Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
File: RQvGf1SesEkldyCgAOsFtU9dK8A.mft (raw, json)
Hash identifier: ZvyoEx+m2bcweUHTaceTVv3CRTPzOucpRO8R7GqXgKo=
Subject key identifier: 71:6A:A6:7B:F9:16:6B:5B:F1:21:38:02:98:68:18:97:67:87:FA:41
Authority key identifier: 45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
Certificate issuer: /CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Certificate serial: 0194BC3C61E7C71C1E04DE6D458CFAD4711E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
Manifest number: 0C49
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: RQvGf1SesEkldyCgAOsFtU9dK8A.crl (hash: w5XyZ+2fc92Q9esdeNqyri4xNM+lEpWfrISRxqB4P+w=)
2: _YMez48AMFaUyWLbfvnH7KldVDE.roa (hash: 3sepWcNFx6BAgV0N0lNe1VjOZzQwmimdc5bBOyxmzz4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:61:e7:c7:1c:1e:04:de:6d:45:8c:fa:d4:71:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=716aa67bf9166b5bf1213802986818976787fa41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:23:9c:9d:50:57:9d:52:9f:4a:12:06:20:3d:
84:d3:d5:3a:c1:d6:11:25:8a:82:6c:89:f3:0b:26:
a4:a7:c7:fa:25:9a:9d:be:02:58:1a:49:a6:20:0e:
e1:f2:d5:0d:76:ea:48:72:aa:61:14:50:9d:5f:d8:
f3:66:6e:b5:2a:63:6c:44:f0:1f:11:92:40:95:f9:
cd:95:74:3a:19:d0:00:b6:73:f4:4b:2e:8a:7e:98:
ff:71:22:e9:e9:0c:2a:b9:61:c4:1d:b3:f5:77:a1:
be:ec:50:63:fb:3f:c2:82:ab:25:d5:26:c5:11:7a:
58:ab:69:65:d4:1c:3a:6e:a6:98:38:6c:1b:29:54:
ca:e8:e8:6d:f5:5f:22:ad:8c:e7:6b:5c:73:26:c3:
48:b7:06:99:f6:74:08:a1:c5:7f:be:86:4d:c6:29:
c6:06:70:43:eb:38:6c:35:b4:be:bf:44:27:5d:ba:
59:72:31:86:82:97:9c:9c:ac:3a:a4:c1:d7:3a:84:
85:9b:6b:de:f0:00:a0:41:e3:c3:74:44:b0:c2:68:
2a:78:cc:cf:e7:d7:ba:4e:33:32:84:2f:e0:7e:f9:
de:aa:1f:43:63:96:be:26:de:fd:ef:38:11:1a:a5:
65:28:a9:7e:a1:26:80:13:67:40:e7:56:30:a5:71:
17:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6A:A6:7B:F9:16:6B:5B:F1:21:38:02:98:68:18:97:67:87:FA:41
X509v3 Authority Key Identifier:
keyid:45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a5:a8:c2:69:91:5e:fa:3b:c8:b8:ae:62:05:b7:6a:c9:9e:
b2:1d:81:78:c1:70:18:e2:3e:74:08:43:6f:48:cc:00:20:2e:
27:67:68:20:e3:71:93:35:c2:0b:ed:84:12:86:e1:02:4a:a9:
22:26:86:4f:6a:3c:a4:88:76:42:a0:83:fc:0c:48:dc:b7:ad:
7c:3c:b3:f9:60:32:72:c7:ef:31:72:18:85:5a:51:18:4a:48:
ee:f3:28:f3:c2:95:e9:b9:03:c7:43:3e:72:c2:5a:88:e1:d2:
96:b5:fb:2e:70:36:87:8f:11:c0:a2:f5:5f:b2:3d:1a:14:5c:
91:cd:2a:c2:8d:7f:4a:52:ec:6b:57:5f:80:ec:02:50:15:3e:
4c:05:de:cf:c2:35:1f:80:77:2c:a6:72:43:11:fd:a1:72:e5:
ee:71:c4:a8:36:ba:2c:40:6d:a0:fa:8f:1e:99:5b:b9:e2:7e:
1f:1a:b8:6f:9f:06:5e:a6:14:39:b7:ac:92:f8:b1:2b:2e:fe:
26:c2:fd:7d:f0:e8:b5:0a:b6:36:eb:19:3e:29:e5:6e:a8:6d:
ad:9f:d4:e7:ed:35:ca:fe:a1:a2:ce:1c:9c:97:b7:34:ea:d2:
ad:ea:33:34:19:3b:84:30:61:25:d0:38:f7:83:60:4d:b5:1a:
83:2d:8f:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PGHnxxweBN5tRYz61HEeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MGJjNjdmNTQ5ZWIwNDkyNTc3MjBhMDAwZWIwNWI1NGY1
ZDJiYzAwHhcNMjUwMTMxMTIwMTAxWhcNMjUwMjAxMTIwMTAxWjAzMTEwLwYDVQQD
Eyg3MTZhYTY3YmY5MTY2YjViZjEyMTM4MDI5ODY4MTg5NzY3ODdmYTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9COcnVBXnVKfShIGID2E09U6wdYR
JYqCbInzCyakp8f6JZqdvgJYGkmmIA7h8tUNdupIcqphFFCdX9jzZm61KmNsRPAf
EZJAlfnNlXQ6GdAAtnP0Sy6Kfpj/cSLp6QwquWHEHbP1d6G+7FBj+z/Cgqsl1SbF
EXpYq2ll1Bw6bqaYOGwbKVTK6Oht9V8irYzna1xzJsNItwaZ9nQIocV/voZNxinG
BnBD6zhsNbS+v0QnXbpZcjGGgpecnKw6pMHXOoSFm2ve8ACgQePDdESwwmgqeMzP
59e6TjMyhC/gfvneqh9DY5a+Jt797zgRGqVlKKl+oSaAE2dA51YwpXEXGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFqpnv5Fmtb8SE4AphoGJdnh/pBMB8GA1UdIwQY
MBaAFEULxn9UnrBJJXcgoADrBbVPXSvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlF2R2YxU2VzRWtsZHlDZ0FPc0Z0VTlkSzhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80YzZjZDYtMzdhOS00MTE1LTgzNjYt
MjRhOGQ5YmYzN2JjLzEvUlF2R2YxU2VzRWtsZHlDZ0FPc0Z0VTlkSzhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi80YzZjZDYtMzdhOS00MTE1LTgzNjYtMjRhOGQ5YmYzN2Jj
LzEvUlF2R2YxU2VzRWtsZHlDZ0FPc0Z0VTlkSzhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGqWowmmR
Xvo7yLiuYgW3asmesh2BeMFwGOI+dAhDb0jMACAuJ2doIONxkzXCC+2EEobhAkqp
IiaGT2o8pIh2QqCD/AxI3LetfDyz+WAycsfvMXIYhVpRGEpI7vMo88KV6bkDx0M+
csJaiOHSlrX7LnA2h48RwKL1X7I9GhRckc0qwo1/SlLsa1dfgOwCUBU+TAXez8I1
H4B3LKZyQxH9oXLl7nHEqDa6LEBtoPqPHplbueJ+Hxq4b58GXqYUObeskvixKy7+
JsL9ffDotQq2NusZPinlbqhtrZ/U5+01yv6hos4cnJe3NOrSreozNBk7hDBhJdA4
94NgTbUagy2Pcw==
-----END CERTIFICATE-----
Generated at Thu May 1 12:28:06 2025 by rpki-client