Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
File: 4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft (raw, json)
Hash identifier: +vZF6KPamsBxREA2QQFro5CigGURiPOxqvMri4jryBA=
Subject key identifier: 3D:5C:81:89:E4:C6:71:8D:4E:15:3C:1D:9C:3E:5A:94:E2:61:48:31
Authority key identifier: E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA
Certificate issuer: /CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea
Certificate serial: 0194BCE0692E82B3F9C87F48AAEA61DDE682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:11 +0000
Manifest this update: Fri 31 Jan 2025 15:00:11 +0000
Manifest next update: Sat 01 Feb 2025 15:00:11 +0000
Files and hashes: 1: 4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl (hash: L/G8niy6g5fDassLSDA1kdJuBf4tGk9RZOZylMfHieQ=)
2: BfpSqqWPnz2zm8axpIU080CSsRs.roa (hash: i9cs+yG6O1Ft1obwZZ0jOFlWDCTv2KU1uV2QUmB00UQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:69:2e:82:b3:f9:c8:7f:48:aa:ea:61:dd:e6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea
Validity
Not Before: Jan 31 15:00:11 2025 GMT
Not After : Feb 1 15:00:11 2025 GMT
Subject: CN=3d5c8189e4c6718d4e153c1d9c3e5a94e2614831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5e:56:fb:c4:f5:30:0a:f7:bd:98:1f:fe:c8:
06:96:12:d1:34:63:77:30:6d:92:10:40:c9:22:20:
48:9c:64:eb:00:0e:5d:c1:e8:eb:83:30:22:34:30:
4f:ea:d6:f3:60:e1:70:12:e9:69:7b:ce:42:16:79:
4a:71:02:61:f9:52:58:e4:bb:a6:0f:1b:b5:13:11:
d1:ac:00:c6:bd:cb:28:b6:4f:67:4d:f2:e5:5c:61:
24:a5:05:5e:27:d0:c1:7c:f1:e5:ec:df:e3:07:21:
e9:ac:10:fa:eb:32:58:14:47:7f:bc:53:fc:4d:6a:
cd:b9:d6:aa:17:07:01:13:9c:e4:dd:d7:9f:12:46:
84:00:0c:43:30:b2:fb:d6:87:f1:84:bf:3d:e4:38:
4a:f8:72:a3:e7:ae:e4:0c:61:82:80:de:42:50:b9:
a0:f0:42:32:ee:d5:e6:92:a1:db:48:ec:53:3a:ba:
c7:9f:af:1e:0e:80:cb:19:f7:ab:77:f8:ae:54:d0:
84:6d:20:46:9e:61:99:2a:e0:ae:8d:6e:fc:ce:29:
a9:1c:91:8b:df:91:ad:39:bb:1c:3b:a3:65:0f:d2:
9f:8d:50:df:eb:ee:2d:32:e3:1b:32:37:ec:0b:a5:
51:a1:3a:35:b9:43:07:40:ba:30:39:89:5f:a5:ad:
4f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5C:81:89:E4:C6:71:8D:4E:15:3C:1D:9C:3E:5A:94:E2:61:48:31
X509v3 Authority Key Identifier:
keyid:E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ba:d1:89:71:55:fe:52:ab:c7:ac:f3:8b:d2:22:ee:76:48:
62:63:22:c9:74:87:77:84:b1:0b:71:e1:77:c2:a5:2d:04:96:
d6:57:a9:8d:78:99:6e:fc:8f:ec:7b:ee:64:50:ae:ed:2c:07:
35:84:35:7e:49:d0:63:78:37:89:bd:cf:19:f0:bb:c9:a4:87:
05:0e:90:d6:b6:81:e9:66:99:1e:30:5d:17:15:c4:69:0d:30:
bf:2d:57:86:93:0b:40:58:8e:5f:3a:54:7a:c5:ff:bc:e7:24:
a3:df:ea:d6:e1:12:86:2f:a8:2f:9c:95:37:54:79:65:85:2f:
d0:ab:35:8b:40:d3:38:13:92:94:8e:2f:72:e6:42:d5:a7:a1:
69:8f:1f:fb:a2:1c:99:5a:28:18:04:d8:35:7c:ed:de:d3:a5:
20:9c:33:fb:21:ee:53:21:fc:2b:b6:ff:a4:5d:85:70:c8:a1:
5f:b7:03:a1:85:ea:9d:86:ff:6a:5f:4b:c7:13:60:1a:07:eb:
68:8b:eb:52:d0:ac:bb:fa:5a:1f:da:11:0f:cf:e2:c8:96:e5:
32:68:15:f0:f5:43:f9:bd:d2:0d:98:b1:0d:8f:82:34:5c:49:
69:4d:5f:24:82:57:b1:78:53:0b:37:4e:44:7f:cf:c8:5e:aa:
88:7b:ab:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84GkugrP5yH9Iquph3eaCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOWVkOWE5ZDFiNmI1MzgzZWJmOTQ2ZDVmYzU0OTgwNjEy
NTYzZWEwHhcNMjUwMTMxMTUwMDExWhcNMjUwMjAxMTUwMDExWjAzMTEwLwYDVQQD
EygzZDVjODE4OWU0YzY3MThkNGUxNTNjMWQ5YzNlNWE5NGUyNjE0ODMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F5W+8T1MAr3vZgf/sgGlhLRNGN3
MG2SEEDJIiBInGTrAA5dwejrgzAiNDBP6tbzYOFwEulpe85CFnlKcQJh+VJY5Lum
Dxu1ExHRrADGvcsotk9nTfLlXGEkpQVeJ9DBfPHl7N/jByHprBD66zJYFEd/vFP8
TWrNudaqFwcBE5zk3defEkaEAAxDMLL71ofxhL895DhK+HKj567kDGGCgN5CULmg
8EIy7tXmkqHbSOxTOrrHn68eDoDLGferd/iuVNCEbSBGnmGZKuCujW78zimpHJGL
35GtObscO6NlD9KfjVDf6+4tMuMbMjfsC6VRoTo1uUMHQLowOYlfpa1PDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1cgYnkxnGNThU8HZw+WpTiYUgxMB8GA1UdIwQY
MBaAFOKe2anRtrU4Pr+UbV/FSYBhJWPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHA3WnFkRzJ0VGctdjVSdFg4VkpnR0VsWS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zOGVjNWItMzM2ZC00YTFjLWE4NGEt
ZjZjNjg1OWIzMGYwLzEvNHA3WnFkRzJ0VGctdjVSdFg4VkpnR0VsWS1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zOGVjNWItMzM2ZC00YTFjLWE4NGEtZjZjNjg1OWIzMGYw
LzEvNHA3WnFkRzJ0VGctdjVSdFg4VkpnR0VsWS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLrRiXFV
/lKrx6zzi9Ii7nZIYmMiyXSHd4SxC3Hhd8KlLQSW1lepjXiZbvyP7HvuZFCu7SwH
NYQ1fknQY3g3ib3PGfC7yaSHBQ6Q1raB6WaZHjBdFxXEaQ0wvy1XhpMLQFiOXzpU
esX/vOcko9/q1uEShi+oL5yVN1R5ZYUv0Ks1i0DTOBOSlI4vcuZC1aehaY8f+6Ic
mVooGATYNXzt3tOlIJwz+yHuUyH8K7b/pF2FcMihX7cDoYXqnYb/al9LxxNgGgfr
aIvrUtCsu/paH9oRD8/iyJblMmgV8PVD+b3SDZixDY+CNFxJaU1fJIJXsXhTCzdO
RH/PyF6qiHurjQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:28 2025 by rpki-client