Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
File: l4jeG3V-qqtedrGW4Xi2C15sJAw.mft (raw, json)
Hash identifier: 0XI/E0ZgeLBZ27kdhZpGPRI6JGqbNL7nZCDqqouBPqA=
Subject key identifier: 9D:46:5F:7C:3E:17:78:93:64:D5:7B:53:A2:49:59:63:44:15:51:2B
Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
Certificate issuer: /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Certificate serial: 0194BBCDB6EBC280E031F8DE550B5A4DFAA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
Manifest number: 02FF
Signing time: Fri 31 Jan 2025 10:00:08 +0000
Manifest this update: Fri 31 Jan 2025 10:00:08 +0000
Manifest next update: Sat 01 Feb 2025 10:00:08 +0000
Files and hashes: 1: V2RodRkZh7eC6bXk6s50iKPnz20.roa (hash: flwyJ5HDdlUN6kAnMIhAje5bgLCjv6WkxqxL4dovgJw=)
2: l4jeG3V-qqtedrGW4Xi2C15sJAw.crl (hash: FxjTlzgFiC6deNdkcWR+7AtHbczg5JoN3366WtUyhAE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b6:eb:c2:80:e0:31:f8:de:55:0b:5a:4d:fa:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Validity
Not Before: Jan 31 10:00:08 2025 GMT
Not After : Feb 1 10:00:08 2025 GMT
Subject: CN=9d465f7c3e17789364d57b53a24959634415512b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a6:16:3f:12:38:e2:9d:d6:a4:bd:98:b6:78:
6d:6c:c2:37:2a:46:90:ad:02:cb:b7:6b:37:93:7d:
ce:9c:1a:cb:6d:dd:d5:d9:1b:2a:08:5b:94:ab:78:
ac:94:f4:84:da:0a:cd:09:90:1c:44:d8:de:b4:54:
36:3d:89:57:bc:2c:ec:39:71:5f:80:f1:10:37:b8:
c2:35:af:7e:f9:ac:1d:06:75:72:52:22:e2:50:3c:
21:92:80:57:ff:82:d2:5f:c0:f9:01:07:02:bf:c1:
15:7b:05:43:69:e0:b6:a9:2f:f3:6e:23:2e:8f:98:
68:a6:e7:69:cb:d9:c2:e9:c2:38:a5:50:38:8b:ed:
40:67:d0:08:61:9b:9f:67:cc:dc:01:f3:fe:de:42:
59:50:8a:ba:99:62:0c:84:e3:80:b7:2c:64:16:31:
a2:88:0a:39:4b:05:a8:12:96:6d:c1:9a:8d:b7:c4:
37:41:7d:ef:22:88:eb:76:03:ae:03:60:3a:18:84:
92:46:53:9d:6d:31:89:73:4b:1d:e8:0c:20:c1:df:
49:8e:85:a4:51:7b:4a:7b:4c:79:2d:af:f4:c6:05:
6a:2d:6b:e4:15:be:3a:ea:7b:35:7e:e6:19:4d:65:
4b:73:e2:a8:66:b4:0c:ac:c7:0f:18:74:f3:48:c8:
94:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:46:5F:7C:3E:17:78:93:64:D5:7B:53:A2:49:59:63:44:15:51:2B
X509v3 Authority Key Identifier:
keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d5:c6:73:32:a7:c3:e4:3d:a4:68:89:b1:98:90:a5:0f:49:
8c:ca:df:26:c4:b2:66:33:e7:f9:f3:38:58:59:5a:b9:5d:c4:
38:73:51:f8:53:d0:30:d6:37:ec:bd:71:6e:df:86:fe:39:9f:
8f:e4:1b:1a:4c:49:c7:2d:c7:99:27:99:b4:a1:d9:82:36:b1:
14:5c:73:69:85:00:6f:a0:30:f4:3e:6d:20:ef:40:08:1f:cc:
ce:11:b5:a4:28:8c:a5:81:e1:eb:5d:74:78:ea:33:83:6b:2e:
5d:0e:93:1c:0b:24:2b:9b:eb:8c:b8:71:3b:0a:9c:d0:54:41:
91:4a:65:e0:a5:79:37:9e:fc:af:ea:14:2e:38:72:da:aa:82:
85:67:bd:af:1f:b8:7c:95:a0:32:a0:e3:bf:a5:fe:5c:f3:39:
99:7f:b4:01:fa:85:a5:00:a9:35:5c:17:6c:67:82:2a:8d:f3:
c2:29:83:e4:73:16:5f:28:45:c8:0a:12:47:c9:6b:96:17:03:
cc:9d:5b:6b:d4:e3:47:f8:a1:97:5c:9b:5c:f7:18:80:1c:57:
9a:44:b4:63:f0:85:d7:ee:cb:42:59:46:59:7a:1d:c4:9c:ef:
2d:63:6d:53:c6:02:24:be:ff:d7:15:cc:b6:71:a8:e0:95:1e:
a4:01:f5:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zbbrwoDgMfjeVQtaTfqpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ODhkZTFiNzU3ZWFhYWI1ZTc2YjE5NmUxNzhiNjBiNWU2
YzI0MGMwHhcNMjUwMTMxMTAwMDA4WhcNMjUwMjAxMTAwMDA4WjAzMTEwLwYDVQQD
Eyg5ZDQ2NWY3YzNlMTc3ODkzNjRkNTdiNTNhMjQ5NTk2MzQ0MTU1MTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaYWPxI44p3WpL2YtnhtbMI3KkaQ
rQLLt2s3k33OnBrLbd3V2RsqCFuUq3islPSE2grNCZAcRNjetFQ2PYlXvCzsOXFf
gPEQN7jCNa9++awdBnVyUiLiUDwhkoBX/4LSX8D5AQcCv8EVewVDaeC2qS/zbiMu
j5hopudpy9nC6cI4pVA4i+1AZ9AIYZufZ8zcAfP+3kJZUIq6mWIMhOOAtyxkFjGi
iAo5SwWoEpZtwZqNt8Q3QX3vIojrdgOuA2A6GISSRlOdbTGJc0sd6Awgwd9JjoWk
UXtKe0x5La/0xgVqLWvkFb466ns1fuYZTWVLc+KoZrQMrMcPGHTzSMiUZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1GX3w+F3iTZNV7U6JJWWNEFVErMB8GA1UdIwQY
MBaAFJeI3ht1fqqrXnaxluF4tgtebCQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy83M2NhNTctNGVlZS00YzI5LTgxNGEt
ODE3OTBmNjFlNzk0LzEvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy83M2NhNTctNGVlZS00YzI5LTgxNGEtODE3OTBmNjFlNzk0
LzEvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNXGczKn
w+Q9pGiJsZiQpQ9JjMrfJsSyZjPn+fM4WFlauV3EOHNR+FPQMNY37L1xbt+G/jmf
j+QbGkxJxy3HmSeZtKHZgjaxFFxzaYUAb6Aw9D5tIO9ACB/MzhG1pCiMpYHh6110
eOozg2suXQ6THAskK5vrjLhxOwqc0FRBkUpl4KV5N578r+oULjhy2qqChWe9rx+4
fJWgMqDjv6X+XPM5mX+0AfqFpQCpNVwXbGeCKo3zwimD5HMWXyhFyAoSR8lrlhcD
zJ1ba9TjR/ihl1ybXPcYgBxXmkS0Y/CF1+7LQllGWXodxJzvLWNtU8YCJL7/1xXM
tnGo4JUepAH1Dg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:02 2025 by rpki-client