Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
File: rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft (raw, json)
Hash identifier: r4A2rqxjfV7Aiwht91hMZIwPxSIgsLyMPk0nLnBKFYI=
Subject key identifier: 0F:8C:F1:BC:D0:05:93:9D:7C:87:D5:EE:0F:82:AF:6A:90:01:BB:A5
Authority key identifier: AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
Certificate issuer: /CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Certificate serial: 0194BC3C2BC85091F194E455E44F66E149B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
Manifest number: 10A4
Signing time: Fri 31 Jan 2025 12:00:47 +0000
Manifest this update: Fri 31 Jan 2025 12:00:47 +0000
Manifest next update: Sat 01 Feb 2025 12:00:47 +0000
Files and hashes: 1: r6C99vK2TllFCTWcqpJRSg5MRPM.roa (hash: 3+br3Wh/zPJPiW24ubp7XOxLj4qW7AeahE4kU9GEl1U=)
2: rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl (hash: ED5DIxuU8YsNSjtlCozTMFX1006E0Gd4s2vc/28wTpY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2b:c8:50:91:f1:94:e4:55:e4:4f:66:e1:49:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Validity
Not Before: Jan 31 12:00:47 2025 GMT
Not After : Feb 1 12:00:47 2025 GMT
Subject: CN=0f8cf1bcd005939d7c87d5ee0f82af6a9001bba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e8:32:de:83:e5:51:6a:65:92:76:a5:d1:85:
ec:d1:cf:7d:3f:72:1b:33:51:d3:45:72:5f:7b:50:
5e:fe:0e:52:1c:88:87:b4:e2:9c:cc:7e:f4:50:c8:
e9:c3:4e:a1:cc:0c:04:5d:55:23:93:65:b7:2b:52:
53:cf:90:cf:91:55:9e:bf:03:07:a7:93:28:83:db:
b8:a2:8b:ac:02:ef:24:17:c9:48:9c:4d:df:65:ad:
26:9a:76:58:dd:c4:cc:56:76:e9:c5:5a:c1:64:65:
09:0d:d7:b0:fb:15:0b:bf:75:0a:f2:94:ec:45:81:
04:a7:0c:8b:5e:c2:2c:1a:d1:d0:7e:d5:05:11:7c:
51:c4:62:de:90:7c:fa:68:95:d6:63:41:69:6e:ce:
88:e1:67:f3:54:3c:c6:cc:ee:89:1d:07:68:d8:97:
20:36:60:41:71:de:14:e4:02:8f:ee:b7:d2:75:ac:
26:7b:8d:27:60:25:fa:71:3a:3e:2e:7d:b4:e4:61:
d9:68:03:43:a9:dc:a0:df:41:b5:e7:6a:de:a7:7f:
11:45:5b:ac:37:ac:af:52:cf:57:1c:e0:18:5c:6e:
ac:00:7f:31:a7:1f:6d:f9:e1:b6:f7:f2:2c:f5:fb:
cd:30:56:3c:bd:11:19:05:0c:8f:d8:64:70:24:6d:
7e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8C:F1:BC:D0:05:93:9D:7C:87:D5:EE:0F:82:AF:6A:90:01:BB:A5
X509v3 Authority Key Identifier:
keyid:AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:61:63:a3:88:d0:ae:2b:67:bd:95:ca:44:fd:26:ef:12:df:
01:5a:17:f5:ca:3c:8b:3c:74:6b:8e:4e:8a:c7:30:ca:77:71:
25:7b:f5:c7:54:0d:95:40:ad:89:a3:76:87:f9:c6:bd:a2:37:
f8:57:ba:ea:4f:f6:ba:2d:9c:e1:15:1e:2b:a1:07:fc:42:e4:
41:62:10:ea:e3:87:1e:14:84:bc:fc:cc:4d:cf:10:f8:92:d1:
f7:8d:d4:13:0c:e6:61:db:6e:3f:7d:2f:0c:22:69:09:85:17:
04:eb:34:82:46:71:d3:9f:66:3d:a1:f0:53:e2:39:9e:1c:20:
8a:8f:96:0d:c2:2b:ae:82:53:c1:c7:23:e8:7a:b5:e3:6b:7f:
e7:66:2f:f3:86:f0:20:08:65:6e:b5:8b:e3:4f:6f:76:a6:16:
63:82:78:38:25:c5:d2:d5:bf:98:22:ed:99:71:c7:ef:ca:6b:
78:e0:1c:92:b3:f8:60:c5:bb:82:09:ce:53:0e:42:cb:68:bc:
0d:a9:e6:05:76:45:cc:77:a3:0e:57:1a:c2:c4:07:36:38:66:
09:dd:e0:03:61:e9:88:33:99:f8:f9:0a:44:22:fc:af:69:ff:
de:d9:a1:87:fe:6b:4e:2a:44:f6:e1:1f:71:73:f5:1d:a5:56:
d7:1e:82:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PCvIUJHxlORV5E9m4Um1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkOGRkMTdhNzY4ZTNiNmZiZmE3YTcwMDlhNzAwN2ViZTY1
YjQ1YzgwHhcNMjUwMTMxMTIwMDQ3WhcNMjUwMjAxMTIwMDQ3WjAzMTEwLwYDVQQD
EygwZjhjZjFiY2QwMDU5MzlkN2M4N2Q1ZWUwZjgyYWY2YTkwMDFiYmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+gy3oPlUWplknal0YXs0c99P3Ib
M1HTRXJfe1Be/g5SHIiHtOKczH70UMjpw06hzAwEXVUjk2W3K1JTz5DPkVWevwMH
p5Mog9u4oousAu8kF8lInE3fZa0mmnZY3cTMVnbpxVrBZGUJDdew+xULv3UK8pTs
RYEEpwyLXsIsGtHQftUFEXxRxGLekHz6aJXWY0Fpbs6I4WfzVDzGzO6JHQdo2Jcg
NmBBcd4U5AKP7rfSdawme40nYCX6cTo+Ln205GHZaANDqdyg30G152rep38RRVus
N6yvUs9XHOAYXG6sAH8xpx9t+eG29/Is9fvNMFY8vREZBQyP2GRwJG1+zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+M8bzQBZOdfIfV7g+Cr2qQAbulMB8GA1UdIwQY
MBaAFK2N0Xp2jjtvv6enAJpwB+vmW0XIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclkzUmVuYU9PMi1fcDZjQW1uQUg2LVpiUmNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy85OGIzNWItOTQ1ZS00MGM1LWJiOTUt
OWVhZGQzNTFmYzc5LzEvclkzUmVuYU9PMi1fcDZjQW1uQUg2LVpiUmNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy85OGIzNWItOTQ1ZS00MGM1LWJiOTUtOWVhZGQzNTFmYzc5
LzEvclkzUmVuYU9PMi1fcDZjQW1uQUg2LVpiUmNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWFjo4jQ
ritnvZXKRP0m7xLfAVoX9co8izx0a45OiscwyndxJXv1x1QNlUCtiaN2h/nGvaI3
+Fe66k/2ui2c4RUeK6EH/ELkQWIQ6uOHHhSEvPzMTc8Q+JLR943UEwzmYdtuP30v
DCJpCYUXBOs0gkZx059mPaHwU+I5nhwgio+WDcIrroJTwccj6Hq142t/52Yv84bw
IAhlbrWL409vdqYWY4J4OCXF0tW/mCLtmXHH78preOAckrP4YMW7ggnOUw5Cy2i8
DanmBXZFzHejDlcawsQHNjhmCd3gA2HpiDOZ+PkKRCL8r2n/3tmhh/5rTipE9uEf
cXP1HaVW1x6CIA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:52 2025 by rpki-client