Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1f618f-0353-4d07-a10c-e12c4881fcb2/1/cL0cDqfcDmi5jOvAfX-_gH7-nRo.mft
File: cL0cDqfcDmi5jOvAfX-_gH7-nRo.mft (raw, json)
Hash identifier: QD6hiZmjIjutsycmzUXzVki4lKNxCshGao1CYek+qQ8=
Subject key identifier: 0D:59:E8:B7:E1:7B:D1:4B:FD:C0:D9:6D:83:84:9C:84:AD:70:C4:37
Authority key identifier: 70:BD:1C:0E:A7:DC:0E:68:B9:8C:EB:C0:7D:7F:BF:80:7E:FE:9D:1A
Certificate issuer: /CN=70bd1c0ea7dc0e68b98cebc07d7fbf807efe9d1a
Certificate serial: 019232EEB679B1C9564FC5FF69A176F16F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL0cDqfcDmi5jOvAfX-_gH7-nRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1f618f-0353-4d07-a10c-e12c4881fcb2/1/cL0cDqfcDmi5jOvAfX-_gH7-nRo.mft
Manifest number: 0715
Signing time: Fri 27 Sep 2024 10:02:37 +0000
Manifest this update: Fri 27 Sep 2024 10:02:37 +0000
Manifest next update: Sat 28 Sep 2024 10:02:37 +0000
Files and hashes: 1: 0Kk0oWTRglInPcFpkMq6wjVZJTQ.roa (hash: 4G6qZVQqNxTVS31fVfi3l+kTeo/oGQnmwLVWvMyJxx4=)
2: cL0cDqfcDmi5jOvAfX-_gH7-nRo.crl (hash: M31wDnPph/EhqPf1KUk8fXi84iqEmxfc8KUwDFw4vXI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:32:ee:b6:79:b1:c9:56:4f:c5:ff:69:a1:76:f1:6f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bd1c0ea7dc0e68b98cebc07d7fbf807efe9d1a
Validity
Not Before: Sep 27 10:02:37 2024 GMT
Not After : Sep 28 10:02:37 2024 GMT
Subject: CN=0d59e8b7e17bd14bfdc0d96d83849c84ad70c437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:31:54:90:f8:e1:2c:ce:85:7c:0f:1b:b4:
3a:b2:c4:aa:db:cb:08:be:24:f9:d2:97:43:10:ad:
79:7e:c4:56:41:c9:15:53:f6:a0:50:6a:2b:5b:d4:
7e:32:17:4e:5c:bf:d9:5f:d7:ab:13:67:ed:e6:7c:
f5:11:8c:eb:28:d6:c4:11:81:41:6a:66:51:49:b2:
00:92:74:8a:50:ab:8f:29:73:c6:3b:53:b8:90:79:
67:60:ac:f8:5e:42:00:98:a6:af:38:7f:79:cc:f2:
0c:db:53:f4:09:13:64:10:b1:0a:da:2d:2f:86:12:
04:63:b8:df:34:b1:82:da:d9:e6:11:64:ca:a1:fc:
95:ca:6c:75:7b:53:0c:04:94:ad:7e:c4:4d:f6:6f:
3c:23:e6:4c:32:08:2d:fb:11:dc:3e:33:60:1b:78:
a8:72:ea:b5:8c:36:ef:f2:8b:57:e3:80:3a:cd:da:
8b:df:da:2a:34:24:58:8f:e7:40:8d:13:10:74:5b:
be:6c:0c:b3:0a:f9:6b:89:85:db:ff:3f:89:f2:6a:
e5:8b:02:88:11:97:d4:28:50:3f:b4:69:9e:58:15:
26:d9:ce:9e:c3:60:77:92:e9:7d:32:89:b9:10:d3:
65:50:c8:64:3f:37:26:24:f4:85:c3:eb:c4:2d:fd:
fb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:59:E8:B7:E1:7B:D1:4B:FD:C0:D9:6D:83:84:9C:84:AD:70:C4:37
X509v3 Authority Key Identifier:
keyid:70:BD:1C:0E:A7:DC:0E:68:B9:8C:EB:C0:7D:7F:BF:80:7E:FE:9D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL0cDqfcDmi5jOvAfX-_gH7-nRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1f618f-0353-4d07-a10c-e12c4881fcb2/1/cL0cDqfcDmi5jOvAfX-_gH7-nRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1f618f-0353-4d07-a10c-e12c4881fcb2/1/cL0cDqfcDmi5jOvAfX-_gH7-nRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f6:ee:0e:05:db:9a:99:cb:e5:8c:dc:d6:8c:27:a9:0d:74:
f9:9e:3e:ac:20:04:05:e9:0d:22:a8:4f:22:24:9a:5e:b6:84:
a6:b7:06:62:ac:5d:af:ef:c0:09:82:b2:1d:c3:f9:3a:98:4e:
ad:1a:97:1f:e4:9b:70:f7:17:e2:88:7e:6e:e6:e7:97:34:dc:
22:3d:55:08:71:8c:16:73:04:fe:22:4e:82:1e:7a:ea:e0:04:
ed:e5:54:46:8f:fd:c8:70:4d:d1:8f:4f:6e:ea:7d:9c:3a:a0:
66:41:dc:d8:ac:9d:3d:36:93:7e:b1:7f:02:d2:d0:c4:c8:dd:
ec:bc:40:c5:7c:ad:62:00:1c:92:69:a3:74:e0:84:25:70:97:
40:fb:5f:38:27:98:d3:a9:1b:7f:c7:38:1f:34:e3:ec:5f:25:
81:37:74:25:84:a5:e4:94:b5:11:d2:86:16:61:49:5b:e1:11:
ec:b8:ff:19:c6:fa:8c:20:a3:28:47:c6:b8:29:ef:c6:86:5c:
1f:58:88:72:cd:0d:78:db:ef:0b:a4:0a:19:1e:ed:48:20:fb:
94:7e:e8:96:49:83:54:65:e8:6b:cd:a7:4a:0f:98:d9:62:b3:
ba:b0:d4:11:6c:2f:28:fd:8f:5f:91:04:49:a7:b9:ef:2f:87:
0c:e8:5d:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZIy7rZ5sclWT8X/aaF28W84MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYmQxYzBlYTdkYzBlNjhiOThjZWJjMDdkN2ZiZjgwN2Vm
ZTlkMWEwHhcNMjQwOTI3MTAwMjM3WhcNMjQwOTI4MTAwMjM3WjAzMTEwLwYDVQQD
EygwZDU5ZThiN2UxN2JkMTRiZmRjMGQ5NmQ4Mzg0OWM4NGFkNzBjNDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu30xVJD44SzOhXwPG7Q6ssSq28sI
viT50pdDEK15fsRWQckVU/agUGorW9R+MhdOXL/ZX9erE2ft5nz1EYzrKNbEEYFB
amZRSbIAknSKUKuPKXPGO1O4kHlnYKz4XkIAmKavOH95zPIM21P0CRNkELEK2i0v
hhIEY7jfNLGC2tnmEWTKofyVymx1e1MMBJStfsRN9m88I+ZMMggt+xHcPjNgG3io
cuq1jDbv8otX44A6zdqL39oqNCRYj+dAjRMQdFu+bAyzCvlriYXb/z+J8mrliwKI
EZfUKFA/tGmeWBUm2c6ew2B3kul9Mom5ENNlUMhkPzcmJPSFw+vELf37KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1Z6Lfhe9FL/cDZbYOEnIStcMQ3MB8GA1UdIwQY
MBaAFHC9HA6n3A5ouYzrwH1/v4B+/p0aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0wwY0RxZmNEbWk1ak92QWZYLV9nSDctblJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8xZjYxOGYtMDM1My00ZDA3LWExMGMt
ZTEyYzQ4ODFmY2IyLzEvY0wwY0RxZmNEbWk1ak92QWZYLV9nSDctblJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8xZjYxOGYtMDM1My00ZDA3LWExMGMtZTEyYzQ4ODFmY2Iy
LzEvY0wwY0RxZmNEbWk1ak92QWZYLV9nSDctblJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfbuDgXb
mpnL5Yzc1ownqQ10+Z4+rCAEBekNIqhPIiSaXraEprcGYqxdr+/ACYKyHcP5OphO
rRqXH+SbcPcX4oh+bubnlzTcIj1VCHGMFnME/iJOgh566uAE7eVURo/9yHBN0Y9P
bup9nDqgZkHc2KydPTaTfrF/AtLQxMjd7LxAxXytYgAckmmjdOCEJXCXQPtfOCeY
06kbf8c4HzTj7F8lgTd0JYSl5JS1EdKGFmFJW+ER7Lj/Gcb6jCCjKEfGuCnvxoZc
H1iIcs0NeNvvC6QKGR7tSCD7lH7olkmDVGXoa82nSg+Y2WKzurDUEWwvKP2PX5EE
Sae57y+HDOhdAQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 01:30:09 2025 by rpki-client