Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
File: cJ1plX0zNDKsysgQIx4ok4jjAuI.mft (raw, json)
Hash identifier: Gq7YVxzxJlNfAEFvfCwtngcJgLK0TyskGbMxZghRvq4=
Subject key identifier: C7:C5:6A:52:96:CD:B4:52:E1:A8:1D:F1:FE:18:1E:48:77:08:7F:D3
Authority key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
Certificate issuer: /CN=709d69957d333432accac810231e289388e302e2
Certificate serial: 0195E1223EB58F7246994681E8B5C121D58E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
Manifest number: 14C3
Signing time: Sat 29 Mar 2025 09:01:12 +0000
Manifest this update: Sat 29 Mar 2025 09:01:12 +0000
Manifest next update: Sun 30 Mar 2025 09:01:12 +0000
Files and hashes: 1: 9y87QXHvPreUOvjZ1Oe2QvXling.roa (hash: THAUh6ARfmUeBlEORlfxrZB6XW0KTPM4GpL4IBGKtq4=)
2: cJ1plX0zNDKsysgQIx4ok4jjAuI.crl (hash: 6CzbtkJzrZB57AcJWvMlO1HO8sZt8I3ZGipiIskrE04=)
3: dagjZoA2cgv7IOwssRcqkxBEGlA.roa (hash: MlQsKiZwSfxtbg0qv4PHAKQxosBgQWpaFiAz9StErlg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:3e:b5:8f:72:46:99:46:81:e8:b5:c1:21:d5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709d69957d333432accac810231e289388e302e2
Validity
Not Before: Mar 29 09:01:12 2025 GMT
Not After : Mar 30 09:01:12 2025 GMT
Subject: CN=c7c56a5296cdb452e1a81df1fe181e4877087fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:55:8e:45:25:0c:54:ff:ee:22:4a:a0:c6:a3:
07:b3:ef:d6:47:ca:c5:3d:71:7d:cd:d0:5a:e1:ff:
1e:b4:be:cb:1d:cb:c3:fe:b0:45:95:cf:bd:08:e2:
ed:c4:51:ab:99:84:7f:3c:d4:09:b7:b0:55:de:be:
47:a1:89:af:71:99:91:0f:5c:d0:2b:75:40:6d:c1:
fb:52:28:da:52:c3:00:6a:6a:35:01:de:46:25:0e:
27:e9:bc:68:34:73:3f:cb:dc:7b:e4:50:97:96:6e:
2e:b4:bf:dc:72:76:71:af:5c:42:25:45:4c:af:55:
51:e3:bc:c9:37:79:b9:8b:81:4d:cd:a6:c4:d7:12:
51:40:65:13:28:9e:a2:60:12:2e:35:23:41:b2:af:
26:9f:cd:b7:b2:a4:b6:e4:ee:83:79:31:bd:88:95:
3f:36:e0:e4:e2:2e:9c:89:bb:0e:86:65:62:37:25:
2b:5b:81:fb:75:f5:9b:d8:ba:da:71:3d:21:1c:b4:
bb:a5:2d:5d:21:3d:30:de:4b:50:c5:d7:e7:d6:56:
86:db:53:b2:40:c9:ff:eb:e4:61:28:7f:5d:c7:b7:
63:f3:2a:3c:fa:73:f1:ce:78:cc:28:b9:4b:ce:b7:
9e:25:f7:87:a3:64:4d:5e:7a:c9:8e:21:1d:35:d7:
95:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C5:6A:52:96:CD:B4:52:E1:A8:1D:F1:FE:18:1E:48:77:08:7F:D3
X509v3 Authority Key Identifier:
keyid:70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:43:d3:85:4e:68:d8:c0:e0:a7:83:d6:d0:24:77:32:c3:5a:
91:e0:ce:4a:ec:c9:05:c1:d2:cf:b5:8f:0a:32:42:9c:18:3c:
10:d3:52:58:f5:72:a7:21:4f:ff:61:d6:f4:33:57:bc:fc:88:
00:70:0c:29:99:04:a1:a2:bc:50:19:6a:85:55:d3:a1:1c:29:
d5:80:37:94:e0:ab:dd:45:d8:0f:55:93:79:19:f2:ee:26:24:
96:4d:1c:9c:16:4a:eb:e6:6c:f8:f9:d1:18:c5:17:a5:d4:5b:
61:ae:fa:e1:ac:04:f0:87:e8:bd:37:36:35:20:35:bc:a1:11:
66:ed:fc:f7:62:a1:c2:76:a6:7b:00:cd:91:37:95:db:a1:70:
33:13:8c:db:9a:99:e0:03:7a:41:d4:86:4d:a5:21:01:10:d0:
e6:fe:fb:a5:4d:77:c1:ab:75:2d:5a:b9:38:0c:56:4d:6d:d1:
d5:6f:83:34:81:e7:60:59:49:44:79:9c:82:6f:27:b6:12:61:
4f:08:8d:56:10:78:c8:3c:e1:8a:a7:5a:34:79:e4:62:1f:60:
b0:40:6d:1b:c4:6f:15:e5:3e:de:52:ee:78:7c:19:27:88:f7:
19:e3:4f:c4:d2:42:2c:e4:c7:f6:27:4c:71:37:23:ed:44:87:
de:26:be:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhIj61j3JGmUaB6LXBIdWOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwOWQ2OTk1N2QzMzM0MzJhY2NhYzgxMDIzMWUyODkzODhl
MzAyZTIwHhcNMjUwMzI5MDkwMTEyWhcNMjUwMzMwMDkwMTEyWjAzMTEwLwYDVQQD
EyhjN2M1NmE1Mjk2Y2RiNDUyZTFhODFkZjFmZTE4MWU0ODc3MDg3ZmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFWORSUMVP/uIkqgxqMHs+/WR8rF
PXF9zdBa4f8etL7LHcvD/rBFlc+9COLtxFGrmYR/PNQJt7BV3r5HoYmvcZmRD1zQ
K3VAbcH7UijaUsMAamo1Ad5GJQ4n6bxoNHM/y9x75FCXlm4utL/ccnZxr1xCJUVM
r1VR47zJN3m5i4FNzabE1xJRQGUTKJ6iYBIuNSNBsq8mn823sqS25O6DeTG9iJU/
NuDk4i6cibsOhmViNyUrW4H7dfWb2LracT0hHLS7pS1dIT0w3ktQxdfn1laG21Oy
QMn/6+RhKH9dx7dj8yo8+nPxznjMKLlLzreeJfeHo2RNXnrJjiEdNdeV9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfFalKWzbRS4agd8f4YHkh3CH/TMB8GA1UdIwQY
MBaAFHCdaZV9MzQyrMrIECMeKJOI4wLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0oxcGxYMHpOREtzeXNnUUl4NG9rNGpqQXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81M2Q1NmEtMDk2ZS00NThhLTlhOTQt
MDhhNjg2MzJhNjNhLzEvY0oxcGxYMHpOREtzeXNnUUl4NG9rNGpqQXVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81M2Q1NmEtMDk2ZS00NThhLTlhOTQtMDhhNjg2MzJhNjNh
LzEvY0oxcGxYMHpOREtzeXNnUUl4NG9rNGpqQXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkPThU5o
2MDgp4PW0CR3MsNakeDOSuzJBcHSz7WPCjJCnBg8ENNSWPVypyFP/2HW9DNXvPyI
AHAMKZkEoaK8UBlqhVXToRwp1YA3lOCr3UXYD1WTeRny7iYklk0cnBZK6+Zs+PnR
GMUXpdRbYa764awE8IfovTc2NSA1vKERZu3892KhwnamewDNkTeV26FwMxOM25qZ
4AN6QdSGTaUhARDQ5v77pU13wat1LVq5OAxWTW3R1W+DNIHnYFlJRHmcgm8nthJh
TwiNVhB4yDzhiqdaNHnkYh9gsEBtG8RvFeU+3lLueHwZJ4j3GeNPxNJCLOTH9idM
cTcj7USH3ia+aA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:36:19 2025 by rpki-client