Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
File: t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft (raw, json)
Hash identifier: 8bTtLJYyF8DPKCjDPsF882Vo5XL4U5JWfw/jF5ptPyQ=
Subject key identifier: 44:D8:2C:88:14:B2:83:5C:15:1D:67:B9:67:04:77:B5:D9:36:ED:AB
Authority key identifier: B7:80:B3:B9:E0:96:22:16:29:FE:47:E1:02:AC:52:2D:A0:39:79:C4
Certificate issuer: /CN=b780b3b9e096221629fe47e102ac522da03979c4
Certificate serial: 0194BD858E5B5F5C5AD7E9A6B0E858ED5BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: BHkKvb2qZLeD_4QIPrmVYJe4E6w.roa (hash: 4HUs5FjtfJoQCq5RfZkLp2netiRG+jQlol4wXGJfij4=)
2: t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl (hash: pcbk62r2xAZQdRA27GWdVQNELQdRt9DfmfTA9C/WwYs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8e:5b:5f:5c:5a:d7:e9:a6:b0:e8:58:ed:5b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b780b3b9e096221629fe47e102ac522da03979c4
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=44d82c8814b2835c151d67b9670477b5d936edab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:36:52:60:07:92:a9:50:a4:bf:9b:af:0a:e8:
80:a7:4a:76:2b:3d:be:44:89:5f:12:b1:99:7f:04:
2e:e8:c1:ad:07:40:55:f7:82:62:91:c5:c8:5c:53:
4b:f6:96:c0:b2:54:27:26:b7:32:f5:40:b1:dc:95:
3e:f8:13:6a:af:99:f2:f7:79:ec:0e:f2:16:39:71:
80:8d:35:01:c4:64:b9:85:cc:49:de:da:3d:50:3a:
3b:da:51:05:5c:5f:66:7a:66:3e:7b:b0:8a:e1:94:
fa:33:14:9d:84:09:c8:97:db:f6:ee:44:11:61:3d:
88:9c:7d:31:75:c4:73:95:45:3c:44:9c:67:6a:c8:
da:ed:64:b1:5a:52:e8:76:a1:f6:47:bb:bd:20:4f:
39:68:55:db:df:aa:76:00:1e:37:f5:6c:41:71:23:
b2:df:22:ad:5c:07:4c:06:c2:0c:3c:c3:9b:ff:78:
4d:ac:e9:d9:c3:c9:d0:5a:f0:0b:66:82:48:de:85:
09:98:8a:a9:68:ac:7c:cd:0b:19:8b:c9:00:ee:50:
38:2b:7d:02:f4:7f:9d:20:b4:a5:39:61:53:ec:3e:
c3:f3:57:7e:17:44:5a:52:10:e7:50:e8:ae:e0:2c:
22:99:32:cf:8d:be:af:1a:0e:c4:76:a8:e2:93:db:
d8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D8:2C:88:14:B2:83:5C:15:1D:67:B9:67:04:77:B5:D9:36:ED:AB
X509v3 Authority Key Identifier:
keyid:B7:80:B3:B9:E0:96:22:16:29:FE:47:E1:02:AC:52:2D:A0:39:79:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:30:95:d6:45:b5:77:d6:6d:9d:74:a4:71:97:08:37:10:3c:
e1:4b:d6:40:7b:45:92:93:9c:9e:d4:9f:53:64:b9:f8:d3:ce:
7e:6f:93:f0:84:88:7a:25:4d:40:c9:9d:b7:fc:be:f9:7a:6f:
56:3d:81:2d:e0:17:c8:cc:2a:8f:cd:1b:49:14:f2:49:98:99:
69:56:ad:ae:15:5a:16:22:49:df:77:74:7b:e2:f0:47:d0:75:
8c:25:f7:b0:41:4e:5b:76:c8:2b:d0:78:ce:91:9f:4f:4c:5a:
cb:ba:4a:5e:cd:74:a5:83:60:8b:25:91:c6:8b:9c:f6:6e:6d:
b7:fe:03:a7:91:a7:44:8c:ca:3e:d3:28:94:7f:8e:08:71:dd:
3a:bb:3f:54:6c:38:66:f4:c3:ba:e0:c8:60:9b:b2:83:d7:a9:
f5:be:89:44:5f:12:c1:68:35:76:4a:74:7a:aa:11:6b:89:76:
45:ea:e1:0c:bf:02:7a:fb:20:a8:ac:df:ec:18:36:e6:4e:01:
1b:1d:6c:7a:be:0c:0b:94:33:28:00:c6:44:fe:e7:51:ce:41:
31:f3:48:6e:25:89:4b:db:ef:ff:81:32:ba:4d:69:54:9f:3e:
59:fd:58:93:65:b2:7a:b6:a5:9d:b1:e8:b1:c6:7f:36:a0:e6:
e1:31:fe:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hY5bX1xa1+mmsOhY7VutMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ODBiM2I5ZTA5NjIyMTYyOWZlNDdlMTAyYWM1MjJkYTAz
OTc5YzQwHhcNMjUwMTMxMTgwMDMzWhcNMjUwMjAxMTgwMDMzWjAzMTEwLwYDVQQD
Eyg0NGQ4MmM4ODE0YjI4MzVjMTUxZDY3Yjk2NzA0NzdiNWQ5MzZlZGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzZSYAeSqVCkv5uvCuiAp0p2Kz2+
RIlfErGZfwQu6MGtB0BV94JikcXIXFNL9pbAslQnJrcy9UCx3JU++BNqr5ny93ns
DvIWOXGAjTUBxGS5hcxJ3to9UDo72lEFXF9memY+e7CK4ZT6MxSdhAnIl9v27kQR
YT2InH0xdcRzlUU8RJxnasja7WSxWlLodqH2R7u9IE85aFXb36p2AB439WxBcSOy
3yKtXAdMBsIMPMOb/3hNrOnZw8nQWvALZoJI3oUJmIqpaKx8zQsZi8kA7lA4K30C
9H+dILSlOWFT7D7D81d+F0RaUhDnUOiu4CwimTLPjb6vGg7Edqjik9vYtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETYLIgUsoNcFR1nuWcEd7XZNu2rMB8GA1UdIwQY
MBaAFLeAs7ngliIWKf5H4QKsUi2gOXnEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRDenVlQ1dJaFlwX2tmaEFxeFNMYUE1ZWNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xZjMxMTctZjJhMS00MzIyLWI2M2Qt
ZjdlZGIyNjg4NjUyLzEvdDRDenVlQ1dJaFlwX2tmaEFxeFNMYUE1ZWNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8xZjMxMTctZjJhMS00MzIyLWI2M2QtZjdlZGIyNjg4NjUy
LzEvdDRDenVlQ1dJaFlwX2tmaEFxeFNMYUE1ZWNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDCV1kW1
d9ZtnXSkcZcINxA84UvWQHtFkpOcntSfU2S5+NPOfm+T8ISIeiVNQMmdt/y++Xpv
Vj2BLeAXyMwqj80bSRTySZiZaVatrhVaFiJJ33d0e+LwR9B1jCX3sEFOW3bIK9B4
zpGfT0xay7pKXs10pYNgiyWRxouc9m5tt/4Dp5GnRIzKPtMolH+OCHHdOrs/VGw4
ZvTDuuDIYJuyg9ep9b6JRF8SwWg1dkp0eqoRa4l2RerhDL8CevsgqKzf7Bg25k4B
Gx1ser4MC5QzKADGRP7nUc5BMfNIbiWJS9vv/4Eyuk1pVJ8+Wf1Yk2WyeralnbHo
scZ/NqDm4TH+RA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:01 2025 by rpki-client