Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
File: m9upUpCphaaXdj0wq0L5w3hAeLI.mft (raw, json)
Hash identifier: jZnTRbqwJmzeaE/jyPZbyvsh3/kVyWOdRPs79zUJyuI=
Subject key identifier: 95:0C:D6:93:EC:60:E4:AA:90:51:96:57:56:FF:6D:C7:08:D0:20:94
Authority key identifier: 9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
Certificate issuer: /CN=9bdba95290a985a697763d30ab42f9c3784078b2
Certificate serial: 0194BC3CA5C9653F6E37F77D24BADD84C95A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
Manifest number: 0AA5
Signing time: Fri 31 Jan 2025 12:01:18 +0000
Manifest this update: Fri 31 Jan 2025 12:01:18 +0000
Manifest next update: Sat 01 Feb 2025 12:01:18 +0000
Files and hashes: 1: CYD_Z2qF6mHZ92tY0ftxYfveSAQ.roa (hash: IVgjWp28wTnlbtVuEQ1FT4HkeEGAz5yGW6fM8IpM3RI=)
2: m9upUpCphaaXdj0wq0L5w3hAeLI.crl (hash: fjuzVzCF0cJ0WknYVfct+kH6qO2/q/6znDDdd8CBvYo=)
3: tLilW5BDEJTEzIEDh8KmIyaiPZU.roa (hash: vFC4JGd2bQPNjS7TqFQa5G/kgv43UH1kGodWdHda2yA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a5:c9:65:3f:6e:37:f7:7d:24:ba:dd:84:c9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bdba95290a985a697763d30ab42f9c3784078b2
Validity
Not Before: Jan 31 12:01:18 2025 GMT
Not After : Feb 1 12:01:18 2025 GMT
Subject: CN=950cd693ec60e4aa9051965756ff6dc708d02094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:22:ba:c1:ac:57:f7:c2:e2:0b:b5:b5:1b:0d:
c9:9c:fc:8d:ed:00:57:b5:79:80:26:0a:14:95:e9:
d4:fe:da:e7:c8:40:d7:2d:e3:59:9d:e8:b5:d5:d6:
95:32:90:fc:e5:8a:2d:dc:65:63:43:6f:9c:be:58:
97:3a:d5:1d:53:b6:0a:65:62:f7:6e:9e:09:3f:29:
b6:2c:9f:ef:be:4c:3d:d0:f3:54:22:e9:f2:0a:c9:
f9:69:4c:63:20:0c:30:7f:06:9d:7c:50:7d:f8:ea:
13:50:06:fe:da:72:16:55:5e:67:cb:61:4e:e3:84:
b2:e3:0b:bd:1b:40:99:c7:33:f8:e5:a6:bf:6b:5f:
38:55:d0:1b:4e:6b:12:5d:db:31:a6:ed:16:91:f0:
72:f8:49:26:2c:e3:1b:a9:cf:15:fa:eb:43:2c:6c:
97:29:ff:2e:97:2b:0c:20:b6:10:3f:35:aa:19:fd:
2d:05:30:a0:0f:75:bc:0c:1d:c2:17:51:c6:69:a5:
13:ba:e7:ad:c8:54:06:c3:38:dc:ca:c7:a2:e1:fe:
74:95:67:fb:2a:29:11:e4:af:23:9f:00:d6:14:c0:
f6:f9:89:1e:ec:4f:a9:33:67:9f:0e:c6:43:6b:88:
4e:cf:ea:62:63:5b:a4:a0:6c:70:76:1a:33:92:e5:
0c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0C:D6:93:EC:60:E4:AA:90:51:96:57:56:FF:6D:C7:08:D0:20:94
X509v3 Authority Key Identifier:
keyid:9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:81:69:5f:05:3d:5f:68:2c:9f:c6:2e:e2:1e:34:ae:98:54:
57:e7:15:22:27:c4:c2:17:f0:06:18:8f:41:8f:76:a0:db:b0:
22:60:a3:e4:98:c0:45:cf:1e:e8:15:df:b2:e4:72:9e:10:d3:
fa:8c:54:80:bf:d6:13:a9:71:7d:93:47:89:40:bd:b3:a8:1a:
8b:1e:d2:eb:ff:46:15:36:84:84:c5:d8:e2:56:97:8e:09:d9:
50:d8:77:e5:c7:7b:ef:f8:5f:1b:86:82:e2:c3:19:8f:f5:ef:
a1:1f:6a:96:29:3e:75:f8:cd:82:7b:4a:74:97:d2:ec:76:65:
50:90:18:0b:42:dd:20:85:1f:ef:9b:b5:29:19:b3:a0:96:49:
2a:47:4c:91:26:56:54:e4:59:f1:ef:e4:70:87:01:4b:8d:b4:
e4:ce:44:92:0f:94:1c:05:64:13:b3:bc:2d:cf:86:2c:c4:b2:
81:bd:b4:54:58:54:aa:57:0a:06:8e:fc:3e:49:4d:27:ec:0f:
09:b7:90:55:19:55:b1:bd:e3:1b:2d:56:24:ea:83:28:fe:ca:
ab:48:3c:2e:e7:96:17:1b:1c:8f:17:2c:c4:7c:14:f2:47:9e:
2d:43:38:8a:5a:d9:62:59:25:d0:fd:52:72:19:2a:14:54:73:
1b:38:30:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PKXJZT9uN/d9JLrdhMlaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZGJhOTUyOTBhOTg1YTY5Nzc2M2QzMGFiNDJmOWMzNzg0
MDc4YjIwHhcNMjUwMTMxMTIwMTE4WhcNMjUwMjAxMTIwMTE4WjAzMTEwLwYDVQQD
Eyg5NTBjZDY5M2VjNjBlNGFhOTA1MTk2NTc1NmZmNmRjNzA4ZDAyMDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8iK6waxX98LiC7W1Gw3JnPyN7QBX
tXmAJgoUlenU/trnyEDXLeNZnei11daVMpD85Yot3GVjQ2+cvliXOtUdU7YKZWL3
bp4JPym2LJ/vvkw90PNUIunyCsn5aUxjIAwwfwadfFB9+OoTUAb+2nIWVV5ny2FO
44Sy4wu9G0CZxzP45aa/a184VdAbTmsSXdsxpu0WkfBy+EkmLOMbqc8V+utDLGyX
Kf8ulysMILYQPzWqGf0tBTCgD3W8DB3CF1HGaaUTuuetyFQGwzjcysei4f50lWf7
KikR5K8jnwDWFMD2+Yke7E+pM2efDsZDa4hOz+piY1ukoGxwdhozkuUMWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUM1pPsYOSqkFGWV1b/bccI0CCUMB8GA1UdIwQY
MBaAFJvbqVKQqYWml3Y9MKtC+cN4QHiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTl1cFVwQ3BoYWFYZGowd3EwTDV3M2hBZUxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy80YWUxYmQtNTg2NC00M2YwLWI0ZmQt
ODBhNjZjMGZjODg0LzEvbTl1cFVwQ3BoYWFYZGowd3EwTDV3M2hBZUxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy80YWUxYmQtNTg2NC00M2YwLWI0ZmQtODBhNjZjMGZjODg0
LzEvbTl1cFVwQ3BoYWFYZGowd3EwTDV3M2hBZUxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsIFpXwU9
X2gsn8Yu4h40rphUV+cVIifEwhfwBhiPQY92oNuwImCj5JjARc8e6BXfsuRynhDT
+oxUgL/WE6lxfZNHiUC9s6gaix7S6/9GFTaEhMXY4laXjgnZUNh35cd77/hfG4aC
4sMZj/XvoR9qlik+dfjNgntKdJfS7HZlUJAYC0LdIIUf75u1KRmzoJZJKkdMkSZW
VORZ8e/kcIcBS4205M5Ekg+UHAVkE7O8Lc+GLMSygb20VFhUqlcKBo78PklNJ+wP
CbeQVRlVsb3jGy1WJOqDKP7Kq0g8LueWFxscjxcsxHwU8keeLUM4ilrZYlkl0P1S
chkqFFRzGzgwFw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:42 2025 by rpki-client