Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
File: 4IFCtC45SABI0fzqWHo2k9pMC4o.mft (raw, json)
Hash identifier: z3jaJuwQRvHupVNEdapvjap/khWQ59zMku7qNHIZSdo=
Subject key identifier: 54:31:C2:6B:62:62:A2:53:55:BF:24:37:E8:AF:3B:5E:B1:13:A6:F0
Authority key identifier: E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
Certificate issuer: /CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Certificate serial: 0194BCAA0DE3FB146C908F938125F17511D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
Manifest number: 0215
Signing time: Fri 31 Jan 2025 14:00:48 +0000
Manifest this update: Fri 31 Jan 2025 14:00:48 +0000
Manifest next update: Sat 01 Feb 2025 14:00:48 +0000
Files and hashes: 1: 4IFCtC45SABI0fzqWHo2k9pMC4o.crl (hash: wXtqlbgimPNG10GeKiikuwHxIrJlWoFMOf0UM9v5tpE=)
2: SkmMZcDmD4tfD5IJGWfT10a999s.roa (hash: FtSYkAppozDXy+VqyVeW2kon4HMuVtycn1oxBmmVVwQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0d:e3:fb:14:6c:90:8f:93:81:25:f1:75:11:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Validity
Not Before: Jan 31 14:00:48 2025 GMT
Not After : Feb 1 14:00:48 2025 GMT
Subject: CN=5431c26b6262a25355bf2437e8af3b5eb113a6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:47:97:be:10:eb:b7:5c:97:60:66:03:65:00:
3f:6a:a1:6c:a3:bd:9e:7d:a7:13:dc:5a:f1:76:c4:
00:f4:83:cb:6a:0b:15:da:8b:c5:1e:2c:ea:54:c3:
08:8c:e8:bd:ab:d6:69:2b:c5:c3:ac:62:8c:fa:56:
be:23:64:4f:61:dc:e6:ea:68:61:62:34:dd:77:ca:
e2:12:37:8d:9f:e1:c7:92:1e:9f:ea:df:e9:ac:48:
ee:e3:bb:06:32:b3:29:76:75:90:52:3d:b0:2a:b7:
75:62:92:9b:d0:db:c7:6b:fa:fa:47:04:d6:f8:6a:
e5:17:d9:41:e1:cf:b0:ae:a9:8f:91:67:80:86:09:
b3:33:bf:b0:ae:d7:2b:7a:2f:2d:8d:3a:88:06:67:
bb:f5:46:c7:90:c8:fb:b5:91:49:98:a7:9d:a4:4d:
99:9a:c7:66:7d:46:26:29:c8:50:33:23:e4:37:56:
9f:c6:ba:08:de:5f:fd:ba:42:7e:0c:54:7d:d2:8f:
f0:a8:16:1e:ee:c1:a1:ae:e5:33:06:84:87:22:e3:
ff:22:92:de:d3:99:f8:d1:a7:44:7f:07:3c:9e:6e:
75:5c:ee:72:91:c3:21:d1:16:62:d7:c7:45:e1:82:
e1:a3:44:d6:10:26:e9:8a:47:19:b4:aa:6c:0a:55:
b9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:31:C2:6B:62:62:A2:53:55:BF:24:37:E8:AF:3B:5E:B1:13:A6:F0
X509v3 Authority Key Identifier:
keyid:E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:85:6a:6b:10:59:71:88:97:e0:ba:74:21:fe:2c:02:9b:9e:
cf:4e:54:ce:3f:a6:cb:52:69:e2:02:2a:9f:19:3a:c3:b4:2f:
7b:82:7b:f7:f2:3b:f2:86:a9:22:54:bb:67:18:e5:a0:ab:08:
de:17:a5:f9:eb:69:91:ca:8b:c2:59:44:68:68:29:67:7a:5c:
17:2a:78:64:cc:fd:62:37:5a:ec:99:39:ea:3e:30:2f:17:8c:
87:23:80:54:e7:67:b5:8d:8f:28:ce:48:e2:69:98:92:70:1d:
01:b5:65:9f:68:7c:97:ff:10:54:2c:52:4e:9c:37:2d:16:11:
b5:5e:70:93:cc:35:7d:5b:25:e7:3d:d3:55:11:43:80:5d:80:
4d:f8:ce:1a:0b:44:e7:2e:1f:bd:0d:d8:54:27:c7:d1:35:be:
fb:7a:82:d0:62:c5:d5:20:6e:5a:7a:9f:84:7e:9d:73:0d:b0:
0c:3f:28:dd:b2:91:11:6d:a3:ec:52:0d:b1:f8:ae:55:a8:10:
46:18:0e:c0:6e:a7:d4:67:51:81:4a:28:c6:1c:81:43:13:c0:
63:2c:1b:f7:68:e8:82:17:db:a0:ac:c7:fc:52:3b:97:27:f0:
0c:1d:fd:04:bf:11:76:be:88:63:26:9b:d4:4f:47:3f:e2:3d:
14:a8:14:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qg3j+xRskI+TgSXxdRHSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwODE0MmI0MmUzOTQ4MDA0OGQxZmNlYTU4N2EzNjkzZGE0
YzBiOGEwHhcNMjUwMTMxMTQwMDQ4WhcNMjUwMjAxMTQwMDQ4WjAzMTEwLwYDVQQD
Eyg1NDMxYzI2YjYyNjJhMjUzNTViZjI0MzdlOGFmM2I1ZWIxMTNhNmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkeXvhDrt1yXYGYDZQA/aqFso72e
facT3FrxdsQA9IPLagsV2ovFHizqVMMIjOi9q9ZpK8XDrGKM+la+I2RPYdzm6mhh
YjTdd8riEjeNn+HHkh6f6t/prEju47sGMrMpdnWQUj2wKrd1YpKb0NvHa/r6RwTW
+GrlF9lB4c+wrqmPkWeAhgmzM7+wrtcrei8tjTqIBme79UbHkMj7tZFJmKedpE2Z
msdmfUYmKchQMyPkN1afxroI3l/9ukJ+DFR90o/wqBYe7sGhruUzBoSHIuP/IpLe
05n40adEfwc8nm51XO5ykcMh0RZi18dF4YLho0TWECbpikcZtKpsClW5BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQxwmtiYqJTVb8kN+ivO16xE6bwMB8GA1UdIwQY
MBaAFOCBQrQuOUgASNH86lh6NpPaTAuKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNElGQ3RDNDVTQUJJMGZ6cVdIbzJrOXBNQzRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yODJhYzYtNzJjNi00YjJjLTlkZjkt
OGYxZjJjOTE0ZjA0LzEvNElGQ3RDNDVTQUJJMGZ6cVdIbzJrOXBNQzRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yODJhYzYtNzJjNi00YjJjLTlkZjktOGYxZjJjOTE0ZjA0
LzEvNElGQ3RDNDVTQUJJMGZ6cVdIbzJrOXBNQzRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4VqaxBZ
cYiX4Lp0If4sApuez05Uzj+my1Jp4gIqnxk6w7Qve4J79/I78oapIlS7ZxjloKsI
3hel+etpkcqLwllEaGgpZ3pcFyp4ZMz9Yjda7Jk56j4wLxeMhyOAVOdntY2PKM5I
4mmYknAdAbVln2h8l/8QVCxSTpw3LRYRtV5wk8w1fVsl5z3TVRFDgF2ATfjOGgtE
5y4fvQ3YVCfH0TW++3qC0GLF1SBuWnqfhH6dcw2wDD8o3bKREW2j7FINsfiuVagQ
RhgOwG6n1GdRgUooxhyBQxPAYywb92joghfboKzH/FI7lyfwDB39BL8Rdr6IYyab
1E9HP+I9FKgURw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:15 2025 by rpki-client