Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
File: RsyrdHmk4NikF3NQoAppvYg7BI0.mft (raw, json)
Hash identifier: 7xthhAJ7zmAT1VVVazp9rbFacG8jFE7hZGzfBJxBk/8=
Subject key identifier: 90:B7:D1:36:4E:40:A5:91:DE:D2:96:F8:30:6D:D5:B1:D3:12:79:76
Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Certificate serial: 0194BD855D90C39E9321A1108D49221CCB80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:21 +0000
Manifest this update: Fri 31 Jan 2025 18:00:21 +0000
Manifest next update: Sat 01 Feb 2025 18:00:21 +0000
Files and hashes: 1: RsyrdHmk4NikF3NQoAppvYg7BI0.crl (hash: wMJoSbsjyl9AtbBMbwuKQtnr3wPI17jALKgB8VFSwZQ=)
2: kbK5FbYWiIzhyfd6X1FvOM4LM_M.roa (hash: DqjgdH8s8QL3DkbtV73wzVgdXOipMU6gUg//vr7va8U=)
3: mDUiFexcT2mv6c5O8qGbFAH9b3Y.roa (hash: pPWVkb6MaBCnVH/KCkJGhD1ngVL39J0MeLmVUJGfUTY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5d:90:c3:9e:93:21:a1:10:8d:49:22:1c:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Validity
Not Before: Jan 31 18:00:21 2025 GMT
Not After : Feb 1 18:00:21 2025 GMT
Subject: CN=90b7d1364e40a591ded296f8306dd5b1d3127976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:62:7b:9e:0b:af:5f:52:a5:71:48:17:3d:eb:
c8:87:0f:e9:06:68:59:79:28:9c:8a:00:39:9f:92:
b6:53:82:62:a5:b0:57:66:42:5b:7e:7a:e6:1f:e7:
59:e6:4d:d8:3f:97:c2:26:46:4c:de:1b:ab:a5:ec:
ce:0e:87:02:73:22:4e:e3:d4:16:70:34:04:78:68:
bf:b5:38:e9:aa:f2:15:5b:6c:ff:e1:8a:13:70:2a:
4f:be:e7:0d:33:0e:b8:20:dd:e6:b0:ab:03:2e:a7:
c2:8a:c8:8a:20:21:9d:9f:27:05:51:ef:ec:79:99:
40:64:10:01:13:36:6d:e9:6f:92:b2:b1:2b:01:b9:
4e:24:d2:cc:4f:4a:3c:02:34:25:de:41:2d:9c:32:
98:c5:6d:91:df:14:56:d7:81:a0:48:84:ba:92:9f:
f0:a6:aa:c8:dd:d1:f8:a6:80:85:0c:3e:61:24:66:
68:dc:df:92:da:8a:f2:b9:a6:7e:42:5b:62:2b:f4:
1d:f9:aa:44:32:90:b8:59:ff:55:14:b6:2e:38:23:
0e:6a:3a:88:66:55:44:a2:1a:f9:30:db:2a:29:e5:
d8:a0:d9:f3:f2:d9:57:6d:9c:d7:4a:15:25:0b:d8:
e3:56:bf:22:b9:70:8c:d7:f2:c2:db:3f:e2:29:8f:
1b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B7:D1:36:4E:40:A5:91:DE:D2:96:F8:30:6D:D5:B1:D3:12:79:76
X509v3 Authority Key Identifier:
keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3b:5a:4d:c8:3e:0f:23:01:b9:14:f0:51:5c:74:81:bf:e3:
92:0a:1d:62:6a:d4:4f:82:ff:11:82:4a:fb:96:8f:60:86:35:
ee:71:6d:6b:14:22:24:90:bd:95:77:ce:e1:2a:84:36:4d:92:
b8:d4:d0:7b:6a:52:a2:2a:f2:73:68:54:fe:ff:59:ee:bc:7b:
f4:0d:48:40:81:b2:c9:89:b3:ac:9d:2a:51:2e:d1:a1:04:e1:
ce:6b:ca:d0:6d:d1:03:2c:6f:0e:a2:dd:80:50:40:6d:46:f2:
de:5f:37:74:89:bd:c1:ba:84:5a:78:4e:09:2d:eb:4a:0e:30:
61:7b:a3:09:1a:e2:c8:52:ba:ef:a6:51:9d:b6:4b:28:e0:97:
f7:38:0d:42:5c:8e:d0:ac:c9:64:97:db:54:01:55:53:4a:47:
fd:9b:b3:63:c2:a6:ca:24:6f:ad:10:e8:f0:10:8b:a3:27:92:
cf:b1:73:ee:9b:2d:72:63:5a:b1:d0:86:13:23:a2:67:42:98:
3f:64:4f:a8:9c:61:32:aa:af:42:30:87:99:b7:1f:56:1e:cd:
66:a2:a1:a7:a4:50:48:a0:95:d6:fd:92:ec:3c:38:33:7d:7a:
0a:ed:c1:16:2b:54:4b:66:33:a9:9d:3f:73:10:1d:e4:da:36:
bb:c6:6a:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hV2Qw56TIaEQjUkiHMuAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2Y2NhYjc0NzlhNGUwZDhhNDE3NzM1MGEwMGE2OWJkODgz
YjA0OGQwHhcNMjUwMTMxMTgwMDIxWhcNMjUwMjAxMTgwMDIxWjAzMTEwLwYDVQQD
Eyg5MGI3ZDEzNjRlNDBhNTkxZGVkMjk2ZjgzMDZkZDViMWQzMTI3OTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2J7nguvX1KlcUgXPevIhw/pBmhZ
eSicigA5n5K2U4JipbBXZkJbfnrmH+dZ5k3YP5fCJkZM3hurpezODocCcyJO49QW
cDQEeGi/tTjpqvIVW2z/4YoTcCpPvucNMw64IN3msKsDLqfCisiKICGdnycFUe/s
eZlAZBABEzZt6W+SsrErAblOJNLMT0o8AjQl3kEtnDKYxW2R3xRW14GgSIS6kp/w
pqrI3dH4poCFDD5hJGZo3N+S2oryuaZ+QltiK/Qd+apEMpC4Wf9VFLYuOCMOajqI
ZlVEohr5MNsqKeXYoNnz8tlXbZzXShUlC9jjVr8iuXCM1/LC2z/iKY8bjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJC30TZOQKWR3tKW+DBt1bHTEnl2MB8GA1UdIwQY
MBaAFEbMq3R5pODYpBdzUKAKab2IOwSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnN5cmRIbWs0TmlrRjNOUW9BcHB2WWc3QkkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kYzUyNDMtYmJhNC00YWNmLWEyMTgt
MmYzMDI1MmViNDQyLzEvUnN5cmRIbWs0TmlrRjNOUW9BcHB2WWc3QkkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9kYzUyNDMtYmJhNC00YWNmLWEyMTgtMmYzMDI1MmViNDQy
LzEvUnN5cmRIbWs0TmlrRjNOUW9BcHB2WWc3QkkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMztaTcg+
DyMBuRTwUVx0gb/jkgodYmrUT4L/EYJK+5aPYIY17nFtaxQiJJC9lXfO4SqENk2S
uNTQe2pSoiryc2hU/v9Z7rx79A1IQIGyyYmzrJ0qUS7RoQThzmvK0G3RAyxvDqLd
gFBAbUby3l83dIm9wbqEWnhOCS3rSg4wYXujCRriyFK676ZRnbZLKOCX9zgNQlyO
0KzJZJfbVAFVU0pH/ZuzY8KmyiRvrRDo8BCLoyeSz7Fz7pstcmNasdCGEyOiZ0KY
P2RPqJxhMqqvQjCHmbcfVh7NZqKhp6RQSKCV1v2S7Dw4M316Cu3BFitUS2YzqZ0/
cxAd5No2u8ZqVQ==
-----END CERTIFICATE-----
Generated at Wed May 7 20:37:02 2025 by rpki-client