Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
File: Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft (raw, json)
Hash identifier: xGIDz0G76V5Zw2ag+Bt7cPkuvE8PZgY5+nqMEffTSPY=
Subject key identifier: EA:6A:57:82:9E:93:63:E4:69:7B:65:0E:30:0F:00:4D:3C:45:9D:DD
Authority key identifier: 0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
Certificate issuer: /CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Certificate serial: 0194BBCE391D191B19864974AFBA112A18F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
Manifest number: 0441
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl (hash: wx5Ng08PzcQtaLGZv4bCzGNpa5HmAEVRuTRNlAKvqCk=)
2: F9XGZi-RuqVcSe1fpzN4q7qIdc4.roa (hash: f6T7R08rHMZ0z6ganX/KnRpxEiznu3aFpX2FIokh414=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:39:1d:19:1b:19:86:49:74:af:ba:11:2a:18:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=ea6a57829e9363e4697b650e300f004d3c459ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:40:73:bc:57:b5:9a:ea:6e:87:21:da:6c:e2:
e9:a7:33:fe:f3:2a:0f:f8:8d:a1:c3:ca:e6:f7:c2:
d7:c1:a0:05:64:11:e4:70:d4:54:57:ec:3e:93:02:
40:6f:31:b4:fd:56:d3:3a:bd:0b:9b:97:be:06:1f:
17:39:c0:c1:14:d6:e1:30:f3:21:c7:ab:6c:be:8c:
64:8a:91:f5:83:6e:15:e0:b7:76:9a:0e:8d:e3:5a:
90:3d:a2:d6:ba:6d:4a:7d:aa:65:7b:84:e4:65:2e:
63:45:f1:4a:c4:c0:e2:f8:f9:dd:c0:1a:5a:7d:0c:
b6:d2:88:7b:6f:bc:b2:39:06:bf:a5:56:86:04:98:
35:fb:cd:c3:fd:d4:a7:dc:a8:37:27:02:72:72:d6:
61:95:0e:f2:3a:9c:ab:db:10:9e:3d:4e:5b:82:89:
0a:3c:e9:64:c7:b4:e0:8f:e2:57:ca:04:6f:5b:76:
d9:33:6d:f2:3f:d6:ca:53:22:c6:11:57:52:3a:00:
30:6a:bc:d0:be:f3:c8:2e:0f:f5:82:ad:eb:0b:49:
88:cf:6b:a5:ad:46:01:43:96:a7:e1:7e:c4:67:d7:
28:18:5d:e7:68:43:13:e5:52:91:69:6f:56:35:b4:
fe:b8:9f:cb:fc:4f:cd:1e:4d:f2:56:0d:52:2c:f4:
fb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6A:57:82:9E:93:63:E4:69:7B:65:0E:30:0F:00:4D:3C:45:9D:DD
X509v3 Authority Key Identifier:
keyid:0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:8b:35:31:95:16:7a:5a:ed:49:94:cf:9d:28:91:29:92:70:
65:e2:e2:93:c7:0d:cc:1e:3f:0f:5a:9d:50:f3:1a:00:80:fe:
7b:ec:16:aa:61:99:cd:ad:43:8d:7e:eb:a3:34:37:5c:05:cd:
a4:5c:d9:63:c6:15:9c:92:1a:84:7e:a0:96:b3:84:c1:bb:ab:
f1:47:f4:47:0d:4a:78:2c:74:19:14:22:9e:54:75:f7:4c:13:
49:cc:a3:54:e6:6f:ba:aa:95:b8:ae:99:5c:f0:cf:b7:08:b7:
34:6d:0f:33:90:9d:96:58:09:6b:c0:67:ba:9b:ce:03:9d:9d:
d8:92:91:82:25:38:d6:80:ce:d9:0f:f5:34:0d:23:47:51:9a:
db:09:54:0b:1c:6d:fa:ce:76:5c:17:d6:c9:29:b3:29:95:15:
e0:7a:26:95:6d:6e:93:17:72:ca:36:ed:59:bf:f5:3e:20:c8:
5a:41:fd:81:8e:ac:00:ab:e5:34:c3:ef:b0:11:ca:7e:ea:a9:
4a:8b:51:be:94:1b:15:33:d6:ab:54:37:f1:89:b7:15:b5:10:
64:69:a5:9f:9a:21:e9:ef:27:76:a3:28:91:a1:59:3f:a2:33:
29:53:ef:21:14:14:1c:15:43:c3:54:18:32:03:2a:d8:70:c9:
73:2f:84:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zjkdGRsZhkl0r7oRKhj1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhN2JiY2RlNTdkODViM2ZiMWFhZGNiYTljOTk3NzVlMTll
ZWVmM2UwHhcNMjUwMTMxMTAwMDQxWhcNMjUwMjAxMTAwMDQxWjAzMTEwLwYDVQQD
EyhlYTZhNTc4MjllOTM2M2U0Njk3YjY1MGUzMDBmMDA0ZDNjNDU5ZGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EBzvFe1mupuhyHabOLppzP+8yoP
+I2hw8rm98LXwaAFZBHkcNRUV+w+kwJAbzG0/VbTOr0Lm5e+Bh8XOcDBFNbhMPMh
x6tsvoxkipH1g24V4Ld2mg6N41qQPaLWum1Kfaple4TkZS5jRfFKxMDi+PndwBpa
fQy20oh7b7yyOQa/pVaGBJg1+83D/dSn3Kg3JwJyctZhlQ7yOpyr2xCePU5bgokK
POlkx7Tgj+JXygRvW3bZM23yP9bKUyLGEVdSOgAwarzQvvPILg/1gq3rC0mIz2ul
rUYBQ5an4X7EZ9coGF3naEMT5VKRaW9WNbT+uJ/L/E/NHk3yVg1SLPT7eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpqV4Kek2PkaXtlDjAPAE08RZ3dMB8GA1UdIwQY
MBaAFAp7vN5X2Fs/sarcupyZd14Z7u8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ251ODNsZllXei14cXR5Nm5KbDNYaG51N3o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yNjg0ZmItMWVkYi00MTQyLWIyYjYt
ZjA5MGQ5MWRjYmY4LzEvQ251ODNsZllXei14cXR5Nm5KbDNYaG51N3o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8yNjg0ZmItMWVkYi00MTQyLWIyYjYtZjA5MGQ5MWRjYmY4
LzEvQ251ODNsZllXei14cXR5Nm5KbDNYaG51N3o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUos1MZUW
elrtSZTPnSiRKZJwZeLik8cNzB4/D1qdUPMaAID+e+wWqmGZza1DjX7rozQ3XAXN
pFzZY8YVnJIahH6glrOEwbur8Uf0Rw1KeCx0GRQinlR190wTScyjVOZvuqqVuK6Z
XPDPtwi3NG0PM5CdllgJa8BnupvOA52d2JKRgiU41oDO2Q/1NA0jR1Ga2wlUCxxt
+s52XBfWySmzKZUV4HomlW1ukxdyyjbtWb/1PiDIWkH9gY6sAKvlNMPvsBHKfuqp
SotRvpQbFTPWq1Q38Ym3FbUQZGmln5oh6e8ndqMokaFZP6IzKVPvIRQUHBVDw1QY
MgMq2HDJcy+E3Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:54:09 2025 by rpki-client