Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1f618f-0353-4d07-a10c-e12c4881fcb2/1/cL0cDqfcDmi5jOvAfX-_gH7-nRo.mft
File: cL0cDqfcDmi5jOvAfX-_gH7-nRo.mft (raw, json)
Hash identifier: qg7T4zXtnE9cQ4zHx+Ddzypnv/ITjX2E0TuQGej0BfM=
Subject key identifier: 3D:D5:0B:CB:84:18:38:81:1D:CE:86:61:65:A9:6D:02:BB:0D:F7:60
Authority key identifier: 70:BD:1C:0E:A7:DC:0E:68:B9:8C:EB:C0:7D:7F:BF:80:7E:FE:9D:1A
Certificate issuer: /CN=70bd1c0ea7dc0e68b98cebc07d7fbf807efe9d1a
Certificate serial: 019231005360418D3AA7809AF23AD539BE1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL0cDqfcDmi5jOvAfX-_gH7-nRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1f618f-0353-4d07-a10c-e12c4881fcb2/1/cL0cDqfcDmi5jOvAfX-_gH7-nRo.mft
Manifest number: 0714
Signing time: Fri 27 Sep 2024 01:02:37 +0000
Manifest this update: Fri 27 Sep 2024 01:02:37 +0000
Manifest next update: Sat 28 Sep 2024 01:02:37 +0000
Files and hashes: 1: 0Kk0oWTRglInPcFpkMq6wjVZJTQ.roa (hash: 4G6qZVQqNxTVS31fVfi3l+kTeo/oGQnmwLVWvMyJxx4=)
2: cL0cDqfcDmi5jOvAfX-_gH7-nRo.crl (hash: K4I15Wshpi9Yrb1luDch9QzcGXYAMVqKO6torn2TDko=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:31:00:53:60:41:8d:3a:a7:80:9a:f2:3a:d5:39:be:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bd1c0ea7dc0e68b98cebc07d7fbf807efe9d1a
Validity
Not Before: Sep 27 01:02:37 2024 GMT
Not After : Sep 28 01:02:37 2024 GMT
Subject: CN=3dd50bcb841838811dce866165a96d02bb0df760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:9f:1a:93:24:b1:fc:27:e0:ad:16:5b:3e:
33:98:c3:c0:5d:76:f7:5c:c1:e3:9c:9d:ee:d5:2e:
77:c6:32:80:cf:df:32:8c:92:18:54:8b:59:a2:26:
f3:cb:95:19:5d:d0:fa:18:1d:6d:fd:68:48:71:02:
98:db:cf:f0:c1:fd:72:ac:17:92:ef:6b:cd:1a:01:
47:23:5a:75:6e:f7:4f:e1:03:96:15:91:70:4f:49:
a3:08:e4:3b:86:8f:18:4b:b4:1b:c4:e3:44:c3:9e:
83:11:fa:f0:2d:6c:a1:07:40:c7:8c:c8:23:e0:81:
90:bc:d8:d5:3c:50:b8:b0:e1:35:1d:fe:ab:c9:f0:
c2:00:24:ff:bd:4c:16:9b:18:00:08:b7:4e:a4:1a:
b3:46:3f:78:f5:8f:cd:13:20:b0:8a:be:67:5a:a5:
a6:1b:c5:02:56:d2:07:3e:96:aa:1c:f1:3c:73:c0:
e5:17:33:6c:6a:21:6b:c8:86:3a:36:d1:70:a1:0f:
f3:d0:c0:53:96:2c:db:ef:0c:e6:01:f6:8b:33:c1:
f0:17:85:1e:1a:2d:f0:59:66:95:9c:9b:61:75:5b:
52:cb:78:c5:48:0b:88:09:a3:72:31:41:55:a2:1c:
7c:6c:d9:fb:42:e3:fa:0d:aa:db:da:66:1b:6b:43:
1d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D5:0B:CB:84:18:38:81:1D:CE:86:61:65:A9:6D:02:BB:0D:F7:60
X509v3 Authority Key Identifier:
keyid:70:BD:1C:0E:A7:DC:0E:68:B9:8C:EB:C0:7D:7F:BF:80:7E:FE:9D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL0cDqfcDmi5jOvAfX-_gH7-nRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1f618f-0353-4d07-a10c-e12c4881fcb2/1/cL0cDqfcDmi5jOvAfX-_gH7-nRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1f618f-0353-4d07-a10c-e12c4881fcb2/1/cL0cDqfcDmi5jOvAfX-_gH7-nRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:98:e9:88:be:8b:2a:34:23:65:5c:b5:20:cc:64:54:4a:14:
c5:f1:5f:eb:91:3e:08:8c:ad:42:2a:dc:eb:3c:f7:83:a8:23:
c3:6c:a1:e1:c4:d5:d4:0a:35:71:52:c7:21:db:d2:e8:17:45:
31:23:bd:60:3c:41:55:8a:3f:e1:dc:de:b5:26:09:be:d9:44:
c6:cc:d5:c8:d4:d7:a4:13:86:c6:86:80:10:b7:4a:e7:6b:d0:
85:7e:9c:97:0a:af:7a:e5:0a:af:d1:81:27:b6:3c:34:4e:07:
3b:96:d1:1e:b7:f0:14:67:1a:f4:ba:61:de:ed:fb:fb:21:76:
34:83:50:70:64:fd:9b:8b:1d:54:7d:68:e3:73:41:ca:3c:11:
c2:00:b7:fc:1f:0d:68:37:0a:8d:38:09:3f:66:64:06:0f:f9:
cb:58:71:46:75:9f:5c:68:34:77:97:14:d7:1d:76:a8:10:90:
49:4b:80:fd:39:88:4f:b6:6f:7a:de:7a:4a:f4:1f:ff:32:84:
1f:d1:c0:07:61:2d:09:a3:46:01:ce:81:0c:92:68:27:1e:04:
8b:05:1f:7f:2e:0e:81:cb:89:fa:27:eb:90:76:5f:e2:b1:28:
8d:cf:f5:ce:75:d5:d3:28:61:13:f3:a7:0d:66:00:a6:af:6c:
b8:cd:7f:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZIxAFNgQY06p4Ca8jrVOb4bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYmQxYzBlYTdkYzBlNjhiOThjZWJjMDdkN2ZiZjgwN2Vm
ZTlkMWEwHhcNMjQwOTI3MDEwMjM3WhcNMjQwOTI4MDEwMjM3WjAzMTEwLwYDVQQD
EygzZGQ1MGJjYjg0MTgzODgxMWRjZTg2NjE2NWE5NmQwMmJiMGRmNzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+2fGpMksfwn4K0WWz4zmMPAXXb3
XMHjnJ3u1S53xjKAz98yjJIYVItZoibzy5UZXdD6GB1t/WhIcQKY28/wwf1yrBeS
72vNGgFHI1p1bvdP4QOWFZFwT0mjCOQ7ho8YS7QbxONEw56DEfrwLWyhB0DHjMgj
4IGQvNjVPFC4sOE1Hf6ryfDCACT/vUwWmxgACLdOpBqzRj949Y/NEyCwir5nWqWm
G8UCVtIHPpaqHPE8c8DlFzNsaiFryIY6NtFwoQ/z0MBTlizb7wzmAfaLM8HwF4Ue
Gi3wWWaVnJthdVtSy3jFSAuICaNyMUFVohx8bNn7QuP6Darb2mYba0MdzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3VC8uEGDiBHc6GYWWpbQK7DfdgMB8GA1UdIwQY
MBaAFHC9HA6n3A5ouYzrwH1/v4B+/p0aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0wwY0RxZmNEbWk1ak92QWZYLV9nSDctblJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8xZjYxOGYtMDM1My00ZDA3LWExMGMt
ZTEyYzQ4ODFmY2IyLzEvY0wwY0RxZmNEbWk1ak92QWZYLV9nSDctblJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8xZjYxOGYtMDM1My00ZDA3LWExMGMtZTEyYzQ4ODFmY2Iy
LzEvY0wwY0RxZmNEbWk1ak92QWZYLV9nSDctblJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZjpiL6L
KjQjZVy1IMxkVEoUxfFf65E+CIytQirc6zz3g6gjw2yh4cTV1Ao1cVLHIdvS6BdF
MSO9YDxBVYo/4dzetSYJvtlExszVyNTXpBOGxoaAELdK52vQhX6clwqveuUKr9GB
J7Y8NE4HO5bRHrfwFGca9Lph3u37+yF2NINQcGT9m4sdVH1o43NByjwRwgC3/B8N
aDcKjTgJP2ZkBg/5y1hxRnWfXGg0d5cU1x12qBCQSUuA/TmIT7Zvet56SvQf/zKE
H9HAB2EtCaNGAc6BDJJoJx4EiwUffy4OgcuJ+ifrkHZf4rEojc/1znXV0yhhE/On
DWYApq9suM1/CA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 13:58:46 2025 by rpki-client