Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
File: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft (raw, json)
Hash identifier: +AAMwbP1/6YZMCkNo0aNMHIA21Vs0HXGf6KC9gAYj/8=
Subject key identifier: DD:ED:4E:F9:DB:24:6D:6F:94:14:33:E2:FB:13:0F:4B:D2:95:DD:A3
Authority key identifier: E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
Certificate issuer: /CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Certificate serial: 0195E00FC97F0D082A07FAEE62FE7BDE541A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
Manifest number: 08EE
Signing time: Sat 29 Mar 2025 04:01:25 +0000
Manifest this update: Sat 29 Mar 2025 04:01:25 +0000
Manifest next update: Sun 30 Mar 2025 04:01:25 +0000
Files and hashes: 1: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl (hash: ZB/onm2YIPFOMcPed4vm5yL03KcpDJq9dSrOCcmqIus=)
2: p_9inuYDdp5y0a2pR7IT5FJWxkA.roa (hash: w2ZioVdUL3h+FykybnCF+ZnIIFFr6zWJMlYabfFURBc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:c9:7f:0d:08:2a:07:fa:ee:62:fe:7b:de:54:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Validity
Not Before: Mar 29 04:01:25 2025 GMT
Not After : Mar 30 04:01:25 2025 GMT
Subject: CN=dded4ef9db246d6f941433e2fb130f4bd295dda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:78:f3:60:55:8c:c5:01:9d:42:63:6c:ee:db:
a8:c0:d0:b1:c9:05:75:9a:6b:7f:52:c9:97:82:bf:
62:9c:c0:19:23:f4:11:41:5c:4a:32:76:67:32:d5:
8a:f6:21:45:2b:6a:2d:8c:76:74:0c:1b:f8:ee:58:
d8:62:dd:b6:04:6b:b4:eb:40:d3:5a:a7:f1:4b:da:
dc:e0:38:5f:d9:72:e1:5e:48:9f:a9:ea:33:ce:79:
b5:87:5f:93:51:24:f6:2b:f1:86:53:40:0a:c6:78:
a4:c3:ee:a5:39:98:2d:03:1b:c0:1b:33:2c:75:57:
53:58:7b:ac:47:23:00:56:5b:c7:a7:92:30:d6:4f:
2c:7f:d1:4a:80:06:00:4f:d4:a8:25:81:d0:40:97:
ae:dc:4c:14:78:e2:c4:8c:04:c9:3d:19:3a:6f:b8:
94:06:1c:cb:77:3b:82:0d:c5:de:14:24:4c:23:0a:
3b:5d:10:83:11:e6:4e:05:76:07:71:f9:91:25:f2:
5a:27:36:af:53:4c:b6:0d:94:1a:15:2a:4d:dc:50:
fe:ef:b0:b2:b3:2c:49:93:dc:cc:68:db:ed:61:53:
75:00:bd:61:38:14:ea:fe:c1:2d:dc:df:06:a1:86:
4e:14:17:f2:62:fb:06:d0:0b:86:e7:7d:02:b1:c6:
66:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:ED:4E:F9:DB:24:6D:6F:94:14:33:E2:FB:13:0F:4B:D2:95:DD:A3
X509v3 Authority Key Identifier:
keyid:E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:0e:96:72:91:85:73:24:9a:06:6f:15:ca:79:04:55:ce:b3:
a9:c3:24:b8:82:dd:5f:6a:a1:79:8d:ff:74:8a:c2:64:d1:8c:
68:81:b6:b2:5b:84:d1:3c:22:c6:b6:b6:c6:54:37:f7:72:0e:
8d:4c:c0:5c:d6:96:f7:f6:01:d5:fa:7d:f0:6c:1b:6d:3e:29:
56:0d:22:74:06:93:5b:06:17:44:84:86:25:5a:67:67:76:39:
33:ec:68:6c:1d:81:a2:e0:73:39:f9:82:a7:a4:6f:17:a8:19:
59:38:72:f6:26:29:4d:f3:99:a2:9e:15:c0:ac:10:1a:08:fd:
a0:41:72:90:62:82:e2:e1:51:63:98:3d:01:13:d8:66:ca:dd:
2f:8b:78:9c:ac:c9:ee:ca:a8:22:0c:b1:54:e7:d9:06:74:e4:
86:9f:af:25:a7:e2:37:c1:20:25:7b:25:12:bb:1c:f8:60:64:
69:c8:f2:26:0c:0d:5f:8e:ec:66:63:35:42:65:02:c5:c0:44:
35:f6:e8:9f:6f:5e:f5:e9:ca:5a:15:c6:bc:f1:6c:45:36:dc:
d3:30:ca:eb:ce:14:3a:25:a0:94:3d:18:49:a5:cd:80:e7:d1:
3d:78:be:f2:ca:3d:78:87:1f:27:3c:96:ff:08:d3:bc:6f:d9:
c2:47:2c:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD8l/DQgqB/ruYv573lQaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMWFhM2VmZjQ3NWIwMTBiZGU0MTU0ZjNiZDQ3NDNhN2Mw
YmFlNTUwHhcNMjUwMzI5MDQwMTI1WhcNMjUwMzMwMDQwMTI1WjAzMTEwLwYDVQQD
EyhkZGVkNGVmOWRiMjQ2ZDZmOTQxNDMzZTJmYjEzMGY0YmQyOTVkZGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHjzYFWMxQGdQmNs7tuowNCxyQV1
mmt/UsmXgr9inMAZI/QRQVxKMnZnMtWK9iFFK2otjHZ0DBv47ljYYt22BGu060DT
WqfxS9rc4Dhf2XLhXkifqeozznm1h1+TUST2K/GGU0AKxnikw+6lOZgtAxvAGzMs
dVdTWHusRyMAVlvHp5Iw1k8sf9FKgAYAT9SoJYHQQJeu3EwUeOLEjATJPRk6b7iU
BhzLdzuCDcXeFCRMIwo7XRCDEeZOBXYHcfmRJfJaJzavU0y2DZQaFSpN3FD+77Cy
syxJk9zMaNvtYVN1AL1hOBTq/sEt3N8GoYZOFBfyYvsG0AuG530CscZmEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3tTvnbJG1vlBQz4vsTD0vSld2jMB8GA1UdIwQY
MBaAFOAao+/0dbAQveQVTzvUdDp8C65VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEJxajdfUjFzQkM5NUJWUE85UjBPbndMcmxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85Yjg3ZDUtM2I2Yi00MjZlLWIzY2Ut
M2QwY2Q5ODYxOTBmLzEvNEJxajdfUjFzQkM5NUJWUE85UjBPbndMcmxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85Yjg3ZDUtM2I2Yi00MjZlLWIzY2UtM2QwY2Q5ODYxOTBm
LzEvNEJxajdfUjFzQkM5NUJWUE85UjBPbndMcmxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjA6WcpGF
cySaBm8VynkEVc6zqcMkuILdX2qheY3/dIrCZNGMaIG2sluE0Twixra2xlQ393IO
jUzAXNaW9/YB1fp98GwbbT4pVg0idAaTWwYXRISGJVpnZ3Y5M+xobB2BouBzOfmC
p6RvF6gZWThy9iYpTfOZop4VwKwQGgj9oEFykGKC4uFRY5g9ARPYZsrdL4t4nKzJ
7sqoIgyxVOfZBnTkhp+vJafiN8EgJXslErsc+GBkacjyJgwNX47sZmM1QmUCxcBE
Nfbon29e9enKWhXGvPFsRTbc0zDK684UOiWglD0YSaXNgOfRPXi+8so9eIcfJzyW
/wjTvG/ZwkcsXA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:13:21 2025 by rpki-client