Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
File: MAVrA3XYlLk8sOJtm01koIxYNx4.mft (raw, json)
Hash identifier: EIt5upV5667U5OsVkc+AdG/x6dLPVJY0/4fb73/cWvg=
Subject key identifier: 5F:BB:F5:61:F7:15:CE:AB:15:70:36:1B:AB:10:F8:75:95:D6:86:96
Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Certificate serial: 0194BCE060BD40CF23DA6829F42D7CAA128C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
Manifest number: 09B4
Signing time: Fri 31 Jan 2025 15:00:08 +0000
Manifest this update: Fri 31 Jan 2025 15:00:08 +0000
Manifest next update: Sat 01 Feb 2025 15:00:08 +0000
Files and hashes: 1: 3O6Y3eQ5OpGsAft35AyeyfVjQ6o.roa (hash: u+uYD6/L10KdiWIH/nhFz7IkGG28050DGlwgSDFBhnk=)
2: MAVrA3XYlLk8sOJtm01koIxYNx4.crl (hash: +ykyiCCtyLJPQmEXMmGhUUMEMbCkxMnnOr/rBCSRonE=)
3: vQwx6cGSIAT7m9K8R35GzUVPtvc.roa (hash: zbCFg7Xh1dqpHRv2DApSfzHkCmAjvg9jJtigoE/GHhk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:60:bd:40:cf:23:da:68:29:f4:2d:7c:aa:12:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Validity
Not Before: Jan 31 15:00:08 2025 GMT
Not After : Feb 1 15:00:08 2025 GMT
Subject: CN=5fbbf561f715ceab1570361bab10f87595d68696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6f:31:4a:ea:90:b5:f5:7f:b4:30:e2:e9:c4:
5e:da:db:5b:dc:c0:00:ed:dc:d4:14:50:3e:f9:fe:
dd:f9:2d:7a:1d:bf:01:10:f3:a2:b3:92:12:4e:57:
74:b2:ae:80:c1:e9:9a:54:87:c1:7d:27:aa:37:d5:
0b:6a:b9:46:81:66:1c:71:10:0e:aa:39:b5:f8:f7:
ed:e1:89:69:12:b9:16:84:91:c5:6d:77:8c:42:49:
58:ce:3c:68:d8:fc:74:df:7c:63:3f:d2:e8:2c:fb:
da:e0:9e:b4:63:3d:5c:ac:95:4f:fa:27:5f:ba:d4:
96:5e:a3:3c:02:fd:2f:96:b3:15:fc:0a:f5:ed:b8:
a6:a1:7c:ef:1a:b1:c8:ed:11:e5:ba:7a:11:e7:9a:
24:6b:b6:9c:28:af:97:59:0c:cd:60:59:01:df:4b:
d9:ed:0b:af:29:2b:09:4e:c8:28:38:1f:8c:55:01:
e5:10:db:f0:d6:8c:f7:95:91:db:83:b6:32:0a:1d:
5a:88:5e:1c:65:3b:46:36:fb:74:76:81:f5:5a:d1:
53:e2:1a:75:6f:f7:65:f7:37:6e:73:eb:6b:da:fd:
f8:c1:bf:6f:92:9e:17:76:0c:f2:de:49:50:01:22:
62:04:7e:dd:79:2c:e7:31:8a:0a:82:74:7b:51:f7:
39:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BB:F5:61:F7:15:CE:AB:15:70:36:1B:AB:10:F8:75:95:D6:86:96
X509v3 Authority Key Identifier:
keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:69:fe:44:a8:7f:e3:08:c4:f8:e7:f5:fa:8a:06:5d:e9:14:
69:7d:f4:f9:8d:97:4e:d3:c8:75:8b:77:e3:e1:6f:4a:5f:97:
aa:f2:1d:33:99:36:8a:5a:ce:95:a7:11:57:7b:3f:23:cb:78:
a9:3d:4b:5f:c9:5c:8b:37:d0:84:a1:59:d9:21:59:d6:be:f4:
15:28:ee:d8:e5:b4:98:8d:30:96:1a:f7:55:1d:60:4b:0d:a2:
b6:35:d1:4b:69:3a:0d:04:f2:f2:8a:3f:80:c4:28:42:e8:91:
e5:8c:a5:43:e5:9c:a2:fd:b1:62:73:35:bd:ff:b5:6e:c2:7d:
9d:33:31:65:a1:b8:3c:32:6e:c7:25:37:95:e1:b2:53:50:6a:
1a:51:52:f5:13:14:3b:c8:73:47:8e:43:a0:d5:1f:67:30:79:
73:18:00:bc:a0:0b:f2:6c:1d:47:f5:9f:5b:23:b9:fc:fa:8b:
ad:e2:e7:41:d2:9c:ba:26:a1:ca:95:39:f0:d1:54:5d:70:b7:
b4:2f:3a:f7:1b:7c:67:22:96:b1:73:2e:34:c3:37:45:e0:9d:
99:a7:3a:d8:92:a4:fb:2a:b7:01:80:24:eb:a5:6b:e6:6f:90:
91:1a:c0:21:86:79:e5:69:45:6e:a3:5b:29:28:3b:4e:90:c1:
ba:3e:99:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84GC9QM8j2mgp9C18qhKMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMDU2YjAzNzVkODk0YjkzY2IwZTI2ZDliNGQ2NGEwOGM1
ODM3MWUwHhcNMjUwMTMxMTUwMDA4WhcNMjUwMjAxMTUwMDA4WjAzMTEwLwYDVQQD
Eyg1ZmJiZjU2MWY3MTVjZWFiMTU3MDM2MWJhYjEwZjg3NTk1ZDY4Njk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW8xSuqQtfV/tDDi6cRe2ttb3MAA
7dzUFFA++f7d+S16Hb8BEPOis5ISTld0sq6AwemaVIfBfSeqN9ULarlGgWYccRAO
qjm1+Pft4YlpErkWhJHFbXeMQklYzjxo2Px033xjP9LoLPva4J60Yz1crJVP+idf
utSWXqM8Av0vlrMV/Ar17bimoXzvGrHI7RHlunoR55oka7acKK+XWQzNYFkB30vZ
7QuvKSsJTsgoOB+MVQHlENvw1oz3lZHbg7YyCh1aiF4cZTtGNvt0doH1WtFT4hp1
b/dl9zduc+tr2v34wb9vkp4Xdgzy3klQASJiBH7deSznMYoKgnR7Ufc5MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+79WH3Fc6rFXA2G6sQ+HWV1oaWMB8GA1UdIwQY
MBaAFDAFawN12JS5PLDibZtNZKCMWDceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUFWckEzWFlsTGs4c09KdG0wMWtvSXhZTng0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yYTc0NzItY2JiOC00Yzk5LWJlMjEt
MTFiNGFmYmVkZTE5LzEvTUFWckEzWFlsTGs4c09KdG0wMWtvSXhZTng0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yYTc0NzItY2JiOC00Yzk5LWJlMjEtMTFiNGFmYmVkZTE5
LzEvTUFWckEzWFlsTGs4c09KdG0wMWtvSXhZTng0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcmn+RKh/
4wjE+Of1+ooGXekUaX30+Y2XTtPIdYt34+FvSl+XqvIdM5k2ilrOlacRV3s/I8t4
qT1LX8lcizfQhKFZ2SFZ1r70FSju2OW0mI0wlhr3VR1gSw2itjXRS2k6DQTy8oo/
gMQoQuiR5YylQ+Wcov2xYnM1vf+1bsJ9nTMxZaG4PDJuxyU3leGyU1BqGlFS9RMU
O8hzR45DoNUfZzB5cxgAvKAL8mwdR/WfWyO5/PqLreLnQdKcuiahypU58NFUXXC3
tC869xt8ZyKWsXMuNMM3ReCdmac62JKk+yq3AYAk66Vr5m+QkRrAIYZ55WlFbqNb
KSg7TpDBuj6ZeQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:15 2025 by rpki-client