Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
File: 0CAT81SL49yz3KGNT8k3ifRPA78.mft (raw, json)
Hash identifier: 039IdylPKDmy3/NncPh2IN0YVBvcO4PUhhYtd9t4Zvw=
Subject key identifier: CA:0B:73:07:FC:CE:C0:E1:89:D4:EA:11:02:D6:19:51:6F:DC:19:49
Authority key identifier: D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
Certificate issuer: /CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Certificate serial: 0194BD4E95F015DAA1A3C8D6EAE39D524D42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:31 +0000
Manifest this update: Fri 31 Jan 2025 17:00:31 +0000
Manifest next update: Sat 01 Feb 2025 17:00:31 +0000
Files and hashes: 1: 0CAT81SL49yz3KGNT8k3ifRPA78.crl (hash: z1SUqnZ/u20WgUS6WyvYJaqTB4BD/a4+9vQBDix8J9g=)
2: ye296n7TFw2U7qCSerBkbo7SsH0.roa (hash: m5pP+tHttyj1Oj+JBIbSiGDkTJLLn21rUnR9Ptw/3e0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:95:f0:15:da:a1:a3:c8:d6:ea:e3:9d:52:4d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Validity
Not Before: Jan 31 17:00:31 2025 GMT
Not After : Feb 1 17:00:31 2025 GMT
Subject: CN=ca0b7307fccec0e189d4ea1102d619516fdc1949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ad:c7:b8:07:09:5a:bc:e2:f1:e7:c5:24:3c:
53:65:e2:f8:0c:17:f6:8e:03:3f:88:cd:3b:b4:5f:
95:3d:e2:51:a9:02:e7:1b:ae:5a:dd:42:af:74:3d:
ba:01:2f:e0:ec:f2:f8:50:aa:69:9f:69:8d:29:22:
da:9e:6a:7a:20:72:65:04:47:b7:b1:d9:4f:27:5f:
91:14:97:11:8a:b5:7d:32:46:fc:4d:d6:74:19:67:
34:5b:96:64:7f:92:69:28:5f:bc:de:7f:19:a5:3c:
fd:ff:2b:53:c0:96:e2:c2:f4:59:f7:70:12:fe:3a:
b8:7b:6a:ef:b7:e4:43:ba:f5:e0:9b:ad:ce:8a:ea:
38:b8:f8:5c:19:fb:26:77:2e:26:ef:8e:95:05:94:
e8:66:18:0c:49:1c:78:ce:15:af:4a:27:1d:cd:a6:
bc:07:4b:1b:77:e3:3f:26:ae:d1:59:12:d7:86:38:
83:8c:7b:53:ab:d4:53:c6:8f:25:86:17:19:df:c5:
ed:ca:5a:72:dd:f3:aa:aa:1d:9a:76:b6:f3:c3:9f:
e4:9a:5a:94:55:bc:93:28:47:87:c6:69:b8:37:d2:
14:e6:48:4f:ea:e8:da:60:47:7e:5c:a6:92:20:c0:
4a:55:9d:bb:7d:f0:7b:9c:1c:0d:c7:e7:3b:8c:36:
85:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0B:73:07:FC:CE:C0:E1:89:D4:EA:11:02:D6:19:51:6F:DC:19:49
X509v3 Authority Key Identifier:
keyid:D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:e1:75:88:19:11:52:15:09:f2:30:9b:19:de:3c:62:83:53:
bf:03:e3:56:8a:a2:6f:3a:ac:42:e5:be:7d:3d:b7:4a:45:ab:
10:a2:84:07:eb:e4:17:e1:11:87:b3:7d:d6:32:49:09:d4:b8:
d3:bf:a8:3d:22:c7:b4:39:7a:b5:79:a2:3b:fd:b2:43:b5:c5:
fb:49:82:a7:42:06:22:2c:06:33:1f:d6:1f:72:ac:7f:74:53:
09:5b:34:0f:16:d1:7b:98:02:51:42:16:05:72:6c:70:92:5c:
43:5c:6b:a9:76:b3:53:b3:75:a1:67:bc:db:7d:97:b7:d7:b2:
69:99:ea:a3:07:da:c9:ea:a6:79:f1:4d:60:1d:32:a0:20:da:
bc:70:db:bc:d4:1b:a8:d3:4e:9d:a7:71:82:08:e0:62:ae:fe:
c2:a6:9d:bb:b8:fb:28:22:68:24:3b:2c:cb:21:44:68:2d:37:
70:e6:a8:ea:f6:c7:18:19:f2:2f:12:70:21:7c:55:9b:74:bd:
cb:86:cc:7a:e2:7b:6d:01:73:38:84:d3:ee:51:44:d1:27:4b:
33:7e:bd:47:68:11:13:49:75:13:93:59:08:a1:47:f0:d1:b8:
b9:7e:5d:6b:51:f0:b2:76:f7:d4:bd:88:4c:4d:07:96:bb:88:
ed:f8:f9:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TpXwFdqho8jW6uOdUk1CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMjAxM2YzNTQ4YmUzZGNiM2RjYTE4ZDRmYzkzNzg5ZjQ0
ZjAzYmYwHhcNMjUwMTMxMTcwMDMxWhcNMjUwMjAxMTcwMDMxWjAzMTEwLwYDVQQD
EyhjYTBiNzMwN2ZjY2VjMGUxODlkNGVhMTEwMmQ2MTk1MTZmZGMxOTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq3HuAcJWrzi8efFJDxTZeL4DBf2
jgM/iM07tF+VPeJRqQLnG65a3UKvdD26AS/g7PL4UKppn2mNKSLanmp6IHJlBEe3
sdlPJ1+RFJcRirV9Mkb8TdZ0GWc0W5Zkf5JpKF+83n8ZpTz9/ytTwJbiwvRZ93AS
/jq4e2rvt+RDuvXgm63Oiuo4uPhcGfsmdy4m746VBZToZhgMSRx4zhWvSicdzaa8
B0sbd+M/Jq7RWRLXhjiDjHtTq9RTxo8lhhcZ38Xtylpy3fOqqh2adrbzw5/kmlqU
VbyTKEeHxmm4N9IU5khP6ujaYEd+XKaSIMBKVZ27ffB7nBwNx+c7jDaFwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMoLcwf8zsDhidTqEQLWGVFv3BlJMB8GA1UdIwQY
MBaAFNAgE/NUi+Pcs9yhjU/JN4n0TwO/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMENBVDgxU0w0OXl6M0tHTlQ4azNpZlJQQTc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZDQzMWEtOTcwNi00ZjM4LTgwMGIt
MmE2ODVmNzhiMjlkLzEvMENBVDgxU0w0OXl6M0tHTlQ4azNpZlJQQTc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZDQzMWEtOTcwNi00ZjM4LTgwMGItMmE2ODVmNzhiMjlk
LzEvMENBVDgxU0w0OXl6M0tHTlQ4azNpZlJQQTc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx+F1iBkR
UhUJ8jCbGd48YoNTvwPjVoqibzqsQuW+fT23SkWrEKKEB+vkF+ERh7N91jJJCdS4
07+oPSLHtDl6tXmiO/2yQ7XF+0mCp0IGIiwGMx/WH3Ksf3RTCVs0DxbRe5gCUUIW
BXJscJJcQ1xrqXazU7N1oWe8232Xt9eyaZnqowfayeqmefFNYB0yoCDavHDbvNQb
qNNOnadxggjgYq7+wqadu7j7KCJoJDssyyFEaC03cOao6vbHGBnyLxJwIXxVm3S9
y4bMeuJ7bQFzOITT7lFE0SdLM369R2gRE0l1E5NZCKFH8NG4uX5da1Hwsnb31L2I
TE0HlruI7fj5zA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:05:52 2025 by rpki-client