Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
File: 0x1LlB4GS0a8Ka9kW8dUcE06lME.mft (raw, json)
Hash identifier: ebt7Wh+bUa73OyJ/z/z4ra4zAMF+OenyEl4NAM473W0=
Subject key identifier: E0:8F:63:9F:C7:77:62:E6:C5:8D:CB:12:33:A4:8A:F9:AA:B8:35:D7
Authority key identifier: D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
Certificate issuer: /CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Certificate serial: 0194BCE0CE4F1ED6DED19CE7CF78EBEC48A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
Manifest number: 03E0
Signing time: Fri 31 Jan 2025 15:00:36 +0000
Manifest this update: Fri 31 Jan 2025 15:00:36 +0000
Manifest next update: Sat 01 Feb 2025 15:00:36 +0000
Files and hashes: 1: 0x1LlB4GS0a8Ka9kW8dUcE06lME.crl (hash: zVypLUTvYlXSoaoswu3YjHFXpJBaPhqgUtkxyw3f5O0=)
2: gHq9MWf0hbMmILKUMKXWOxVNz_8.roa (hash: WUjQnD6G2qjaHXGAi0bK2NbXe4/t3hrnEoAgLC0ACio=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ce:4f:1e:d6:de:d1:9c:e7:cf:78:eb:ec:48:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Validity
Not Before: Jan 31 15:00:36 2025 GMT
Not After : Feb 1 15:00:36 2025 GMT
Subject: CN=e08f639fc77762e6c58dcb1233a48af9aab835d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:ed:2a:b4:01:0e:9b:a1:b1:dc:be:5b:f6:
e9:33:01:e8:4a:7e:f7:b9:e9:db:94:65:9b:4a:22:
8a:7e:35:30:c5:e2:cd:f1:01:4b:7c:24:f6:41:25:
82:60:e6:04:ca:40:ce:ed:12:5a:5a:05:95:4f:17:
89:01:ec:9f:ba:bd:7e:a3:c3:82:be:00:47:01:a5:
92:ef:8c:25:30:67:ff:86:84:c5:59:52:92:87:d8:
e2:c4:b8:28:84:37:7a:ac:81:09:98:20:e2:f9:b4:
86:19:38:f6:27:5e:32:13:ec:af:f1:a0:08:93:ea:
dd:1e:0e:62:46:8f:db:5e:cb:74:03:2c:f9:f9:7d:
b8:ae:dc:7e:be:e0:d3:45:c5:27:89:33:42:78:bd:
25:fa:4d:c6:9b:20:cc:4d:2f:c7:b9:3e:73:61:40:
bb:36:c7:60:45:fe:f2:70:e4:c9:62:f8:d9:e0:f6:
d5:1e:44:11:c7:44:f7:aa:a6:6f:91:7d:a7:70:e5:
a5:9f:ef:d1:0c:f1:21:67:80:ff:08:4f:ac:30:38:
1d:a7:80:60:33:d2:f0:40:41:f3:1c:d0:8f:44:0e:
77:9d:f3:08:2b:fa:1b:31:7a:29:fb:fd:9a:ba:03:
31:09:e5:d4:7b:c7:0b:3c:18:36:9f:9c:0d:3e:e5:
3a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8F:63:9F:C7:77:62:E6:C5:8D:CB:12:33:A4:8A:F9:AA:B8:35:D7
X509v3 Authority Key Identifier:
keyid:D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:bd:c5:54:64:2c:ee:a6:00:5d:45:40:7b:e8:64:0b:06:4b:
e2:5e:07:b6:5b:47:d0:bc:07:8d:e5:66:50:9c:5f:b3:1b:78:
a3:b6:d4:3f:93:62:18:52:38:e5:88:d6:11:ee:4e:4b:88:ae:
fb:c7:43:80:f5:b3:b1:2f:ed:28:bb:09:3d:19:5b:bf:b2:a2:
de:d9:01:08:ae:58:be:6c:96:39:e6:45:07:1d:cc:48:d7:1e:
16:4c:e2:f0:a9:f8:af:62:b2:b6:9f:ad:e1:98:ed:a8:cf:81:
15:d7:01:e9:d0:14:1e:a7:5b:1d:72:6e:d3:be:e5:ea:02:bb:
9e:39:c6:78:4f:7d:07:55:cc:b4:7f:4b:a8:8f:fd:cd:cd:ec:
a2:c7:28:21:89:91:be:d7:74:10:c2:e6:e9:d9:bf:f2:97:58:
a3:5c:5f:48:c4:6b:8a:2c:11:19:e5:5b:67:94:a1:2f:87:35:
5b:22:75:07:6f:de:c8:e7:9f:b2:71:69:74:19:1e:94:5c:24:
ff:0c:f5:9b:49:32:08:32:28:ce:0d:e5:5e:df:4a:43:e0:5e:
d6:5c:01:15:9b:f4:71:0a:80:a7:d5:ec:17:17:6b:7a:e5:bc:
98:3f:c8:81:d5:71:90:95:6a:1c:ea:54:f0:2a:ca:14:06:2e:
12:12:04:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84M5PHtbe0Zznz3jr7EijMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMWQ0Yjk0MWUwNjRiNDZiYzI5YWY2NDViYzc1NDcwNGQz
YTk0YzEwHhcNMjUwMTMxMTUwMDM2WhcNMjUwMjAxMTUwMDM2WjAzMTEwLwYDVQQD
EyhlMDhmNjM5ZmM3Nzc2MmU2YzU4ZGNiMTIzM2E0OGFmOWFhYjgzNWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2rtKrQBDpuhsdy+W/bpMwHoSn73
uenblGWbSiKKfjUwxeLN8QFLfCT2QSWCYOYEykDO7RJaWgWVTxeJAeyfur1+o8OC
vgBHAaWS74wlMGf/hoTFWVKSh9jixLgohDd6rIEJmCDi+bSGGTj2J14yE+yv8aAI
k+rdHg5iRo/bXst0Ayz5+X24rtx+vuDTRcUniTNCeL0l+k3GmyDMTS/HuT5zYUC7
NsdgRf7ycOTJYvjZ4PbVHkQRx0T3qqZvkX2ncOWln+/RDPEhZ4D/CE+sMDgdp4Bg
M9LwQEHzHNCPRA53nfMIK/obMXop+/2augMxCeXUe8cLPBg2n5wNPuU6uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCPY5/Hd2LmxY3LEjOkivmquDXXMB8GA1UdIwQY
MBaAFNMdS5QeBktGvCmvZFvHVHBNOpTBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHgxTGxCNEdTMGE4S2E5a1c4ZFVjRTA2bE1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zMzMxMTMtYTg5MS00ZDkyLWI2Njkt
NzA1NDQ5YmRlZWI2LzEvMHgxTGxCNEdTMGE4S2E5a1c4ZFVjRTA2bE1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zMzMxMTMtYTg5MS00ZDkyLWI2NjktNzA1NDQ5YmRlZWI2
LzEvMHgxTGxCNEdTMGE4S2E5a1c4ZFVjRTA2bE1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABb3FVGQs
7qYAXUVAe+hkCwZL4l4HtltH0LwHjeVmUJxfsxt4o7bUP5NiGFI45YjWEe5OS4iu
+8dDgPWzsS/tKLsJPRlbv7Ki3tkBCK5YvmyWOeZFBx3MSNceFkzi8Kn4r2Kytp+t
4ZjtqM+BFdcB6dAUHqdbHXJu077l6gK7njnGeE99B1XMtH9LqI/9zc3soscoIYmR
vtd0EMLm6dm/8pdYo1xfSMRriiwRGeVbZ5ShL4c1WyJ1B2/eyOefsnFpdBkelFwk
/wz1m0kyCDIozg3lXt9KQ+Be1lwBFZv0cQqAp9XsFxdreuW8mD/IgdVxkJVqHOpU
8CrKFAYuEhIEVA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:01 2025 by rpki-client