Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
File: dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft (raw, json)
Hash identifier: dSPJ2thfRjAa2Q3tXUYvypnMbD6+cw6yS2XyiFlak/U=
Subject key identifier: 15:BC:42:62:AF:6D:68:60:A0:2E:38:22:06:C8:DE:2D:61:6F:16:C0
Authority key identifier: 74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
Certificate issuer: /CN=74d7da63929999603395877448ce50ac6e0213a9
Certificate serial: 0194BBCE363E4487DBF62D235A5A184831A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
Manifest number: 0C91
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl (hash: n2rEsosCe4LRHHFKB8cZKVKHVRN5EN3LLClevpJe45Y=)
2: fU3MlRUECyf8Mob8gpdjGa0WFt0.roa (hash: 1bRjiSyIpRcT6gpZZI2DT+oOrLLRlf7RVwqkDF08rbw=)
3: fzU99qCGkV_CIT5aPe-FRXxnYbQ.roa (hash: vzw9SWyMsFCc6IE8QjYq1it7590sCq4Ux6IdTNIF19M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:36:3e:44:87:db:f6:2d:23:5a:5a:18:48:31:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d7da63929999603395877448ce50ac6e0213a9
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=15bc4262af6d6860a02e382206c8de2d616f16c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:12:bb:53:fc:ad:f6:56:aa:af:71:40:96:14:
5a:93:35:65:ad:bd:1b:cf:1e:fe:42:70:0d:2b:98:
de:33:f0:70:96:26:4e:e6:da:1f:85:68:fb:30:36:
be:8e:8b:39:9b:e9:5d:33:9c:08:b8:46:19:70:3c:
6c:47:e4:e3:86:24:a8:42:43:41:46:1a:2d:84:74:
a6:5e:b9:93:4b:59:a1:71:cc:c9:c4:3b:35:41:e4:
6c:30:aa:c7:ef:39:60:0c:8a:8a:1b:19:11:dd:64:
a8:2d:94:35:78:c8:ae:60:2e:f4:06:f6:46:54:41:
5f:69:50:f4:4f:6c:be:93:d0:29:ec:ce:e3:06:d3:
e9:34:dd:62:9a:e1:57:f7:fa:e0:09:1c:52:83:6c:
0d:c6:d9:9a:fc:5a:09:42:63:90:3e:3a:c2:7e:73:
35:00:34:aa:26:ec:b7:fd:40:75:8c:d9:2f:29:bd:
15:03:1b:b9:8c:23:29:3e:32:4e:cb:5f:ba:06:a3:
c0:6f:1e:e7:7f:05:1a:e8:48:7e:71:9a:26:52:fb:
79:c3:5a:d1:97:b9:6e:4d:e2:5f:56:ce:87:d1:85:
6b:2a:a6:0b:e4:8a:6c:0c:b7:5e:96:c9:20:dc:6e:
64:e0:d4:d0:b2:f4:62:d5:38:68:09:fd:6e:04:37:
69:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BC:42:62:AF:6D:68:60:A0:2E:38:22:06:C8:DE:2D:61:6F:16:C0
X509v3 Authority Key Identifier:
keyid:74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:77:7d:1b:5d:01:b6:70:3d:bd:a9:0d:10:47:49:df:b6:bf:
04:c2:73:29:c8:a3:43:bf:6a:9c:16:93:1e:13:84:36:ea:ba:
00:82:64:f5:cf:89:1e:65:3f:da:ed:36:12:ce:a1:cd:0e:d8:
27:3c:85:f2:01:e4:7b:06:f4:a2:01:63:64:26:20:c9:d1:a6:
0f:5e:e6:02:c6:e8:d0:61:78:15:e8:f8:60:ee:15:6f:a0:4e:
49:26:2d:7d:6c:00:f9:9d:ce:e0:62:da:a3:ce:fd:3c:9f:c6:
40:d2:02:d4:6b:b9:dc:47:36:38:23:08:c3:79:6f:66:c5:39:
ec:a3:34:04:91:41:d4:3c:a2:02:8c:b7:1a:0e:98:db:7b:0e:
59:2c:c3:7b:ab:c4:92:26:e6:86:e0:82:a6:d3:48:fb:30:de:
fa:9c:9b:81:68:d4:64:0a:24:ab:ef:58:f6:e5:59:2c:cb:82:
c2:6d:b1:04:a8:0a:bf:47:5d:77:d0:bb:51:82:d3:5e:57:fc:
66:c1:db:ca:53:0c:fe:4b:4f:20:67:96:8a:bf:10:e6:f0:9b:
b5:7d:bb:bc:4b:26:d5:d0:e6:1f:35:64:be:87:4b:c9:1c:81:
5a:57:5a:bc:a7:a2:8f:99:dc:7a:ed:ed:0e:05:1b:a3:66:f2:
ce:f4:db:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zjY+RIfb9i0jWloYSDGjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZDdkYTYzOTI5OTk5NjAzMzk1ODc3NDQ4Y2U1MGFjNmUw
MjEzYTkwHhcNMjUwMTMxMTAwMDQxWhcNMjUwMjAxMTAwMDQxWjAzMTEwLwYDVQQD
EygxNWJjNDI2MmFmNmQ2ODYwYTAyZTM4MjIwNmM4ZGUyZDYxNmYxNmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRK7U/yt9laqr3FAlhRakzVlrb0b
zx7+QnANK5jeM/BwliZO5tofhWj7MDa+jos5m+ldM5wIuEYZcDxsR+TjhiSoQkNB
RhothHSmXrmTS1mhcczJxDs1QeRsMKrH7zlgDIqKGxkR3WSoLZQ1eMiuYC70BvZG
VEFfaVD0T2y+k9Ap7M7jBtPpNN1imuFX9/rgCRxSg2wNxtma/FoJQmOQPjrCfnM1
ADSqJuy3/UB1jNkvKb0VAxu5jCMpPjJOy1+6BqPAbx7nfwUa6Eh+cZomUvt5w1rR
l7luTeJfVs6H0YVrKqYL5IpsDLdelskg3G5k4NTQsvRi1ThoCf1uBDdpFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBW8QmKvbWhgoC44IgbI3i1hbxbAMB8GA1UdIwQY
MBaAFHTX2mOSmZlgM5WHdEjOUKxuAhOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE5mYVk1S1ptV0F6bFlkMFNNNVFyRzRDRTZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wZWI4NTItYWYzNC00Y2I5LTg3MmUt
NGI1ZDVkNWY4Njk5LzEvZE5mYVk1S1ptV0F6bFlkMFNNNVFyRzRDRTZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8wZWI4NTItYWYzNC00Y2I5LTg3MmUtNGI1ZDVkNWY4Njk5
LzEvZE5mYVk1S1ptV0F6bFlkMFNNNVFyRzRDRTZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWnd9G10B
tnA9vakNEEdJ37a/BMJzKcijQ79qnBaTHhOENuq6AIJk9c+JHmU/2u02Es6hzQ7Y
JzyF8gHkewb0ogFjZCYgydGmD17mAsbo0GF4Fej4YO4Vb6BOSSYtfWwA+Z3O4GLa
o879PJ/GQNIC1Gu53Ec2OCMIw3lvZsU57KM0BJFB1DyiAoy3Gg6Y23sOWSzDe6vE
kibmhuCCptNI+zDe+pybgWjUZAokq+9Y9uVZLMuCwm2xBKgKv0ddd9C7UYLTXlf8
ZsHbylMM/ktPIGeWir8Q5vCbtX27vEsm1dDmHzVkvodLyRyBWldavKeij5nceu3t
DgUbo2byzvTbbw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:35:22 2025 by rpki-client