Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
File: DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft (raw, json)
Hash identifier: M40quVUNj2T/yFXvXAcrefZQTR+BVHVApf2bJCRLNaY=
Subject key identifier: 89:68:35:7A:99:66:18:82:99:94:8D:E8:BC:08:DE:DA:60:75:C0:B2
Authority key identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
Certificate issuer: /CN=0c5cf70730512aefa70307662cf59288e8cd264c
Certificate serial: 0194BC3BDD327E044C4E27F8D347A658DC4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
Manifest number: 011D
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl (hash: bRUFBzNzua9THI8suG4pT1UyJDYK8gnL1aAA6ctnsEc=)
2: ZRyYFoPWFr4LTQ9gIPHP5w-ddzQ.roa (hash: GUrbPOCAIn4PH8GnCdvd1SlQ4fdh24I+//UmwqdbMWk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:dd:32:7e:04:4c:4e:27:f8:d3:47:a6:58:dc:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5cf70730512aefa70307662cf59288e8cd264c
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=8968357a9966188299948de8bc08deda6075c0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:34:b2:af:ec:6f:74:e8:cb:1f:73:6e:db:30:
35:c7:3d:15:3d:04:19:a5:68:56:53:fb:21:a0:95:
de:e7:0b:ae:98:a5:70:dd:c9:cf:b7:24:36:7f:7a:
69:31:00:ef:87:68:b9:ec:bf:71:d7:cc:2a:b6:3d:
2f:69:cb:27:a4:22:9f:30:7b:17:ac:e4:25:ef:f7:
21:7d:e8:bd:37:94:f3:f6:db:c4:2d:43:12:25:9e:
65:27:ec:fb:25:93:e2:44:9f:9d:2d:a4:3d:16:45:
57:09:13:2a:60:0b:18:dc:e8:79:5d:5f:cd:d9:92:
0b:c3:f9:a6:99:a1:07:b6:91:77:11:64:47:67:eb:
d4:65:56:d7:92:7b:d3:f3:3c:51:b7:63:3d:c1:f6:
d0:c4:c7:7b:d1:71:73:5a:a3:93:24:9d:3a:c4:08:
fd:7e:67:9b:71:8a:24:3d:33:f9:80:0b:94:f8:72:
4b:f2:e0:ee:cb:1d:6f:b3:f9:da:fe:61:85:49:95:
56:5a:53:bd:ae:41:de:cd:cb:81:78:c6:0e:b7:08:
cd:a2:ac:95:3e:7c:3d:e3:f7:db:d6:4f:2a:8d:57:
4b:03:10:96:c7:56:dc:df:5f:3c:7d:1e:e4:c4:2a:
04:bf:1f:0e:2b:4e:81:8e:1f:30:5a:eb:c2:9d:13:
b8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:68:35:7A:99:66:18:82:99:94:8D:E8:BC:08:DE:DA:60:75:C0:B2
X509v3 Authority Key Identifier:
keyid:0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b9:53:4c:cf:ad:2c:5b:ee:47:2c:0b:67:31:b7:5a:d6:b3:
6d:99:3f:8d:7b:02:18:30:7e:85:9e:33:54:02:11:9b:d3:15:
9f:c6:86:aa:76:5e:de:2b:ec:50:2a:19:5c:0f:64:81:2b:30:
ec:be:e3:d0:20:a4:17:72:d4:33:e2:ce:1c:b4:f1:7f:aa:e7:
52:10:f8:9b:09:5f:2d:72:bd:7b:ae:c0:64:34:83:b6:02:19:
43:ca:4c:b4:8a:26:cb:17:8b:1d:6c:29:dc:81:20:37:e5:92:
55:44:89:03:78:d5:2a:09:fc:fe:b8:e6:67:5e:17:cd:de:f8:
cf:a4:1b:be:3f:47:f8:dd:a4:73:84:93:81:f5:1a:89:71:f8:
e7:d5:cb:0e:cb:bd:ae:e2:54:97:2b:ea:23:09:ad:7a:74:8e:
3c:2f:4f:f9:ab:30:8c:8c:dd:ea:8b:0b:7f:d3:5f:35:70:d0:
fc:11:c1:d2:ee:dc:cc:b6:9d:48:a1:d4:ca:7b:01:c4:27:f7:
6e:05:af:a6:ba:47:11:cf:9c:cd:1d:90:b9:7e:48:44:6e:e0:
bf:fc:b6:dc:08:95:6a:ed:83:7e:81:2e:c7:cf:4a:17:ff:c7:
c9:08:1c:90:49:8c:87:54:24:5d:82:dc:4b:0d:16:26:8c:4d:
82:8e:e2:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O90yfgRMTif400emWNxPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNWNmNzA3MzA1MTJhZWZhNzAzMDc2NjJjZjU5Mjg4ZThj
ZDI2NGMwHhcNMjUwMTMxMTIwMDI3WhcNMjUwMjAxMTIwMDI3WjAzMTEwLwYDVQQD
Eyg4OTY4MzU3YTk5NjYxODgyOTk5NDhkZThiYzA4ZGVkYTYwNzVjMGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjSyr+xvdOjLH3Nu2zA1xz0VPQQZ
pWhWU/shoJXe5wuumKVw3cnPtyQ2f3ppMQDvh2i57L9x18wqtj0vacsnpCKfMHsX
rOQl7/chfei9N5Tz9tvELUMSJZ5lJ+z7JZPiRJ+dLaQ9FkVXCRMqYAsY3Oh5XV/N
2ZILw/mmmaEHtpF3EWRHZ+vUZVbXknvT8zxRt2M9wfbQxMd70XFzWqOTJJ06xAj9
fmebcYokPTP5gAuU+HJL8uDuyx1vs/na/mGFSZVWWlO9rkHezcuBeMYOtwjNoqyV
Pnw94/fb1k8qjVdLAxCWx1bc3188fR7kxCoEvx8OK06Bjh8wWuvCnRO49QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIloNXqZZhiCmZSN6LwI3tpgdcCyMB8GA1UdIwQY
MBaAFAxc9wcwUSrvpwMHZiz1kojozSZMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80NDAyMTctYzVhZi00NGFjLTk1ZDMt
YWRmYzcyZWYwZGZhLzEvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi80NDAyMTctYzVhZi00NGFjLTk1ZDMtYWRmYzcyZWYwZGZh
LzEvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnblTTM+t
LFvuRywLZzG3WtazbZk/jXsCGDB+hZ4zVAIRm9MVn8aGqnZe3ivsUCoZXA9kgSsw
7L7j0CCkF3LUM+LOHLTxf6rnUhD4mwlfLXK9e67AZDSDtgIZQ8pMtIomyxeLHWwp
3IEgN+WSVUSJA3jVKgn8/rjmZ14Xzd74z6Qbvj9H+N2kc4STgfUaiXH459XLDsu9
ruJUlyvqIwmtenSOPC9P+aswjIzd6osLf9NfNXDQ/BHB0u7czLadSKHUynsBxCf3
bgWvprpHEc+czR2QuX5IRG7gv/y23AiVau2DfoEux89KF//HyQgckEmMh1QkXYLc
Sw0WJoxNgo7i+g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:47 2025 by rpki-client