Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
File: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft (raw, json)
Hash identifier: SVRbRKDgcp6f2B6iYIyPS5YYro4V/T8JbLpXIFDXd7E=
Subject key identifier: C6:66:FB:75:59:4D:6A:57:55:E2:22:9B:B4:F7:6E:9D:7D:23:44:4A
Authority key identifier: B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
Certificate issuer: /CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Certificate serial: 0194BD85993623105E37DD90883C1B314D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
Manifest number: 111B
Signing time: Fri 31 Jan 2025 18:00:36 +0000
Manifest this update: Fri 31 Jan 2025 18:00:36 +0000
Manifest next update: Sat 01 Feb 2025 18:00:36 +0000
Files and hashes: 1: 4jKaVB-LfLQCzkTYjVHTGVrvLiU.roa (hash: Dbf5cUJDTFeC16IHWdH+FZOyuiR9fHmIqJ0f+7DT0tY=)
2: L-kwHWoDaZVHymZSVKLj2CDl5JE.roa (hash: RzZtH5fSY0TqGEBtyH9cKZhJPNebxYKoH4rxiHLyN4M=)
3: VanRC4jdlI0kqk4muFN6P2QYkkM.roa (hash: UwcKA2rVfnEdm7lIuYa2eDQEpkXJsNm7mizYt8PPLFk=)
4: ZJAl9ImjoPtFm7tGn32RwL0IJHQ.roa (hash: 9vVACgeehLJBLJEdL35dqakk6HDNA29yLh2EDLIP5+w=)
5: ZljRltRiIrsMECExv8F7r5rYKsw.roa (hash: nxmE/fGDsanE/RF9PJbTsPR18T1YycJHuh5uUceeEDM=)
6: kYqAky72P3pEnQEl7_H71_oXMrA.roa (hash: OI+pqrPoYdkxRhXaxBipc3lXLF5qKe9eg06gVgRqd68=)
7: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl (hash: ESQkepQFju+uGcn2gHTLjyYOiqdfkFJm1M6+tflT4n0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:99:36:23:10:5e:37:dd:90:88:3c:1b:31:4d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Validity
Not Before: Jan 31 18:00:36 2025 GMT
Not After : Feb 1 18:00:36 2025 GMT
Subject: CN=c666fb75594d6a5755e2229bb4f76e9d7d23444a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:8f:7e:6c:7c:13:cb:bd:9b:3c:64:5a:0f:
7a:60:49:5b:e2:fe:d6:47:62:6e:e0:42:a9:be:09:
83:ee:20:55:db:83:d4:49:1a:d8:cd:c4:5e:70:4f:
04:e2:3a:cc:17:38:19:2a:28:b8:96:37:27:6b:f2:
3d:fa:f2:56:62:b6:79:2e:8c:4f:8a:d4:34:91:33:
a5:04:51:e9:4d:0f:9c:7c:83:8d:f7:3e:5d:9d:86:
5b:e8:dc:8d:96:4f:45:ee:b1:3f:fe:b6:6b:63:72:
d7:f8:81:3e:0e:9e:eb:f8:39:15:c3:38:55:13:2b:
05:58:2a:1b:42:4d:f2:3b:dd:0c:f1:cb:4a:a0:ef:
e1:17:ae:8e:69:ed:a2:b3:13:5c:f4:e9:fb:01:d3:
34:ba:21:fd:27:8f:61:30:71:bc:bf:f5:be:cd:7c:
95:60:9f:c7:5c:4e:4d:f2:77:5c:73:85:12:d0:4c:
0a:b7:4a:f1:ab:fd:1a:7f:89:e4:c6:e9:15:ee:cb:
cb:8c:27:16:2f:02:d8:9e:e8:ed:00:f0:1e:e6:2c:
6a:7b:69:d9:bc:a2:6f:c6:83:b8:67:9c:b0:be:70:
b7:96:b4:1f:a2:94:c7:34:4a:19:12:54:aa:30:84:
a4:7b:5a:4d:19:31:d4:5a:b3:13:c8:6d:68:f0:24:
79:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:66:FB:75:59:4D:6A:57:55:E2:22:9B:B4:F7:6E:9D:7D:23:44:4A
X509v3 Authority Key Identifier:
keyid:B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:76:c1:e8:90:32:49:2a:b7:17:85:b0:a6:45:ae:84:12:5e:
03:dc:89:fc:a1:e8:0e:d2:26:3e:6e:b8:63:5f:28:38:40:e0:
91:70:07:89:42:ad:0d:61:a7:4d:5d:07:15:00:6b:c1:64:62:
8c:1a:48:1f:8c:96:8a:4e:e8:1e:77:ca:1a:d8:aa:ae:0a:18:
02:c4:92:d5:00:56:a1:5b:80:0b:c0:04:59:9f:04:d2:77:ec:
21:bb:e9:8e:36:37:4d:06:e2:d6:fa:7f:5d:91:b0:75:f5:2a:
90:47:82:4c:3f:ec:3c:f5:b6:95:94:0f:e6:45:ea:77:30:44:
1c:0d:85:e9:4b:4d:d1:e5:ec:8e:e7:58:e8:9d:cc:a9:0f:68:
4a:cb:b8:6a:ea:cd:6e:b6:6f:05:b3:10:a3:38:ef:25:cb:5d:
68:ae:a0:8b:f0:9c:ef:45:0e:e5:33:4d:f6:5f:c6:a6:8b:06:
9d:e7:78:77:71:ad:5f:d7:1e:c0:57:26:69:7d:2b:a3:12:a8:
dd:0a:c0:fd:6c:ee:b8:cf:d0:6b:44:a4:d1:b5:4e:2b:d8:30:
c2:58:32:64:39:a6:46:af:0d:38:c7:71:f2:56:e2:5d:69:87:
39:00:fd:24:28:0d:67:4b:c5:66:f7:e0:b5:6d:a8:1c:cc:d8:
e7:6e:cd:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hZk2IxBeN92QiDwbMU1IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNDM1MTQ2MzBkYzE3ZjNmZTliNTFkZDQzNDE4NGQwYjYy
YjAzYzAwHhcNMjUwMTMxMTgwMDM2WhcNMjUwMjAxMTgwMDM2WjAzMTEwLwYDVQQD
EyhjNjY2ZmI3NTU5NGQ2YTU3NTVlMjIyOWJiNGY3NmU5ZDdkMjM0NDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL2Pfmx8E8u9mzxkWg96YElb4v7W
R2Ju4EKpvgmD7iBV24PUSRrYzcRecE8E4jrMFzgZKii4ljcna/I9+vJWYrZ5LoxP
itQ0kTOlBFHpTQ+cfION9z5dnYZb6NyNlk9F7rE//rZrY3LX+IE+Dp7r+DkVwzhV
EysFWCobQk3yO90M8ctKoO/hF66Oae2isxNc9On7AdM0uiH9J49hMHG8v/W+zXyV
YJ/HXE5N8ndcc4US0EwKt0rxq/0af4nkxukV7svLjCcWLwLYnujtAPAe5ixqe2nZ
vKJvxoO4Z5ywvnC3lrQfopTHNEoZElSqMISke1pNGTHUWrMTyG1o8CR5MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZm+3VZTWpXVeIim7T3bp19I0RKMB8GA1UdIwQY
MBaAFLNDUUYw3Bfz/ptR3UNBhNC2KwPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMzgwNDYtN2JlMC00MDE3LWE5OGIt
YTcyNDdlOWQ1ZjNhLzEvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xMzgwNDYtN2JlMC00MDE3LWE5OGItYTcyNDdlOWQ1ZjNh
LzEvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3bB6JAy
SSq3F4WwpkWuhBJeA9yJ/KHoDtImPm64Y18oOEDgkXAHiUKtDWGnTV0HFQBrwWRi
jBpIH4yWik7oHnfKGtiqrgoYAsSS1QBWoVuAC8AEWZ8E0nfsIbvpjjY3TQbi1vp/
XZGwdfUqkEeCTD/sPPW2lZQP5kXqdzBEHA2F6UtN0eXsjudY6J3MqQ9oSsu4aurN
brZvBbMQozjvJctdaK6gi/Cc70UO5TNN9l/GposGned4d3GtX9cewFcmaX0roxKo
3QrA/WzuuM/Qa0Sk0bVOK9gwwlgyZDmmRq8NOMdx8lbiXWmHOQD9JCgNZ0vFZvfg
tW2oHMzY527NJQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:01 2025 by rpki-client