Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
File: d44TTk_7X7E6woT-lIgnaCYVZjI.mft (raw, json)
Hash identifier: 7HAI9O+/NHBDoGbD1tgT1OeNw6RB1S+h8cO8W9dbiPI=
Subject key identifier: 40:80:A8:85:81:98:C9:C3:89:51:35:CF:44:41:17:58:B3:8A:B5:B5
Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
Certificate issuer: /CN=778e134e4ffb5fb13ac284fe9488276826156632
Certificate serial: 0195E159223B5AA37B2D503E5F70E388D3A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
Manifest number: 0A1D
Signing time: Sat 29 Mar 2025 10:01:09 +0000
Manifest this update: Sat 29 Mar 2025 10:01:09 +0000
Manifest next update: Sun 30 Mar 2025 10:01:09 +0000
Files and hashes: 1: YmdDnE-Vn1310ZEVyUeueCTQcs4.roa (hash: NlHhFYGZnQdX8LSnZttscO3Rwl4+d4S2jrYpL4VTU9k=)
2: d44TTk_7X7E6woT-lIgnaCYVZjI.crl (hash: cCwFLj+7aqafBUSFGT0EJJ0kGAzDrRGU61zVWNIqqQQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:22:3b:5a:a3:7b:2d:50:3e:5f:70:e3:88:d3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632
Validity
Not Before: Mar 29 10:01:09 2025 GMT
Not After : Mar 30 10:01:09 2025 GMT
Subject: CN=4080a8858198c9c3895135cf44411758b38ab5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:c1:21:33:00:fe:26:e8:49:7e:ad:97:78:
38:ed:33:dd:1e:ab:ee:bb:3b:be:8f:ea:c5:41:66:
4a:88:4e:8e:66:a3:d5:34:ad:47:d0:35:af:54:65:
81:c5:24:bc:4f:ca:55:f2:7d:f3:e3:cb:1c:ca:7c:
55:c6:56:f5:3f:d8:38:6c:3b:1a:78:12:89:5d:35:
58:58:1b:d2:a7:c1:44:e6:f8:a0:6d:b6:e0:e2:ef:
1d:a0:33:6f:a6:ee:af:ad:7f:25:75:f9:56:04:7d:
79:f7:d7:8d:21:07:4c:8a:6d:55:2b:f9:f9:3c:05:
ab:d3:46:14:7b:64:e8:39:86:ee:20:c3:63:25:b6:
b2:74:17:11:4b:8c:00:98:c4:50:98:cd:a4:9d:ae:
65:ae:a9:31:a1:e5:8a:4d:9b:39:e5:01:01:06:08:
48:9b:22:40:87:00:1a:f9:03:42:cf:9b:3d:2d:c3:
4f:f8:e9:fd:87:f9:36:91:3c:a6:05:14:4e:4e:1c:
31:7e:8e:d9:f8:7c:12:bf:31:14:f4:2e:fb:49:39:
7b:e9:97:7f:93:09:d5:18:76:31:73:1b:cb:43:a5:
ff:61:fd:31:bc:1d:08:c1:66:49:0d:7b:fe:b6:4f:
bf:8c:cf:44:c5:f5:11:76:5c:4d:83:ad:bb:8f:33:
c6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:80:A8:85:81:98:C9:C3:89:51:35:CF:44:41:17:58:B3:8A:B5:B5
X509v3 Authority Key Identifier:
keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:6f:64:f9:30:2d:01:39:37:0e:b6:a6:ff:ad:2c:74:1e:7c:
67:9a:ea:8d:30:d5:95:6d:a4:99:17:81:e4:cb:11:98:18:78:
e5:0c:ea:10:f4:12:ac:c0:97:54:61:b8:a9:f3:88:a6:ab:1b:
b2:03:39:f9:80:3a:a5:39:b2:75:4a:29:f7:2e:2c:36:65:13:
a7:fb:f5:7a:f8:2f:54:a1:06:94:14:d0:cf:a4:9e:ea:8f:38:
e2:c1:b5:61:6d:08:5e:c2:e2:aa:4a:b3:31:ea:b0:4f:e4:95:
6b:08:b2:3d:95:a8:13:ea:2c:b3:e1:1a:52:b6:d5:43:a1:83:
df:5a:cb:b3:99:49:6d:e8:ee:51:8d:88:2c:b2:2c:43:00:5c:
27:ef:65:68:7a:e5:5f:9b:6c:e1:2b:3c:3e:bf:f8:78:6c:3b:
d1:2d:2f:25:2c:18:72:09:c1:7b:0b:a4:7c:b4:fa:e3:95:b1:
9c:19:95:38:e2:16:76:78:05:85:b4:3e:d7:ea:37:ce:23:d7:
73:37:5d:50:77:64:cc:5e:e6:4f:dd:51:6a:08:bd:16:8d:7d:
3a:30:c3:62:e8:0a:f8:5a:62:75:bc:e1:55:fb:61:32:9e:9f:
95:42:ee:a3:2b:bf:ff:3a:78:00:3d:14:94:bd:e8:ac:19:33:
55:dc:07:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWSI7WqN7LVA+X3DjiNOjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OGUxMzRlNGZmYjVmYjEzYWMyODRmZTk0ODgyNzY4MjYx
NTY2MzIwHhcNMjUwMzI5MTAwMTA5WhcNMjUwMzMwMTAwMTA5WjAzMTEwLwYDVQQD
Eyg0MDgwYTg4NTgxOThjOWMzODk1MTM1Y2Y0NDQxMTc1OGIzOGFiNWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtePBITMA/iboSX6tl3g47TPdHqvu
uzu+j+rFQWZKiE6OZqPVNK1H0DWvVGWBxSS8T8pV8n3z48scynxVxlb1P9g4bDsa
eBKJXTVYWBvSp8FE5vigbbbg4u8doDNvpu6vrX8ldflWBH1599eNIQdMim1VK/n5
PAWr00YUe2ToOYbuIMNjJbaydBcRS4wAmMRQmM2kna5lrqkxoeWKTZs55QEBBghI
myJAhwAa+QNCz5s9LcNP+On9h/k2kTymBRROThwxfo7Z+HwSvzEU9C77STl76Zd/
kwnVGHYxcxvLQ6X/Yf0xvB0IwWZJDXv+tk+/jM9ExfURdlxNg627jzPGPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECAqIWBmMnDiVE1z0RBF1izirW1MB8GA1UdIwQY
MBaAFHeOE05P+1+xOsKE/pSIJ2gmFWYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81ODQxYjEtMDEyZi00MDQ2LWIxZDUt
MDk5YmFkMDM3NjhlLzEvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy81ODQxYjEtMDEyZi00MDQ2LWIxZDUtMDk5YmFkMDM3Njhl
LzEvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA29k+TAt
ATk3Dram/60sdB58Z5rqjTDVlW2kmReB5MsRmBh45QzqEPQSrMCXVGG4qfOIpqsb
sgM5+YA6pTmydUop9y4sNmUTp/v1evgvVKEGlBTQz6Se6o844sG1YW0IXsLiqkqz
MeqwT+SVawiyPZWoE+oss+EaUrbVQ6GD31rLs5lJbejuUY2ILLIsQwBcJ+9laHrl
X5ts4Ss8Pr/4eGw70S0vJSwYcgnBewukfLT645WxnBmVOOIWdngFhbQ+1+o3ziPX
czddUHdkzF7mT91Ragi9Fo19OjDDYugK+FpidbzhVfthMp6flULuoyu//zp4AD0U
lL3orBkzVdwH+g==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:34 2025 by rpki-client