Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
File: dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft (raw, json)
Hash identifier: xEy2flgo6dMyWpj1+ELtxWe+jGV7G0fZ6WlngJITcWs=
Subject key identifier: A4:90:E1:BB:E7:F1:94:A8:12:E8:58:06:9B:AB:EF:E5:AD:CF:8C:15
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 0194BC04FA6A2429082A6BAC09BCA0983858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
Manifest number: 0FA9
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl (hash: Ro0zjcrqWODLHNqvJT9OZLYH5OgGFbT3Ve4rHLfHKxU=)
2: f-il_3H1LRc6PIPxNMpx5rb3_B4.roa (hash: j8JYnPzK7K8nFnvGqSGuDs5oyvyTlnZauLvkoFkAujQ=)
3: hPRhT7rkMq9JixnaKQg6MXIa6w0.roa (hash: 47HMse7zHITwF5pv9mb9OCNw4X4BUCmXu1B+299Il/A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fa:6a:24:29:08:2a:6b:ac:09:bc:a0:98:38:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=a490e1bbe7f194a812e858069babefe5adcf8c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:de:f6:e7:80:c3:2c:0b:f7:11:f0:d4:53:14:
fe:9d:61:54:3b:3c:85:15:b4:e4:dd:77:63:71:59:
df:69:c7:37:39:f2:61:f6:c6:09:06:85:1a:25:25:
1b:4c:51:7b:b8:ed:9f:39:39:5b:42:8e:1f:69:7c:
03:12:2d:89:d8:2e:37:7f:cc:b3:f0:79:dd:9a:9c:
35:5c:54:bc:60:db:50:c5:fe:41:a5:54:0f:07:ba:
b5:93:c5:47:06:24:56:b4:a6:2c:f2:a3:56:bc:b0:
0c:80:7f:63:4c:f3:bf:1e:a3:45:85:9c:e8:c6:4a:
b3:9e:75:6f:47:31:93:09:0d:a0:8c:e5:4c:be:b7:
48:b4:1f:8f:25:51:2c:fa:b8:93:f1:af:d7:97:da:
27:55:d2:dc:62:a9:93:bb:be:33:63:cd:ff:a6:7f:
0f:b5:ee:8b:5d:be:ca:02:9e:c1:c8:38:fc:64:4c:
e6:b2:48:ff:ea:86:66:7f:94:03:8f:90:48:10:61:
d6:83:02:0b:7a:11:0e:00:bd:06:3e:d2:c4:c4:ff:
e9:7c:58:d9:af:a3:9c:3b:a9:c0:34:5b:6c:1e:ba:
c8:4c:d3:9f:a6:02:b8:f7:ff:4a:9e:c6:04:ae:e0:
13:9e:55:d1:20:c1:a6:16:60:57:7b:d8:12:c2:de:
aa:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:90:E1:BB:E7:F1:94:A8:12:E8:58:06:9B:AB:EF:E5:AD:CF:8C:15
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:91:c8:3a:53:af:e3:75:1f:2d:fc:c9:7e:7c:20:0a:58:70:
59:51:bf:50:4e:65:61:e8:20:f9:7a:7d:77:1a:66:dc:dc:90:
39:ef:ea:6e:29:6f:55:e7:05:f8:88:06:bf:d3:c9:d7:15:be:
5c:73:2e:f5:16:eb:53:87:ae:9f:f9:18:5b:d5:8e:53:ef:9a:
25:37:ea:e5:84:62:3b:f0:75:d5:cf:4a:07:53:c2:72:af:f7:
92:f7:41:77:33:57:a1:92:80:b6:7f:6b:33:e4:93:94:59:2f:
7d:99:fb:be:36:d5:12:cb:48:c7:34:d8:b6:fb:24:cc:34:13:
51:19:98:ba:b9:9f:2e:7c:6c:b8:27:5d:56:65:f8:86:7c:e7:
52:e1:d7:50:56:f2:cf:16:77:0d:40:6c:d9:55:e2:e4:3b:39:
07:90:a3:e4:01:f4:2b:3d:d9:e6:fa:15:05:76:8b:34:3c:5d:
b8:33:41:8d:fa:5d:c1:71:b6:d0:19:c9:8b:9a:80:ca:8a:f8:
77:a5:f0:c2:e5:9d:b4:f7:76:3a:3b:45:43:d2:3a:b7:7c:13:
d1:b5:c1:64:00:23:71:a9:e0:1a:a9:72:a3:40:93:fe:1d:6f:
62:5f:19:d8:f1:1a:b4:ab:dc:aa:69:91:1d:b6:9c:67:b7:3a:
6f:bc:4b:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BPpqJCkIKmusCbygmDhYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YWE5MzEyYWY0YzNkOWNlZTA4MmM5NTQxYTZiNjVhZGE1
NjliM2MwHhcNMjUwMTMxMTEwMDMwWhcNMjUwMjAxMTEwMDMwWjAzMTEwLwYDVQQD
EyhhNDkwZTFiYmU3ZjE5NGE4MTJlODU4MDY5YmFiZWZlNWFkY2Y4YzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA397254DDLAv3EfDUUxT+nWFUOzyF
FbTk3XdjcVnfacc3OfJh9sYJBoUaJSUbTFF7uO2fOTlbQo4faXwDEi2J2C43f8yz
8Hndmpw1XFS8YNtQxf5BpVQPB7q1k8VHBiRWtKYs8qNWvLAMgH9jTPO/HqNFhZzo
xkqznnVvRzGTCQ2gjOVMvrdItB+PJVEs+riT8a/Xl9onVdLcYqmTu74zY83/pn8P
te6LXb7KAp7ByDj8ZEzmskj/6oZmf5QDj5BIEGHWgwILehEOAL0GPtLExP/pfFjZ
r6OcO6nANFtsHrrITNOfpgK49/9KnsYEruATnlXRIMGmFmBXe9gSwt6qmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSQ4bvn8ZSoEuhYBpur7+Wtz4wVMB8GA1UdIwQY
MBaAFHSqkxKvTD2c7ggslUGmtlraVps8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEtxVEVxOU1QWnp1Q0N5VlFhYTJXdHBXbXp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wYTQxNWEtYzcyOC00MmU5LWJlNDUt
OThhMWQ2NWNmZTZmLzEvZEtxVEVxOU1QWnp1Q0N5VlFhYTJXdHBXbXp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8wYTQxNWEtYzcyOC00MmU5LWJlNDUtOThhMWQ2NWNmZTZm
LzEvZEtxVEVxOU1QWnp1Q0N5VlFhYTJXdHBXbXp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJHIOlOv
43UfLfzJfnwgClhwWVG/UE5lYegg+Xp9dxpm3NyQOe/qbilvVecF+IgGv9PJ1xW+
XHMu9RbrU4eun/kYW9WOU++aJTfq5YRiO/B11c9KB1PCcq/3kvdBdzNXoZKAtn9r
M+STlFkvfZn7vjbVEstIxzTYtvskzDQTURmYurmfLnxsuCddVmX4hnznUuHXUFby
zxZ3DUBs2VXi5Ds5B5Cj5AH0Kz3Z5voVBXaLNDxduDNBjfpdwXG20BnJi5qAyor4
d6XwwuWdtPd2OjtFQ9I6t3wT0bXBZAAjcangGqlyo0CT/h1vYl8Z2PEatKvcqmmR
HbacZ7c6b7xLkw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:33:23 2025 by rpki-client