Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
File: 0Jp_f91UoXzl4SpBgutlJHn511g.mft (raw, json)
Hash identifier: xKQM+CMGYBkf/gQccpGtZPuCTD/PBLoQSYylG9qqcOQ=
Subject key identifier: AA:B0:D4:D9:30:63:EC:DB:B9:A4:DF:55:11:63:BB:F2:B5:EA:32:24
Authority key identifier: D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
Certificate issuer: /CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Certificate serial: 0194BCA9D22CD6ADDB1B06C68E50948A32EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
Manifest number: 12AB
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: 0Jp_f91UoXzl4SpBgutlJHn511g.crl (hash: ZIdlZW2IaUc43VtI3MwkR+HF/jAdsdJEz7nn5tEKt6c=)
2: D7sSJq2EzuylXPTSVOWPxBm3Ho8.roa (hash: gmpCwmfjITdv8gtFNL4Zn9iouUW+u1PcPnCsYBgoNzM=)
3: efe5amh4jlMydhivq3OF5qbDCpI.roa (hash: 6iw2gnDcZP6ZZJX73WBgPOkeEQEpMVtjxP8058iyjOk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d2:2c:d6:ad:db:1b:06:c6:8e:50:94:8a:32:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=aab0d4d93063ecdbb9a4df551163bbf2b5ea3224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c8:8c:f7:17:b5:bc:59:ac:b2:f3:9b:4b:ca:
64:97:8f:30:61:de:34:ff:9f:9b:22:d8:f8:e5:68:
51:99:3b:34:f5:ec:f0:aa:ea:60:22:32:5c:87:15:
52:47:7d:0f:d7:e4:35:ef:d9:e3:34:2c:c5:55:7a:
b6:43:ad:9c:7b:b0:59:68:7e:89:7d:51:61:b0:d3:
33:28:ff:d4:a5:e6:69:f6:d4:07:b4:c9:06:de:17:
88:bf:d7:a0:47:09:3d:30:e9:5f:8c:8b:f6:14:fe:
30:9d:0e:71:d9:a0:98:67:62:35:a7:d4:e1:61:73:
df:27:9e:16:5f:fb:e3:ec:2c:79:f8:3b:a3:51:33:
24:40:cc:53:8d:1c:32:b3:1f:84:ee:fe:95:d1:43:
fd:5e:1a:d8:60:c9:f8:6a:c1:89:bb:46:cd:50:b7:
ae:40:45:9a:88:e3:b3:ce:a1:f0:fc:a7:14:fd:e4:
c8:96:56:88:2b:69:9c:81:30:72:ba:b4:8c:b3:18:
5b:62:e7:61:60:7d:02:32:9a:d5:df:bc:1c:50:5b:
26:0d:68:e7:8b:93:89:3d:ae:a6:34:70:d6:56:5d:
ae:e7:ab:cb:e9:39:a2:88:ad:74:aa:f5:84:d1:a1:
69:f6:31:cd:60:35:c3:eb:69:62:cf:d3:42:eb:20:
e7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B0:D4:D9:30:63:EC:DB:B9:A4:DF:55:11:63:BB:F2:B5:EA:32:24
X509v3 Authority Key Identifier:
keyid:D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a5:51:78:57:d9:39:86:95:22:af:12:2a:fa:9a:d5:55:26:
84:aa:13:e9:1f:6d:7e:e0:5b:be:02:bc:c8:d4:58:2c:08:ec:
eb:9c:9c:a8:0e:49:8b:67:66:e5:4e:64:0b:97:f1:81:a6:16:
30:5e:63:f6:cc:90:fd:d9:f7:f6:9b:ec:18:a6:a8:d2:74:c1:
bf:67:e6:6a:ed:38:1b:93:36:1e:78:46:9f:f2:08:7f:dd:17:
f7:54:a0:25:ad:58:35:7d:a4:3c:92:e0:79:0f:5a:59:5d:0b:
9d:18:09:42:a4:e8:6a:54:65:28:88:de:3c:85:01:8a:f3:0a:
84:5c:98:86:fc:e8:a8:ee:36:f3:0e:dd:d3:fd:dd:e7:3c:4c:
0f:af:ce:dd:b7:7a:79:cf:d9:ff:d0:6f:81:d4:c7:e4:69:a9:
de:62:79:cf:30:78:3a:45:bf:f3:20:94:8b:ec:7e:9b:be:91:
6c:36:b5:b4:f1:5b:91:85:1f:c1:ce:b3:ed:41:5b:8c:1a:13:
e4:a6:a4:6a:e4:01:84:09:13:e3:0b:75:16:00:9d:ca:3f:91:
14:cc:f1:12:20:5d:ea:e5:6e:36:71:92:53:93:03:10:f0:82:
e2:0b:64:6a:4c:58:a0:80:45:c4:b0:da:77:4d:7b:17:14:2f:
af:9a:af:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qdIs1q3bGwbGjlCUijLuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOWE3ZjdmZGQ1NGExN2NlNWUxMmE0MTgyZWI2NTI0Nzlm
OWQ3NTgwHhcNMjUwMTMxMTQwMDMzWhcNMjUwMjAxMTQwMDMzWjAzMTEwLwYDVQQD
EyhhYWIwZDRkOTMwNjNlY2RiYjlhNGRmNTUxMTYzYmJmMmI1ZWEzMjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8iM9xe1vFmssvObS8pkl48wYd40
/5+bItj45WhRmTs09ezwqupgIjJchxVSR30P1+Q179njNCzFVXq2Q62ce7BZaH6J
fVFhsNMzKP/UpeZp9tQHtMkG3heIv9egRwk9MOlfjIv2FP4wnQ5x2aCYZ2I1p9Th
YXPfJ54WX/vj7Cx5+DujUTMkQMxTjRwysx+E7v6V0UP9XhrYYMn4asGJu0bNULeu
QEWaiOOzzqHw/KcU/eTIllaIK2mcgTByurSMsxhbYudhYH0CMprV37wcUFsmDWjn
i5OJPa6mNHDWVl2u56vL6TmiiK10qvWE0aFp9jHNYDXD62liz9NC6yDnnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqw1NkwY+zbuaTfVRFju/K16jIkMB8GA1UdIwQY
MBaAFNCaf3/dVKF85eEqQYLrZSR5+ddYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpwX2Y5MVVvWHpsNFNwQmd1dGxKSG41MTFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iM2Q5N2UtNWNjMi00NjY5LWIzNzgt
NTg3NWE0NDg5ZGJhLzEvMEpwX2Y5MVVvWHpsNFNwQmd1dGxKSG41MTFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9iM2Q5N2UtNWNjMi00NjY5LWIzNzgtNTg3NWE0NDg5ZGJh
LzEvMEpwX2Y5MVVvWHpsNFNwQmd1dGxKSG41MTFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKVReFfZ
OYaVIq8SKvqa1VUmhKoT6R9tfuBbvgK8yNRYLAjs65ycqA5Ji2dm5U5kC5fxgaYW
MF5j9syQ/dn39pvsGKao0nTBv2fmau04G5M2HnhGn/IIf90X91SgJa1YNX2kPJLg
eQ9aWV0LnRgJQqToalRlKIjePIUBivMKhFyYhvzoqO428w7d0/3d5zxMD6/O3bd6
ec/Z/9BvgdTH5Gmp3mJ5zzB4OkW/8yCUi+x+m76RbDa1tPFbkYUfwc6z7UFbjBoT
5KakauQBhAkT4wt1FgCdyj+RFMzxEiBd6uVuNnGSU5MDEPCC4gtkakxYoIBFxLDa
d017FxQvr5qvTA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:48:29 2025 by rpki-client