Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
File: cC9OAJQ3AMCJfeetvPztXRC_LgE.mft (raw, json)
Hash identifier: mnuGkUkCWPuneB26CUiA71J77+Qbm5nEdPqIaPAKpOQ=
Subject key identifier: AF:CD:56:E0:21:C3:E8:CB:23:69:78:28:89:DC:6B:F8:C5:19:54:81
Authority key identifier: 70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
Certificate issuer: /CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Certificate serial: 0194BC72B9B0A2CC8822829E79D77A6C0F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:22 +0000
Manifest this update: Fri 31 Jan 2025 13:00:22 +0000
Manifest next update: Sat 01 Feb 2025 13:00:22 +0000
Files and hashes: 1: T8igE61i7-8nEQ3GPuNmcwV2Y6s.roa (hash: mnbaUsYkze4mxq77NlpZJCqVBddws9D7m+dIPgTDsy4=)
2: cC9OAJQ3AMCJfeetvPztXRC_LgE.crl (hash: 0Y8J48Z2TZN6awIwaNfAWS2KPg0MkVbCShwgCUrnMJo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b9:b0:a2:cc:88:22:82:9e:79:d7:7a:6c:0f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Validity
Not Before: Jan 31 13:00:22 2025 GMT
Not After : Feb 1 13:00:22 2025 GMT
Subject: CN=afcd56e021c3e8cb2369782889dc6bf8c5195481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b7:4f:bd:09:4f:ce:ca:16:93:42:fd:d7:bd:
38:f2:ed:c8:bc:24:4a:1b:83:65:e0:f4:9f:00:f0:
a1:7c:51:56:ba:15:5f:dc:79:5c:a6:1c:ef:5d:20:
8a:e4:ff:5b:e9:5b:f3:bd:2b:53:b3:cd:3b:01:fc:
6d:8f:23:6f:81:aa:45:6a:6c:42:a1:9e:de:88:a3:
ac:b2:64:1b:00:f5:bf:fc:da:3f:99:c1:85:47:71:
15:41:91:07:e1:df:76:71:d4:6f:8a:a6:1d:b8:d2:
15:d8:53:51:47:53:ef:4a:e9:f9:21:9c:0c:eb:af:
7b:25:c4:0c:59:19:cb:48:26:59:46:47:76:b7:d2:
fc:4c:dc:ee:2a:3a:11:16:78:ce:13:eb:c1:0f:57:
80:d6:e8:54:f2:cb:47:af:ad:4a:02:70:b2:5f:91:
ee:41:f4:18:b7:39:af:9c:3c:ad:d7:7e:06:83:02:
6a:73:43:10:56:fd:23:26:15:29:49:c7:df:05:ff:
8a:b0:4a:8c:db:9a:69:dd:b5:54:a2:f8:90:3e:13:
d5:51:f7:81:ab:5d:c5:da:8a:1c:c0:cd:a7:a0:c7:
a3:92:74:a1:46:f3:61:5d:67:2c:df:1a:39:18:6a:
a0:75:8f:de:08:5a:a9:3c:c2:56:6c:fb:75:e6:1b:
93:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CD:56:E0:21:C3:E8:CB:23:69:78:28:89:DC:6B:F8:C5:19:54:81
X509v3 Authority Key Identifier:
keyid:70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d9:89:0c:56:ba:9b:bb:1c:b7:df:5e:1f:60:f2:c4:c6:85:
64:e7:28:12:78:72:73:2c:98:39:fd:4a:d0:bf:1c:36:62:74:
a4:79:77:93:77:1a:c8:02:bd:c9:f6:e2:f5:24:5a:20:ff:55:
cd:31:28:e4:3d:20:f6:bd:13:09:c5:31:30:6e:8f:58:73:42:
e7:6a:ee:4d:0f:d3:c4:d1:9f:83:8a:54:0b:5c:64:e1:55:fd:
f4:d5:31:80:1e:36:4f:79:24:25:fd:30:99:80:66:e7:38:ec:
38:10:1f:05:f5:56:af:52:b7:25:32:ee:b1:be:e4:3a:b7:31:
49:26:b5:f4:51:a8:68:72:ed:64:dd:92:df:29:41:b5:00:a6:
96:1c:53:a3:f1:c5:4c:75:ef:77:02:88:0e:f6:b9:d7:9c:18:
4f:31:5a:28:37:e1:f8:ac:0d:9d:54:1f:9d:69:aa:23:0c:58:
47:e6:02:62:81:dc:eb:40:03:ac:20:81:f3:5b:34:a3:cf:69:
18:85:f9:55:98:07:00:15:5a:02:8f:0c:80:cb:14:4c:6e:8c:
bf:51:00:df:b2:ac:ac:67:88:d2:14:34:43:a9:ff:d6:d5:db:
d4:2c:42:ec:40:72:97:89:59:8d:9f:77:73:63:9f:64:31:57:
cb:ae:9c:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8crmwosyIIoKeedd6bA+WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMmY0ZTAwOTQzNzAwYzA4OTdkZTdhZGJjZmNlZDVkMTBi
ZjJlMDEwHhcNMjUwMTMxMTMwMDIyWhcNMjUwMjAxMTMwMDIyWjAzMTEwLwYDVQQD
EyhhZmNkNTZlMDIxYzNlOGNiMjM2OTc4Mjg4OWRjNmJmOGM1MTk1NDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrdPvQlPzsoWk0L917048u3IvCRK
G4Nl4PSfAPChfFFWuhVf3HlcphzvXSCK5P9b6VvzvStTs807AfxtjyNvgapFamxC
oZ7eiKOssmQbAPW//No/mcGFR3EVQZEH4d92cdRviqYduNIV2FNRR1PvSun5IZwM
6697JcQMWRnLSCZZRkd2t9L8TNzuKjoRFnjOE+vBD1eA1uhU8stHr61KAnCyX5Hu
QfQYtzmvnDyt134GgwJqc0MQVv0jJhUpScffBf+KsEqM25pp3bVUoviQPhPVUfeB
q13F2oocwM2noMejknShRvNhXWcs3xo5GGqgdY/eCFqpPMJWbPt15huTOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/NVuAhw+jLI2l4KInca/jFGVSBMB8GA1UdIwQY
MBaAFHAvTgCUNwDAiX3nrbz87V0Qvy4BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9iY2I2ZWItZTI2Mi00ZDY5LTgwZmIt
NTliMGZjOTEzZDM2LzEvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9iY2I2ZWItZTI2Mi00ZDY5LTgwZmItNTliMGZjOTEzZDM2
LzEvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtmJDFa6
m7sct99eH2DyxMaFZOcoEnhycyyYOf1K0L8cNmJ0pHl3k3cayAK9yfbi9SRaIP9V
zTEo5D0g9r0TCcUxMG6PWHNC52ruTQ/TxNGfg4pUC1xk4VX99NUxgB42T3kkJf0w
mYBm5zjsOBAfBfVWr1K3JTLusb7kOrcxSSa19FGoaHLtZN2S3ylBtQCmlhxTo/HF
THXvdwKIDva515wYTzFaKDfh+KwNnVQfnWmqIwxYR+YCYoHc60ADrCCB81s0o89p
GIX5VZgHABVaAo8MgMsUTG6Mv1EA37KsrGeI0hQ0Q6n/1tXb1CxC7EByl4lZjZ93
c2OfZDFXy66ctA==
-----END CERTIFICATE-----
Generated at Thu May 1 06:34:42 2025 by rpki-client