Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
File: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft (raw, json)
Hash identifier: u+w9yhVP6K2q9W/3UFbuDFdyRNOoNibndBdi9gf9mm8=
Subject key identifier: A6:80:BF:7F:A1:EF:60:10:7F:64:F1:16:D3:B9:E0:6D:70:15:27:03
Authority key identifier: DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
Certificate issuer: /CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Certificate serial: 0194BBCE03FD6ED8A1C86CB17A07EEE4E722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
Manifest number: 11FE
Signing time: Fri 31 Jan 2025 10:00:28 +0000
Manifest this update: Fri 31 Jan 2025 10:00:28 +0000
Manifest next update: Sat 01 Feb 2025 10:00:28 +0000
Files and hashes: 1: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl (hash: //JrCrj033HMz/gLAMUrNBZz5ZWiP21TNYbOaguBYuA=)
2: wHiz844bSnAZ4Nug3ceKjQdatmc.roa (hash: /mOXe5EHXrP0fFZ7gg8le5T3+NCaa6O//12eYo5yKX8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:03:fd:6e:d8:a1:c8:6c:b1:7a:07:ee:e4:e7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Validity
Not Before: Jan 31 10:00:28 2025 GMT
Not After : Feb 1 10:00:28 2025 GMT
Subject: CN=a680bf7fa1ef60107f64f116d3b9e06d70152703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:89:1b:c3:a2:cd:ac:27:5a:29:22:2c:94:c1:
72:9d:4e:94:20:7d:81:bd:0b:3c:e3:ce:42:5d:cc:
d4:b1:bd:67:b6:58:46:18:1c:5b:35:7f:b8:bf:33:
71:47:7c:66:53:b2:97:d7:9f:c3:d8:03:b8:4c:0e:
c1:97:54:56:bc:15:ae:ce:ba:fc:64:b2:29:18:36:
e6:56:83:6c:6e:00:d4:ce:2c:87:ce:ae:47:af:ee:
e1:d4:2a:e1:2a:72:a4:2d:f0:a9:bf:28:e6:e8:29:
45:2d:b5:8e:e4:a1:dc:20:ac:ac:43:be:e8:fc:f7:
3c:b7:85:4c:3f:d6:95:73:03:ef:2f:10:07:a9:10:
76:24:c6:49:f0:9d:7a:0b:a7:48:2e:f5:06:90:b4:
b0:67:24:22:e0:c7:66:39:4d:0c:15:bf:f8:e3:41:
ef:b4:c9:1b:58:e6:a8:47:0a:12:dd:46:38:77:cb:
b2:e7:19:6c:3d:e6:f1:98:b2:b4:97:20:4c:fd:c8:
68:73:f9:73:fd:e6:28:0e:c3:15:af:de:1e:c3:16:
9d:b8:41:94:06:45:8f:6f:19:71:f3:70:6c:68:5c:
84:f3:0d:03:ca:af:53:99:11:49:b4:42:f7:f7:cc:
ef:24:3a:8e:0d:f0:17:69:14:eb:51:e6:90:60:4f:
4d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:80:BF:7F:A1:EF:60:10:7F:64:F1:16:D3:B9:E0:6D:70:15:27:03
X509v3 Authority Key Identifier:
keyid:DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1d:bb:62:0f:67:55:45:be:a4:d1:5a:b1:69:32:25:3a:60:
9e:b4:2e:ff:f2:d7:5a:6b:c2:80:06:ac:0a:96:3d:32:c3:4d:
70:63:85:ab:6f:fa:1b:6e:82:a4:c7:01:b4:21:51:9f:cf:cb:
b0:ae:02:0e:3e:d6:db:97:23:8c:c8:e1:78:ab:57:d1:9a:cd:
0e:09:9a:d2:45:31:f8:48:55:93:d4:ee:f9:95:e4:e8:bf:b6:
c6:54:5e:e7:57:cf:3f:30:1d:d4:7b:d9:78:34:63:08:e3:3a:
6b:2a:46:1f:bc:83:88:f3:fd:30:0d:e4:9d:9d:90:b9:b3:09:
b7:e9:00:19:ca:75:dc:50:71:63:cf:4c:42:5d:58:e0:03:54:
37:0e:4e:81:14:0c:81:70:f3:22:ff:99:41:dd:c9:fa:63:7e:
0d:2f:00:96:f6:71:13:03:4e:70:53:32:a3:25:fb:ca:39:3d:
f9:98:63:fd:30:8e:9b:83:df:2b:4b:67:86:77:68:f7:f6:f0:
28:3d:cf:08:e5:09:4b:b3:19:6f:89:de:10:25:24:1a:f4:8d:
96:81:21:75:33:cf:93:4d:7b:da:74:98:93:77:be:4d:97:54:
11:83:ee:1b:fc:52:f7:9a:0d:02:5d:87:cb:21:fd:41:fe:30:
9a:68:9b:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zgP9btihyGyxegfu5OciMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDM4OWQ4NWVhMTI2ZTBlZmJlYmM1ZDg0NTllZjcwOWZi
ODk1Y2IwHhcNMjUwMTMxMTAwMDI4WhcNMjUwMjAxMTAwMDI4WjAzMTEwLwYDVQQD
EyhhNjgwYmY3ZmExZWY2MDEwN2Y2NGYxMTZkM2I5ZTA2ZDcwMTUyNzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArokbw6LNrCdaKSIslMFynU6UIH2B
vQs8485CXczUsb1ntlhGGBxbNX+4vzNxR3xmU7KX15/D2AO4TA7Bl1RWvBWuzrr8
ZLIpGDbmVoNsbgDUziyHzq5Hr+7h1CrhKnKkLfCpvyjm6ClFLbWO5KHcIKysQ77o
/Pc8t4VMP9aVcwPvLxAHqRB2JMZJ8J16C6dILvUGkLSwZyQi4MdmOU0MFb/440Hv
tMkbWOaoRwoS3UY4d8uy5xlsPebxmLK0lyBM/choc/lz/eYoDsMVr94ewxaduEGU
BkWPbxlx83BsaFyE8w0Dyq9TmRFJtEL398zvJDqODfAXaRTrUeaQYE9NswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKaAv3+h72AQf2TxFtO54G1wFScDMB8GA1UdIwQY
MBaAFNoDidheoSbg7768XYRZ73CfuJXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdPSjJGNmhKdUR2dnJ4ZGhGbnZjSi00bGNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yNzU4NWMtYjg2Ni00OTYyLTgwZmQt
ZWE2MTM0NzA2YTQwLzEvMmdPSjJGNmhKdUR2dnJ4ZGhGbnZjSi00bGNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8yNzU4NWMtYjg2Ni00OTYyLTgwZmQtZWE2MTM0NzA2YTQw
LzEvMmdPSjJGNmhKdUR2dnJ4ZGhGbnZjSi00bGNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWB27Yg9n
VUW+pNFasWkyJTpgnrQu//LXWmvCgAasCpY9MsNNcGOFq2/6G26CpMcBtCFRn8/L
sK4CDj7W25cjjMjheKtX0ZrNDgma0kUx+EhVk9Tu+ZXk6L+2xlRe51fPPzAd1HvZ
eDRjCOM6aypGH7yDiPP9MA3knZ2QubMJt+kAGcp13FBxY89MQl1Y4ANUNw5OgRQM
gXDzIv+ZQd3J+mN+DS8AlvZxEwNOcFMyoyX7yjk9+Zhj/TCOm4PfK0tnhndo9/bw
KD3PCOUJS7MZb4neECUkGvSNloEhdTPPk0172nSYk3e+TZdUEYPuG/xS95oNAl2H
yyH9Qf4wmmib8w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:50 2025 by rpki-client