Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
File: r0eMzcBICmtDus2KruAHmxbsLmg.mft (raw, json)
Hash identifier: op8/kJFhgJcWOG2WCYZtZ2MSj4BoH1MAIW2Er0iLrDg=
Subject key identifier: AA:78:EC:38:E8:E3:B9:0E:3F:FC:A5:40:F1:12:67:04:8C:3C:14:56
Authority key identifier: AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
Certificate issuer: /CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Certificate serial: 0194BD8573F44BA6F8BEFA278BCEF35C674A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
Manifest number: 06AC
Signing time: Fri 31 Jan 2025 18:00:27 +0000
Manifest this update: Fri 31 Jan 2025 18:00:27 +0000
Manifest next update: Sat 01 Feb 2025 18:00:27 +0000
Files and hashes: 1: DTxczwIBr_nfZRTIPgBtQYWGTi8.roa (hash: +VMycRtyrx3wbrRNOQ5x4frKIMykN9VHtpPYdKmVF5w=)
2: r0eMzcBICmtDus2KruAHmxbsLmg.crl (hash: L6bEvz+beEi32ht6DIBLnlpi9iVuct2+kidvxo7JrBg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:73:f4:4b:a6:f8:be:fa:27:8b:ce:f3:5c:67:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Validity
Not Before: Jan 31 18:00:27 2025 GMT
Not After : Feb 1 18:00:27 2025 GMT
Subject: CN=aa78ec38e8e3b90e3ffca540f11267048c3c1456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:be:cd:15:61:3e:76:a3:4b:bc:22:d2:38:c5:
c6:b9:f7:4c:9a:f6:af:87:1b:8d:85:3a:9d:8e:7e:
8b:4c:29:cf:f0:66:3f:08:3f:97:8a:8b:83:30:d7:
3d:6d:ec:6e:0f:18:5d:11:07:c3:a3:d4:ba:6e:21:
43:97:42:44:f9:71:7d:4d:3c:47:7d:c8:f6:e2:1c:
35:b5:4f:11:24:a2:94:4e:41:af:38:52:f8:3f:ab:
cb:26:ef:54:94:9f:b0:ec:da:68:f0:c1:d4:22:f7:
d1:d5:a1:dd:f9:10:33:b4:ce:d1:b5:63:24:be:f9:
0a:ef:f3:d0:0b:4e:58:f0:10:4f:8c:b0:0d:bb:4c:
09:3a:10:c3:bd:e3:5d:bb:78:ff:c8:58:5f:db:f5:
8b:14:67:37:34:13:f5:a1:72:4a:ab:b7:01:cc:5f:
48:16:77:e4:f9:04:c0:f0:ba:e0:90:05:6e:ac:20:
63:31:27:56:ff:66:91:14:28:a0:48:de:ad:3b:fd:
e3:26:8a:f2:ef:72:ff:5f:c0:d1:04:af:54:37:40:
d5:93:2d:b5:09:25:13:b6:90:65:ce:5f:72:dc:22:
13:38:66:5f:e0:50:a4:12:6b:20:7f:e6:ef:0b:d1:
6d:cc:ea:65:d5:13:16:7b:16:ab:70:ec:43:26:59:
9a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:78:EC:38:E8:E3:B9:0E:3F:FC:A5:40:F1:12:67:04:8C:3C:14:56
X509v3 Authority Key Identifier:
keyid:AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:aa:a6:3e:a3:13:95:df:3b:74:c6:6e:97:b9:11:03:c1:e0:
81:1f:d3:c4:af:e5:45:ae:8e:5b:d7:b7:f7:12:32:5d:48:21:
f7:dd:6e:2d:63:54:d3:6d:24:5f:17:c3:6f:63:2d:f0:6e:c6:
0b:66:b1:70:22:9a:3b:37:59:ce:05:93:9b:66:bb:d0:b5:57:
c2:50:08:15:96:cd:bd:49:cf:07:ad:00:cf:3e:eb:90:f6:4f:
b7:52:51:26:3e:ff:79:42:25:a3:7b:20:86:2f:69:2a:bf:1f:
d6:8e:94:b1:f9:92:cc:39:dd:98:eb:e3:2a:bf:f4:d2:c0:b1:
fb:24:04:0c:59:1f:80:ed:19:1a:d5:14:db:3b:12:30:c9:58:
d6:86:3e:9b:2c:de:c0:fc:37:09:6a:dd:0f:ad:a4:51:33:df:
98:e9:db:67:e5:74:39:22:2e:ec:55:07:e3:a7:40:d7:00:ae:
6e:de:79:d0:46:6e:a7:aa:00:9a:95:53:3a:95:90:f4:d3:f7:
f7:70:17:26:fd:b1:51:e5:ec:67:15:a1:95:00:fc:77:aa:f2:
5c:79:a3:85:ca:fd:4d:11:74:7b:99:d5:31:a4:bf:47:74:0e:
d7:e4:67:3e:2a:2c:4a:ed:ac:d3:b6:38:b7:42:58:ca:15:92:
18:cb:18:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hXP0S6b4vvoni87zXGdKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNDc4Y2NkYzA0ODBhNmI0M2JhY2Q4YWFlZTAwNzliMTZl
YzJlNjgwHhcNMjUwMTMxMTgwMDI3WhcNMjUwMjAxMTgwMDI3WjAzMTEwLwYDVQQD
EyhhYTc4ZWMzOGU4ZTNiOTBlM2ZmY2E1NDBmMTEyNjcwNDhjM2MxNDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq77NFWE+dqNLvCLSOMXGufdMmvav
hxuNhTqdjn6LTCnP8GY/CD+XiouDMNc9bexuDxhdEQfDo9S6biFDl0JE+XF9TTxH
fcj24hw1tU8RJKKUTkGvOFL4P6vLJu9UlJ+w7Npo8MHUIvfR1aHd+RAztM7RtWMk
vvkK7/PQC05Y8BBPjLANu0wJOhDDveNdu3j/yFhf2/WLFGc3NBP1oXJKq7cBzF9I
Fnfk+QTA8LrgkAVurCBjMSdW/2aRFCigSN6tO/3jJory73L/X8DRBK9UN0DVky21
CSUTtpBlzl9y3CITOGZf4FCkEmsgf+bvC9FtzOpl1RMWexarcOxDJlmaGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKp47Djo47kOP/ylQPESZwSMPBRWMB8GA1UdIwQY
MBaAFK9HjM3ASAprQ7rNiq7gB5sW7C5oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85OTA1MDYtNDFiYy00MDk4LWFmN2Yt
Y2M4YmYzZmJlZjk5LzEvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85OTA1MDYtNDFiYy00MDk4LWFmN2YtY2M4YmYzZmJlZjk5
LzEvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6qmPqMT
ld87dMZul7kRA8HggR/TxK/lRa6OW9e39xIyXUgh991uLWNU020kXxfDb2Mt8G7G
C2axcCKaOzdZzgWTm2a70LVXwlAIFZbNvUnPB60Azz7rkPZPt1JRJj7/eUIlo3sg
hi9pKr8f1o6UsfmSzDndmOvjKr/00sCx+yQEDFkfgO0ZGtUU2zsSMMlY1oY+myze
wPw3CWrdD62kUTPfmOnbZ+V0OSIu7FUH46dA1wCubt550EZup6oAmpVTOpWQ9NP3
93AXJv2xUeXsZxWhlQD8d6ryXHmjhcr9TRF0e5nVMaS/R3QO1+RnPiosSu2s07Y4
t0JYyhWSGMsYCw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:02 2025 by rpki-client