Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
File: 6XWS8etB1siTzQ3XK2P8NO5VNTM.mft (raw, json)
Hash identifier: n28RmvLBOLrHPHUkDEQbJgV9Npbx273l40rE5CqSlxc=
Subject key identifier: AB:66:99:BF:71:B4:07:0F:A7:44:F6:2F:FD:34:82:C6:71:36:39:07
Authority key identifier: E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
Certificate issuer: /CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Certificate serial: 0194BD85AD20EA3357D2DC061CC75A6C3209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: 6XWS8etB1siTzQ3XK2P8NO5VNTM.crl (hash: k4Ub4Mt5kKae+fmlmphOFYVd2nz/lLkcNKWC12RZBio=)
2: r6T3XlH0NydhUiVntY08YEEt0HY.roa (hash: j+28xx5Rq8KrtlCf807KmCTOzzUVWhkp01bXOIcVWSo=)
3: wPTagVR3pNusa3J3LbaZykmYrdM.roa (hash: k0uAisbBEgTj7/x2tEyMYhIzPLODPGtJvKxV+pOGuVs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ad:20:ea:33:57:d2:dc:06:1c:c7:5a:6c:32:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=ab6699bf71b4070fa744f62ffd3482c671363907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:16:a0:c9:58:8a:03:17:10:b7:46:3e:f8:ef:
84:27:30:82:58:aa:e1:90:2d:05:16:a3:e1:45:5f:
f9:b6:62:49:b7:e5:72:68:f3:b5:1f:f9:50:36:7e:
15:ea:58:cc:b7:43:b9:0b:d1:39:b0:fa:d0:8a:1e:
79:7a:83:b0:f5:77:9b:54:20:b5:79:39:92:fd:32:
4a:c9:4b:f1:8f:14:14:76:98:94:42:0c:a6:cf:dc:
f0:b1:39:31:8d:79:72:76:90:17:ce:db:93:9f:68:
7a:7e:d8:1d:08:bc:c9:5f:e2:5d:9c:29:fb:71:01:
7e:df:54:b3:f2:e5:90:a7:f9:bf:df:90:08:de:4f:
c8:a3:fe:27:d2:f5:14:52:00:0d:44:f0:4b:6e:8a:
1e:da:b8:35:76:36:25:76:71:2f:a8:06:b9:58:47:
fb:b1:95:9b:d3:ef:cd:89:34:b7:95:c1:6c:60:f4:
1a:1f:b5:32:2e:8d:bd:cc:10:0f:48:ff:cf:a9:6d:
0a:f1:b5:dc:a4:e2:85:6b:ad:62:b8:cb:38:d2:ec:
c7:fb:7f:f4:5f:66:20:92:bc:13:bc:6b:58:b5:94:
ed:dc:19:77:d7:17:3e:87:23:50:c4:c1:35:a4:d4:
68:1e:40:83:cf:ea:19:bf:b0:84:ab:9c:2c:bc:68:
f8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:66:99:BF:71:B4:07:0F:A7:44:F6:2F:FD:34:82:C6:71:36:39:07
X509v3 Authority Key Identifier:
keyid:E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:de:d7:c4:e0:15:78:a2:c9:e7:24:c5:ec:c4:78:d2:a1:ee:
69:a2:be:b4:a2:5f:bb:0a:11:86:97:13:96:e6:2b:2f:de:99:
9f:ad:9e:ae:72:2d:be:5a:26:a6:de:7f:4b:4f:4e:3c:01:30:
e5:48:36:7f:9c:10:3c:00:d3:1c:da:4b:0a:59:03:6e:45:e2:
e9:85:36:76:6b:27:be:a8:b8:5f:74:55:bf:58:f1:4b:13:50:
1b:47:10:57:5b:1c:ea:d9:09:d9:3d:82:83:f0:3e:f5:52:fd:
84:f8:15:c5:5a:81:24:77:8a:50:73:18:d3:9c:0e:24:6d:07:
30:9a:e9:b4:3c:b4:3f:b4:d3:a3:9d:8f:fc:5c:a1:4f:d6:d4:
c9:1e:37:78:00:dd:26:6a:aa:af:ba:96:60:84:ec:04:38:28:
ea:34:f3:52:99:23:9f:1c:7f:2f:f4:1a:e4:5c:d9:c9:e7:08:
1d:b2:06:0d:81:87:a6:46:cd:19:02:b9:4e:21:7d:f7:1d:87:
24:92:2f:e0:fb:92:0d:d6:11:df:3c:d6:f2:17:37:3f:c7:f3:
b9:72:ea:1a:2b:2e:dd:74:cc:03:9f:09:cd:3f:99:68:b4:5c:
ee:62:53:36:6a:55:02:08:a4:82:53:45:43:91:1a:f1:5d:f2:
a3:25:45:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9ha0g6jNX0twGHMdabDIJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzU5MmYxZWI0MWQ2Yzg5M2NkMGRkNzJiNjNmYzM0ZWU1
NTM1MzMwHhcNMjUwMTMxMTgwMDQxWhcNMjUwMjAxMTgwMDQxWjAzMTEwLwYDVQQD
EyhhYjY2OTliZjcxYjQwNzBmYTc0NGY2MmZmZDM0ODJjNjcxMzYzOTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxagyViKAxcQt0Y++O+EJzCCWKrh
kC0FFqPhRV/5tmJJt+VyaPO1H/lQNn4V6ljMt0O5C9E5sPrQih55eoOw9XebVCC1
eTmS/TJKyUvxjxQUdpiUQgymz9zwsTkxjXlydpAXztuTn2h6ftgdCLzJX+JdnCn7
cQF+31Sz8uWQp/m/35AI3k/Io/4n0vUUUgANRPBLbooe2rg1djYldnEvqAa5WEf7
sZWb0+/NiTS3lcFsYPQaH7UyLo29zBAPSP/PqW0K8bXcpOKFa61iuMs40uzH+3/0
X2YgkrwTvGtYtZTt3Bl31xc+hyNQxME1pNRoHkCDz+oZv7CEq5wsvGj4VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtmmb9xtAcPp0T2L/00gsZxNjkHMB8GA1UdIwQY
MBaAFOl1kvHrQdbIk80N1ytj/DTuVTUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhXUzhldEIxc2lUelEzWEsyUDhOTzVWTlRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80MjIxN2UtZWFkMC00NmJlLThhZDAt
MDVmOTBhZDI0ZjNlLzEvNlhXUzhldEIxc2lUelEzWEsyUDhOTzVWTlRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80MjIxN2UtZWFkMC00NmJlLThhZDAtMDVmOTBhZDI0ZjNl
LzEvNlhXUzhldEIxc2lUelEzWEsyUDhOTzVWTlRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATt7XxOAV
eKLJ5yTF7MR40qHuaaK+tKJfuwoRhpcTluYrL96Zn62ernItvlompt5/S09OPAEw
5Ug2f5wQPADTHNpLClkDbkXi6YU2dmsnvqi4X3RVv1jxSxNQG0cQV1sc6tkJ2T2C
g/A+9VL9hPgVxVqBJHeKUHMY05wOJG0HMJrptDy0P7TTo52P/FyhT9bUyR43eADd
Jmqqr7qWYITsBDgo6jTzUpkjnxx/L/Qa5FzZyecIHbIGDYGHpkbNGQK5TiF99x2H
JJIv4PuSDdYR3zzW8hc3P8fzuXLqGisu3XTMA58JzT+ZaLRc7mJTNmpVAgikglNF
Q5Ea8V3yoyVFPA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:47 2025 by rpki-client