Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.mft
File: aNLCXQU0pAJ8aVViqM5PABzVOW8.mft (raw, json)
Hash identifier: rFy8BEbAUJYkT1cILrGSHmv4qU0b2mo6PWDVFgjO+e0=
Subject key identifier: D2:73:CC:2B:7D:9F:D3:86:6D:96:D3:CA:89:88:1C:B3:51:99:21:EE
Authority key identifier: 68:D2:C2:5D:05:34:A4:02:7C:69:55:62:A8:CE:4F:00:1C:D5:39:6F
Certificate issuer: /CN=68d2c25d0534a4027c695562a8ce4f001cd5396f
Certificate serial: 0194BD4EC97DD61DC6FE5166842C33A03DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNLCXQU0pAJ8aVViqM5PABzVOW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.mft
Manifest number: 107E
Signing time: Fri 31 Jan 2025 17:00:44 +0000
Manifest this update: Fri 31 Jan 2025 17:00:44 +0000
Manifest next update: Sat 01 Feb 2025 17:00:44 +0000
Files and hashes: 1: SALrx8y5x39WJ8efwGiimpmg788.roa (hash: CtpmQiaYAVz0sehGOLMPmKtW82021GvqOFqhQ5ojIPI=)
2: aNLCXQU0pAJ8aVViqM5PABzVOW8.crl (hash: 1K4oy3O3iBpzzDKyY4sBwaE9ly1GO7AahEJJfGrxAcw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c9:7d:d6:1d:c6:fe:51:66:84:2c:33:a0:3d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d2c25d0534a4027c695562a8ce4f001cd5396f
Validity
Not Before: Jan 31 17:00:44 2025 GMT
Not After : Feb 1 17:00:44 2025 GMT
Subject: CN=d273cc2b7d9fd3866d96d3ca89881cb3519921ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:ae:ef:73:c6:5d:a8:91:84:0c:c1:de:44:
2b:83:df:4d:e0:88:35:a9:d7:69:56:64:8d:9d:9d:
88:02:a5:1a:42:f8:61:8c:c2:d9:8f:09:58:8f:a2:
60:23:aa:bc:1f:b4:9e:58:ef:5f:dc:3b:0c:f4:64:
b4:e4:ec:59:3c:fc:f8:8b:26:47:ab:54:8e:d2:ca:
d4:18:4d:db:4f:8a:8e:8b:c3:11:55:5a:f5:89:87:
f4:6f:55:bd:04:44:61:0b:f2:b1:4c:50:65:a8:19:
d3:6d:30:3c:05:d0:19:45:24:00:30:06:b0:76:6f:
81:06:31:fe:10:5d:ea:95:07:02:43:88:94:3d:40:
75:a2:66:eb:6e:8c:b3:31:e2:c7:b6:52:84:a0:46:
a8:ee:2a:23:af:9a:fa:24:f3:46:71:bb:20:fa:7b:
52:01:50:d7:75:83:3f:61:db:4b:7d:55:c2:b7:35:
0b:f9:ef:17:df:ea:97:eb:e2:3d:9e:8b:b1:fa:80:
70:53:fc:cb:ea:48:c7:93:21:5f:74:34:76:50:fe:
5d:bd:c5:fc:79:f0:53:c0:b2:d1:c6:c6:e8:8a:7c:
7d:43:71:7b:7c:55:01:4d:35:9f:e9:13:25:a7:a9:
d2:86:7d:30:dc:18:a2:b4:c7:2f:46:e3:7d:24:a6:
2b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:73:CC:2B:7D:9F:D3:86:6D:96:D3:CA:89:88:1C:B3:51:99:21:EE
X509v3 Authority Key Identifier:
keyid:68:D2:C2:5D:05:34:A4:02:7C:69:55:62:A8:CE:4F:00:1C:D5:39:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNLCXQU0pAJ8aVViqM5PABzVOW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f1:c3:40:3c:96:d6:aa:71:a9:35:f1:85:81:8a:f7:e9:fc:
7a:fa:dd:a4:cd:c3:e3:bb:d1:6b:99:34:61:97:b3:51:80:8f:
ce:c3:6c:e1:60:ab:e9:c6:df:d8:51:7d:3b:40:f6:b6:e1:5b:
17:45:1b:58:e0:91:37:8f:4e:b1:dd:7f:75:10:1d:fe:6b:63:
b6:e3:c4:6e:59:44:be:69:a6:62:bd:b9:82:cb:95:83:ad:94:
2a:52:a7:a4:12:d7:04:3c:2f:4a:ad:52:c0:18:80:29:91:d6:
97:8a:d6:ed:09:47:73:fd:11:52:79:ff:ea:55:6e:90:72:2c:
c4:53:78:4b:35:66:24:7a:09:46:d4:4f:cc:8e:5d:76:93:e0:
f7:6b:b6:bc:59:5c:a5:9f:0b:c8:fe:94:4a:ad:54:5b:5d:ed:
f5:a8:b0:0d:8d:85:fa:00:6e:36:51:db:8f:c1:8e:f6:a9:21:
53:1b:74:92:d8:64:2c:02:c0:d4:69:e2:cc:b0:b0:a5:ff:26:
b7:37:8e:91:91:6b:50:5d:b9:c4:a1:0c:25:a3:db:91:54:a2:
27:5f:6f:af:d7:4f:bd:0c:c5:7d:c5:df:ed:ca:ec:09:41:72:
9e:88:56:c4:ae:f3:60:c4:05:66:bc:5e:14:22:8d:9b:ed:e0:
8d:46:d5:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tsl91h3G/lFmhCwzoD3CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZDJjMjVkMDUzNGE0MDI3YzY5NTU2MmE4Y2U0ZjAwMWNk
NTM5NmYwHhcNMjUwMTMxMTcwMDQ0WhcNMjUwMjAxMTcwMDQ0WjAzMTEwLwYDVQQD
EyhkMjczY2MyYjdkOWZkMzg2NmQ5NmQzY2E4OTg4MWNiMzUxOTkyMWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslmu73PGXaiRhAzB3kQrg99N4Ig1
qddpVmSNnZ2IAqUaQvhhjMLZjwlYj6JgI6q8H7SeWO9f3DsM9GS05OxZPPz4iyZH
q1SO0srUGE3bT4qOi8MRVVr1iYf0b1W9BERhC/KxTFBlqBnTbTA8BdAZRSQAMAaw
dm+BBjH+EF3qlQcCQ4iUPUB1ombrboyzMeLHtlKEoEao7iojr5r6JPNGcbsg+ntS
AVDXdYM/YdtLfVXCtzUL+e8X3+qX6+I9noux+oBwU/zL6kjHkyFfdDR2UP5dvcX8
efBTwLLRxsboinx9Q3F7fFUBTTWf6RMlp6nShn0w3BiitMcvRuN9JKYrAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJzzCt9n9OGbZbTyomIHLNRmSHuMB8GA1UdIwQY
MBaAFGjSwl0FNKQCfGlVYqjOTwAc1TlvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU5MQ1hRVTBwQUo4YVZWaXFNNVBBQnpWT1c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9hZDk3NTYtODRkMS00YWI5LTk2ZTEt
MTQ3OTdlYWM1MjJlLzEvYU5MQ1hRVTBwQUo4YVZWaXFNNVBBQnpWT1c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9hZDk3NTYtODRkMS00YWI5LTk2ZTEtMTQ3OTdlYWM1MjJl
LzEvYU5MQ1hRVTBwQUo4YVZWaXFNNVBBQnpWT1c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvHDQDyW
1qpxqTXxhYGK9+n8evrdpM3D47vRa5k0YZezUYCPzsNs4WCr6cbf2FF9O0D2tuFb
F0UbWOCRN49Osd1/dRAd/mtjtuPEbllEvmmmYr25gsuVg62UKlKnpBLXBDwvSq1S
wBiAKZHWl4rW7QlHc/0RUnn/6lVukHIsxFN4SzVmJHoJRtRPzI5ddpPg92u2vFlc
pZ8LyP6USq1UW13t9aiwDY2F+gBuNlHbj8GO9qkhUxt0kthkLALA1GnizLCwpf8m
tzeOkZFrUF25xKEMJaPbkVSiJ19vr9dPvQzFfcXf7crsCUFynohWxK7zYMQFZrxe
FCKNm+3gjUbVNQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:00 2025 by rpki-client