Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
File: o3U2my1LsuLe3maGRTE-NE5vHMA.mft (raw, json)
Hash identifier: b4hEdSvhYba7QHpSp+cS92jC4Q6TlU2vxj+jNv6trsw=
Subject key identifier: 1D:67:A8:42:FF:E4:38:0F:C9:2F:7A:33:0D:4B:2C:74:19:C6:10:53
Authority key identifier: A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
Certificate issuer: /CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Certificate serial: 0194BCE09B457C04642CD495D45A33894813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: DyAD9klcag15NhnplKEMXi8dKqg.roa (hash: Zvr5j/JLyl2kQb4eL63NQCTsndBLbuYPjEiWULmfej8=)
2: o3U2my1LsuLe3maGRTE-NE5vHMA.crl (hash: HKCTqEFVxJAtd6IIsAsUbmYFRvlmpvW/hcM4le7QsJI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9b:45:7c:04:64:2c:d4:95:d4:5a:33:89:48:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=1d67a842ffe4380fc92f7a330d4b2c7419c61053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:17:73:ed:f1:d2:c0:f5:cb:4a:cb:cc:e9:37:
b0:c1:d0:e8:73:05:45:78:41:68:c6:86:21:7b:9c:
f7:1f:5e:e1:40:03:4b:44:ab:6d:19:b5:6c:3a:8a:
2e:1b:9e:66:a9:e9:cd:ec:86:ae:44:bd:83:d5:da:
26:a7:73:54:bd:c8:8f:3a:4e:37:46:1e:fd:79:1d:
e8:a0:d9:fa:ef:1c:a0:bc:67:41:3d:18:94:c4:9e:
33:1b:42:ab:31:83:d9:0a:c0:74:dd:06:24:ec:80:
0a:f8:70:69:cf:8e:3e:5b:f5:d5:8f:14:a4:32:0c:
a7:83:e5:e2:5d:9c:2b:88:f9:62:33:1e:e5:99:7d:
a1:d4:7d:2c:1f:b1:ad:7d:11:50:62:1c:50:b0:ab:
4f:00:1e:b3:7f:72:7c:1c:2c:6b:03:14:12:42:05:
ab:70:42:24:25:2e:80:63:49:1c:82:18:4f:a6:bc:
45:f1:d1:60:98:75:a9:7b:4f:6f:e5:3b:55:1a:4c:
32:13:1d:fd:df:5b:22:a6:79:a8:10:10:15:19:34:
a8:18:89:a8:ce:c1:f9:ef:27:74:54:95:7e:a1:89:
60:69:f2:43:48:e2:19:08:0c:8d:d8:04:03:0a:29:
74:e8:54:f2:b7:0c:59:6c:d4:3b:63:4d:8e:20:f4:
bd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:67:A8:42:FF:E4:38:0F:C9:2F:7A:33:0D:4B:2C:74:19:C6:10:53
X509v3 Authority Key Identifier:
keyid:A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a1:c3:66:79:c8:e1:ad:d9:db:fc:17:6d:22:e3:5b:ca:0a:
fc:e0:0d:14:57:c0:ae:b6:8c:0e:0f:b2:c9:13:23:29:b3:fc:
ca:a3:9b:29:9f:63:4c:c4:60:a0:cd:e9:8f:9d:91:21:a9:6d:
b6:ae:7d:f9:ee:11:ee:13:01:6e:31:a0:55:bb:07:f1:c1:40:
0c:63:f0:69:b8:b5:d7:9f:03:e3:55:05:59:19:a4:17:f9:b2:
a4:0e:32:3f:7e:dc:a1:75:61:fc:1e:c1:3a:a3:b5:10:9a:b4:
ac:50:01:8e:c4:36:76:4b:3e:a6:3e:17:6f:3d:5b:39:24:86:
f2:05:73:34:dc:bf:be:fb:91:ad:76:76:55:a9:83:00:9f:05:
9b:7b:b2:57:20:63:a0:bb:52:08:51:73:84:5f:49:9f:2b:93:
57:3b:6f:de:87:3b:56:b0:92:35:7b:93:9f:70:fc:72:30:80:
da:52:25:44:d1:00:f5:be:7f:a0:29:0d:f9:9e:8c:03:47:06:
59:a1:d4:d2:36:e3:c0:bf:89:35:b3:22:d4:bb:5d:02:85:1d:
0a:f6:3c:3c:13:d9:3a:ab:ef:79:98:01:17:84:97:39:62:36:
55:5e:a0:e0:1c:c7:46:b9:29:7d:d9:11:6f:ae:02:4b:0f:9a:
12:f8:ec:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84JtFfARkLNSV1FoziUgTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNzUzNjliMmQ0YmIyZTJkZWRlNjY4NjQ1MzEzZTM0NGU2
ZjFjYzAwHhcNMjUwMTMxMTUwMDIzWhcNMjUwMjAxMTUwMDIzWjAzMTEwLwYDVQQD
EygxZDY3YTg0MmZmZTQzODBmYzkyZjdhMzMwZDRiMmM3NDE5YzYxMDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxdz7fHSwPXLSsvM6TewwdDocwVF
eEFoxoYhe5z3H17hQANLRKttGbVsOoouG55mqenN7IauRL2D1domp3NUvciPOk43
Rh79eR3ooNn67xygvGdBPRiUxJ4zG0KrMYPZCsB03QYk7IAK+HBpz44+W/XVjxSk
Mgyng+XiXZwriPliMx7lmX2h1H0sH7GtfRFQYhxQsKtPAB6zf3J8HCxrAxQSQgWr
cEIkJS6AY0kcghhPprxF8dFgmHWpe09v5TtVGkwyEx3931sipnmoEBAVGTSoGImo
zsH57yd0VJV+oYlgafJDSOIZCAyN2AQDCil06FTytwxZbNQ7Y02OIPS9rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1nqEL/5DgPyS96Mw1LLHQZxhBTMB8GA1UdIwQY
MBaAFKN1NpstS7Li3t5mhkUxPjRObxzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzNVMm15MUxzdUxlM21hR1JURS1ORTV2SE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lYzY5MDUtYjBmNy00MjRmLThhODQt
MjhiZWM3Yjk5OTI5LzEvbzNVMm15MUxzdUxlM21hR1JURS1ORTV2SE1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lYzY5MDUtYjBmNy00MjRmLThhODQtMjhiZWM3Yjk5OTI5
LzEvbzNVMm15MUxzdUxlM21hR1JURS1ORTV2SE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6HDZnnI
4a3Z2/wXbSLjW8oK/OANFFfArraMDg+yyRMjKbP8yqObKZ9jTMRgoM3pj52RIalt
tq59+e4R7hMBbjGgVbsH8cFADGPwabi1158D41UFWRmkF/mypA4yP37coXVh/B7B
OqO1EJq0rFABjsQ2dks+pj4Xbz1bOSSG8gVzNNy/vvuRrXZ2VamDAJ8Fm3uyVyBj
oLtSCFFzhF9JnyuTVztv3oc7VrCSNXuTn3D8cjCA2lIlRNEA9b5/oCkN+Z6MA0cG
WaHU0jbjwL+JNbMi1LtdAoUdCvY8PBPZOqvveZgBF4SXOWI2VV6g4BzHRrkpfdkR
b64CSw+aEvjsrg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:16:24 2025 by rpki-client