Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
File: 36acPZg4XUFUBfxv0wqAA2PAF8E.mft (raw, json)
Hash identifier: ce6o384yumjJNDJzUbB/ZQwnHgLBcZfhBizRP0OjKVo=
Subject key identifier: 58:00:99:FA:69:CA:A6:E4:90:5A:ED:21:D8:57:93:12:B2:17:5F:F3
Authority key identifier: DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1
Certificate issuer: /CN=dfa69c3d98385d415405fc6fd30a800363c017c1
Certificate serial: 0194BCAA05751CE5D33E69C7F7030863FEDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:46 +0000
Manifest this update: Fri 31 Jan 2025 14:00:46 +0000
Manifest next update: Sat 01 Feb 2025 14:00:46 +0000
Files and hashes: 1: 36acPZg4XUFUBfxv0wqAA2PAF8E.crl (hash: ZrV86pQxa++A2NAhVSYeldyYaI6p1pYhZDsf6XzjrkM=)
2: G4W66DIS-tOhTOL4rAP2DQwRdL0.roa (hash: T0yTA2cPiVodR8G3AqqlUGuyKJW1C3bce+LSKeiweEY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:05:75:1c:e5:d3:3e:69:c7:f7:03:08:63:fe:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfa69c3d98385d415405fc6fd30a800363c017c1
Validity
Not Before: Jan 31 14:00:46 2025 GMT
Not After : Feb 1 14:00:46 2025 GMT
Subject: CN=580099fa69caa6e4905aed21d8579312b2175ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:16:00:dc:66:82:0d:3f:6d:a7:51:d0:ec:
90:27:4f:51:7e:e0:68:d2:7f:ec:f1:a5:b4:6c:ee:
7b:0c:e9:46:11:e1:b8:cd:36:b3:c5:c8:6a:29:cd:
94:9d:a8:12:20:9c:9b:c0:07:36:38:8c:ba:c7:f9:
85:37:bf:03:9b:3e:bd:d9:05:61:b3:fb:cc:5c:e0:
d1:db:b9:f3:99:e4:e8:63:47:fa:4b:b3:68:f2:af:
00:e4:99:cb:d3:19:e1:c3:3e:4d:92:28:9e:20:40:
1e:3b:a9:4f:e3:82:e4:c7:74:7d:17:2b:a3:e3:7c:
0a:50:e7:97:c4:5e:87:5f:5b:8f:9f:fd:e5:dc:b5:
6c:80:f1:5b:42:af:37:3b:8d:c5:71:be:6b:86:53:
fc:5f:66:1a:73:10:74:da:ef:26:57:90:0e:87:c5:
44:b1:c8:d3:3d:ce:73:14:e9:43:4f:77:c4:fc:4f:
e2:50:b2:dd:22:57:ef:52:35:4e:ea:f5:97:e1:9a:
55:29:41:c0:01:93:f4:b5:9e:72:98:d8:f4:a2:62:
18:b2:b4:ca:bc:7d:5b:a9:1b:70:61:c8:d8:b1:5d:
f3:34:19:1b:c9:01:ae:36:91:47:e7:19:98:8d:f1:
01:c4:2f:ef:8a:9e:47:58:5a:97:6f:42:f6:1b:65:
15:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:00:99:FA:69:CA:A6:E4:90:5A:ED:21:D8:57:93:12:B2:17:5F:F3
X509v3 Authority Key Identifier:
keyid:DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:07:72:7d:e0:e0:36:26:67:88:61:a9:bb:c7:4d:ce:6e:06:
49:95:07:fa:70:e6:43:9b:65:41:a6:81:57:7e:db:a9:e1:7c:
06:f3:03:9e:df:27:62:b5:33:93:a5:57:02:af:d9:b0:dd:c3:
e8:1d:4d:1d:f7:55:b9:85:27:06:e2:f5:e2:4e:ce:9d:35:99:
7e:e4:88:9c:cd:70:4c:8b:92:ea:0f:14:e5:31:28:0e:32:5a:
e6:b8:e1:a4:07:b2:6c:cd:c4:74:17:57:e1:40:f4:0f:da:f6:
00:83:b0:5d:a0:7e:43:80:e6:63:a9:01:69:fe:2f:6e:e9:a8:
f6:a7:2b:58:63:1d:77:e5:91:72:37:50:d9:79:04:75:e6:7d:
ad:53:82:7d:9a:1f:8d:d5:34:59:2a:22:1d:28:41:9f:34:84:
ec:47:f8:3b:b2:df:27:75:cc:7f:6c:d5:55:e8:bc:34:0c:8b:
dd:33:3b:cd:07:cb:1b:45:d5:30:fd:4c:bb:cc:38:7e:8a:39:
5c:d8:ec:8e:cb:c7:ee:fe:0a:0d:09:4f:0a:c0:59:01:de:0c:
23:92:02:71:3a:80:1a:c2:5b:97:db:9c:3b:94:79:82:d1:d5:
6b:91:b2:d2:70:92:16:ac:14:78:15:41:e0:8f:d9:99:7b:87:
e9:56:d2:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qgV1HOXTPmnH9wMIY/7fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYTY5YzNkOTgzODVkNDE1NDA1ZmM2ZmQzMGE4MDAzNjNj
MDE3YzEwHhcNMjUwMTMxMTQwMDQ2WhcNMjUwMjAxMTQwMDQ2WjAzMTEwLwYDVQQD
Eyg1ODAwOTlmYTY5Y2FhNmU0OTA1YWVkMjFkODU3OTMxMmIyMTc1ZmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKgWANxmgg0/badR0OyQJ09RfuBo
0n/s8aW0bO57DOlGEeG4zTazxchqKc2UnagSIJybwAc2OIy6x/mFN78Dmz692QVh
s/vMXODR27nzmeToY0f6S7No8q8A5JnL0xnhwz5NkiieIEAeO6lP44Lkx3R9Fyuj
43wKUOeXxF6HX1uPn/3l3LVsgPFbQq83O43Fcb5rhlP8X2YacxB02u8mV5AOh8VE
scjTPc5zFOlDT3fE/E/iULLdIlfvUjVO6vWX4ZpVKUHAAZP0tZ5ymNj0omIYsrTK
vH1bqRtwYcjYsV3zNBkbyQGuNpFH5xmYjfEBxC/vip5HWFqXb0L2G2UVkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgAmfppyqbkkFrtIdhXkxKyF1/zMB8GA1UdIwQY
MBaAFN+mnD2YOF1BVAX8b9MKgANjwBfBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzZhY1BaZzRYVUZVQmZ4djB3cUFBMlBBRjhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wZDQ4MTAtOTAyYS00YjdkLTk4MTgt
M2NlZjU2MjVhZWQ2LzEvMzZhY1BaZzRYVUZVQmZ4djB3cUFBMlBBRjhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8wZDQ4MTAtOTAyYS00YjdkLTk4MTgtM2NlZjU2MjVhZWQ2
LzEvMzZhY1BaZzRYVUZVQmZ4djB3cUFBMlBBRjhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQdyfeDg
NiZniGGpu8dNzm4GSZUH+nDmQ5tlQaaBV37bqeF8BvMDnt8nYrUzk6VXAq/ZsN3D
6B1NHfdVuYUnBuL14k7OnTWZfuSInM1wTIuS6g8U5TEoDjJa5rjhpAeybM3EdBdX
4UD0D9r2AIOwXaB+Q4DmY6kBaf4vbumo9qcrWGMdd+WRcjdQ2XkEdeZ9rVOCfZof
jdU0WSoiHShBnzSE7Ef4O7LfJ3XMf2zVVei8NAyL3TM7zQfLG0XVMP1Mu8w4foo5
XNjsjsvH7v4KDQlPCsBZAd4MI5ICcTqAGsJbl9ucO5R5gtHVa5Gy0nCSFqwUeBVB
4I/ZmXuH6VbSjQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:27:21 2025 by rpki-client