Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
File: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft (raw, json)
Hash identifier: FacHoxkAivFjIcB6l6Uo666R28Twoqob7WvxSGWzQT8=
Subject key identifier: 09:AE:EF:D5:B0:65:07:50:19:7B:B5:B0:54:59:41:54:74:12:76:13
Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Certificate serial: 0194BCE0BB77F31E510D61B17CD117B7488D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
Manifest number: 0BEA
Signing time: Fri 31 Jan 2025 15:00:32 +0000
Manifest this update: Fri 31 Jan 2025 15:00:32 +0000
Manifest next update: Sat 01 Feb 2025 15:00:32 +0000
Files and hashes: 1: 5pnBu3tf1gh9PcNOyoNyWCndFPU.roa (hash: aDoSOawNOT1pzaKswy1pRUEDLgJ0J0KdcXZxORUFm5g=)
2: JlZMu6ELMWjh5VfPR-EMHwwwoJI.roa (hash: rcX300zaEAsELfD8QJxpkD3Bk9B/Y8LQIcz2cA6/7q4=)
3: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl (hash: Jk4uSRGGgrw1GVk3TAvJxtgjAJz4qEYpW8RwtQMg7Tg=)
4: bzccdE_nNPzPnSlliioVj-7hRew.roa (hash: 4glX8OcaCyXvmeuybZ7zpnmmIAAdCSrGViopmHl3Q8g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:bb:77:f3:1e:51:0d:61:b1:7c:d1:17:b7:48:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Validity
Not Before: Jan 31 15:00:32 2025 GMT
Not After : Feb 1 15:00:32 2025 GMT
Subject: CN=09aeefd5b0650750197bb5b05459415474127613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:33:98:a9:8c:a9:05:3e:34:ae:e4:3f:c0:74:
85:7a:30:ff:75:dc:44:ba:7f:76:7a:a7:be:47:65:
29:a8:bc:4a:69:6a:10:84:e0:81:9f:8a:44:c7:11:
31:6d:30:75:f2:c2:a4:78:7f:f0:e7:48:44:ff:00:
8f:72:bc:66:de:2b:f2:50:72:75:f3:59:11:89:19:
76:99:43:ea:69:90:7b:bd:19:70:51:b0:d6:fe:3c:
a1:36:9c:8a:59:1f:c1:73:0e:47:7f:8a:a7:5a:0d:
ca:99:21:44:82:b6:b6:d0:81:3d:31:cf:68:36:b6:
51:b3:27:3f:d8:50:97:dd:c1:00:71:14:95:f9:85:
ba:a5:33:2e:5f:9e:d0:06:58:a8:cc:61:c7:8e:2e:
f2:d1:f2:0a:69:bc:23:c8:66:08:67:1a:f0:47:a0:
42:cc:77:ed:c0:fc:69:fb:9c:28:d8:f7:c9:d7:2f:
54:50:28:46:45:3e:3f:dc:01:f5:af:8d:4d:9e:c8:
9f:09:2a:3c:84:46:b6:38:2e:20:51:ca:45:2e:ac:
38:e8:be:12:03:9c:5d:55:bb:03:76:ee:bd:97:1d:
5a:88:07:70:82:c7:0e:db:2e:93:ae:26:cc:8c:52:
81:89:a4:a0:f7:ac:07:c8:b8:4e:45:fd:76:cd:bf:
19:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AE:EF:D5:B0:65:07:50:19:7B:B5:B0:54:59:41:54:74:12:76:13
X509v3 Authority Key Identifier:
keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:fa:df:db:48:b5:06:d8:1b:10:7a:30:af:f2:2b:e3:0f:cd:
ee:2c:e1:3e:cb:78:cb:9e:11:95:38:c1:18:65:51:58:38:79:
c7:b6:b6:a4:f5:06:de:91:ed:a6:f4:6d:91:14:a1:43:f0:a0:
34:d0:99:2e:c6:f1:b1:70:1e:99:77:53:c4:4a:a3:84:7f:a6:
3f:ab:8e:d7:99:b9:dc:ef:fc:3b:8f:7f:f5:1f:9c:53:d9:13:
22:62:ac:ac:e0:22:57:d8:4a:c9:ab:94:f4:31:3a:b8:e2:51:
58:75:e4:dd:d7:ef:75:f8:8c:d7:09:47:f0:cc:6f:21:ab:9d:
70:ee:fa:d3:48:a1:5d:04:68:e1:15:53:22:bf:7c:2d:10:b4:
ab:e7:38:de:6d:38:b9:85:c6:2d:45:6a:2d:4e:83:8e:ef:67:
34:9c:af:2c:72:6b:34:4d:6f:44:df:3d:aa:ea:fc:26:f5:b6:
93:3a:4f:99:96:1b:ac:21:d2:76:01:1d:25:97:e5:98:de:b4:
1b:f5:93:6e:42:46:80:32:b1:ed:91:cb:9e:4a:91:54:4e:47:
64:09:b7:ea:2d:7d:c0:eb:c6:67:11:f1:e2:68:eb:ae:96:01:
d7:52:37:8a:d1:1f:22:d1:89:34:53:18:1b:fc:95:3d:65:52:
ab:d0:9a:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84Lt38x5RDWGxfNEXt0iNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhY2UyMTA5MGVlNGQ3ODY3NzQxMzQyM2RjYjJmZTAxYTZl
MWM2MjIwHhcNMjUwMTMxMTUwMDMyWhcNMjUwMjAxMTUwMDMyWjAzMTEwLwYDVQQD
EygwOWFlZWZkNWIwNjUwNzUwMTk3YmI1YjA1NDU5NDE1NDc0MTI3NjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzOYqYypBT40ruQ/wHSFejD/ddxE
un92eqe+R2UpqLxKaWoQhOCBn4pExxExbTB18sKkeH/w50hE/wCPcrxm3ivyUHJ1
81kRiRl2mUPqaZB7vRlwUbDW/jyhNpyKWR/Bcw5Hf4qnWg3KmSFEgra20IE9Mc9o
NrZRsyc/2FCX3cEAcRSV+YW6pTMuX57QBliozGHHji7y0fIKabwjyGYIZxrwR6BC
zHftwPxp+5wo2PfJ1y9UUChGRT4/3AH1r41NnsifCSo8hEa2OC4gUcpFLqw46L4S
A5xdVbsDdu69lx1aiAdwgscO2y6TribMjFKBiaSg96wHyLhORf12zb8ZcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmu79WwZQdQGXu1sFRZQVR0EnYTMB8GA1UdIwQY
MBaAFCrOIQkO5NeGd0E0I9yy/gGm4cYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjkt
NTkwYTk4MTNkZGRmLzEvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjktNTkwYTk4MTNkZGRm
LzEvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqvrf20i1
BtgbEHowr/Ir4w/N7izhPst4y54RlTjBGGVRWDh5x7a2pPUG3pHtpvRtkRShQ/Cg
NNCZLsbxsXAemXdTxEqjhH+mP6uO15m53O/8O49/9R+cU9kTImKsrOAiV9hKyauU
9DE6uOJRWHXk3dfvdfiM1wlH8MxvIaudcO7600ihXQRo4RVTIr98LRC0q+c43m04
uYXGLUVqLU6Dju9nNJyvLHJrNE1vRN89qur8JvW2kzpPmZYbrCHSdgEdJZflmN60
G/WTbkJGgDKx7ZHLnkqRVE5HZAm36i19wOvGZxHx4mjrrpYB11I3itEfItGJNFMY
G/yVPWVSq9CaiQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:57 2025 by rpki-client