Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
File: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft (raw, json)
Hash identifier: S7Y4m9u69WBFe/mp1XUTMOQei00C/Vw2gPj8lpAX2To=
Subject key identifier: BC:62:76:BC:E0:44:84:A9:64:E3:64:6D:D0:23:94:3A:B1:E6:83:6F
Authority key identifier: 0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
Certificate issuer: /CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Certificate serial: 0194BC732776D2555D94712D802234745B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
Manifest number: 01A0
Signing time: Fri 31 Jan 2025 13:00:50 +0000
Manifest this update: Fri 31 Jan 2025 13:00:50 +0000
Manifest next update: Sat 01 Feb 2025 13:00:50 +0000
Files and hashes: 1: B3Ys6xmlqC9wLcdB3cpexOusdU8.roa (hash: KigHTwHmCj6upextpp39A2hT194k5nIpvq7I4qZjAqg=)
2: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl (hash: LyJWGtoTNBvajEbgckT5j+iRdRZof0xnG5e1xnVkq2s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:27:76:d2:55:5d:94:71:2d:80:22:34:74:5b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Validity
Not Before: Jan 31 13:00:50 2025 GMT
Not After : Feb 1 13:00:50 2025 GMT
Subject: CN=bc6276bce04484a964e3646dd023943ab1e6836f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:85:a6:6d:b0:d5:e2:58:0e:8c:23:36:f3:41:
40:21:6c:69:96:0e:9a:a5:6a:09:23:36:3b:81:2b:
13:91:d0:f7:ad:f4:61:70:36:1a:86:2e:91:e3:10:
04:58:79:a7:8b:a1:4b:aa:9c:09:7a:65:4d:7c:0a:
30:4c:a8:09:f9:6d:72:1f:e2:96:d5:a5:3e:a3:e7:
8a:02:68:e3:1e:81:02:33:db:b7:cc:fb:d9:80:06:
d4:15:0a:92:ca:f0:01:19:8f:d3:41:92:13:cf:6f:
91:85:f3:60:0e:45:ee:6e:f6:ee:d6:94:4d:70:61:
eb:02:91:87:41:9b:3e:ca:22:d8:dd:dc:83:9d:38:
6d:25:d1:fc:cf:25:2e:18:26:04:b2:76:fc:7d:04:
87:69:84:6d:aa:f9:3e:aa:19:cf:0b:64:dd:65:ae:
a4:2e:f1:a7:51:b3:20:a8:b0:ec:4d:b9:c7:2b:df:
57:95:1b:c3:00:47:57:20:b6:57:a5:f4:46:cc:84:
99:93:c6:46:65:b0:3f:37:73:ff:78:3a:5d:95:e7:
4c:eb:f9:52:8b:19:f0:2d:76:0f:60:79:6b:c5:7e:
a0:3a:e5:d6:d9:8e:5b:5b:60:47:69:e5:22:30:fb:
6c:23:8e:d8:d5:d6:63:45:69:f9:e5:37:7a:c5:55:
5f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:62:76:BC:E0:44:84:A9:64:E3:64:6D:D0:23:94:3A:B1:E6:83:6F
X509v3 Authority Key Identifier:
keyid:0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:1b:05:14:64:e4:01:8a:ec:fc:67:fc:c7:91:f6:4d:98:eb:
9e:48:c9:df:82:d9:dd:2b:51:0c:cc:6f:be:23:9b:a0:d1:67:
8f:45:8c:c1:85:21:cc:11:3d:b6:bc:c4:9e:f6:9c:62:f2:47:
7a:36:9c:f5:de:b8:58:e3:d3:23:21:7a:b8:e3:57:c4:f0:0a:
33:6a:99:39:6c:cb:98:f9:61:a5:0b:c5:ed:c8:94:00:1e:57:
6c:4b:05:b3:19:94:0c:de:c4:88:6d:47:01:d5:5f:07:ad:47:
be:61:db:27:ab:b0:fd:3e:f7:b4:42:a9:b7:fd:31:fa:21:bd:
02:ac:2d:79:7d:07:f9:74:62:1f:39:6c:2f:2a:c2:3e:f2:6d:
80:07:8a:db:78:d2:93:7a:08:1c:b1:03:9a:51:b5:73:7d:75:
3d:53:0f:27:cb:81:97:9f:2b:b0:4b:a1:a7:a8:8f:77:2f:4d:
22:39:32:99:a9:43:d6:20:2f:e7:2d:40:aa:73:e9:93:76:83:
b2:25:16:80:43:bf:cc:b2:1b:99:38:0a:8f:09:30:4a:4e:ee:
44:aa:5a:99:b4:e3:ad:e6:ea:66:37:c1:4a:35:00:5f:55:e7:
ca:dc:8e:b7:7e:a7:e0:23:7f:c3:23:4a:1f:79:1f:a4:59:50:
43:05:09:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cyd20lVdlHEtgCI0dFtwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMzZiOTc3MzY3NjJkNjkwODBiNDNkOWIwMGM2MWFmMWQz
MTFkOGMwHhcNMjUwMTMxMTMwMDUwWhcNMjUwMjAxMTMwMDUwWjAzMTEwLwYDVQQD
EyhiYzYyNzZiY2UwNDQ4NGE5NjRlMzY0NmRkMDIzOTQzYWIxZTY4MzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14WmbbDV4lgOjCM280FAIWxplg6a
pWoJIzY7gSsTkdD3rfRhcDYahi6R4xAEWHmni6FLqpwJemVNfAowTKgJ+W1yH+KW
1aU+o+eKAmjjHoECM9u3zPvZgAbUFQqSyvABGY/TQZITz2+RhfNgDkXubvbu1pRN
cGHrApGHQZs+yiLY3dyDnThtJdH8zyUuGCYEsnb8fQSHaYRtqvk+qhnPC2TdZa6k
LvGnUbMgqLDsTbnHK99XlRvDAEdXILZXpfRGzISZk8ZGZbA/N3P/eDpdledM6/lS
ixnwLXYPYHlrxX6gOuXW2Y5bW2BHaeUiMPtsI47Y1dZjRWn55Td6xVVfUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxidrzgRISpZONkbdAjlDqx5oNvMB8GA1UdIwQY
MBaAFAo2uXc2di1pCAtD2bAMYa8dMR2MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kY2QyZWQtZDM1Yi00Y2Q1LWE4MjIt
MWEzMjI2ODMyYzkxLzEvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9kY2QyZWQtZDM1Yi00Y2Q1LWE4MjItMWEzMjI2ODMyYzkx
LzEvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBsFFGTk
AYrs/Gf8x5H2TZjrnkjJ34LZ3StRDMxvviOboNFnj0WMwYUhzBE9trzEnvacYvJH
ejac9d64WOPTIyF6uONXxPAKM2qZOWzLmPlhpQvF7ciUAB5XbEsFsxmUDN7EiG1H
AdVfB61HvmHbJ6uw/T73tEKpt/0x+iG9AqwteX0H+XRiHzlsLyrCPvJtgAeK23jS
k3oIHLEDmlG1c311PVMPJ8uBl58rsEuhp6iPdy9NIjkymalD1iAv5y1AqnPpk3aD
siUWgEO/zLIbmTgKjwkwSk7uRKpambTjrebqZjfBSjUAX1XnytyOt36n4CN/wyNK
H3kfpFlQQwUJxw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:58:21 2025 by rpki-client