Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
File: m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft (raw, json)
Hash identifier: h4eMZmXFDsJrslRkIS6HMXXfuoW/EWfX5ZMPmylAzrs=
Subject key identifier: 68:06:67:A6:13:C9:F1:3A:E8:B7:1F:89:63:12:CF:4A:E5:8C:F5:1C
Authority key identifier: 9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
Certificate issuer: /CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Certificate serial: 0194BBCE24E1649F625A1BEA8E1C92465152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: OiM9JuUPwUTx93F-WTm9SJAc1-E.roa (hash: U1Ux7NpyE3Jd/TFpdNZuyjTyOl5BfpF5UVtjtoD5dLc=)
2: S8dvvAfNFMFvLZJQtmEgT4xz-WM.roa (hash: jr3hzHwhC0clqyZ9qyCXuid3+6HUV82zq4hGikAgUEw=)
3: m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl (hash: 9WgAfGtlabfkOrNcIBiZ/m4/QE/dy8rCDAAY7BRJemc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:24:e1:64:9f:62:5a:1b:ea:8e:1c:92:46:51:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=680667a613c9f13ae8b71f896312cf4ae58cf51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8a:bd:a2:7c:47:9c:98:12:0c:5a:09:73:d0:
ac:a9:2c:32:54:de:e4:16:02:79:35:0f:bf:0e:13:
87:e8:3c:47:a2:a6:0b:d6:24:06:4c:f9:25:01:2a:
41:fe:9e:09:03:30:66:ba:86:4e:77:b3:d0:57:bc:
cc:31:df:dc:7f:cd:a9:0f:9a:4e:78:39:60:56:4b:
7a:c0:e0:a0:a5:b9:b9:a2:77:3d:47:47:92:31:b3:
74:5f:ce:c8:a9:eb:70:49:15:37:92:f5:01:2b:ed:
fa:9d:43:70:86:f3:8e:f8:d9:5f:12:ea:80:39:76:
3f:d4:d4:53:f3:b8:2e:e6:3d:b4:2f:cd:a9:10:7b:
f3:be:cd:0f:66:13:4d:bf:d6:5b:08:e1:b5:97:05:
fc:96:10:24:34:dd:6f:2b:47:14:d5:fb:69:3d:54:
98:32:3d:ba:02:90:30:c8:6c:1b:a0:10:a6:35:84:
de:a6:7f:76:fd:88:a9:bc:e6:8f:6e:fe:77:c8:e6:
d2:74:51:93:ff:be:95:26:b3:f3:07:63:ea:83:99:
34:90:2f:85:98:90:a0:b1:7e:f6:54:06:e9:0e:84:
3a:10:17:4e:16:fd:0d:10:89:9c:13:1b:78:f4:53:
c5:b1:48:b4:67:45:bc:a1:d5:1e:2d:9e:29:79:2a:
ec:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:06:67:A6:13:C9:F1:3A:E8:B7:1F:89:63:12:CF:4A:E5:8C:F5:1C
X509v3 Authority Key Identifier:
keyid:9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:c4:ad:35:3b:a6:fb:5a:fc:96:26:31:d5:71:c6:e1:e0:29:
19:f3:33:eb:86:64:51:d9:46:c9:a9:60:42:55:37:6c:72:12:
c2:88:cb:ef:5c:ed:b4:94:bd:be:c2:e9:dd:ed:25:7c:e5:51:
ee:d5:74:55:89:62:4b:a2:2f:50:ba:fd:0c:22:7c:af:d4:a1:
6e:72:a9:25:f0:eb:a7:85:ca:39:5c:8d:ee:81:c2:04:bc:45:
d2:f9:f5:c7:dd:fa:ac:8c:9d:f8:c9:1f:40:e8:f0:0d:f8:60:
f9:b3:02:54:26:2d:9a:87:f5:fd:f9:43:f9:59:90:51:e4:45:
ac:7b:e2:af:95:66:99:e7:73:df:0b:ae:eb:e6:98:16:87:a1:
5c:07:f2:34:6d:0a:fb:37:b7:42:0e:0c:62:c9:12:65:e2:8e:
65:42:aa:1c:f9:74:0a:52:7b:a8:f3:01:8e:3a:bd:7c:20:d0:
06:b1:56:b8:78:6d:c0:cc:cb:e5:56:b7:66:c1:35:a7:9b:f9:
bf:ab:3d:22:9d:f1:fb:2f:43:53:50:78:01:dc:e6:f0:1d:9b:
e7:b0:4f:82:d3:ed:3a:bb:95:e2:53:4f:b1:71:6f:74:21:a7:
bb:d3:11:51:df:5c:f2:81:04:d8:04:b2:c7:92:5f:44:80:d5:
d2:24:06:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ziThZJ9iWhvqjhySRlFSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliOTg2ZmM2NDZmZGEwY2YxNDVlMTBkOTNmZTFiMTBlYjBk
ZWU2MjUwHhcNMjUwMTMxMTAwMDM2WhcNMjUwMjAxMTAwMDM2WjAzMTEwLwYDVQQD
Eyg2ODA2NjdhNjEzYzlmMTNhZThiNzFmODk2MzEyY2Y0YWU1OGNmNTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Yq9onxHnJgSDFoJc9CsqSwyVN7k
FgJ5NQ+/DhOH6DxHoqYL1iQGTPklASpB/p4JAzBmuoZOd7PQV7zMMd/cf82pD5pO
eDlgVkt6wOCgpbm5onc9R0eSMbN0X87IqetwSRU3kvUBK+36nUNwhvOO+NlfEuqA
OXY/1NRT87gu5j20L82pEHvzvs0PZhNNv9ZbCOG1lwX8lhAkNN1vK0cU1ftpPVSY
Mj26ApAwyGwboBCmNYTepn92/YipvOaPbv53yObSdFGT/76VJrPzB2Pqg5k0kC+F
mJCgsX72VAbpDoQ6EBdOFv0NEImcExt49FPFsUi0Z0W8odUeLZ4peSrscQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgGZ6YTyfE66LcfiWMSz0rljPUcMB8GA1UdIwQY
MBaAFJuYb8ZG/aDPFF4Q2T/hsQ6w3uYlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTVodnhrYjlvTThVWGhEWlAtR3hEckRlNWlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8zNGJiNzctYzg0Ny00MTExLTk2ZjMt
YmRkNWNjNDQwMzk2LzEvbTVodnhrYjlvTThVWGhEWlAtR3hEckRlNWlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8zNGJiNzctYzg0Ny00MTExLTk2ZjMtYmRkNWNjNDQwMzk2
LzEvbTVodnhrYjlvTThVWGhEWlAtR3hEckRlNWlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuMStNTum
+1r8liYx1XHG4eApGfMz64ZkUdlGyalgQlU3bHISwojL71zttJS9vsLp3e0lfOVR
7tV0VYliS6IvULr9DCJ8r9ShbnKpJfDrp4XKOVyN7oHCBLxF0vn1x936rIyd+Mkf
QOjwDfhg+bMCVCYtmof1/flD+VmQUeRFrHvir5Vmmedz3wuu6+aYFoehXAfyNG0K
+ze3Qg4MYskSZeKOZUKqHPl0ClJ7qPMBjjq9fCDQBrFWuHhtwMzL5Va3ZsE1p5v5
v6s9Ip3x+y9DU1B4Adzm8B2b57BPgtPtOruV4lNPsXFvdCGnu9MRUd9c8oEE2ASy
x5JfRIDV0iQGRw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:08 2025 by rpki-client