Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
File: M4nguKL_gqI7SN1ubnYXa0zTgy4.mft (raw, json)
Hash identifier: pnEUBYSBAI3lJS7vmawbrx+ZkMrJoQGgegVWZPq4Dcc=
Subject key identifier: D1:C0:81:25:F8:B3:12:DB:85:9F:A6:90:1A:BE:36:E0:D7:9F:89:AB
Authority key identifier: 33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
Certificate issuer: /CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Certificate serial: 0194BC3C73FD7D6495B661A383B1FED94C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
Manifest number: 1381
Signing time: Fri 31 Jan 2025 12:01:05 +0000
Manifest this update: Fri 31 Jan 2025 12:01:05 +0000
Manifest next update: Sat 01 Feb 2025 12:01:05 +0000
Files and hashes: 1: JMceSfi0AqXXn3Vf_3TI3F7NzUY.roa (hash: pe6susqm7TY0tacMrKbk21inj2AOVSm8thD8J6ZV9Xk=)
2: M4nguKL_gqI7SN1ubnYXa0zTgy4.crl (hash: 5x89vWsgSkLXIrGEkMFghR6B/8RHFXEleIzrVJipr8s=)
3: bK9CgrejwLSheO3uUPc3gSoXEuM.roa (hash: yazAgCwjNcsZSgaF8ULBtVRMqRXfNnLvbpG2BCIQgcs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:73:fd:7d:64:95:b6:61:a3:83:b1:fe:d9:4c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Validity
Not Before: Jan 31 12:01:05 2025 GMT
Not After : Feb 1 12:01:05 2025 GMT
Subject: CN=d1c08125f8b312db859fa6901abe36e0d79f89ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:59:80:a9:da:35:0f:f2:bb:bc:4a:d9:14:5d:
a4:d1:fc:1c:28:4c:d8:14:74:eb:02:db:37:bf:e6:
d6:59:8a:05:9a:a9:18:c2:cc:fd:cf:db:00:f1:62:
2d:82:4f:9a:85:0d:8e:3d:aa:ae:38:82:1e:d7:97:
0a:76:86:e6:cc:60:6f:da:01:21:c1:f3:85:83:7f:
5f:92:5e:e7:25:8b:eb:da:26:06:01:20:e1:7a:c4:
a3:a3:04:97:02:c4:c4:b2:34:38:69:2c:4a:2a:28:
eb:5f:42:5d:4b:03:c8:59:ac:b6:e6:76:04:b0:ba:
b3:49:6f:a9:27:fd:b1:1e:26:55:ce:ed:ad:39:18:
e9:26:c3:2f:49:12:3e:43:62:18:fe:90:df:30:a5:
8c:31:66:9f:f9:21:1c:38:1a:6e:40:1b:d8:0f:b1:
11:f5:bb:3f:a4:fd:6f:64:e5:20:99:19:55:67:4c:
f4:5e:77:1c:0c:03:04:fd:95:c2:d5:ae:60:e8:6d:
d7:82:45:7f:41:14:4d:8c:f3:05:d1:8f:75:79:af:
ca:86:ca:e5:60:97:cb:98:3b:69:2c:b3:b6:6a:a6:
23:d6:38:85:e0:35:ec:2c:c6:78:a2:c0:f3:3d:bd:
08:a8:21:43:ca:35:5f:5e:70:7b:be:71:1e:d9:c2:
ca:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C0:81:25:F8:B3:12:DB:85:9F:A6:90:1A:BE:36:E0:D7:9F:89:AB
X509v3 Authority Key Identifier:
keyid:33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:2f:03:44:d9:74:1e:da:53:07:4b:10:c5:08:cc:cd:94:ea:
c0:29:ae:34:35:df:91:86:7a:d2:af:7d:63:8f:6a:26:22:cf:
a6:df:30:32:01:49:81:fb:7e:58:fe:d5:0d:94:44:92:8c:62:
e1:f4:70:f5:63:dd:3b:1d:5c:3a:b6:a7:a5:f4:00:2a:ea:a3:
1a:61:79:9a:c4:53:0d:bf:e1:2e:e9:6e:4a:78:cb:14:fd:63:
a9:f5:33:32:44:4a:fa:0c:7d:eb:f0:9e:db:d9:dc:0a:df:f9:
55:6f:93:4b:19:7f:51:98:ea:73:ee:f1:83:54:8e:08:7a:b6:
c7:d0:e5:08:5c:99:fa:d8:43:43:e6:a5:fa:3a:be:a6:d4:57:
94:24:62:15:13:9f:04:e9:84:97:74:a6:cf:09:53:fb:df:97:
a9:3c:e8:3e:87:36:c4:c6:9c:d7:5a:95:9c:e0:55:af:69:82:
1f:3b:7d:eb:3d:7a:ab:3b:e1:64:f2:02:ed:35:31:92:bb:02:
a0:cc:b8:da:a2:e6:dd:90:41:a5:cc:29:84:0d:62:6a:9c:f8:
8c:74:c8:39:68:bc:34:45:ab:ac:fb:c5:09:47:bf:dd:72:66:
a6:f4:30:b7:73:0a:b3:3b:50:71:79:84:3b:2e:02:3f:ee:77:
2f:42:9f:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PHP9fWSVtmGjg7H+2Uw2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzODllMGI4YTJmZjgyYTIzYjQ4ZGQ2ZTZlNzYxNzZiNGNk
MzgzMmUwHhcNMjUwMTMxMTIwMTA1WhcNMjUwMjAxMTIwMTA1WjAzMTEwLwYDVQQD
EyhkMWMwODEyNWY4YjMxMmRiODU5ZmE2OTAxYWJlMzZlMGQ3OWY4OWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1mAqdo1D/K7vErZFF2k0fwcKEzY
FHTrAts3v+bWWYoFmqkYwsz9z9sA8WItgk+ahQ2OPaquOIIe15cKdobmzGBv2gEh
wfOFg39fkl7nJYvr2iYGASDhesSjowSXAsTEsjQ4aSxKKijrX0JdSwPIWay25nYE
sLqzSW+pJ/2xHiZVzu2tORjpJsMvSRI+Q2IY/pDfMKWMMWaf+SEcOBpuQBvYD7ER
9bs/pP1vZOUgmRlVZ0z0XnccDAME/ZXC1a5g6G3XgkV/QRRNjPMF0Y91ea/Khsrl
YJfLmDtpLLO2aqYj1jiF4DXsLMZ4osDzPb0IqCFDyjVfXnB7vnEe2cLKZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHAgSX4sxLbhZ+mkBq+NuDXn4mrMB8GA1UdIwQY
MBaAFDOJ4Lii/4KiO0jdbm52F2tM04MuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS83YTQ0MDItZjNmNS00ZjNhLTk4YTgt
MjMzN2E4MWIxZjc4LzEvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS83YTQ0MDItZjNmNS00ZjNhLTk4YTgtMjMzN2E4MWIxZjc4
LzEvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcS8DRNl0
HtpTB0sQxQjMzZTqwCmuNDXfkYZ60q99Y49qJiLPpt8wMgFJgft+WP7VDZREkoxi
4fRw9WPdOx1cOranpfQAKuqjGmF5msRTDb/hLuluSnjLFP1jqfUzMkRK+gx96/Ce
29ncCt/5VW+TSxl/UZjqc+7xg1SOCHq2x9DlCFyZ+thDQ+al+jq+ptRXlCRiFROf
BOmEl3SmzwlT+9+XqTzoPoc2xMac11qVnOBVr2mCHzt96z16qzvhZPIC7TUxkrsC
oMy42qLm3ZBBpcwphA1iapz4jHTIOWi8NEWrrPvFCUe/3XJmpvQwt3MKsztQcXmE
Oy4CP+53L0KfIw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:08 2025 by rpki-client