Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
File: _ASHoE9apEK-UZoXyyuyLXg98js.mft (raw, json)
Hash identifier: YLxY0MXozCkhcrjXQZnCYacMk9Y26ZJYd6a+0nT9DEU=
Subject key identifier: AD:1B:BB:1B:3C:A1:85:93:D6:29:A7:D4:BA:EE:10:DA:FC:B8:71:5F
Authority key identifier: FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B
Certificate issuer: /CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
Certificate serial: 0194BD8569E253989AE7E3681DFB2B3F56EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
Manifest number: 0FAC
Signing time: Fri 31 Jan 2025 18:00:24 +0000
Manifest this update: Fri 31 Jan 2025 18:00:24 +0000
Manifest next update: Sat 01 Feb 2025 18:00:24 +0000
Files and hashes: 1: TWYnB52Oavk9789kFBH_TtsFA20.roa (hash: Lo6TIcgKkzIrKcc1K5udX1XvguvwpolYTItBn5Pxknw=)
2: _ASHoE9apEK-UZoXyyuyLXg98js.crl (hash: rYYmEqLej7GDqvnoleW5iBvbKLvsaJiTyumVcZNGc+w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:69:e2:53:98:9a:e7:e3:68:1d:fb:2b:3f:56:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
Validity
Not Before: Jan 31 18:00:24 2025 GMT
Not After : Feb 1 18:00:24 2025 GMT
Subject: CN=ad1bbb1b3ca18593d629a7d4baee10dafcb8715f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:b5:89:a9:6c:61:43:4a:e7:9a:69:04:dd:
94:2c:8f:69:1c:87:bb:33:02:b5:ad:2b:ea:dd:84:
82:e6:84:b3:af:0d:e7:4f:9e:e6:1b:e7:73:38:7a:
66:8d:39:ef:bb:c6:27:0d:10:44:40:ac:d9:65:cc:
9b:94:8c:23:3a:a5:fa:e5:46:77:69:d0:7f:43:a7:
d2:23:a3:62:f9:74:c7:51:8a:b3:80:c4:68:f6:e8:
c5:19:d2:0c:7e:47:3a:8a:ac:9c:ee:55:e9:0b:0d:
09:7b:6b:4e:db:90:51:9c:c9:97:e8:37:db:05:c3:
42:b4:5d:02:7c:a9:a6:b7:a5:c0:31:0a:96:fe:e1:
95:46:ec:12:4a:14:35:5a:99:0d:2f:ee:db:41:e1:
a8:e0:f7:e4:91:1b:33:cd:26:e9:9a:40:82:29:5a:
21:01:0c:10:1c:d4:2a:e5:ec:92:5c:9d:38:71:f8:
cc:ec:d4:2b:37:41:7d:d2:9a:6a:43:ae:9b:b2:fc:
73:87:d6:1b:d3:a7:10:6d:c9:dc:e6:34:14:ae:cb:
05:13:b1:49:80:ff:90:ae:28:69:0d:b7:f1:0e:1e:
79:cd:b7:da:38:65:a1:3e:cc:dc:20:0b:b9:0c:23:
51:ba:c5:e4:3e:6d:b2:8c:54:ed:75:55:e5:b5:de:
7a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1B:BB:1B:3C:A1:85:93:D6:29:A7:D4:BA:EE:10:DA:FC:B8:71:5F
X509v3 Authority Key Identifier:
keyid:FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e2:79:a7:57:34:e8:b6:09:ad:52:59:92:98:cd:54:6f:65:
0f:23:4a:c5:62:ac:87:90:b4:ca:cc:03:e9:38:a3:7d:c8:63:
68:20:bc:7b:97:cd:8a:73:21:a0:94:4b:15:78:cf:d0:d9:d7:
70:a2:8c:54:db:87:84:d4:66:66:84:18:bd:83:e9:7f:d1:06:
dc:03:2c:29:c1:d7:ae:ac:60:85:b2:6d:b5:c8:f8:17:27:82:
d1:3a:e5:e7:cb:23:6f:97:11:79:61:15:7d:f8:4c:61:c6:34:
24:e8:77:ed:c8:32:78:db:85:5b:ba:b9:eb:63:3b:8f:58:2d:
bf:45:94:26:56:38:80:f8:43:85:01:c6:7e:9a:73:6f:05:2f:
96:eb:7a:51:d4:50:09:33:f6:80:6f:c7:eb:35:af:f4:48:ad:
27:14:27:38:83:86:d9:dc:6b:26:fc:4e:66:e2:52:9b:da:6e:
cc:e0:c1:95:fa:6e:c0:54:cc:60:c4:e5:eb:34:6d:20:dc:7b:
45:9e:74:c9:34:a1:61:86:38:a8:b1:c1:f2:fd:97:75:d4:78:
9c:2c:df:ca:9d:60:77:42:dd:7e:4d:a7:c9:ac:5c:20:ef:35:
fa:a4:a7:0e:0e:10:e0:1c:e6:5a:8c:5a:4d:8b:23:74:dc:e1:
0a:a3:51:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hWniU5ia5+NoHfsrP1bsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMDQ4N2EwNGY1YWE0NDJiZTUxOWExN2NiMmJiMjJkNzgz
ZGYyM2IwHhcNMjUwMTMxMTgwMDI0WhcNMjUwMjAxMTgwMDI0WjAzMTEwLwYDVQQD
EyhhZDFiYmIxYjNjYTE4NTkzZDYyOWE3ZDRiYWVlMTBkYWZjYjg3MTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue21ialsYUNK55ppBN2ULI9pHIe7
MwK1rSvq3YSC5oSzrw3nT57mG+dzOHpmjTnvu8YnDRBEQKzZZcyblIwjOqX65UZ3
adB/Q6fSI6Ni+XTHUYqzgMRo9ujFGdIMfkc6iqyc7lXpCw0Je2tO25BRnMmX6Dfb
BcNCtF0CfKmmt6XAMQqW/uGVRuwSShQ1WpkNL+7bQeGo4PfkkRszzSbpmkCCKVoh
AQwQHNQq5eySXJ04cfjM7NQrN0F90ppqQ66bsvxzh9Yb06cQbcnc5jQUrssFE7FJ
gP+QrihpDbfxDh55zbfaOGWhPszcIAu5DCNRusXkPm2yjFTtdVXltd56twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0buxs8oYWT1imn1LruENr8uHFfMB8GA1UdIwQY
MBaAFPwEh6BPWqRCvlGaF8srsi14PfI7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0FTSG9FOWFwRUstVVpvWHl5dXlMWGc5OGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83ODFhNjEtN2QwMy00YThlLTkwYmEt
MWIzYTM2ZTFhY2E4LzEvX0FTSG9FOWFwRUstVVpvWHl5dXlMWGc5OGpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC83ODFhNjEtN2QwMy00YThlLTkwYmEtMWIzYTM2ZTFhY2E4
LzEvX0FTSG9FOWFwRUstVVpvWHl5dXlMWGc5OGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+J5p1c0
6LYJrVJZkpjNVG9lDyNKxWKsh5C0yswD6TijfchjaCC8e5fNinMhoJRLFXjP0NnX
cKKMVNuHhNRmZoQYvYPpf9EG3AMsKcHXrqxghbJttcj4FyeC0Trl58sjb5cReWEV
ffhMYcY0JOh37cgyeNuFW7q562M7j1gtv0WUJlY4gPhDhQHGfppzbwUvlut6UdRQ
CTP2gG/H6zWv9EitJxQnOIOG2dxrJvxOZuJSm9puzODBlfpuwFTMYMTl6zRtINx7
RZ50yTShYYY4qLHB8v2XddR4nCzfyp1gd0Ldfk2nyaxcIO81+qSnDg4Q4BzmWoxa
TYsjdNzhCqNRTw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:28:49 2025 by rpki-client