Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
File: adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft (raw, json)
Hash identifier: MJ4Ry+6vg3Aux4giJlfoKLMMNLISwnmszDm78NqYOqU=
Subject key identifier: 9C:2A:F9:64:A0:68:CD:54:B7:13:49:76:91:9B:8D:1F:57:21:11:56
Authority key identifier: 69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
Certificate issuer: /CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Certificate serial: 0194BC0502379FE7C798B17E1F4CC939263F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
Manifest number: 0D69
Signing time: Fri 31 Jan 2025 11:00:32 +0000
Manifest this update: Fri 31 Jan 2025 11:00:32 +0000
Manifest next update: Sat 01 Feb 2025 11:00:32 +0000
Files and hashes: 1: OTybeQSqUNtNYhW7lIqMu8Xbs9U.roa (hash: qhQfPgHQL0RGn7gt2AnYjMV/XyhTZwosQOVt3JjZawg=)
2: adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl (hash: fyRv3S13OTab+sv5t2gQOwlbyefIW59lK1sw91vgqH4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:02:37:9f:e7:c7:98:b1:7e:1f:4c:c9:39:26:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Validity
Not Before: Jan 31 11:00:32 2025 GMT
Not After : Feb 1 11:00:32 2025 GMT
Subject: CN=9c2af964a068cd54b7134976919b8d1f57211156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e9:b1:4c:1f:8a:eb:0c:9d:4a:67:b8:a3:62:
32:7c:9c:99:d8:07:b5:da:52:b8:58:29:d2:02:67:
e9:f1:8c:e8:31:cb:f7:43:cd:8a:55:4e:0d:d6:03:
65:06:aa:33:fe:d0:b1:ca:e2:c7:a6:31:0e:5f:9f:
59:20:23:be:7f:9a:29:31:46:c4:d5:2b:9f:81:11:
ef:09:8a:49:dd:e7:3f:ac:61:55:86:a6:28:ee:73:
ac:3a:2d:1d:1d:dd:0a:09:49:1e:c7:a5:1f:52:b3:
c6:ee:ee:c3:5e:f7:c0:ed:72:c6:83:e9:4d:f1:b6:
f6:93:34:a1:6d:1e:e1:97:34:97:bc:5d:79:1b:39:
de:89:7b:f4:cf:da:76:06:d2:c8:4e:26:a5:cf:95:
db:4e:9a:96:ab:10:23:26:df:8e:69:53:b8:7f:73:
22:01:04:24:61:9e:98:18:93:44:7d:31:a4:70:20:
2c:11:f0:2b:53:30:fa:99:5b:93:7d:2a:04:20:cf:
4c:dc:51:2b:55:b4:22:06:a9:52:82:6a:b3:e5:61:
1b:4c:c7:a3:0c:d7:52:7e:5a:ee:18:19:2c:57:f3:
e7:74:91:cc:9c:b0:94:6a:22:29:22:f7:eb:61:36:
31:3c:83:fb:b9:bc:6b:30:72:5b:14:4a:f3:14:26:
57:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2A:F9:64:A0:68:CD:54:B7:13:49:76:91:9B:8D:1F:57:21:11:56
X509v3 Authority Key Identifier:
keyid:69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ec:81:e8:9e:a0:52:34:2f:ce:8c:3d:d6:71:13:1a:58:57:
00:12:37:65:24:44:32:dc:5e:d2:a2:7f:0f:d1:1d:e3:e1:03:
ed:a4:d0:44:de:b8:0f:f3:d6:dd:07:be:bd:aa:a2:47:a3:e0:
6d:5e:52:d2:f4:e3:27:6b:15:44:3b:37:1d:a4:f2:65:15:5a:
04:54:5b:29:32:fd:23:ef:ec:08:db:13:f9:b7:80:08:91:ce:
6b:67:e5:a1:ae:d5:f0:67:5e:46:5f:da:08:ba:d4:c5:ce:b6:
72:43:b5:c5:92:e5:ca:05:89:9f:4f:40:1d:29:27:7c:a6:c6:
92:f6:0d:a2:94:4b:4d:3c:63:2f:8a:45:74:e8:09:30:f6:99:
58:c0:18:60:05:ec:43:6c:da:7e:cb:b0:47:35:db:ff:2b:8c:
48:e9:51:61:db:15:84:ea:87:df:46:b6:b9:ec:03:d5:bf:eb:
3d:77:58:39:d7:cf:98:ea:dd:91:2b:85:d7:70:d3:5f:9a:f9:
e0:a3:6b:36:4f:32:4b:34:39:12:af:61:af:31:a9:18:07:0c:
2a:6b:c6:f7:7f:3f:96:fa:e7:a8:f5:e3:20:0a:76:b1:88:6b:
63:e6:a4:4e:46:5e:4b:77:ec:3e:e4:e2:4e:ce:ae:f9:6c:c5:
36:f9:18:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BQI3n+fHmLF+H0zJOSY/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZDYwNDg1NzFkODdlYWJjNGJlZDFhN2NkZmY4MzU4N2Zi
ODk2NjQwHhcNMjUwMTMxMTEwMDMyWhcNMjUwMjAxMTEwMDMyWjAzMTEwLwYDVQQD
Eyg5YzJhZjk2NGEwNjhjZDU0YjcxMzQ5NzY5MTliOGQxZjU3MjExMTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+mxTB+K6wydSme4o2IyfJyZ2Ae1
2lK4WCnSAmfp8YzoMcv3Q82KVU4N1gNlBqoz/tCxyuLHpjEOX59ZICO+f5opMUbE
1SufgRHvCYpJ3ec/rGFVhqYo7nOsOi0dHd0KCUkex6UfUrPG7u7DXvfA7XLGg+lN
8bb2kzShbR7hlzSXvF15GzneiXv0z9p2BtLITialz5XbTpqWqxAjJt+OaVO4f3Mi
AQQkYZ6YGJNEfTGkcCAsEfArUzD6mVuTfSoEIM9M3FErVbQiBqlSgmqz5WEbTMej
DNdSflruGBksV/PndJHMnLCUaiIpIvfrYTYxPIP7ubxrMHJbFErzFCZXswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwq+WSgaM1UtxNJdpGbjR9XIRFWMB8GA1UdIwQY
MBaAFGnWBIVx2H6rxL7Rp83/g1h/uJZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWRZRWhYSFlmcXZFdnRHbnpmLURXSC00bG1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xMWNkZjItY2EzMC00NzE4LWFjODAt
ZjE5NmZkMGE0OTdiLzEvYWRZRWhYSFlmcXZFdnRHbnpmLURXSC00bG1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8xMWNkZjItY2EzMC00NzE4LWFjODAtZjE5NmZkMGE0OTdi
LzEvYWRZRWhYSFlmcXZFdnRHbnpmLURXSC00bG1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMuyB6J6g
UjQvzow91nETGlhXABI3ZSREMtxe0qJ/D9Ed4+ED7aTQRN64D/PW3Qe+vaqiR6Pg
bV5S0vTjJ2sVRDs3HaTyZRVaBFRbKTL9I+/sCNsT+beACJHOa2floa7V8GdeRl/a
CLrUxc62ckO1xZLlygWJn09AHSknfKbGkvYNopRLTTxjL4pFdOgJMPaZWMAYYAXs
Q2zafsuwRzXb/yuMSOlRYdsVhOqH30a2uewD1b/rPXdYOdfPmOrdkSuF13DTX5r5
4KNrNk8ySzQ5Eq9hrzGpGAcMKmvG938/lvrnqPXjIAp2sYhrY+akTkZeS3fsPuTi
Ts6u+WzFNvkYqA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:34 2025 by rpki-client