Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
File: m7viALvfN5tQRVFjAXudR3fx210.mft (raw, json)
Hash identifier: OE3PK1NP/5J6QQltc6ySXunMa9RGeZUyhJXvDRbbKwQ=
Subject key identifier: F4:B4:A0:AD:48:07:31:AE:8F:86:BC:44:DC:2E:58:9C:6A:AD:E1:B4
Authority key identifier: 9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D
Certificate issuer: /CN=9bbbe200bbdf379b50455163017b9d4777f1db5d
Certificate serial: 0194BCA9FD6FEE0675CC6D93BF6361F8EEDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
Manifest number: 0FC1
Signing time: Fri 31 Jan 2025 14:00:44 +0000
Manifest this update: Fri 31 Jan 2025 14:00:44 +0000
Manifest next update: Sat 01 Feb 2025 14:00:44 +0000
Files and hashes: 1: 3KDKnt4N1kaVYO5cJoBomMZhBKI.roa (hash: MYr27t+UpY1nV8Z5RMAwd4JpyhndolDAT0zGy5OlcpY=)
2: m7viALvfN5tQRVFjAXudR3fx210.crl (hash: f1T2KEmzhHOtAGgT0ACSDj/pInXKTNGFMVeuDsZ72jA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fd:6f:ee:06:75:cc:6d:93:bf:63:61:f8:ee:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbbe200bbdf379b50455163017b9d4777f1db5d
Validity
Not Before: Jan 31 14:00:44 2025 GMT
Not After : Feb 1 14:00:44 2025 GMT
Subject: CN=f4b4a0ad480731ae8f86bc44dc2e589c6aade1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:11:44:08:39:2c:a5:a5:70:be:4f:4d:f0:8e:
1e:c4:00:cb:f5:d3:bb:3c:18:2d:0a:b5:a8:9d:b8:
f9:64:ce:52:94:99:83:12:0d:00:d9:49:37:c5:cc:
4f:9d:ce:ee:17:48:4d:93:50:a1:4d:73:9b:88:3a:
ba:4f:b3:28:64:cd:8b:9f:aa:a0:b4:31:7a:68:50:
ff:f8:f3:cf:8b:73:64:88:9e:a5:21:f7:b0:87:65:
87:39:9f:8b:c8:c1:9d:c4:89:0f:e9:71:bd:fd:88:
46:5a:ba:55:7d:fb:4d:09:b8:9a:dc:71:a0:4a:d0:
27:72:cf:82:12:f8:5f:57:52:cd:cb:3c:98:f3:5e:
18:86:b5:74:61:c9:19:0e:bb:ad:7c:43:65:79:61:
e3:a7:11:cd:e6:55:90:43:ee:33:d0:6a:9c:3e:13:
ca:2c:31:aa:8d:2a:ee:cb:2a:87:c1:f3:1a:8d:2d:
61:70:fb:8a:1f:2f:b8:3d:dd:0a:e0:f3:22:d8:e6:
10:17:dc:dc:2c:6e:4f:f1:5f:9a:1f:e6:b6:d4:0c:
27:93:ea:fc:a3:ff:44:6a:63:fb:98:a5:48:a7:68:
32:bd:64:79:29:1d:c9:5b:e3:a6:c1:21:1b:d2:d0:
b0:ab:98:30:c1:8b:22:d4:cb:b6:dd:9e:ec:4f:11:
56:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B4:A0:AD:48:07:31:AE:8F:86:BC:44:DC:2E:58:9C:6A:AD:E1:B4
X509v3 Authority Key Identifier:
keyid:9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:72:f6:29:6f:a8:d8:85:a6:b8:9d:e5:85:88:03:51:38:1e:
78:13:18:c0:dc:34:6f:39:c0:fc:98:5d:7c:cf:e0:f7:2a:08:
a2:e2:89:77:9d:0c:ba:87:90:6f:5c:f3:13:49:58:69:34:c2:
73:f5:b2:1f:6d:db:78:32:11:62:02:fd:75:22:76:6c:d9:85:
63:be:9a:ed:d5:76:41:7a:c7:6c:42:11:30:dd:f0:0c:05:5f:
63:79:54:f2:af:ff:4c:a8:f5:a6:88:6c:71:e1:64:b2:93:bf:
39:42:09:bd:dc:ee:4a:e3:77:8d:69:2b:db:ba:cb:95:27:2b:
d7:14:57:5d:86:ad:92:cd:0a:4b:9f:c3:71:b4:97:9c:76:c7:
ed:df:81:13:82:ae:a7:c3:d0:f1:21:38:dc:be:42:79:14:d4:
9b:b8:30:8f:fb:e1:89:a6:d6:c7:c3:5e:9e:7c:38:77:46:0e:
56:e9:32:50:d9:50:75:72:77:ba:d3:7b:63:ac:64:8e:78:21:
8c:ec:f1:c4:40:ac:a2:db:5e:f5:00:be:05:c2:45:91:d6:a2:
48:88:a6:11:31:aa:dc:12:16:94:b8:cc:a9:62:6f:cb:2b:6e:
a7:a9:74:6c:4a:88:80:91:c3:06:7f:1d:a2:9a:7c:1e:10:c8:
93:8a:b4:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qf1v7gZ1zG2Tv2Nh+O7eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYmJlMjAwYmJkZjM3OWI1MDQ1NTE2MzAxN2I5ZDQ3Nzdm
MWRiNWQwHhcNMjUwMTMxMTQwMDQ0WhcNMjUwMjAxMTQwMDQ0WjAzMTEwLwYDVQQD
EyhmNGI0YTBhZDQ4MDczMWFlOGY4NmJjNDRkYzJlNTg5YzZhYWRlMWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BFECDkspaVwvk9N8I4exADL9dO7
PBgtCrWonbj5ZM5SlJmDEg0A2Uk3xcxPnc7uF0hNk1ChTXObiDq6T7MoZM2Ln6qg
tDF6aFD/+PPPi3NkiJ6lIfewh2WHOZ+LyMGdxIkP6XG9/YhGWrpVfftNCbia3HGg
StAncs+CEvhfV1LNyzyY814YhrV0YckZDrutfENleWHjpxHN5lWQQ+4z0GqcPhPK
LDGqjSruyyqHwfMajS1hcPuKHy+4Pd0K4PMi2OYQF9zcLG5P8V+aH+a21Awnk+r8
o/9EamP7mKVIp2gyvWR5KR3JW+OmwSEb0tCwq5gwwYsi1Mu23Z7sTxFWGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPS0oK1IBzGuj4a8RNwuWJxqreG0MB8GA1UdIwQY
MBaAFJu74gC73zebUEVRYwF7nUd38dtdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTd2aUFMdmZONXRRUlZGakFYdWRSM2Z4MjEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85MjkwMWYtMjY2ZS00OWEzLThmNTYt
YTIxOWNiNGQ0YTNiLzEvbTd2aUFMdmZONXRRUlZGakFYdWRSM2Z4MjEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi85MjkwMWYtMjY2ZS00OWEzLThmNTYtYTIxOWNiNGQ0YTNi
LzEvbTd2aUFMdmZONXRRUlZGakFYdWRSM2Z4MjEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3L2KW+o
2IWmuJ3lhYgDUTgeeBMYwNw0bznA/JhdfM/g9yoIouKJd50MuoeQb1zzE0lYaTTC
c/WyH23beDIRYgL9dSJ2bNmFY76a7dV2QXrHbEIRMN3wDAVfY3lU8q//TKj1pohs
ceFkspO/OUIJvdzuSuN3jWkr27rLlScr1xRXXYatks0KS5/DcbSXnHbH7d+BE4Ku
p8PQ8SE43L5CeRTUm7gwj/vhiabWx8Nennw4d0YOVukyUNlQdXJ3utN7Y6xkjngh
jOzxxECsotte9QC+BcJFkdaiSIimETGq3BIWlLjMqWJvyytup6l0bEqIgJHDBn8d
opp8HhDIk4q0dA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:46:42 2025 by rpki-client