Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
File: rN3HO1mh_N7iLiWCTUCswnKGqlI.mft (raw, json)
Hash identifier: eXKtT++40jVHBh82ud6kNTaVdVqWWiIzDeBgLDr01KM=
Subject key identifier: 6C:63:2E:FD:4F:C6:C8:CE:0F:92:F4:62:04:EB:79:C2:70:91:90:A9
Authority key identifier: AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
Certificate issuer: /CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Certificate serial: 0194BD85341042F2D5E7BFA295C05C88B1E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
Manifest number: 7F
Signing time: Fri 31 Jan 2025 18:00:10 +0000
Manifest this update: Fri 31 Jan 2025 18:00:10 +0000
Manifest next update: Sat 01 Feb 2025 18:00:10 +0000
Files and hashes: 1: oo8iJLtCvQj5tOxPs0jWtfp64Qc.roa (hash: XKlJdTZMxFrgX9Jc6CyAN7uX/wDP3zOgo6gX8cl2wYU=)
2: rN3HO1mh_N7iLiWCTUCswnKGqlI.crl (hash: aKCrr/0y9qEwRBEqTy+jQEUBB0Fe1pNBv0ss+Jwo1DI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:34:10:42:f2:d5:e7:bf:a2:95:c0:5c:88:b1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Validity
Not Before: Jan 31 18:00:10 2025 GMT
Not After : Feb 1 18:00:10 2025 GMT
Subject: CN=6c632efd4fc6c8ce0f92f46204eb79c2709190a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:82:dd:ed:b4:83:93:74:62:43:07:c1:80:0a:
86:87:a6:c7:6c:a7:6f:3a:ba:b3:2d:9e:3b:b3:ac:
ad:5a:49:12:80:ac:ed:ec:fd:6d:78:14:fa:a8:d8:
5d:c4:e3:b9:1b:3d:50:a9:dd:a0:b6:7c:7a:a1:8f:
98:77:83:1c:e2:72:7b:a7:72:4a:87:05:3a:62:21:
64:9d:77:9f:b1:64:13:68:2a:6d:0b:73:08:5e:dd:
5f:d7:f6:74:8f:f1:a5:8a:46:97:d1:73:da:03:db:
90:b4:0d:4b:fb:51:f6:99:47:36:fe:0b:05:5f:19:
6d:ac:43:e9:4e:48:84:f0:42:46:fd:ee:d9:64:12:
df:ca:86:9a:41:03:c5:47:93:a8:d1:93:27:34:07:
a4:fb:30:d8:d1:74:e3:33:5a:07:cc:47:cb:c4:66:
a3:3c:0b:bf:a2:d1:5d:e5:3a:63:08:a3:e8:d7:5d:
ea:12:6d:85:71:87:bc:d3:de:63:3d:43:17:a3:90:
46:d6:c2:38:1b:5a:6a:37:cd:99:62:79:40:75:ae:
49:38:d6:c4:66:91:d4:48:73:21:0e:7c:dd:2f:98:
57:1f:26:63:d3:5a:03:55:51:32:a0:1a:a0:db:21:
a3:35:3a:d6:cc:dc:a1:81:58:44:7b:f6:bc:74:51:
7a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:63:2E:FD:4F:C6:C8:CE:0F:92:F4:62:04:EB:79:C2:70:91:90:A9
X509v3 Authority Key Identifier:
keyid:AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b3:4f:95:84:26:a8:ad:bb:2c:56:7c:c8:fd:94:ac:3e:f0:
28:a3:a5:18:1d:00:e0:90:2a:b3:4f:fb:5b:01:80:12:2a:30:
d3:4a:25:f1:60:62:8f:4a:48:f4:de:53:d5:f2:d6:45:56:3e:
da:12:dc:f1:6f:de:87:68:58:5a:d0:f1:39:70:4a:09:c8:7b:
c1:6e:b7:78:3a:38:4d:6e:d9:41:d6:f9:2e:c7:44:ea:3c:c4:
1a:2e:db:3a:3c:f0:7a:ed:fe:f2:9c:ee:c0:5d:2f:05:58:37:
22:9e:95:03:0d:3a:04:f6:f7:82:67:84:c2:34:8f:75:3d:28:
77:ad:13:76:b1:4b:e8:b1:c0:2f:d8:c6:cf:1e:40:39:d5:a7:
8b:7d:77:a6:45:59:f8:a2:df:33:a8:52:6f:2a:29:42:7b:84:
a3:08:4e:25:1c:69:11:79:7e:43:42:08:50:35:85:93:69:c2:
80:d6:d1:35:1d:e5:33:b1:5e:b4:03:ed:7c:04:e8:90:df:a1:
be:4e:1b:a4:36:3c:1b:eb:43:aa:17:74:a4:de:0c:72:3c:95:
86:13:54:42:a3:d7:c1:96:49:e7:d7:0e:8b:32:90:78:c9:c5:
30:fb:97:aa:e8:1b:7c:24:53:1e:ee:06:d0:6d:3b:b6:e5:80:
14:31:3d:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hTQQQvLV57+ilcBciLHkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZGRjNzNiNTlhMWZjZGVlMjJlMjU4MjRkNDBhY2MyNzI4
NmFhNTIwHhcNMjUwMTMxMTgwMDEwWhcNMjUwMjAxMTgwMDEwWjAzMTEwLwYDVQQD
Eyg2YzYzMmVmZDRmYzZjOGNlMGY5MmY0NjIwNGViNzljMjcwOTE5MGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YLd7bSDk3RiQwfBgAqGh6bHbKdv
OrqzLZ47s6ytWkkSgKzt7P1teBT6qNhdxOO5Gz1Qqd2gtnx6oY+Yd4Mc4nJ7p3JK
hwU6YiFknXefsWQTaCptC3MIXt1f1/Z0j/GlikaX0XPaA9uQtA1L+1H2mUc2/gsF
XxltrEPpTkiE8EJG/e7ZZBLfyoaaQQPFR5Oo0ZMnNAek+zDY0XTjM1oHzEfLxGaj
PAu/otFd5TpjCKPo113qEm2FcYe8095jPUMXo5BG1sI4G1pqN82ZYnlAda5JONbE
ZpHUSHMhDnzdL5hXHyZj01oDVVEyoBqg2yGjNTrWzNyhgVhEe/a8dFF6CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxjLv1PxsjOD5L0YgTrecJwkZCpMB8GA1UdIwQY
MBaAFKzdxztZofze4i4lgk1ArMJyhqpSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck4zSE8xbWhfTjdpTGlXQ1RVQ3N3bktHcWxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS84Nzg4ZTUtOGFiOC00M2U5LTlkYWIt
YTBlYzg0YTMxMzkzLzEvck4zSE8xbWhfTjdpTGlXQ1RVQ3N3bktHcWxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS84Nzg4ZTUtOGFiOC00M2U5LTlkYWItYTBlYzg0YTMxMzkz
LzEvck4zSE8xbWhfTjdpTGlXQ1RVQ3N3bktHcWxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqbNPlYQm
qK27LFZ8yP2UrD7wKKOlGB0A4JAqs0/7WwGAEiow00ol8WBij0pI9N5T1fLWRVY+
2hLc8W/eh2hYWtDxOXBKCch7wW63eDo4TW7ZQdb5LsdE6jzEGi7bOjzweu3+8pzu
wF0vBVg3Ip6VAw06BPb3gmeEwjSPdT0od60TdrFL6LHAL9jGzx5AOdWni313pkVZ
+KLfM6hSbyopQnuEowhOJRxpEXl+Q0IIUDWFk2nCgNbRNR3lM7FetAPtfATokN+h
vk4bpDY8G+tDqhd0pN4McjyVhhNUQqPXwZZJ59cOizKQeMnFMPuXqugbfCRTHu4G
0G07tuWAFDE96Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:35:42 2025 by rpki-client