Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft
File: 6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft (raw, json)
Hash identifier: m6uwNOPBTyHZD4bS6Y/wq44YzmpuyHl0y4i0r+vidkA=
Subject key identifier: 7F:A2:6C:6A:EF:88:91:72:ED:1B:93:30:83:9C:69:48:AA:E8:00:8B
Authority key identifier: EA:2F:67:1F:10:83:4D:AE:48:EA:8D:98:73:42:C3:75:CA:B3:31:6D
Certificate issuer: /CN=ea2f671f10834dae48ea8d987342c375cab3316d
Certificate serial: 0194BC72A849B223B7EFB2A285C65B31B20C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft
Manifest number: 24
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: 6i9nHxCDTa5I6o2Yc0LDdcqzMW0.crl (hash: ePmECeKAEOwHoZ4mgyW51+BIefed27pKcm7ziN4JIxE=)
2: As2aEQ-Qc40w6qz5lbdZOvfcUl4.roa (hash: wBu3pTqJ+Uf9xdHuwPeUbe92Udv+KfCa1hQtrwjxXdk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a8:49:b2:23:b7:ef:b2:a2:85:c6:5b:31:b2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2f671f10834dae48ea8d987342c375cab3316d
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=7fa26c6aef889172ed1b9330839c6948aae8008b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:44:96:fe:c5:45:88:25:10:b7:71:bc:ca:
40:d1:d5:b9:a4:3b:2e:a8:1a:c6:d3:96:f3:08:70:
09:c8:92:cd:5f:d8:d2:93:0a:83:73:62:a3:90:04:
ee:35:90:98:53:ca:84:f7:e9:19:3c:80:2e:a8:2a:
28:d5:86:9d:7c:32:2f:12:4b:34:47:47:8f:9e:4e:
1f:94:29:99:76:1c:85:a1:1d:67:6e:36:63:c3:3c:
12:54:c7:ef:5e:7f:8f:45:79:3c:cf:54:bb:47:9a:
ce:16:48:0d:8d:fe:0d:52:2e:cb:cd:85:f4:87:d6:
c2:6b:1b:61:a8:19:5d:82:de:6f:d6:97:56:c3:a7:
7e:aa:8a:36:ac:a4:1e:30:c6:27:78:23:64:03:c9:
da:3a:d4:54:87:44:ea:c2:41:78:ed:ff:ef:a8:15:
1d:ee:23:05:71:ae:f6:2b:89:14:32:b7:1b:6c:54:
6a:67:96:d9:3b:c5:5b:e8:3b:0d:be:d7:45:ac:0b:
62:a7:1b:1c:15:72:56:d2:1a:4f:b4:e3:77:6a:f9:
e3:30:e1:b4:bc:b7:f9:44:16:6b:85:af:cb:8f:09:
62:1b:ee:e4:ff:1f:21:b7:0e:3c:ce:29:ed:d6:20:
88:a3:c1:88:32:68:99:5d:6b:8b:7d:13:f7:26:de:
22:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A2:6C:6A:EF:88:91:72:ED:1B:93:30:83:9C:69:48:AA:E8:00:8B
X509v3 Authority Key Identifier:
keyid:EA:2F:67:1F:10:83:4D:AE:48:EA:8D:98:73:42:C3:75:CA:B3:31:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9f:45:c8:5f:77:2d:82:48:a1:ae:c0:40:e3:1e:17:f7:e0:
8b:da:a7:e7:aa:b7:4a:d2:9a:0f:e9:ef:5a:b1:87:36:bc:fb:
fc:64:4f:49:5d:87:10:64:64:28:68:ee:e9:4b:0a:bf:88:82:
48:a3:e6:7c:cb:ff:e2:70:3b:7e:b1:54:d8:89:18:ae:52:a8:
22:83:e8:fb:34:37:cd:c5:db:62:14:e3:b1:11:bd:e3:19:72:
d6:33:e9:c1:3d:34:cf:20:f1:fe:9d:39:e3:49:ac:03:81:65:
e7:69:43:2c:ec:77:c4:98:b1:d2:53:2e:c9:d5:16:45:e0:ac:
0b:3e:f6:f2:6f:08:bc:df:54:fe:b3:e7:b1:81:77:47:d7:94:
e4:ae:77:ad:8e:04:41:d6:eb:97:cf:63:cb:4f:e9:ec:ef:bb:
ea:87:41:88:fd:44:71:9a:e5:9e:14:90:c1:56:3a:e5:21:9e:
6e:02:db:39:5f:65:3e:6e:c8:0b:90:c7:57:9d:1b:b5:51:56:
92:bc:a9:5a:9c:c7:7b:ba:70:08:c0:21:b3:4b:45:f7:91:3c:
c3:53:cf:90:1c:a7:22:fa:27:a7:92:e4:84:28:7d:8a:c0:0a:
39:d2:9f:6d:f1:08:de:a8:3f:da:39:15:2d:8a:2d:95:cd:dc:
f4:94:49:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cqhJsiO377KihcZbMbIMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMmY2NzFmMTA4MzRkYWU0OGVhOGQ5ODczNDJjMzc1Y2Fi
MzMxNmQwHhcNMjUwMTMxMTMwMDE4WhcNMjUwMjAxMTMwMDE4WjAzMTEwLwYDVQQD
Eyg3ZmEyNmM2YWVmODg5MTcyZWQxYjkzMzA4MzljNjk0OGFhZTgwMDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8lElv7FRYglELdxvMpA0dW5pDsu
qBrG05bzCHAJyJLNX9jSkwqDc2KjkATuNZCYU8qE9+kZPIAuqCoo1YadfDIvEks0
R0ePnk4flCmZdhyFoR1nbjZjwzwSVMfvXn+PRXk8z1S7R5rOFkgNjf4NUi7LzYX0
h9bCaxthqBldgt5v1pdWw6d+qoo2rKQeMMYneCNkA8naOtRUh0TqwkF47f/vqBUd
7iMFca72K4kUMrcbbFRqZ5bZO8Vb6DsNvtdFrAtipxscFXJW0hpPtON3avnjMOG0
vLf5RBZrha/LjwliG+7k/x8htw48zint1iCIo8GIMmiZXWuLfRP3Jt4ipwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+ibGrviJFy7RuTMIOcaUiq6ACLMB8GA1UdIwQY
MBaAFOovZx8Qg02uSOqNmHNCw3XKszFtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmk5bkh4Q0RUYTVJNm8yWWMwTERkY3F6TVcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xMGJhNzMtYWViYy00NzcxLWEzYWMt
MWM0MjBmMDU1NzlmLzEvNmk5bkh4Q0RUYTVJNm8yWWMwTERkY3F6TVcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8xMGJhNzMtYWViYy00NzcxLWEzYWMtMWM0MjBmMDU1Nzlm
LzEvNmk5bkh4Q0RUYTVJNm8yWWMwTERkY3F6TVcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUJ9FyF93
LYJIoa7AQOMeF/fgi9qn56q3StKaD+nvWrGHNrz7/GRPSV2HEGRkKGju6UsKv4iC
SKPmfMv/4nA7frFU2IkYrlKoIoPo+zQ3zcXbYhTjsRG94xly1jPpwT00zyDx/p05
40msA4Fl52lDLOx3xJix0lMuydUWReCsCz728m8IvN9U/rPnsYF3R9eU5K53rY4E
Qdbrl89jy0/p7O+76odBiP1EcZrlnhSQwVY65SGebgLbOV9lPm7IC5DHV50btVFW
krypWpzHe7pwCMAhs0tF95E8w1PPkBynIvonp5LkhCh9isAKOdKfbfEI3qg/2jkV
LYotlc3c9JRJzA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:12 2025 by rpki-client