Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
File: MxvOLugG6TYhES29YYU293X0T7o.mft (raw, json)
Hash identifier: 3cnwhCGKisx4QcnhBFGuThD4MKtH0aK2k4UeC3OFIU8=
Subject key identifier: BA:71:5E:EF:78:C1:5D:DF:F7:FD:01:69:17:0B:08:0B:41:40:23:4A
Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
Certificate issuer: /CN=331bce2ee806e93621112dbd618536f775f44fba
Certificate serial: 0194BC0525F9DDCFAD54A6B49A774F661380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
Manifest number: 1438
Signing time: Fri 31 Jan 2025 11:00:41 +0000
Manifest this update: Fri 31 Jan 2025 11:00:41 +0000
Manifest next update: Sat 01 Feb 2025 11:00:41 +0000
Files and hashes: 1: 3sXbnheUCQXhnB4uHOp4va4TiJM.roa (hash: uyEoZMdeQNWZewaEv7D69o7VgUXJzS6Io688dhhSGjw=)
2: EOVeqLVY7YQgxvYQ8YWMSeXKFNY.roa (hash: hvGEJ8ytuPo6C+ke0ltl0/nWw9ZMLCADEd+IRmTnDPs=)
3: MxvOLugG6TYhES29YYU293X0T7o.crl (hash: nPH/bD5AOEebp/Rmmk2i/PkWV4U00dJvlwuRKc7DB4M=)
4: POmxIMVdcWr7e3aGn_msshLLPds.roa (hash: 0b1DwkyDSHkWaJx+Ye3fwTqtcQFSCniv+9fPzmWyARk=)
5: XfZZR_2FfbmcTCDqh8YB7ukHChU.roa (hash: qIIEx0fwjjqTdiQ160yJWGELXKdKRH39DjIU1xmNQYg=)
6: wmMS6UeFP0focfOvKKj1_7v3SL4.roa (hash: FsH4R1TxiZCRWjEdGlDRxvZk7LyjdBKow9gzQ/BnNzs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:25:f9:dd:cf:ad:54:a6:b4:9a:77:4f:66:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba
Validity
Not Before: Jan 31 11:00:41 2025 GMT
Not After : Feb 1 11:00:41 2025 GMT
Subject: CN=ba715eef78c15ddff7fd0169170b080b4140234a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ed:4e:e8:a5:c9:4f:f0:25:c9:e2:2a:30:21:
6a:30:b1:41:93:18:13:20:86:9e:41:14:35:68:64:
49:fb:dc:5f:9a:b5:82:08:27:50:7d:67:d2:1b:19:
20:7a:be:51:be:e9:dc:78:98:95:17:28:2b:8d:ef:
bb:52:ad:80:49:4d:c2:d8:00:41:87:ed:60:b9:e1:
6f:77:ab:97:eb:14:f6:9a:c7:f9:e5:d8:73:8d:a6:
10:14:03:f1:c8:26:a5:9d:70:7c:97:ef:7c:a6:e8:
9f:f1:ff:36:20:04:10:b7:5e:d3:32:c6:93:f9:35:
12:10:7b:76:37:78:c6:e9:a6:32:f5:34:26:c7:ee:
97:f0:b1:f0:82:cb:55:47:2e:89:9a:6c:8c:c4:a5:
f3:fa:be:88:4f:46:49:59:39:c7:5f:32:a2:e5:e1:
30:bd:b7:19:58:3a:75:0b:a0:73:ac:69:10:e4:ca:
e7:85:92:42:bf:f5:3d:2f:6b:e8:f0:36:82:c7:db:
e0:eb:0d:74:0d:d2:21:11:8a:cd:6a:5f:f9:3e:d3:
c8:9e:0e:95:ea:56:47:7b:6a:c0:c2:36:b4:0d:6f:
c0:fa:16:07:17:88:bd:b0:0f:93:5d:9e:52:61:71:
27:39:a0:4c:e4:43:73:d2:ae:17:64:20:39:f2:30:
b2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:71:5E:EF:78:C1:5D:DF:F7:FD:01:69:17:0B:08:0B:41:40:23:4A
X509v3 Authority Key Identifier:
keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:56:28:37:7c:7d:f0:3f:79:62:cd:46:8b:01:24:94:2d:c1:
f4:60:d3:f5:da:04:04:e5:cb:e8:1a:da:af:8d:f4:a5:0a:bf:
c4:5f:7c:4d:2b:80:13:14:08:c2:a7:79:52:7d:3b:44:2c:75:
6e:4e:41:1e:b6:ca:6e:b5:f4:d5:ad:50:27:8f:75:a5:2f:9e:
2b:95:3b:ed:7d:65:41:40:57:05:89:71:ed:b0:21:9c:80:50:
57:16:dc:c5:b0:12:82:ad:d1:3d:4d:61:2d:21:72:cc:4a:a3:
6a:54:ca:cf:2e:94:4e:98:86:45:80:5e:17:93:fa:bb:cb:cb:
b7:4e:2a:5b:e9:19:68:df:2c:62:a7:df:09:b1:ae:80:f7:52:
b2:00:39:6b:1b:68:ed:cb:94:8e:f4:f7:f3:ef:15:bb:3a:30:
d9:98:02:e4:3a:d5:14:9c:52:e7:54:23:46:4c:6d:13:5e:9d:
d3:17:04:0d:43:63:69:53:b0:9f:a0:32:63:a3:73:c8:fc:d6:
ac:b1:f8:ae:bf:14:ed:54:39:e4:7a:19:9f:73:6e:4c:1f:10:
42:14:d8:90:2c:44:23:7f:10:ba:c5:6e:79:f6:31:b2:ef:9e:
db:12:53:8e:57:cf:ee:97:07:1c:cd:8e:b0:f5:9a:d8:e8:ed:
6c:86:99:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BSX53c+tVKa0mndPZhOAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMWJjZTJlZTgwNmU5MzYyMTExMmRiZDYxODUzNmY3NzVm
NDRmYmEwHhcNMjUwMTMxMTEwMDQxWhcNMjUwMjAxMTEwMDQxWjAzMTEwLwYDVQQD
EyhiYTcxNWVlZjc4YzE1ZGRmZjdmZDAxNjkxNzBiMDgwYjQxNDAyMzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu1O6KXJT/AlyeIqMCFqMLFBkxgT
IIaeQRQ1aGRJ+9xfmrWCCCdQfWfSGxkger5RvunceJiVFygrje+7Uq2ASU3C2ABB
h+1gueFvd6uX6xT2msf55dhzjaYQFAPxyCalnXB8l+98puif8f82IAQQt17TMsaT
+TUSEHt2N3jG6aYy9TQmx+6X8LHwgstVRy6JmmyMxKXz+r6IT0ZJWTnHXzKi5eEw
vbcZWDp1C6BzrGkQ5MrnhZJCv/U9L2vo8DaCx9vg6w10DdIhEYrNal/5PtPIng6V
6lZHe2rAwja0DW/A+hYHF4i9sA+TXZ5SYXEnOaBM5ENz0q4XZCA58jCyewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpxXu94wV3f9/0BaRcLCAtBQCNKMB8GA1UdIwQY
MBaAFDMbzi7oBuk2IREtvWGFNvd19E+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXh2T0x1Z0c2VFloRVMyOVlZVTI5M1gwVDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS80YmEzY2EtZDZmZC00MTE2LTkxNDYt
YWVhYzE2MjI3YzI1LzEvTXh2T0x1Z0c2VFloRVMyOVlZVTI5M1gwVDdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS80YmEzY2EtZDZmZC00MTE2LTkxNDYtYWVhYzE2MjI3YzI1
LzEvTXh2T0x1Z0c2VFloRVMyOVlZVTI5M1gwVDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXFYoN3x9
8D95Ys1GiwEklC3B9GDT9doEBOXL6Brar430pQq/xF98TSuAExQIwqd5Un07RCx1
bk5BHrbKbrX01a1QJ491pS+eK5U77X1lQUBXBYlx7bAhnIBQVxbcxbASgq3RPU1h
LSFyzEqjalTKzy6UTpiGRYBeF5P6u8vLt04qW+kZaN8sYqffCbGugPdSsgA5axto
7cuUjvT38+8Vuzow2ZgC5DrVFJxS51QjRkxtE16d0xcEDUNjaVOwn6AyY6NzyPzW
rLH4rr8U7VQ55HoZn3NuTB8QQhTYkCxEI38QusVuefYxsu+e2xJTjlfP7pcHHM2O
sPWa2OjtbIaZqQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:15 2025 by rpki-client