Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
File: u41koNwhmWscmeaMyVFpTik-3v4.mft (raw, json)
Hash identifier: jj0bUv4oAO5mmfJVALpWyO/TSiqMvsa6miP0MMrRZug=
Subject key identifier: 2C:0F:E7:66:37:1C:1C:C5:A0:75:98:9E:C5:A8:C1:48:97:34:8C:97
Authority key identifier: BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
Certificate issuer: /CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Certificate serial: 0194BD1759F3CE653144D1266239B0436800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
Manifest number: 1434
Signing time: Fri 31 Jan 2025 16:00:11 +0000
Manifest this update: Fri 31 Jan 2025 16:00:11 +0000
Manifest next update: Sat 01 Feb 2025 16:00:11 +0000
Files and hashes: 1: C_0ORiP6GTff8xYOZ4mMicSAww8.roa (hash: HUAyzCwf6jl6lX3eg8riTN4+Y+lTTc8+dOFl1EBg7WI=)
2: YWaaNJeo7smBlwI_T0SxJ5KX4-g.roa (hash: QZs858olOtlmGTBOleulDcnrJGCjiCkhUKDy6SCkdvE=)
3: u41koNwhmWscmeaMyVFpTik-3v4.crl (hash: E/eguyjxme8pLli9Snfc4leJdb7ixzy1fpg5FwJFGLA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:59:f3:ce:65:31:44:d1:26:62:39:b0:43:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Validity
Not Before: Jan 31 16:00:11 2025 GMT
Not After : Feb 1 16:00:11 2025 GMT
Subject: CN=2c0fe766371c1cc5a075989ec5a8c14897348c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:7a:ff:08:38:4b:ee:38:04:e0:f1:f1:cd:
7d:5b:43:87:93:7a:73:36:10:eb:8a:ca:30:62:bd:
db:f8:05:7b:38:c6:f4:50:08:5a:9f:ba:76:ed:9d:
ce:97:ef:05:4a:f8:95:d9:98:31:d5:77:f0:4e:6f:
ce:6d:44:de:2c:4f:68:dc:a8:df:12:54:64:2f:88:
2d:f6:ca:d0:4a:e6:20:95:3e:8a:37:4b:f1:fd:ea:
25:fd:91:96:e4:c4:50:c6:5f:0d:38:d3:18:82:42:
a2:23:ef:96:e7:2e:53:65:8f:c8:b7:6b:1f:f7:f1:
72:08:14:c9:e4:71:14:a7:73:54:fa:29:e2:29:49:
a7:39:b0:90:a1:29:d4:2a:b7:8f:1c:00:37:0a:61:
38:50:d2:25:21:af:8d:45:31:e9:44:0b:94:5d:9f:
3c:b3:1e:0a:7f:09:5b:21:e1:27:40:cc:59:5e:08:
a9:89:e7:77:8e:53:dc:34:11:e6:72:53:0d:40:cd:
b3:81:6c:68:d6:84:bf:0c:67:ea:09:09:06:d1:8c:
d2:57:c8:c6:72:d3:d4:1f:27:79:31:1f:bf:43:2a:
45:57:c7:52:fe:c2:b3:a5:05:98:15:a1:4b:44:95:
2b:ca:86:19:e4:cf:7c:9d:9d:33:ac:2c:49:cc:9d:
29:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0F:E7:66:37:1C:1C:C5:A0:75:98:9E:C5:A8:C1:48:97:34:8C:97
X509v3 Authority Key Identifier:
keyid:BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:96:21:8a:23:e6:c5:7e:a4:dd:bc:c1:32:d7:f5:cc:a5:cb:
24:f5:aa:42:38:04:79:aa:d7:dc:51:b5:a1:57:31:e6:77:3f:
9d:9f:a0:ed:73:85:76:ae:cb:c4:ae:fb:0b:fd:e6:11:ed:81:
54:ce:1e:cf:41:fd:6d:54:70:ab:42:2a:3e:e5:7a:e9:58:59:
4e:88:22:ea:f0:d1:46:c7:77:6c:64:37:ee:0d:3f:41:b4:05:
2d:e4:cc:b3:4b:3e:a0:08:9e:d8:6a:ed:60:89:3c:71:77:4a:
e0:79:7d:ce:49:89:a7:8a:e4:23:54:5d:58:23:6f:d3:e2:5b:
bc:d8:7c:27:27:d2:46:83:a1:21:13:91:83:b4:cf:9d:7b:9f:
63:8a:99:03:18:05:87:b4:9d:6a:5d:5d:dc:c2:92:99:1a:fc:
e4:a2:bf:c5:a8:90:77:18:a3:d5:dd:f4:f9:df:c4:a1:da:0a:
74:28:8f:2e:3b:f7:bf:b2:23:a9:41:bc:f6:ea:e1:bc:be:38:
13:9b:e1:ea:cd:75:94:22:30:b7:aa:6b:a2:2d:93:3c:16:f2:
e9:6c:ea:4a:08:cd:ae:a2:9c:d6:55:b9:d2:d3:23:6e:48:8c:
35:12:86:36:84:e0:6b:7b:75:f0:e4:77:0a:fe:12:99:0e:a0:
d1:9f:90:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F1nzzmUxRNEmYjmwQ2gAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiOGQ2NGEwZGMyMTk5NmIxYzk5ZTY4Y2M5NTE2OTRlMjkz
ZWRlZmUwHhcNMjUwMTMxMTYwMDExWhcNMjUwMjAxMTYwMDExWjAzMTEwLwYDVQQD
EygyYzBmZTc2NjM3MWMxY2M1YTA3NTk4OWVjNWE4YzE0ODk3MzQ4Yzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzZ6/wg4S+44BODx8c19W0OHk3pz
NhDrisowYr3b+AV7OMb0UAhan7p27Z3Ol+8FSviV2Zgx1XfwTm/ObUTeLE9o3Kjf
ElRkL4gt9srQSuYglT6KN0vx/eol/ZGW5MRQxl8NONMYgkKiI++W5y5TZY/It2sf
9/FyCBTJ5HEUp3NU+iniKUmnObCQoSnUKrePHAA3CmE4UNIlIa+NRTHpRAuUXZ88
sx4KfwlbIeEnQMxZXgipied3jlPcNBHmclMNQM2zgWxo1oS/DGfqCQkG0YzSV8jG
ctPUHyd5MR+/QypFV8dS/sKzpQWYFaFLRJUryoYZ5M98nZ0zrCxJzJ0pVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwP52Y3HBzFoHWYnsWowUiXNIyXMB8GA1UdIwQY
MBaAFLuNZKDcIZlrHJnmjMlRaU4pPt7+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yMjAzMTgtNDZmMS00ZWJmLWE3OTUt
ZGQ0YTIxN2Q2MDZiLzEvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yMjAzMTgtNDZmMS00ZWJmLWE3OTUtZGQ0YTIxN2Q2MDZi
LzEvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZYhiiPm
xX6k3bzBMtf1zKXLJPWqQjgEearX3FG1oVcx5nc/nZ+g7XOFdq7LxK77C/3mEe2B
VM4ez0H9bVRwq0IqPuV66VhZTogi6vDRRsd3bGQ37g0/QbQFLeTMs0s+oAie2Grt
YIk8cXdK4Hl9zkmJp4rkI1RdWCNv0+JbvNh8JyfSRoOhIRORg7TPnXufY4qZAxgF
h7Sdal1d3MKSmRr85KK/xaiQdxij1d30+d/EodoKdCiPLjv3v7IjqUG89urhvL44
E5vh6s11lCIwt6proi2TPBby6WzqSgjNrqKc1lW50tMjbkiMNRKGNoTga3t18OR3
Cv4SmQ6g0Z+QIA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:19 2025 by rpki-client