Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
File: 0JTrDpiYeirfj5WgPnhlmRogGFU.mft (raw, json)
Hash identifier: G1DdDgTuRiXHe73KmnVNLnPnRgDRvL6ZReY8tiFc6os=
Subject key identifier: AB:86:F1:13:38:EA:9E:89:21:BD:5D:27:8D:52:36:BD:60:24:7B:40
Authority key identifier: D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55
Certificate issuer: /CN=d094eb0e98987a2adf8f95a03e7865991a201855
Certificate serial: 0195E19050AD4F13806717115A9CDB3FDC01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
Manifest number: 14C3
Signing time: Sat 29 Mar 2025 11:01:26 +0000
Manifest this update: Sat 29 Mar 2025 11:01:26 +0000
Manifest next update: Sun 30 Mar 2025 11:01:26 +0000
Files and hashes: 1: 0JTrDpiYeirfj5WgPnhlmRogGFU.crl (hash: nFbLI0VRQ8iFJKV8zsQXAiXD+NvOQ8/B8Z4ZCmzgdyI=)
2: zWlbMie9smiEiWEP03iooF2NKYI.roa (hash: i3CosfERz9PWPOxFmY5jsq43lJm4fTA/Cty1Zgq6vks=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:50:ad:4f:13:80:67:17:11:5a:9c:db:3f:dc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d094eb0e98987a2adf8f95a03e7865991a201855
Validity
Not Before: Mar 29 11:01:26 2025 GMT
Not After : Mar 30 11:01:26 2025 GMT
Subject: CN=ab86f11338ea9e8921bd5d278d5236bd60247b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f1:9e:01:f0:8e:c0:a6:a2:a5:58:c7:77:36:
e1:68:d1:2d:45:fe:33:a8:47:ff:b7:91:1c:d5:97:
97:0c:ab:fd:b2:2d:cd:2f:53:23:79:c0:6e:76:7d:
8f:43:c4:b5:b3:67:cb:db:42:6a:8e:fe:92:6e:af:
cb:27:20:1f:cf:30:ad:80:b6:48:6a:4a:bb:48:6b:
08:06:d6:1d:7e:14:b5:c1:98:5c:54:59:9a:ba:00:
23:5b:d3:8d:52:88:85:74:46:ca:3d:ec:c2:6a:36:
74:c4:d5:31:e7:3e:ce:6d:cc:f5:3c:c7:45:47:b8:
ce:ee:5a:2a:6a:f0:6f:ae:34:8b:d5:c2:5c:0b:ad:
d0:48:ef:89:a1:dd:f2:9f:3f:98:b3:d2:a1:cd:54:
b6:4c:1e:6a:90:e0:6d:e5:a1:4d:46:4f:c8:03:b1:
11:d5:68:83:3b:a1:1a:12:b6:30:a2:91:09:25:b5:
97:b0:f3:23:8a:99:8c:99:2e:b3:8d:04:a6:86:2b:
51:54:e3:2f:a3:04:ac:92:2d:6b:c5:f6:19:19:ac:
44:05:68:99:75:76:b0:2b:80:6d:5b:d0:fa:1d:ed:
12:91:bb:02:ce:bb:25:9f:9f:c3:38:45:88:d2:e0:
5b:7c:b4:92:97:3d:f5:8f:9a:77:ab:0f:ed:fd:39:
12:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:86:F1:13:38:EA:9E:89:21:BD:5D:27:8D:52:36:BD:60:24:7B:40
X509v3 Authority Key Identifier:
keyid:D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:05:8e:40:5b:d0:b8:80:f1:15:7b:d1:44:fd:7f:9e:db:91:
f4:a6:49:55:f4:78:0b:46:8d:0a:c2:c6:6b:05:a9:1b:da:d2:
ad:7f:c9:66:9c:ac:3d:de:a5:ff:e6:03:de:42:6d:d8:c9:2a:
62:10:5a:97:5f:c4:4f:62:5c:17:22:85:70:20:14:ad:0b:3a:
5d:5f:d6:04:0f:2e:b8:b7:f7:2f:8b:66:88:24:0b:34:ff:7b:
b0:9f:04:f6:15:d4:45:f9:51:b3:ae:f0:bc:54:ec:f1:b6:29:
e8:8c:29:a2:6a:c6:8d:2c:60:96:74:e9:6a:41:47:73:3c:d1:
a4:7a:91:79:0f:84:fe:0d:65:fb:88:4d:5f:dd:1e:3c:67:e4:
bd:2c:f5:7c:3b:04:7f:3a:b3:2b:20:45:81:de:51:b8:26:6a:
28:11:c9:61:33:d0:da:83:31:87:69:6e:27:8e:3f:e3:f7:c4:
56:53:64:a7:8d:78:60:1f:b1:d5:2f:7d:b1:f9:81:d4:d1:6d:
d5:31:0d:1a:45:aa:9e:77:4c:ad:0d:d3:cb:0f:9f:66:5c:0d:
39:d3:91:4d:b7:e3:e9:d6:bb:ae:cd:89:e3:fb:66:41:b3:38:
32:63:22:e9:8b:1f:49:02:d0:d1:a9:4e:30:96:fe:71:d3:a1:
14:12:b6:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhkFCtTxOAZxcRWpzbP9wBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOTRlYjBlOTg5ODdhMmFkZjhmOTVhMDNlNzg2NTk5MWEy
MDE4NTUwHhcNMjUwMzI5MTEwMTI2WhcNMjUwMzMwMTEwMTI2WjAzMTEwLwYDVQQD
EyhhYjg2ZjExMzM4ZWE5ZTg5MjFiZDVkMjc4ZDUyMzZiZDYwMjQ3YjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vGeAfCOwKaipVjHdzbhaNEtRf4z
qEf/t5Ec1ZeXDKv9si3NL1MjecBudn2PQ8S1s2fL20Jqjv6Sbq/LJyAfzzCtgLZI
akq7SGsIBtYdfhS1wZhcVFmaugAjW9ONUoiFdEbKPezCajZ0xNUx5z7Obcz1PMdF
R7jO7loqavBvrjSL1cJcC63QSO+Jod3ynz+Ys9KhzVS2TB5qkOBt5aFNRk/IA7ER
1WiDO6EaErYwopEJJbWXsPMjipmMmS6zjQSmhitRVOMvowSski1rxfYZGaxEBWiZ
dXawK4BtW9D6He0SkbsCzrsln5/DOEWI0uBbfLSSlz31j5p3qw/t/TkS+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuG8RM46p6JIb1dJ41SNr1gJHtAMB8GA1UdIwQY
MBaAFNCU6w6YmHoq34+VoD54ZZkaIBhVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8zN2RlNTktOWNhNC00NDdlLWE1MTAt
ZTRhODZiMGZmZDJlLzEvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8zN2RlNTktOWNhNC00NDdlLWE1MTAtZTRhODZiMGZmZDJl
LzEvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjgWOQFvQ
uIDxFXvRRP1/ntuR9KZJVfR4C0aNCsLGawWpG9rSrX/JZpysPd6l/+YD3kJt2Mkq
YhBal1/ET2JcFyKFcCAUrQs6XV/WBA8uuLf3L4tmiCQLNP97sJ8E9hXURflRs67w
vFTs8bYp6IwpomrGjSxglnTpakFHczzRpHqReQ+E/g1l+4hNX90ePGfkvSz1fDsE
fzqzKyBFgd5RuCZqKBHJYTPQ2oMxh2luJ44/4/fEVlNkp414YB+x1S99sfmB1NFt
1TENGkWqnndMrQ3Tyw+fZlwNOdORTbfj6da7rs2J4/tmQbM4MmMi6YsfSQLQ0alO
MJb+cdOhFBK2wA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:44 2025 by rpki-client