Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
File: 152FaqqerRL3XLaM2ulqDSyN3h4.mft (raw, json)
Hash identifier: NvD2H/mF2EIYgSxa5SZc3Itu6cXtjoczhRfw0F1Ue3E=
Subject key identifier: 88:E5:66:B7:B9:3C:BF:4F:80:22:A3:7B:0B:86:F8:FA:1E:3A:EF:89
Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
Certificate issuer: /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Certificate serial: 0194BCA9B56689BDC982C3EF45645FD1C2BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
Manifest number: 0DE5
Signing time: Fri 31 Jan 2025 14:00:26 +0000
Manifest this update: Fri 31 Jan 2025 14:00:26 +0000
Manifest next update: Sat 01 Feb 2025 14:00:26 +0000
Files and hashes: 1: 152FaqqerRL3XLaM2ulqDSyN3h4.crl (hash: NJtmSoxf4jxBTWhyrKswsQc1MBjs3T1tbjn7ZjuDf3c=)
2: 94BJXR3Uo1I8suMedxF8KSUQqKc.roa (hash: vsbbxp7WNMO8VB3ChL2ZEv1wwVeFWV4G1csg/XaauZ0=)
3: y4gQpfTPRcitVr25VP-twnptmvE.roa (hash: OvMK6obtD8GE0uGeIeGjeBIL4CSoip9fhbcWHpqNnSY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b5:66:89:bd:c9:82:c3:ef:45:64:5f:d1:c2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Validity
Not Before: Jan 31 14:00:26 2025 GMT
Not After : Feb 1 14:00:26 2025 GMT
Subject: CN=88e566b7b93cbf4f8022a37b0b86f8fa1e3aef89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:96:85:4e:43:e0:db:9d:e3:e4:77:d1:37:
f0:27:57:28:4d:ae:9e:a2:65:df:71:1d:d1:22:00:
41:8f:55:aa:0d:cb:34:49:05:67:ee:18:3f:e8:36:
8f:89:72:31:5f:82:c5:c9:00:12:90:a3:99:68:7f:
7a:a2:97:8f:ee:52:f1:70:8c:03:ef:47:dd:d3:82:
d4:46:34:55:87:ce:b2:89:2c:e6:6f:78:89:b1:ba:
bf:69:04:e6:2f:11:79:3c:02:7f:0f:13:7a:a2:e9:
28:43:9a:3e:6d:8a:94:f8:5d:9a:2b:0f:33:ea:69:
11:7e:03:99:25:1a:c7:ce:9b:d9:fe:75:65:4e:a7:
0a:21:b6:aa:00:e3:b3:b1:0f:45:15:4d:85:c5:c0:
c0:87:41:3e:ca:54:71:7b:a8:76:4c:a2:c4:2c:e8:
8a:50:63:f0:c3:a3:4f:07:a2:5c:16:30:9d:ee:91:
34:ed:f4:b1:a7:52:50:7b:dd:f0:6a:16:dd:dd:6b:
db:f2:5a:51:29:03:2e:f5:26:0c:f5:b5:9a:b3:41:
db:7a:46:18:28:ea:0e:b7:8c:cc:74:f8:81:0e:25:
8c:a3:d4:e6:27:e1:21:a1:3d:11:43:02:62:9b:6a:
47:5a:1b:ec:2e:e1:96:cd:83:8a:1f:9a:39:77:82:
1b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E5:66:B7:B9:3C:BF:4F:80:22:A3:7B:0B:86:F8:FA:1E:3A:EF:89
X509v3 Authority Key Identifier:
keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ea:0b:84:5e:3e:60:3b:b0:e6:94:e1:1e:f6:4d:1c:4c:0e:
7e:e1:3e:1f:06:c4:ec:11:21:06:19:67:32:64:23:2d:f9:47:
5a:ba:81:17:67:1d:a9:0a:c3:ff:a6:e7:c7:ca:86:d9:48:ce:
b5:8d:6c:76:fb:ac:38:da:87:f1:04:ef:a0:29:b3:cc:e7:da:
b6:6d:78:65:ad:eb:f7:4b:23:1e:ee:62:d2:ab:ed:8a:1c:ca:
4c:8f:02:fa:2e:da:33:08:e0:7f:e1:b4:a8:e3:bc:a2:1b:8d:
67:b6:be:ee:96:3f:10:15:6e:bf:d4:83:b7:4b:1e:3b:d0:01:
f3:47:6e:2b:cc:cc:76:25:0d:1a:e1:c8:f0:aa:1b:e1:ef:49:
90:9b:a5:d5:f6:49:cc:12:91:73:1a:cb:3a:7f:19:c6:79:86:
b3:c0:ff:21:38:bf:f3:b9:db:09:04:91:17:ca:21:34:6c:a7:
8a:77:e1:90:9b:98:c7:fe:a1:e1:ab:0a:c1:38:70:38:b3:06:
c7:b6:d2:57:e0:f9:17:3d:70:13:1d:e2:3a:75:33:0b:62:59:
f3:98:73:76:ee:3d:bb:62:37:da:d2:11:1a:25:99:82:18:d8:
6b:51:54:a8:1d:2c:87:5b:76:08:62:ab:58:27:3b:ce:7d:75:
c3:0d:be:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qbVmib3JgsPvRWRf0cK+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OWQ4NTZhYWE5ZWFkMTJmNzVjYjY4Y2RhZTk2YTBkMmM4
ZGRlMWUwHhcNMjUwMTMxMTQwMDI2WhcNMjUwMjAxMTQwMDI2WjAzMTEwLwYDVQQD
Eyg4OGU1NjZiN2I5M2NiZjRmODAyMmEzN2IwYjg2ZjhmYTFlM2FlZjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg2WhU5D4Nud4+R30TfwJ1coTa6e
omXfcR3RIgBBj1WqDcs0SQVn7hg/6DaPiXIxX4LFyQASkKOZaH96opeP7lLxcIwD
70fd04LURjRVh86yiSzmb3iJsbq/aQTmLxF5PAJ/DxN6oukoQ5o+bYqU+F2aKw8z
6mkRfgOZJRrHzpvZ/nVlTqcKIbaqAOOzsQ9FFU2FxcDAh0E+ylRxe6h2TKLELOiK
UGPww6NPB6JcFjCd7pE07fSxp1JQe93wahbd3Wvb8lpRKQMu9SYM9bWas0HbekYY
KOoOt4zMdPiBDiWMo9TmJ+EhoT0RQwJim2pHWhvsLuGWzYOKH5o5d4IbswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjlZre5PL9PgCKjewuG+PoeOu+JMB8GA1UdIwQY
MBaAFNedhWqqnq0S91y2jNrpag0sjd4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hNWJhYTItMmEzNS00Yzc2LWE5NDAt
NTk5MGNkNGRlODhiLzEvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hNWJhYTItMmEzNS00Yzc2LWE5NDAtNTk5MGNkNGRlODhi
LzEvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAruoLhF4+
YDuw5pThHvZNHEwOfuE+HwbE7BEhBhlnMmQjLflHWrqBF2cdqQrD/6bnx8qG2UjO
tY1sdvusONqH8QTvoCmzzOfatm14Za3r90sjHu5i0qvtihzKTI8C+i7aMwjgf+G0
qOO8ohuNZ7a+7pY/EBVuv9SDt0seO9AB80duK8zMdiUNGuHI8Kob4e9JkJul1fZJ
zBKRcxrLOn8ZxnmGs8D/ITi/87nbCQSRF8ohNGyninfhkJuYx/6h4asKwThwOLMG
x7bSV+D5Fz1wEx3iOnUzC2JZ85hzdu49u2I32tIRGiWZghjYa1FUqB0sh1t2CGKr
WCc7zn11ww2+VA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:08 2025 by rpki-client