f:96:8c:fd:a1:dc:
9b:e0:51:be:e8:45:1f:e0:0b:60:85:d4:64:fe:77:64:57:a5:
ff:07:46:2c:4a:e7:67:d6:22:81:b3:b6:ce:9b:7f:39:6c:56:
c7:ac:a1:54:27:3a:2a:82:b5:40:17:c8:0e:e7:5f:e7:39:a9:
fd:0d:a5:59:96:f3:1e:dc:d8:c4:8f:3d:a3:12:c8:82:2c:b7:
9e:f2:5b:35:83:04:c1:02:5e:1b:5c:8d:b3:b0:b2:56:24:ea:
df:3a:b0:0f:02:e1:b8:54:ad:1d:eb:49:57:3e:d8:af:88:e6:
80:2a:89:bd:62:f6:07:d9:b4:13:b8:1f:d7:e3:8d:c3:0f:6c:
d0:e1:22:6b:6f:4c:78:95:54:0d:cd:7f:73:88:42:97:5f:d9:
29:a1:b1:d0:3f:65:a6:01:a7:26:4b:f9:20:97:27:4d:6e:9c:
e0:6b:97:54:ab:90:1e:f3:68:f5:5e:e2:db:ec:a5:83:b8:19:
a5:88:c7:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84KvKQQkE3J86aOX6IqcCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYWVmNWMzMmJlYTRiNTRkMTdlMjQxYjVjY2NhZjA3YmMw
YThlZTkwHhcNMjUwMTMxMTUwMDI4WhcNMjUwMjAxMTUwMDI4WjAzMTEwLwYDVQQD
Eyg3ZjM2MzlkNDcyMzBmZWM0Mzk1ZmZjZmYzMjIzNjYyNWU0YTk3NTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuOMYARRZhoEvvH0nSEQGK80tWTv
jYq7Qism49pvA+U9tNQljaJiqmbQy4ImPKs7VnfKg+q70EdbrVuPa+9BoAY+JH2a
MLzMavflKStZumq0zIubc/y7K+lEoEBuSHvGyGhj8I9OGC54W6jKI0XHBAu2qSqF
OA3ueiLAB0ME7xniPLdJkdslmsZyDJOkGhkBLmDtWPRrJSRJZ4dfomDJCr/jrOci
/AJcM5FZkXxVrddCHEc3PoiKq3F0UaizEEqH63XeSdVCXr5pejBpoJpfpgp679fc
ag5HG6VRoekk3pghDiMSkG4qwuNwNykYNla+Gjnig3L/kkkgJN487sdgEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH82OdRyMP7EOV/8/zIjZiXkqXVrMB8GA1UdIwQY
MBaAFNuu9cMr6ktU0X4kG1zMrwe8Co7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9kZWU2NmYtNDVjYy00Y2I0LTlmYmIt
NjQyY2U2NzRmOTc0LzEvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9kZWU2NmYtNDVjYy00Y2I0LTlmYmItNjQyY2U2NzRmOTc0
LzEvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPWG9oXsp
40Qiqi7heC6tHFFOVsyREZ3JXyLUAos/g3f4IFu+xroiwccVg6vZUctNH6oumtcj
OVn+Y40STu0strxtf5aM/aHcm+BRvuhFH+ALYIXUZP53ZFel/wdGLErnZ9YigbO2
zpt/OWxWx6yhVCc6KoK1QBfIDudf5zmp/Q2lWZbzHtzYxI89oxLIgiy3nvJbNYME
wQJeG1yNs7CyViTq3zqwDwLhuFStHetJVz7Yr4jmgCqJvWL2B9m0E7gf1+ONww9s
0OEia29MeJVUDc1/c4hCl1/ZKaGx0D9lpgGnJkv5IJcnTW6c4GuXVKuQHvNo9V7i
2+ylg7gZpYjHEA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:45:31 2025 by rpki-client