Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
File: 4cxF6EsHjUWK342GdEXEb4yND64.mft (raw, json)
Hash identifier: 07SF9S5fivFQm8XnLBQJu8cyVYYNnxU7ZgedCtVKsYo=
Subject key identifier: 6D:B5:F5:59:E7:FF:F6:72:39:FF:BE:9C:3C:CF:04:3E:ED:09:2A:02
Authority key identifier: E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
Certificate issuer: /CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Certificate serial: 0194BC04DD199D1686F13D3E1EC8E1CDF273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
Manifest number: 12AA
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: 4cxF6EsHjUWK342GdEXEb4yND64.crl (hash: fZlKSEzSL0vrgGqxHWQKk2JNmStN7lc30pQWM93zxEA=)
2: 5-SCWiXEymbKNvt1s5ha59PuWTI.roa (hash: afbec3zYVioBpbWwP/hx1ExlUGeRDVjKKku3aVOXbVc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:dd:19:9d:16:86:f1:3d:3e:1e:c8:e1:cd:f2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=6db5f559e7fff67239ffbe9c3ccf043eed092a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e9:ef:d5:25:7a:f7:84:97:3e:25:dc:b5:94:
8f:b6:ac:a1:d2:2b:09:28:7f:5f:8c:16:42:83:38:
f0:38:e1:b0:22:5c:53:12:b8:f4:b2:cb:be:c2:63:
93:2c:2b:0f:22:fb:af:4d:71:02:c3:b3:61:7d:a2:
68:3d:f9:1d:68:ec:90:ca:54:18:20:eb:4b:f1:b0:
a3:ab:b1:1a:2e:a4:cd:5b:d9:8d:10:e0:9d:a2:ef:
08:68:20:88:a7:8f:70:82:0e:f9:4b:7c:d9:80:0a:
5d:c2:d7:68:2a:cc:d2:4c:29:84:f7:40:27:57:8d:
c6:15:cf:ae:02:40:b2:40:13:9c:42:3d:ec:59:20:
02:53:85:42:5a:0d:84:78:00:a3:5a:7e:a6:66:02:
fa:5e:94:42:bb:d5:8a:63:43:e7:38:18:c6:f9:21:
78:ef:df:bb:17:2a:ac:2d:f2:12:c8:04:29:7b:c2:
ee:f5:cc:68:92:ff:64:ba:05:75:7e:f9:f5:70:1c:
31:98:0a:e8:f3:3a:34:5e:94:2e:8d:cc:d2:5c:8a:
61:5e:38:b3:9b:b1:bb:d7:fd:9b:a5:9d:10:63:c4:
2a:65:f4:6f:58:f4:a5:7c:99:45:6b:7e:e3:91:5d:
a5:31:00:13:26:c6:35:4d:52:fa:52:9b:73:29:fc:
a0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B5:F5:59:E7:FF:F6:72:39:FF:BE:9C:3C:CF:04:3E:ED:09:2A:02
X509v3 Authority Key Identifier:
keyid:E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:22:e7:33:50:c5:fd:fb:ea:4a:81:ac:9e:8f:bc:f9:40:0d:
7f:cd:d3:6e:10:d1:78:e7:ec:a3:65:49:03:ab:3a:54:7a:1f:
c9:81:82:bf:f8:f0:89:bf:35:45:3a:7c:b8:37:fc:9b:0b:34:
4a:37:04:f8:8c:ca:7f:9e:26:9d:5e:7b:ad:02:b0:65:53:87:
19:55:2a:5f:80:bd:38:ea:06:37:1a:12:f0:03:65:71:ff:6f:
88:19:53:fc:d7:94:c8:93:5d:a7:79:3d:13:8f:a7:17:92:aa:
5b:9b:cf:41:2f:9c:ba:d7:5d:5c:cf:ac:de:06:1e:1d:66:57:
35:ae:e6:7a:97:7f:08:bd:40:6f:58:0b:21:7f:6a:db:2f:12:
10:77:24:14:55:70:4b:fc:fe:db:f5:4a:6e:fa:e9:42:44:99:
a2:29:d8:9d:ac:e1:98:f6:1c:0b:5c:31:a8:ec:af:4e:68:53:
e3:dc:e0:11:f8:4b:08:2b:e1:64:da:ee:40:ca:7c:82:d0:2b:
a3:c7:fa:10:76:57:e1:50:35:f5:d1:c2:c0:6d:18:a0:60:32:
fe:da:d7:34:8a:9e:1e:c7:8e:64:92:76:bc:d6:77:fa:fa:6f:
4b:56:69:8d:fe:b7:61:48:c2:6e:27:12:e7:6c:fa:65:5b:86:
a3:dd:bb:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BN0ZnRaG8T0+HsjhzfJzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxY2M0NWU4NGIwNzhkNDU4YWRmOGQ4Njc0NDVjNDZmOGM4
ZDBmYWUwHhcNMjUwMTMxMTEwMDIyWhcNMjUwMjAxMTEwMDIyWjAzMTEwLwYDVQQD
Eyg2ZGI1ZjU1OWU3ZmZmNjcyMzlmZmJlOWMzY2NmMDQzZWVkMDkyYTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwunv1SV694SXPiXctZSPtqyh0isJ
KH9fjBZCgzjwOOGwIlxTErj0ssu+wmOTLCsPIvuvTXECw7NhfaJoPfkdaOyQylQY
IOtL8bCjq7EaLqTNW9mNEOCdou8IaCCIp49wgg75S3zZgApdwtdoKszSTCmE90An
V43GFc+uAkCyQBOcQj3sWSACU4VCWg2EeACjWn6mZgL6XpRCu9WKY0PnOBjG+SF4
79+7FyqsLfISyAQpe8Lu9cxokv9kugV1fvn1cBwxmAro8zo0XpQujczSXIphXjiz
m7G71/2bpZ0QY8QqZfRvWPSlfJlFa37jkV2lMQATJsY1TVL6UptzKfygkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG219Vnn//ZyOf++nDzPBD7tCSoCMB8GA1UdIwQY
MBaAFOHMRehLB41Fit+NhnRFxG+MjQ+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGN4RjZFc0hqVVdLMzQyR2RFWEViNHlORDY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wOGFiYTgtYjc1Ni00NDkyLWE3ZWQt
NjMyMGM0NjBhM2Y4LzEvNGN4RjZFc0hqVVdLMzQyR2RFWEViNHlORDY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8wOGFiYTgtYjc1Ni00NDkyLWE3ZWQtNjMyMGM0NjBhM2Y4
LzEvNGN4RjZFc0hqVVdLMzQyR2RFWEViNHlORDY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfCLnM1DF
/fvqSoGsno+8+UANf83TbhDReOfso2VJA6s6VHofyYGCv/jwib81RTp8uDf8mws0
SjcE+IzKf54mnV57rQKwZVOHGVUqX4C9OOoGNxoS8ANlcf9viBlT/NeUyJNdp3k9
E4+nF5KqW5vPQS+cutddXM+s3gYeHWZXNa7mepd/CL1Ab1gLIX9q2y8SEHckFFVw
S/z+2/VKbvrpQkSZoinYnazhmPYcC1wxqOyvTmhT49zgEfhLCCvhZNruQMp8gtAr
o8f6EHZX4VA19dHCwG0YoGAy/trXNIqeHseOZJJ2vNZ3+vpvS1Zpjf63YUjCbicS
52z6ZVuGo927cQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:43:11 2025 by rpki-client