Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
File: 0coacGq8--G4WGUjjYQ17jPnWCA.mft (raw, json)
Hash identifier: /5SXg59UuWnazofF65cKAJNUhCy7+EaZ4zSh+GOxcyE=
Subject key identifier: 77:3D:AB:21:B6:E5:AC:F8:94:B8:D1:14:89:02:50:99:4B:F7:65:2C
Authority key identifier: D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
Certificate issuer: /CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Certificate serial: 0194BC72DE750CFBFD19926A4957936D5AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
Manifest number: 09AA
Signing time: Fri 31 Jan 2025 13:00:32 +0000
Manifest this update: Fri 31 Jan 2025 13:00:32 +0000
Manifest next update: Sat 01 Feb 2025 13:00:32 +0000
Files and hashes: 1: 0coacGq8--G4WGUjjYQ17jPnWCA.crl (hash: IbCbojxj4GW60flpuqXlWdHSnQ1oTk76wghpeg6UI1c=)
2: Uj6BezAzB94GByjzrVUNlk0ht78.roa (hash: dN/7lNPFzPzip+lXMHPQrtHop8fW612WIaM/9STYSBo=)
3: i6d_wSF6B7XpMiMocY9g5Bflzus.roa (hash: Ie39FF54w1T4xPfnonYM6fmqfVN96lUmKfBb590VzVU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:de:75:0c:fb:fd:19:92:6a:49:57:93:6d:5a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Validity
Not Before: Jan 31 13:00:32 2025 GMT
Not After : Feb 1 13:00:32 2025 GMT
Subject: CN=773dab21b6e5acf894b8d114890250994bf7652c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:82:1b:dc:a0:91:69:1c:2a:5b:a7:25:0b:
8c:e6:d2:54:d8:b6:d1:b7:52:4e:d9:fa:0c:d9:f4:
b9:24:a2:05:40:71:8d:6a:c3:b2:c9:28:58:b8:38:
5c:3a:b9:7a:eb:ce:b1:b1:d5:6f:5d:ab:21:bc:bd:
3f:9b:e5:35:fd:8f:bc:21:5f:e7:47:a1:b3:e5:a1:
4a:57:15:88:aa:58:bc:7c:eb:e9:41:d8:62:01:71:
9e:10:86:86:4f:37:f4:6c:1b:e8:fd:6e:f3:82:95:
2d:67:4f:10:bf:cb:bf:69:03:9e:dc:b9:ec:8a:cd:
72:3e:41:a3:32:41:0e:dc:af:03:ea:6e:77:1d:2d:
97:f4:45:c6:4e:38:10:59:8d:73:34:94:80:e4:5d:
4a:e7:88:07:bc:02:99:59:e4:c0:93:02:e7:3f:0d:
3a:98:55:41:58:da:a4:f5:ba:a7:81:78:fc:18:37:
56:ef:1b:54:b5:b8:d5:56:49:00:30:c9:53:25:ec:
2f:a6:3f:0b:d3:0a:f5:91:38:f0:3c:ce:b1:d1:a7:
c8:b2:8c:e7:44:a8:c9:dd:29:e6:8b:ef:74:4e:68:
68:8c:78:24:f1:ad:93:5d:3f:7b:30:dd:a8:cd:24:
8c:ac:16:ce:01:a3:55:aa:50:e3:0d:f0:48:0b:5a:
54:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3D:AB:21:B6:E5:AC:F8:94:B8:D1:14:89:02:50:99:4B:F7:65:2C
X509v3 Authority Key Identifier:
keyid:D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:0c:97:9b:9f:5d:6a:0b:18:f1:6e:55:0b:2a:13:2d:6b:21:
ad:07:17:fe:a1:64:87:1e:5c:52:e1:91:45:46:5b:82:8c:a2:
dc:77:a5:99:79:57:30:96:66:84:d9:81:e9:28:21:80:62:f0:
ba:53:ed:b9:d5:67:45:03:b5:c8:d2:91:ff:7d:d0:9e:62:63:
0d:a5:b3:c3:74:50:4e:73:04:55:0d:d2:e5:bf:05:5f:2d:38:
57:54:25:89:33:0d:4a:01:c7:1c:49:8b:5b:ac:a0:41:80:b8:
fb:2b:3a:06:41:85:56:78:ad:23:72:84:f6:61:8b:9f:15:a2:
f8:86:7a:d4:92:40:3c:00:90:7f:f5:26:27:34:1c:05:95:df:
27:b0:fb:31:5d:13:6c:d8:c9:ca:c4:77:0f:ad:fc:e5:50:98:
0e:6f:68:5d:8a:19:77:ee:64:da:14:12:f4:96:25:b3:81:9b:
0f:b5:ef:fb:92:e0:f4:51:d7:48:f1:a0:7b:b9:5b:13:6d:dd:
05:43:aa:3e:52:27:34:95:c4:63:82:61:b2:77:ed:9e:ef:a6:
4b:c7:66:88:75:78:76:71:d7:ae:b3:55:82:8f:5b:d4:cb:47:
fc:2c:e9:d2:7e:b9:ea:fe:52:a7:64:b1:26:3b:07:f1:77:c3:
3d:76:19:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8ct51DPv9GZJqSVeTbVqrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxY2ExYTcwNmFiY2ZiZTFiODU4NjUyMzhkODQzNWVlMzNl
NzU4MjAwHhcNMjUwMTMxMTMwMDMyWhcNMjUwMjAxMTMwMDMyWjAzMTEwLwYDVQQD
Eyg3NzNkYWIyMWI2ZTVhY2Y4OTRiOGQxMTQ4OTAyNTA5OTRiZjc2NTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+2CG9ygkWkcKlunJQuM5tJU2LbR
t1JO2foM2fS5JKIFQHGNasOyyShYuDhcOrl6686xsdVvXashvL0/m+U1/Y+8IV/n
R6Gz5aFKVxWIqli8fOvpQdhiAXGeEIaGTzf0bBvo/W7zgpUtZ08Qv8u/aQOe3Lns
is1yPkGjMkEO3K8D6m53HS2X9EXGTjgQWY1zNJSA5F1K54gHvAKZWeTAkwLnPw06
mFVBWNqk9bqngXj8GDdW7xtUtbjVVkkAMMlTJewvpj8L0wr1kTjwPM6x0afIsozn
RKjJ3Snmi+90TmhojHgk8a2TXT97MN2ozSSMrBbOAaNVqlDjDfBIC1pUJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHc9qyG25az4lLjRFIkCUJlL92UsMB8GA1UdIwQY
MBaAFNHKGnBqvPvhuFhlI42ENe4z51ggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGNvYWNHcTgtLUc0V0dVampZUTE3alBuV0NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jZjc5YTMtZjNjYy00ZDVhLTk2NzIt
ZThmN2ZkM2E0MDc4LzEvMGNvYWNHcTgtLUc0V0dVampZUTE3alBuV0NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jZjc5YTMtZjNjYy00ZDVhLTk2NzItZThmN2ZkM2E0MDc4
LzEvMGNvYWNHcTgtLUc0V0dVampZUTE3alBuV0NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQyXm59d
agsY8W5VCyoTLWshrQcX/qFkhx5cUuGRRUZbgoyi3HelmXlXMJZmhNmB6SghgGLw
ulPtudVnRQO1yNKR/33QnmJjDaWzw3RQTnMEVQ3S5b8FXy04V1QliTMNSgHHHEmL
W6ygQYC4+ys6BkGFVnitI3KE9mGLnxWi+IZ61JJAPACQf/UmJzQcBZXfJ7D7MV0T
bNjJysR3D6385VCYDm9oXYoZd+5k2hQS9JYls4GbD7Xv+5Lg9FHXSPGge7lbE23d
BUOqPlInNJXEY4Jhsnftnu+mS8dmiHV4dnHXrrNVgo9b1MtH/Czp0n656v5Sp2Sx
JjsH8XfDPXYZsA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:55 2025 by rpki-client