Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
File: 4p9JZACcdLuBrtnGcHgBPcho7xc.mft (raw, json)
Hash identifier: dwtlkp+r5k34i4fEe4bSbQnWqyLCmc4v8wD5pFeTrxw=
Subject key identifier: 81:AE:58:56:E9:D1:F9:5E:B1:0C:BC:CC:3F:47:2F:71:2F:E6:75:B1
Authority key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
Certificate issuer: /CN=e29f4964009c74bb81aed9c67078013dc868ef17
Certificate serial: 0194BD175DB56EF91C8157E4D5BCD402E4EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:12 +0000
Manifest this update: Fri 31 Jan 2025 16:00:12 +0000
Manifest next update: Sat 01 Feb 2025 16:00:12 +0000
Files and hashes: 1: 1KTjmYkB3cj_19bwNwOyE5tGxCk.roa (hash: H8xeX/8Uyv31FbjznlcJqitCSYJrp0RSe/v1PmExVLA=)
2: 4p9JZACcdLuBrtnGcHgBPcho7xc.crl (hash: QPAe2U2EfotOLGBBWXea92IQg4S4WUAyqpfXk/9wH7w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5d:b5:6e:f9:1c:81:57:e4:d5:bc:d4:02:e4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29f4964009c74bb81aed9c67078013dc868ef17
Validity
Not Before: Jan 31 16:00:12 2025 GMT
Not After : Feb 1 16:00:12 2025 GMT
Subject: CN=81ae5856e9d1f95eb10cbccc3f472f712fe675b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a0:59:91:db:9b:7e:5b:6c:bc:ca:4e:a9:6b:
ff:76:42:9a:b5:a8:b8:76:14:69:5c:42:d6:45:e6:
b9:22:87:ec:82:63:31:f6:3e:38:26:af:4f:83:46:
e3:86:25:b6:f0:02:d5:00:d3:e5:ec:4e:ad:74:ba:
4c:27:99:f8:d2:93:37:af:12:65:bf:92:c7:b7:51:
66:52:18:c2:5d:3f:a7:6c:5e:48:fc:16:68:a9:69:
21:d7:58:5d:d3:b4:da:7c:44:5d:80:9f:26:b0:d7:
40:e6:08:80:99:9a:c6:d1:5d:b9:c6:de:cf:e8:06:
b0:2f:b9:24:6e:9e:2b:b4:a4:22:a6:f2:b6:14:ca:
8d:31:9b:92:d2:9f:0e:d7:93:ca:a0:0e:ab:04:a6:
b2:1f:eb:75:6b:c3:d2:bb:e0:23:ed:6d:6d:98:b0:
ce:23:92:7a:20:ae:c7:34:6e:64:0b:4a:2a:32:df:
35:2a:28:f6:69:7d:73:86:72:92:9d:3b:48:be:8b:
72:c3:66:ee:98:40:b0:d4:f2:4a:bf:6d:8f:7d:c4:
ad:77:ba:7f:03:28:0a:d9:f1:ba:18:7a:41:61:2a:
a7:d8:a4:0b:a3:6f:a6:3a:e3:27:20:5c:f4:fa:c8:
91:d6:bd:cd:8f:72:98:fe:e8:c7:5a:96:eb:7e:47:
6e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AE:58:56:E9:D1:F9:5E:B1:0C:BC:CC:3F:47:2F:71:2F:E6:75:B1
X509v3 Authority Key Identifier:
keyid:E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:81:17:5a:b8:d6:62:3e:bf:3f:03:19:54:de:c2:1b:c5:67:
7c:a3:11:f0:fa:1f:3a:ef:75:9e:b0:25:73:5d:27:c4:a5:b3:
ce:40:ea:ba:78:b2:bb:2e:12:66:15:5f:64:1a:15:7f:02:68:
a3:86:07:ab:30:76:9e:0e:92:80:66:76:7c:62:6c:30:89:58:
53:cb:b3:4e:e7:44:06:b9:ba:5a:b6:b7:28:82:bb:0a:8d:53:
5b:d6:ca:18:fa:26:cf:7f:3e:45:6e:bd:d2:01:a7:d9:60:6f:
64:de:aa:aa:bb:05:07:cc:09:5b:92:72:76:16:d5:fb:0a:31:
69:05:f2:62:d9:c5:11:22:a5:30:25:9e:c6:b5:97:bc:74:50:
07:35:12:6a:06:ed:b8:c6:30:31:a3:b8:e9:e0:f2:69:ae:85:
c0:14:58:95:68:28:57:d3:54:f2:96:f5:40:99:67:57:fa:63:
90:78:01:c5:da:fb:94:d2:75:d0:50:2c:fc:74:e0:10:e9:23:
e7:a9:60:b1:76:c1:52:30:16:37:03:6b:89:6f:81:51:fb:fd:
24:6e:a3:9f:12:e6:25:f1:aa:db:d9:ac:39:d2:57:e0:91:78:
43:ba:15:62:30:b5:10:a2:f5:55:e6:f1:d0:d0:ed:98:a3:e5:
98:db:3c:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F121bvkcgVfk1bzUAuTvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOWY0OTY0MDA5Yzc0YmI4MWFlZDljNjcwNzgwMTNkYzg2
OGVmMTcwHhcNMjUwMTMxMTYwMDEyWhcNMjUwMjAxMTYwMDEyWjAzMTEwLwYDVQQD
Eyg4MWFlNTg1NmU5ZDFmOTVlYjEwY2JjY2MzZjQ3MmY3MTJmZTY3NWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6BZkdubfltsvMpOqWv/dkKatai4
dhRpXELWRea5IofsgmMx9j44Jq9Pg0bjhiW28ALVANPl7E6tdLpMJ5n40pM3rxJl
v5LHt1FmUhjCXT+nbF5I/BZoqWkh11hd07TafERdgJ8msNdA5giAmZrG0V25xt7P
6AawL7kkbp4rtKQipvK2FMqNMZuS0p8O15PKoA6rBKayH+t1a8PSu+Aj7W1tmLDO
I5J6IK7HNG5kC0oqMt81Kij2aX1zhnKSnTtIvotyw2bumECw1PJKv22PfcStd7p/
AygK2fG6GHpBYSqn2KQLo2+mOuMnIFz0+siR1r3Nj3KY/ujHWpbrfkduVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGuWFbp0flesQy8zD9HL3Ev5nWxMB8GA1UdIwQY
MBaAFOKfSWQAnHS7ga7ZxnB4AT3IaO8XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82NTVhMWMtYmFmNS00NzVmLWEzMDgt
OTMyYWIzNDFhMzY3LzEvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82NTVhMWMtYmFmNS00NzVmLWEzMDgtOTMyYWIzNDFhMzY3
LzEvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATIEXWrjW
Yj6/PwMZVN7CG8VnfKMR8PofOu91nrAlc10nxKWzzkDquniyuy4SZhVfZBoVfwJo
o4YHqzB2ng6SgGZ2fGJsMIlYU8uzTudEBrm6Wra3KIK7Co1TW9bKGPomz38+RW69
0gGn2WBvZN6qqrsFB8wJW5JydhbV+woxaQXyYtnFESKlMCWexrWXvHRQBzUSagbt
uMYwMaO46eDyaa6FwBRYlWgoV9NU8pb1QJlnV/pjkHgBxdr7lNJ10FAs/HTgEOkj
56lgsXbBUjAWNwNriW+BUfv9JG6jnxLmJfGq29msOdJX4JF4Q7oVYjC1EKL1Vebx
0NDtmKPlmNs8vg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:06 2025 by rpki-client