Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
File: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft (raw, json)
Hash identifier: TgsjijksX5805/J9QsXJnoghjj7YYqiH1umA24RI5iE=
Subject key identifier: C9:DE:3A:20:8E:22:5C:65:8D:3B:CE:4D:CF:F1:3F:3C:75:41:EC:47
Authority key identifier: 3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75
Certificate issuer: /CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
Certificate serial: 0194BBCE7E5B350F7130AFCA5DB1DF2114E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
Manifest number: 07D5
Signing time: Fri 31 Jan 2025 10:00:59 +0000
Manifest this update: Fri 31 Jan 2025 10:00:59 +0000
Manifest next update: Sat 01 Feb 2025 10:00:59 +0000
Files and hashes: 1: E5xFDK9_S5iJGP4sFeJ9ooZosHI.roa (hash: AbosUOGwDkylbwXsNTmNDaibnmXnMj0HIqZzxGPKQ6U=)
2: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl (hash: 8OMfUzCg0g2LYrcg7QNB/8MRYB2JKYUgnxD3pbpSrrk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7e:5b:35:0f:71:30:af:ca:5d:b1:df:21:14:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
Validity
Not Before: Jan 31 10:00:59 2025 GMT
Not After : Feb 1 10:00:59 2025 GMT
Subject: CN=c9de3a208e225c658d3bce4dcff13f3c7541ec47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:72:d2:db:79:5d:76:a2:38:eb:f7:03:dc:56:
70:a6:ad:75:44:2e:97:85:74:0f:37:cb:de:87:92:
d9:13:87:a6:f4:99:19:5f:d5:21:a4:f0:a5:ec:19:
dd:0d:f0:31:a5:85:1c:53:2e:49:b8:98:a0:45:7a:
3d:6d:01:bb:13:9c:32:2f:52:0b:c5:4d:25:f8:be:
06:7f:dd:26:ce:02:32:e4:e8:e9:e7:24:08:93:8b:
55:57:4c:95:b4:9a:4f:a1:6f:d9:0a:2b:b3:02:69:
f1:09:54:8a:f5:ac:9e:d2:3a:ed:60:9a:ba:1c:5a:
90:ee:23:ba:70:7a:d3:66:cf:88:e7:14:ba:59:36:
65:72:d4:a2:da:7e:4d:59:c5:ce:60:43:61:60:1b:
17:ed:4b:86:19:68:cf:99:ce:e4:5a:aa:68:ef:5e:
cc:2f:30:ca:98:f1:72:8c:b5:5f:e2:5d:0f:a3:e5:
86:43:1a:6f:83:93:d2:8c:5a:7f:56:7e:ad:05:46:
35:0b:e0:dc:24:93:17:b1:5f:96:1b:8c:2f:66:6b:
8a:4e:8f:6c:46:ca:3f:8e:32:41:9e:e4:59:0f:6d:
ac:f6:b4:95:ff:e6:f0:19:16:90:6d:44:ef:0f:45:
ca:e1:5d:c4:47:8c:f9:15:97:d2:eb:fe:a6:0a:50:
2d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DE:3A:20:8E:22:5C:65:8D:3B:CE:4D:CF:F1:3F:3C:75:41:EC:47
X509v3 Authority Key Identifier:
keyid:3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4c:1b:56:17:9e:38:96:6f:e4:f4:68:73:4b:be:bf:14:cb:
6b:a4:c1:99:14:ee:04:dc:23:94:87:8d:68:f7:7d:f9:b7:38:
b1:81:c5:25:f2:59:03:b1:e8:a9:7d:64:4c:75:b6:5d:2d:44:
3e:66:39:fd:cd:06:f1:bc:fd:1a:b6:82:e3:86:5c:80:2f:55:
98:30:2d:f3:ee:11:94:0e:d3:2e:51:7b:01:b7:b2:07:97:d4:
f6:a5:8b:73:27:9f:bd:61:7b:8f:2b:ec:80:c5:f5:b2:f5:db:
18:00:10:72:66:d3:41:4a:f0:42:30:bf:a5:4d:91:37:f3:53:
6a:53:69:06:d7:5b:c0:53:3a:46:a2:c3:96:68:e5:64:cb:13:
cd:c2:a5:ac:ed:7f:e2:6e:08:79:54:c2:5d:a1:40:df:81:8e:
06:e3:e4:1c:06:1d:eb:cb:3f:a7:53:0d:47:ff:e2:ec:8c:99:
d6:63:90:e3:6a:fb:86:c4:a3:c8:a6:1a:0c:ae:08:80:32:03:
d9:7d:4f:d1:54:76:ca:f0:b0:ae:27:6a:67:59:2c:55:f9:f4:
73:64:1d:d9:2f:c2:6c:e0:41:c9:30:c5:0a:af:39:51:4f:f5:
16:cc:52:65:c8:69:bc:f1:a1:e3:6a:d2:51:a0:b3:d9:fd:a6:
c3:c3:af:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zn5bNQ9xMK/KXbHfIRTiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYmQ1ZjhiYjVhNTk0ZDY3YjVjZTgwN2E4NGM1OWRkZTU2
OWE3NzUwHhcNMjUwMTMxMTAwMDU5WhcNMjUwMjAxMTAwMDU5WjAzMTEwLwYDVQQD
EyhjOWRlM2EyMDhlMjI1YzY1OGQzYmNlNGRjZmYxM2YzYzc1NDFlYzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHLS23lddqI46/cD3FZwpq11RC6X
hXQPN8veh5LZE4em9JkZX9UhpPCl7BndDfAxpYUcUy5JuJigRXo9bQG7E5wyL1IL
xU0l+L4Gf90mzgIy5Ojp5yQIk4tVV0yVtJpPoW/ZCiuzAmnxCVSK9aye0jrtYJq6
HFqQ7iO6cHrTZs+I5xS6WTZlctSi2n5NWcXOYENhYBsX7UuGGWjPmc7kWqpo717M
LzDKmPFyjLVf4l0Po+WGQxpvg5PSjFp/Vn6tBUY1C+DcJJMXsV+WG4wvZmuKTo9s
Rso/jjJBnuRZD22s9rSV/+bwGRaQbUTvD0XK4V3ER4z5FZfS6/6mClAtdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMneOiCOIlxljTvOTc/xPzx1QexHMB8GA1UdIwQY
MBaAFD69X4u1pZTWe1zoB6hMWd3laad1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHIxZmk3V2xsTlo3WE9nSHFFeFozZVZwcDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jZWE1Y2YtMDc4Mi00MGQxLTg5MTMt
OTI3MTJmOTVlMzM2LzEvUHIxZmk3V2xsTlo3WE9nSHFFeFozZVZwcDNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9jZWE1Y2YtMDc4Mi00MGQxLTg5MTMtOTI3MTJmOTVlMzM2
LzEvUHIxZmk3V2xsTlo3WE9nSHFFeFozZVZwcDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0wbVhee
OJZv5PRoc0u+vxTLa6TBmRTuBNwjlIeNaPd9+bc4sYHFJfJZA7HoqX1kTHW2XS1E
PmY5/c0G8bz9GraC44ZcgC9VmDAt8+4RlA7TLlF7AbeyB5fU9qWLcyefvWF7jyvs
gMX1svXbGAAQcmbTQUrwQjC/pU2RN/NTalNpBtdbwFM6RqLDlmjlZMsTzcKlrO1/
4m4IeVTCXaFA34GOBuPkHAYd68s/p1MNR//i7IyZ1mOQ42r7hsSjyKYaDK4IgDID
2X1P0VR2yvCwridqZ1ksVfn0c2Qd2S/CbOBByTDFCq85UU/1FsxSZchpvPGh42rS
UaCz2f2mw8OvWQ==
-----END CERTIFICATE-----
Generated at Thu May 1 14:20:46 2025 by rpki-client