Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
File: RpG_08_sWhEI8choVHZOK5A9eIg.mft (raw, json)
Hash identifier: yIQgKhQ5e2KbprZatohWplcsirG5GxldUdHLIzlCP94=
Subject key identifier: 28:B5:EF:EC:16:BF:49:8A:48:58:8D:3A:A9:99:C0:E2:6D:A2:37:FD
Authority key identifier: 46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
Certificate issuer: /CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Certificate serial: 0194BCE09849D8C121664D9B80BFF0260D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: 4Fc8DyjVSWCEsU_EUG8kyZV4jp4.roa (hash: f+6PC2+8l4GQP1uSjRq7ZupGlBtpnFIedMNKrq+WMR4=)
2: RpG_08_sWhEI8choVHZOK5A9eIg.crl (hash: d/cY+Hz6syRobs9PltvIa77stTDLEgWD9wZ0Bt4bG2w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:98:49:d8:c1:21:66:4d:9b:80:bf:f0:26:0d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=28b5efec16bf498a48588d3aa999c0e26da237fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:db:46:a4:f3:e7:1a:40:ff:6b:cf:92:c5:df:
72:a4:90:3a:2d:59:ec:b6:a2:d9:7f:61:99:af:1a:
2c:ae:c8:e1:f5:09:ba:74:28:a5:ab:d0:79:c9:58:
2d:aa:ff:65:57:f4:26:a9:4a:01:ec:2e:96:03:93:
af:b6:a9:12:b0:19:d5:f7:c0:84:44:78:8d:e4:bb:
97:c7:64:d5:a0:ce:cf:cb:37:dc:c7:c3:29:5c:c8:
d4:ed:74:a8:5b:f6:1c:bd:31:b2:55:90:4d:81:3a:
49:77:ad:72:4e:8e:e6:69:65:49:d4:c4:a6:bc:6f:
b9:18:6d:ab:74:eb:9c:3f:27:e7:5b:46:cc:c6:5c:
77:87:06:2b:7f:e2:c0:d5:fc:70:fe:b8:ad:99:71:
76:9a:3e:78:44:f5:16:e4:41:e3:12:da:2f:7d:d5:
90:94:1c:59:dc:49:17:74:49:2a:4d:ba:45:fc:a9:
02:cb:08:2a:0b:3b:73:8a:ec:af:fc:81:f6:d1:c9:
2f:6c:ae:1b:13:d9:14:84:d5:d1:0d:ea:74:de:e4:
b8:57:82:e9:54:aa:9b:02:44:6b:0d:01:84:48:f3:
bd:f8:fb:1f:1e:18:3d:18:99:61:e1:39:30:11:7f:
a4:27:27:4f:8c:66:c4:5f:fa:93:90:9d:5c:59:ba:
73:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B5:EF:EC:16:BF:49:8A:48:58:8D:3A:A9:99:C0:E2:6D:A2:37:FD
X509v3 Authority Key Identifier:
keyid:46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3b:70:a6:68:fb:c9:5f:07:85:e3:c0:41:c0:e7:b9:20:c6:
22:15:f4:c6:f3:c8:e1:a1:8d:09:c6:22:b1:d7:9d:46:90:a3:
fb:c9:31:01:ce:f6:1d:94:09:66:4c:a0:19:e4:82:4b:02:3c:
5a:ad:7a:b4:3c:bb:f8:92:4d:35:12:a6:5f:ab:5f:24:9c:44:
c5:ae:71:25:39:d3:8e:d4:e5:f4:34:2c:4d:c4:d9:a4:79:29:
87:29:4d:f4:ad:f9:61:16:ec:ce:ef:3f:67:9b:c1:3a:c9:f1:
22:0d:6d:23:7b:e9:6d:73:57:5d:a4:e5:65:e0:5c:08:1c:40:
9b:0c:04:66:31:93:06:fb:67:6e:d5:d1:e8:38:ca:4d:d1:7b:
b7:70:3f:72:5a:19:6b:4b:53:6c:ed:7b:70:ce:33:7e:9e:7c:
17:c6:04:1d:d8:ae:fa:6d:2f:5a:26:ad:54:32:0f:e2:fe:3d:
b2:2e:ef:4c:ff:6b:e2:c5:68:f5:89:c2:d4:0c:cf:ab:3a:46:
de:72:14:2f:ad:2b:d8:96:8d:4d:3f:9a:14:a4:57:63:f2:e9:
7f:1b:d9:d3:26:33:44:ca:49:45:57:e7:a5:11:c9:89:cf:3e:
9a:0f:b6:58:62:80:5c:ef:12:3a:ed:23:18:6a:cb:65:a2:4c:
51:0e:1a:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84JhJ2MEhZk2bgL/wJg0oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OTFiZmQzY2ZlYzVhMTEwOGYxYzg2ODU0NzY0ZTJiOTAz
ZDc4ODgwHhcNMjUwMTMxMTUwMDIzWhcNMjUwMjAxMTUwMDIzWjAzMTEwLwYDVQQD
EygyOGI1ZWZlYzE2YmY0OThhNDg1ODhkM2FhOTk5YzBlMjZkYTIzN2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNtGpPPnGkD/a8+Sxd9ypJA6LVns
tqLZf2GZrxosrsjh9Qm6dCilq9B5yVgtqv9lV/QmqUoB7C6WA5OvtqkSsBnV98CE
RHiN5LuXx2TVoM7Pyzfcx8MpXMjU7XSoW/YcvTGyVZBNgTpJd61yTo7maWVJ1MSm
vG+5GG2rdOucPyfnW0bMxlx3hwYrf+LA1fxw/ritmXF2mj54RPUW5EHjEtovfdWQ
lBxZ3EkXdEkqTbpF/KkCywgqCztziuyv/IH20ckvbK4bE9kUhNXRDep03uS4V4Lp
VKqbAkRrDQGESPO9+PsfHhg9GJlh4TkwEX+kJydPjGbEX/qTkJ1cWbpzCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCi17+wWv0mKSFiNOqmZwOJtojf9MB8GA1UdIwQY
MBaAFEaRv9PP7FoRCPHIaFR2TiuQPXiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnBHXzA4X3NXaEVJOGNob1ZIWk9LNUE5ZUlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81ZWE1ZjAtMDJkNy00YjBmLWIwYjIt
MWI4NjE3N2FmMGRkLzEvUnBHXzA4X3NXaEVJOGNob1ZIWk9LNUE5ZUlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy81ZWE1ZjAtMDJkNy00YjBmLWIwYjItMWI4NjE3N2FmMGRk
LzEvUnBHXzA4X3NXaEVJOGNob1ZIWk9LNUE5ZUlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPztwpmj7
yV8HhePAQcDnuSDGIhX0xvPI4aGNCcYisdedRpCj+8kxAc72HZQJZkygGeSCSwI8
Wq16tDy7+JJNNRKmX6tfJJxExa5xJTnTjtTl9DQsTcTZpHkphylN9K35YRbszu8/
Z5vBOsnxIg1tI3vpbXNXXaTlZeBcCBxAmwwEZjGTBvtnbtXR6DjKTdF7t3A/cloZ
a0tTbO17cM4zfp58F8YEHdiu+m0vWiatVDIP4v49si7vTP9r4sVo9YnC1AzPqzpG
3nIUL60r2JaNTT+aFKRXY/LpfxvZ0yYzRMpJRVfnpRHJic8+mg+2WGKAXO8SOu0j
GGrLZaJMUQ4asA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:48:39 2025 by rpki-client