Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
File: 2SytEfEthtGJUcvXUe5RJPcYlR8.mft (raw, json)
Hash identifier: YlrLEJ6EEXTrS3Qr7cAMW+m10qo2RC5IgPJnqx1nzUA=
Subject key identifier: 04:3F:37:44:86:03:96:B9:DE:06:45:99:3E:D9:9E:5B:D5:16:B4:BF
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Certificate issuer: /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial: 0194BD859F3D877652A3294EF88C10A179D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
Manifest number: 0DCF
Signing time: Fri 31 Jan 2025 18:00:38 +0000
Manifest this update: Fri 31 Jan 2025 18:00:38 +0000
Manifest next update: Sat 01 Feb 2025 18:00:38 +0000
Files and hashes: 1: 2SytEfEthtGJUcvXUe5RJPcYlR8.crl (hash: kWvVc6IOeiIw+6lPJq/q6LiVtMmObiZupKHcnJolWmM=)
2: lh0r2c2rRWOg01uWo5CM03GyM1s.roa (hash: k3pD8AzqS8DbrBmJNcxRYtTDyImlclNux7CY8s079js=)
3: uTLyh0W8m68_V2bMQcHtyK_zdWA.roa (hash: 2XUbaOIwLIl96z8qId5rz9LYBuQvv5k3VK/Av3lKN20=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9f:3d:87:76:52:a3:29:4e:f8:8c:10:a1:79:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
Validity
Not Before: Jan 31 18:00:38 2025 GMT
Not After : Feb 1 18:00:38 2025 GMT
Subject: CN=043f3744860396b9de0645993ed99e5bd516b4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:85:af:2d:d9:ff:43:28:1a:6d:c6:f1:82:db:
a3:7b:5b:ea:45:41:04:42:e4:36:94:09:59:85:bd:
e0:f8:72:d3:ed:78:12:e9:b5:93:ac:f4:b4:28:d2:
f0:06:e1:c1:e8:fd:f1:04:15:2f:25:6d:39:fa:e0:
69:5d:ac:e5:af:df:9c:c3:ef:cc:71:64:37:12:25:
d3:d9:42:41:7d:f2:fd:85:3d:3f:b7:a4:ed:06:17:
3b:cc:27:aa:fd:0d:56:b3:02:26:9c:04:18:e0:b0:
35:26:41:2a:88:1e:c1:5b:14:6c:2d:5c:d7:80:fa:
6a:e6:8a:5e:2c:fc:af:87:aa:04:d0:9f:26:92:8f:
1b:3e:84:8b:da:4d:fc:30:1e:99:3e:ab:66:13:54:
d3:6f:17:57:e4:f3:0c:02:4a:ab:2d:ae:1f:fb:ab:
22:b1:db:72:c8:01:c2:14:4e:0e:cc:fb:7e:03:71:
d4:05:02:89:f8:21:a2:91:95:54:4b:58:e4:60:6f:
3d:67:00:21:41:c9:59:91:c8:a1:2e:87:9e:11:5b:
af:80:37:4b:d9:57:be:be:b2:1c:37:46:ac:f1:cc:
5d:d9:3c:17:c1:30:d5:03:4d:94:32:00:93:97:40:
ee:16:a1:fc:12:85:10:3b:9a:6c:9b:ad:9c:f5:05:
3c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3F:37:44:86:03:96:B9:DE:06:45:99:3E:D9:9E:5B:D5:16:B4:BF
X509v3 Authority Key Identifier:
keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:79:98:d6:bb:cc:cd:6e:06:7d:6f:f9:06:d2:e3:62:85:2f:
e3:f1:8c:22:db:ba:af:c4:f2:17:ae:e5:e1:d6:d9:8a:b8:24:
67:c4:72:3b:8d:58:08:b6:d0:af:99:67:77:f2:27:c4:7a:9c:
88:3c:51:94:45:de:e5:3b:71:e2:ee:73:0a:6d:70:74:04:31:
64:c4:18:aa:f8:2a:28:1c:69:20:0e:9e:c5:90:10:82:28:46:
84:f9:e4:38:e2:3a:0d:48:f8:2c:0d:5b:ba:cd:85:3a:2f:37:
fe:46:14:04:49:b0:c6:5a:b3:35:2c:81:e6:1e:bb:dd:ad:0b:
97:cf:86:88:6b:12:55:e7:ec:9e:0e:5d:93:82:cb:a2:f5:87:
9b:a6:77:71:e5:6c:98:4f:87:a6:62:68:80:f6:66:a2:3d:c8:
7d:99:e9:76:55:29:df:28:24:1c:ec:35:b1:c3:54:5f:9c:de:
a3:2f:1e:2b:cc:37:84:f2:4c:b4:d4:67:d0:d2:a0:19:bf:72:
f1:37:ac:aa:72:d8:93:4e:e4:c1:6c:d4:7b:af:67:9d:c3:64:
cc:9b:6c:dc:ae:fb:5f:21:49:bb:cb:f1:ff:c0:25:85:7c:7c:
c6:ad:c1:6e:1b:09:a9:07:17:cf:35:d1:e9:a8:df:75:f3:95:
6f:ee:62:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hZ89h3ZSoylO+IwQoXnUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MmNhZDExZjEyZDg2ZDE4OTUxY2JkNzUxZWU1MTI0Zjcx
ODk1MWYwHhcNMjUwMTMxMTgwMDM4WhcNMjUwMjAxMTgwMDM4WjAzMTEwLwYDVQQD
EygwNDNmMzc0NDg2MDM5NmI5ZGUwNjQ1OTkzZWQ5OWU1YmQ1MTZiNGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYWvLdn/Qygabcbxgtuje1vqRUEE
QuQ2lAlZhb3g+HLT7XgS6bWTrPS0KNLwBuHB6P3xBBUvJW05+uBpXazlr9+cw+/M
cWQ3EiXT2UJBffL9hT0/t6TtBhc7zCeq/Q1WswImnAQY4LA1JkEqiB7BWxRsLVzX
gPpq5opeLPyvh6oE0J8mko8bPoSL2k38MB6ZPqtmE1TTbxdX5PMMAkqrLa4f+6si
sdtyyAHCFE4OzPt+A3HUBQKJ+CGikZVUS1jkYG89ZwAhQclZkcihLoeeEVuvgDdL
2Ve+vrIcN0as8cxd2TwXwTDVA02UMgCTl0DuFqH8EoUQO5psm62c9QU8wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQ/N0SGA5a53gZFmT7ZnlvVFrS/MB8GA1UdIwQY
MBaAFNksrRHxLYbRiVHL11HuUST3GJUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlN5dEVmRXRodEdKVWN2WFVlNVJKUGNZbFI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wOWJkOTEtNWUxOC00MjEzLTgwNTMt
MWIwM2ZkYmEwYTI0LzEvMlN5dEVmRXRodEdKVWN2WFVlNVJKUGNZbFI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8wOWJkOTEtNWUxOC00MjEzLTgwNTMtMWIwM2ZkYmEwYTI0
LzEvMlN5dEVmRXRodEdKVWN2WFVlNVJKUGNZbFI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQHmY1rvM
zW4GfW/5BtLjYoUv4/GMItu6r8TyF67l4dbZirgkZ8RyO41YCLbQr5lnd/InxHqc
iDxRlEXe5Ttx4u5zCm1wdAQxZMQYqvgqKBxpIA6exZAQgihGhPnkOOI6DUj4LA1b
us2FOi83/kYUBEmwxlqzNSyB5h673a0Ll8+GiGsSVefsng5dk4LLovWHm6Z3ceVs
mE+HpmJogPZmoj3IfZnpdlUp3ygkHOw1scNUX5zeoy8eK8w3hPJMtNRn0NKgGb9y
8TesqnLYk07kwWzUe69nncNkzJts3K77XyFJu8vx/8AlhXx8xq3BbhsJqQcXzzXR
6ajfdfOVb+5ivQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:18 2025 by rpki-client