Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
File: CaT39OTp5yw6M5P7XW6nQrwbTCg.mft (raw, json)
Hash identifier: 55hYmEL4bby/kFE6cj0eFkUG7Ncj0gqsAR84XJdGh0g=
Subject key identifier: 8D:85:26:A0:36:89:F7:1D:19:B8:2C:CF:A6:ED:B3:0C:53:73:44:6D
Authority key identifier: 09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
Certificate issuer: /CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Certificate serial: 0194BC7293DA84136A9A8CDAF77EAE63C1FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
Manifest number: 0DED
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: CaT39OTp5yw6M5P7XW6nQrwbTCg.crl (hash: gKMPk5PQJpWqiZhB5wyBq6LZ+ftD1yuAwUG6qNpO78s=)
2: JoXcYev6DySlst62DTDcDz1JN0Q.roa (hash: PRhyl4bdJivpbrgVw6w06UO6PZN+9+qwU0T6MPbrnFs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:93:da:84:13:6a:9a:8c:da:f7:7e:ae:63:c1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=8d8526a03689f71d19b82ccfa6edb30c5373446d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:60:37:ea:f8:19:cf:95:b3:99:05:7d:07:09:
d7:43:0c:4e:3c:2b:79:b5:31:00:80:b0:da:f2:51:
62:5b:b5:e1:c5:b4:e8:46:99:5f:d7:5f:5b:7b:7f:
85:e1:f1:a1:9f:dc:2e:71:bb:fc:43:d2:f6:2e:86:
9d:0e:c2:a8:ff:c2:42:a6:83:a9:e8:b1:a3:93:15:
e0:54:94:f2:11:2c:3f:2e:f3:fe:b5:a8:4d:5e:7a:
a0:76:51:24:cb:f9:a7:88:e6:d1:c7:c7:bb:c8:1f:
35:f5:cd:10:0b:03:0f:3e:99:bf:e3:f1:37:37:8c:
10:a5:21:d3:0b:aa:48:07:15:14:70:68:a8:32:d3:
0b:e2:13:62:9e:25:9c:19:7e:57:4c:ed:1f:5d:52:
63:53:01:cc:9a:c6:bf:d8:ea:68:4a:5a:2f:9f:d4:
cc:7a:68:22:c2:52:de:07:95:28:51:f8:96:cd:fa:
ef:82:c0:c5:4f:ee:b4:13:97:37:86:a5:ee:d1:5a:
83:2d:69:c6:0e:5d:c4:49:75:4d:9e:08:69:08:84:
ab:79:5d:ff:26:11:c7:ab:26:c1:24:32:4d:f8:de:
b2:b5:c4:c8:bf:4d:01:eb:86:96:8c:e6:71:b8:1e:
be:88:22:dd:96:18:29:92:03:9d:70:8f:12:02:35:
ec:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:85:26:A0:36:89:F7:1D:19:B8:2C:CF:A6:ED:B3:0C:53:73:44:6D
X509v3 Authority Key Identifier:
keyid:09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:7f:d2:e0:c6:a9:a0:b9:f9:68:21:13:30:3b:db:49:1a:e8:
97:11:4c:06:7e:95:c0:ae:b4:99:10:c1:e6:af:17:7d:33:bf:
d1:00:6b:5f:7d:e7:a0:22:83:22:a2:ea:37:31:b0:20:a1:43:
fe:20:a7:1d:24:54:45:ff:dd:ef:f2:b1:32:86:d4:77:42:36:
7e:2b:39:73:cd:fb:4e:a3:3a:e2:50:9c:5a:a2:c6:c0:dc:07:
60:4d:92:9d:b3:dc:67:17:0e:b6:43:62:b8:ad:ef:78:3e:1e:
db:95:18:cc:04:79:49:fb:ed:9a:51:8e:0d:05:6d:b6:39:87:
75:d2:da:cd:d5:f6:89:f4:43:ca:ac:c5:a8:98:b5:f3:59:fb:
c6:1f:ff:99:3f:72:e0:14:2a:26:f5:74:6e:b4:30:a9:85:be:
8c:90:dc:aa:16:7f:6c:d8:17:91:b5:bc:26:7c:55:b4:2f:87:
d0:bf:e0:fa:99:b4:79:5b:10:bd:57:04:88:f3:2d:e7:09:56:
4f:d3:a1:09:93:1f:70:a0:b4:d2:db:f9:3f:13:62:2a:ae:d3:
27:8d:b3:a1:35:99:4b:06:83:27:72:eb:ee:58:c5:6d:88:50:
60:2c:28:6f:91:6f:d9:02:dd:79:b6:ec:d6:7a:8c:7f:07:78:
80:1d:6a:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cpPahBNqmoza936uY8H+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YTRmN2Y0ZTRlOWU3MmMzYTMzOTNmYjVkNmVhNzQyYmMx
YjRjMjgwHhcNMjUwMTMxMTMwMDEzWhcNMjUwMjAxMTMwMDEzWjAzMTEwLwYDVQQD
Eyg4ZDg1MjZhMDM2ODlmNzFkMTliODJjY2ZhNmVkYjMwYzUzNzM0NDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWA36vgZz5WzmQV9BwnXQwxOPCt5
tTEAgLDa8lFiW7XhxbToRplf119be3+F4fGhn9wucbv8Q9L2LoadDsKo/8JCpoOp
6LGjkxXgVJTyESw/LvP+tahNXnqgdlEky/mniObRx8e7yB819c0QCwMPPpm/4/E3
N4wQpSHTC6pIBxUUcGioMtML4hNiniWcGX5XTO0fXVJjUwHMmsa/2OpoSlovn9TM
emgiwlLeB5UoUfiWzfrvgsDFT+60E5c3hqXu0VqDLWnGDl3ESXVNnghpCISreV3/
JhHHqybBJDJN+N6ytcTIv00B64aWjOZxuB6+iCLdlhgpkgOdcI8SAjXstQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2FJqA2ifcdGbgsz6btswxTc0RtMB8GA1UdIwQY
MBaAFAmk9/Tk6ecsOjOT+11up0K8G0woMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2FUMzlPVHA1eXc2TTVQN1hXNm5RcndiVENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8zYjQ4ZDUtMjhkYS00Mzg1LTkzOTUt
Mjg0YzgyZGVjN2M2LzEvQ2FUMzlPVHA1eXc2TTVQN1hXNm5RcndiVENnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8zYjQ4ZDUtMjhkYS00Mzg1LTkzOTUtMjg0YzgyZGVjN2M2
LzEvQ2FUMzlPVHA1eXc2TTVQN1hXNm5RcndiVENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFn/S4Map
oLn5aCETMDvbSRrolxFMBn6VwK60mRDB5q8XfTO/0QBrX33noCKDIqLqNzGwIKFD
/iCnHSRURf/d7/KxMobUd0I2fis5c837TqM64lCcWqLGwNwHYE2SnbPcZxcOtkNi
uK3veD4e25UYzAR5SfvtmlGODQVttjmHddLazdX2ifRDyqzFqJi181n7xh//mT9y
4BQqJvV0brQwqYW+jJDcqhZ/bNgXkbW8JnxVtC+H0L/g+pm0eVsQvVcEiPMt5wlW
T9OhCZMfcKC00tv5PxNiKq7TJ42zoTWZSwaDJ3Lr7ljFbYhQYCwob5Fv2QLdebbs
1nqMfwd4gB1qHA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:40:31 2025 by rpki-client