Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
File: 152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json)
Hash identifier: +jSWKn2/45+K2OhxVdfY/q9D8GvXitEAjnM1p8p8Lzs=
Subject key identifier: 7C:4C:A3:DA:EE:BE:78:63:69:C5:29:FA:3E:1A:65:C0:C2:F0:8C:F6
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial: 0194BD17F1AF2397F26370D79EE0D536A9A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 16:00:50 +0000
Manifest this update: Fri 31 Jan 2025 16:00:50 +0000
Manifest next update: Sat 01 Feb 2025 16:00:50 +0000
Files and hashes: 1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: KZKJNU30dXcxxF3NaLxyG3iLaGLKPMZ1oNMezEsw0HY=)
2: D6tQMtTrcrX-gfAb6Oldi--cuH0.roa (hash: hSrHBvCFCmXDyAQnKcTo97bjwp9R955PaX/sDtrTv8s=)
3: u1fNRyXyMUiOEFJEZY8QmByB7E8.roa (hash: ZcFES+4nNrRKAxBfx+5gDYNJV+7c5V3Qx9m+LvRk+bg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f1:af:23:97:f2:63:70:d7:9e:e0:d5:36:a9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
Validity
Not Before: Jan 31 16:00:50 2025 GMT
Not After : Feb 1 16:00:50 2025 GMT
Subject: CN=7c4ca3daeebe786369c529fa3e1a65c0c2f08cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:be:eb:7f:db:b2:df:ff:dc:ab:02:5e:45:f2:
e4:29:97:f2:8c:2c:9b:cb:fc:47:24:cf:be:eb:19:
1d:a9:e1:30:37:a8:10:af:0d:4b:28:5a:1f:2a:7d:
19:73:25:cd:31:c6:b1:29:15:0c:a0:67:d4:ac:ef:
f7:3a:6c:44:ba:dd:13:fd:d7:89:7d:cc:0d:ba:05:
1b:28:61:f8:bd:7f:67:30:89:85:04:4b:82:16:cc:
42:92:dc:58:c7:a3:12:93:ea:9c:f7:90:5b:d6:6c:
f5:ca:37:ae:d8:f0:d4:13:18:23:52:74:28:56:9e:
cb:3a:99:67:df:dc:ac:1d:c4:3d:c4:7a:4e:78:39:
af:88:ee:a8:3c:64:7c:c2:a6:93:b7:df:06:90:7e:
aa:52:19:15:52:d6:c9:1b:8e:0a:9f:79:c1:44:f6:
b3:cd:6d:cb:96:b2:77:8e:15:19:ad:af:05:58:4e:
e0:da:93:56:2a:9a:41:34:71:bb:53:42:15:86:11:
ac:c8:5d:38:de:12:7c:db:77:c4:ab:5b:da:be:83:
9a:e8:ba:5d:6d:e1:91:89:3f:25:a9:d0:38:92:b3:
63:f3:81:95:c8:38:19:26:74:10:22:8c:02:95:da:
3c:f8:64:50:69:3b:8d:6f:a1:92:70:db:0c:7b:ae:
3b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4C:A3:DA:EE:BE:78:63:69:C5:29:FA:3E:1A:65:C0:C2:F0:8C:F6
X509v3 Authority Key Identifier:
keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:11:16:3c:83:80:73:37:ac:cc:24:1c:1c:81:ef:0a:b7:0d:
2b:ce:b6:bb:34:c7:90:42:b0:3c:f6:63:b9:35:5e:1a:48:3c:
51:de:b6:f8:52:9c:b3:58:5b:f0:2e:a1:e7:7a:e5:9a:df:ef:
40:27:62:76:11:c7:36:d1:44:35:60:27:54:f3:e8:f3:55:1b:
c4:e2:0a:05:47:c2:36:f1:37:40:f6:7e:7b:44:53:60:33:5f:
85:45:22:8e:0a:ff:de:bf:e1:e1:f2:21:7a:75:90:14:b9:b2:
c6:2a:58:c7:7c:f4:ab:e7:2a:54:ec:b1:da:e6:94:49:a2:6c:
0d:8d:b1:53:a1:dd:54:c5:30:d2:c5:2d:6e:ba:a1:f2:0b:d0:
06:6f:05:4c:c0:61:2a:2a:ab:3c:cf:a6:b2:fc:ab:e9:f3:49:
5f:bc:37:2f:e5:77:06:77:e8:d5:53:79:97:21:5c:b3:bf:2c:
3b:f9:2c:88:a1:5c:31:b1:3d:62:4b:c5:77:1c:01:93:26:d8:
70:3e:9c:7b:6c:6a:6d:05:0e:7a:29:a8:e3:20:fa:f2:c6:32:
6b:cb:01:0a:13:f2:bc:b2:b4:49:cd:57:88:de:94:ed:bc:fc:
09:18:90:bf:94:44:de:a3:ac:b8:3a:21:dd:b7:fb:57:35:fa:
6c:3c:1c:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F/GvI5fyY3DXnuDVNqmmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OWRhNDY1NjE1YzYwMDk0MzcwODMzODkyZGE4NGM4ODZl
MWM0ZWYwHhcNMjUwMTMxMTYwMDUwWhcNMjUwMjAxMTYwMDUwWjAzMTEwLwYDVQQD
Eyg3YzRjYTNkYWVlYmU3ODYzNjljNTI5ZmEzZTFhNjVjMGMyZjA4Y2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr7rf9uy3//cqwJeRfLkKZfyjCyb
y/xHJM++6xkdqeEwN6gQrw1LKFofKn0ZcyXNMcaxKRUMoGfUrO/3OmxEut0T/deJ
fcwNugUbKGH4vX9nMImFBEuCFsxCktxYx6MSk+qc95Bb1mz1yjeu2PDUExgjUnQo
Vp7LOpln39ysHcQ9xHpOeDmviO6oPGR8wqaTt98GkH6qUhkVUtbJG44Kn3nBRPaz
zW3LlrJ3jhUZra8FWE7g2pNWKppBNHG7U0IVhhGsyF043hJ823fEq1vavoOa6Lpd
beGRiT8lqdA4krNj84GVyDgZJnQQIowCldo8+GRQaTuNb6GScNsMe647SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxMo9ruvnhjacUp+j4aZcDC8Iz2MB8GA1UdIwQY
MBaAFNedpGVhXGAJQ3CDOJLahMiG4cTvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTUya1pXRmNZQWxEY0lNNGt0cUV5SWJoeE84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9kNzljOTgtYzI3ZC00NWIzLTg2ZDkt
ZGFkM2JiMTNjMGEyLzEvMTUya1pXRmNZQWxEY0lNNGt0cUV5SWJoeE84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9kNzljOTgtYzI3ZC00NWIzLTg2ZDktZGFkM2JiMTNjMGEy
LzEvMTUya1pXRmNZQWxEY0lNNGt0cUV5SWJoeE84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyREWPIOA
czeszCQcHIHvCrcNK862uzTHkEKwPPZjuTVeGkg8Ud62+FKcs1hb8C6h53rlmt/v
QCdidhHHNtFENWAnVPPo81UbxOIKBUfCNvE3QPZ+e0RTYDNfhUUijgr/3r/h4fIh
enWQFLmyxipYx3z0q+cqVOyx2uaUSaJsDY2xU6HdVMUw0sUtbrqh8gvQBm8FTMBh
KiqrPM+msvyr6fNJX7w3L+V3Bnfo1VN5lyFcs78sO/ksiKFcMbE9YkvFdxwBkybY
cD6ce2xqbQUOeimo4yD68sYya8sBChPyvLK0Sc1XiN6U7bz8CRiQv5RE3qOsuDoh
3bf7VzX6bDwcaw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 19:53:25 2025 by rpki-client