Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
File: A9aopjn4iq8fQ21qILQXezjTkPw.mft (raw, json)
Hash identifier: znWCX1otxWD3om0X9ysPPJYmGtY8rIB/itnQ+ftzEPw=
Subject key identifier: C0:E4:10:4C:6B:28:D1:82:D8:BE:06:99:4D:1B:2E:BD:EB:93:C4:D6
Authority key identifier: 03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
Certificate issuer: /CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Certificate serial: 0194BD85249D2E5A09D92694DA60180F9187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
Manifest number: 010E
Signing time: Fri 31 Jan 2025 18:00:06 +0000
Manifest this update: Fri 31 Jan 2025 18:00:06 +0000
Manifest next update: Sat 01 Feb 2025 18:00:06 +0000
Files and hashes: 1: 9EiTee9k8nFjET11hPatStF9nkM.roa (hash: rKaveA0rfCcy5/zhxw6q4cAzgO9tcO/IcjE7cyeyoGI=)
2: A9aopjn4iq8fQ21qILQXezjTkPw.crl (hash: lB1CFdT9vuppsByHSYOthFzY3SSqFiVVA8TLVCwk/TI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:24:9d:2e:5a:09:d9:26:94:da:60:18:0f:91:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Validity
Not Before: Jan 31 18:00:06 2025 GMT
Not After : Feb 1 18:00:06 2025 GMT
Subject: CN=c0e4104c6b28d182d8be06994d1b2ebdeb93c4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2c:d4:b9:14:84:30:fd:14:35:e3:85:f4:12:
47:89:fd:5e:78:87:76:4f:29:dc:52:1b:ac:fc:4c:
3c:dd:ca:1c:65:c5:98:16:6d:82:c7:51:bc:36:c2:
73:69:60:61:46:09:6b:86:37:85:6a:e4:20:d9:4e:
4d:32:ad:9f:82:ec:33:13:32:76:6e:2b:ec:2d:88:
8d:0c:a6:96:cb:be:e7:5e:fc:6c:1b:46:d2:d4:dc:
27:d3:1e:f9:d6:67:19:90:01:70:c9:ca:b0:c9:e0:
a3:a8:a2:fa:b0:af:b4:51:62:d4:0a:29:b7:cb:7a:
44:51:f6:f3:7d:b5:79:b5:e7:e7:c4:f6:c1:eb:b1:
f3:0a:35:55:6f:7d:bd:ca:e4:40:49:92:c7:50:7b:
68:2e:3b:b0:84:ad:b3:c6:e3:f0:4a:db:1b:25:8c:
94:94:3b:32:65:e7:c2:03:48:8f:78:ef:f4:ce:54:
03:27:0f:ce:f1:f5:43:ba:95:3e:91:b2:ee:85:89:
e1:6a:b2:ed:d3:77:9f:91:f7:cb:f7:2e:0e:5c:c9:
28:85:b2:b1:be:7f:36:68:4e:5c:ab:49:91:3a:07:
98:26:f2:22:55:d8:46:75:02:8f:df:56:b6:f0:bb:
94:9b:a2:0a:70:ad:96:fe:fe:10:67:83:8e:39:79:
94:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E4:10:4C:6B:28:D1:82:D8:BE:06:99:4D:1B:2E:BD:EB:93:C4:D6
X509v3 Authority Key Identifier:
keyid:03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:7c:8a:74:1e:8e:7e:ff:45:be:9a:8a:f2:6e:1a:20:68:73:
7f:73:fc:ae:f3:ea:eb:bf:3b:e8:66:94:10:d2:31:20:3d:20:
a8:8e:39:55:bb:f2:3a:e3:3f:3c:2c:08:10:ac:47:46:7e:d1:
6d:53:67:25:2c:ac:80:dd:80:12:f0:d9:63:fa:1e:2f:37:a3:
98:0a:bd:47:1e:b1:5d:65:bf:67:44:bf:2c:a6:82:37:8c:21:
cd:d1:cb:eb:c2:fd:fb:41:db:0a:dc:0e:2c:85:43:ac:a2:fb:
53:a1:ce:5a:24:02:0d:01:24:fe:4c:46:2f:5f:03:c3:4b:bb:
85:6f:62:77:e4:cc:c3:6d:6c:7b:34:b4:74:25:9e:0e:a3:25:
76:6e:46:39:2b:f1:91:f0:ce:68:a3:74:19:7c:b9:2c:ac:5c:
14:86:15:a6:37:58:44:3b:03:9e:d7:9c:95:2d:b5:dd:c3:c1:
69:61:59:cf:f1:a6:ff:f6:2a:59:98:5e:da:70:4f:6a:91:03:
eb:a8:54:49:7b:c9:a9:e3:e4:97:ae:98:0b:cc:ae:17:27:c1:
2b:ad:cf:d2:10:e9:4b:d9:ff:4e:1c:d9:d1:e9:f6:c8:06:4b:
c6:08:60:41:74:95:c9:ba:52:c1:09:a3:9c:ae:1c:5a:92:35:
5f:5e:90:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hSSdLloJ2SaU2mAYD5GHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZDZhOGE2MzlmODhhYWYxZjQzNmQ2YTIwYjQxNzdiMzhk
MzkwZmMwHhcNMjUwMTMxMTgwMDA2WhcNMjUwMjAxMTgwMDA2WjAzMTEwLwYDVQQD
EyhjMGU0MTA0YzZiMjhkMTgyZDhiZTA2OTk0ZDFiMmViZGViOTNjNGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyzUuRSEMP0UNeOF9BJHif1eeId2
TyncUhus/Ew83cocZcWYFm2Cx1G8NsJzaWBhRglrhjeFauQg2U5NMq2fguwzEzJ2
bivsLYiNDKaWy77nXvxsG0bS1Nwn0x751mcZkAFwycqwyeCjqKL6sK+0UWLUCim3
y3pEUfbzfbV5tefnxPbB67HzCjVVb329yuRASZLHUHtoLjuwhK2zxuPwStsbJYyU
lDsyZefCA0iPeO/0zlQDJw/O8fVDupU+kbLuhYnharLt03efkffL9y4OXMkohbKx
vn82aE5cq0mROgeYJvIiVdhGdQKP31a28LuUm6IKcK2W/v4QZ4OOOXmUsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDkEExrKNGC2L4GmU0bLr3rk8TWMB8GA1UdIwQY
MBaAFAPWqKY5+IqvH0NtaiC0F3s405D8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jMTgxMDUtZDkwZi00NDJmLThiMWQt
YzIwZGU1NDNjMGRmLzEvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9jMTgxMDUtZDkwZi00NDJmLThiMWQtYzIwZGU1NDNjMGRm
LzEvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHyKdB6O
fv9FvpqK8m4aIGhzf3P8rvPq67876GaUENIxID0gqI45VbvyOuM/PCwIEKxHRn7R
bVNnJSysgN2AEvDZY/oeLzejmAq9Rx6xXWW/Z0S/LKaCN4whzdHL68L9+0HbCtwO
LIVDrKL7U6HOWiQCDQEk/kxGL18Dw0u7hW9id+TMw21sezS0dCWeDqMldm5GOSvx
kfDOaKN0GXy5LKxcFIYVpjdYRDsDnteclS213cPBaWFZz/Gm//YqWZhe2nBPapED
66hUSXvJqePkl66YC8yuFyfBK63P0hDpS9n/ThzZ0en2yAZLxghgQXSVybpSwQmj
nK4cWpI1X16QQw==
-----END CERTIFICATE-----
Generated at Tue May 13 10:47:15 2025 by rpki-client