Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
File: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft (raw, json)
Hash identifier: XblN/yiP2iRf7XBFZuFyasgKsw4MpAgtLTZUskgyw98=
Subject key identifier: 67:C5:17:DE:57:95:00:46:4B:A7:A2:9B:18:37:29:F9:17:D5:54:F6
Authority key identifier: AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
Certificate issuer: /CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Certificate serial: 0194BBCEF407D17E4100267751A7F84AF0B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
Manifest number: 1444
Signing time: Fri 31 Jan 2025 10:01:29 +0000
Manifest this update: Fri 31 Jan 2025 10:01:29 +0000
Manifest next update: Sat 01 Feb 2025 10:01:29 +0000
Files and hashes: 1: nd7EMYxqZskNG-8RUiwICJeXwqY.roa (hash: mY3khCwzfzEen/6QsaBVskA8rJ9h0QmksXwmEPcvkIM=)
2: oz9BBzN_BuPcGQT11NYYdsxnqjY.roa (hash: nvAXPeVrUMWzLRMYMGEkxTC8HsMJu8Sz1cS7HP/e1xI=)
3: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl (hash: kBUYgjKBsfTP36bYUwQIqBe8Ik5W6WErDuJHq4xSRzo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f4:07:d1:7e:41:00:26:77:51:a7:f8:4a:f0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Validity
Not Before: Jan 31 10:01:29 2025 GMT
Not After : Feb 1 10:01:29 2025 GMT
Subject: CN=67c517de579500464ba7a29b183729f917d554f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c6:97:78:a7:14:e9:84:63:a2:55:22:1d:39:
04:da:1d:08:04:d0:69:b6:c1:3b:e0:d4:1d:1c:7e:
49:f7:f1:92:98:69:38:79:40:79:60:2e:e9:89:87:
a7:59:ef:84:0a:ea:d6:40:47:b6:33:8d:e8:52:2f:
42:7f:92:84:eb:33:e1:b5:76:12:15:4e:a0:5a:cc:
e4:ad:c0:39:aa:60:a8:eb:40:06:c8:5e:2d:7d:01:
b4:8c:9b:9c:f4:9c:e5:6b:b7:d1:d6:c9:a6:e9:9e:
7b:a6:d2:ca:26:0d:98:ef:bc:db:88:8d:4d:65:11:
1b:1d:1e:7d:d6:29:d9:59:20:71:c7:0a:9d:03:9d:
b9:e2:13:4c:13:b2:f6:06:88:fc:1e:78:eb:97:7d:
32:d7:4f:d8:a0:95:82:e0:ea:13:e4:8b:0b:1e:77:
65:30:34:d9:12:cf:8a:31:b8:37:86:04:37:d3:b8:
9b:04:60:93:9c:f5:3b:0f:99:ba:3e:12:e4:27:c5:
f0:1e:0c:29:d7:4c:10:d2:62:5b:3a:cf:06:23:26:
4b:da:60:8d:83:d5:65:04:66:d4:17:7d:a2:4e:8e:
c2:b0:d9:ad:73:00:7e:73:6c:89:fc:1f:7c:75:8a:
7f:a2:e0:2f:92:b1:36:d8:44:6a:b8:67:b2:97:ef:
ec:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C5:17:DE:57:95:00:46:4B:A7:A2:9B:18:37:29:F9:17:D5:54:F6
X509v3 Authority Key Identifier:
keyid:AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:5f:b8:a7:0e:58:be:a9:68:8c:45:85:a6:12:65:c9:38:38:
7e:7e:ad:6f:7d:1f:ab:a2:4e:01:62:43:c6:7e:06:75:7c:76:
c2:6c:2a:dc:86:84:75:c8:2e:dc:c7:8a:17:bd:01:4f:4f:1f:
66:26:50:1b:fe:a9:26:20:7b:f9:25:fd:de:6d:30:ae:93:53:
45:14:33:73:df:0a:5a:25:94:54:14:a6:e7:e7:7a:89:b9:37:
f3:09:77:08:d6:98:f2:22:b6:49:af:3f:a2:ce:76:9c:52:bd:
85:e0:37:12:1f:80:97:33:ff:00:8e:b1:e4:0a:a1:9c:4c:5a:
d9:e4:eb:b9:8e:d1:f8:6d:b3:d9:28:43:33:a9:cb:c0:3f:a2:
1f:b5:db:28:78:77:39:4a:63:dd:2e:2e:00:6f:e3:fe:9e:b7:
3b:7d:7e:89:c7:d2:81:71:80:e4:34:8d:d3:05:20:3e:a6:3f:
36:9d:f5:46:1b:9e:4d:cd:1a:d2:4d:1e:ce:88:5b:b3:e0:55:
df:1e:16:46:1b:70:48:46:58:f0:f4:11:03:1a:05:e3:2f:d8:
67:ed:69:46:2d:36:aa:2c:66:4d:6c:cf:86:e5:ac:31:fb:f7:
2f:13:67:9b:3b:ad:11:53:0a:5d:60:16:ed:83:bd:d7:d3:e2:
53:9a:9e:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zvQH0X5BACZ3Uaf4SvCyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMGE1YTFiMzg2MTdjYzE2MWY2MDYxM2Q5OGUxNzliNTM2
MGMwNTQwHhcNMjUwMTMxMTAwMTI5WhcNMjUwMjAxMTAwMTI5WjAzMTEwLwYDVQQD
Eyg2N2M1MTdkZTU3OTUwMDQ2NGJhN2EyOWIxODM3MjlmOTE3ZDU1NGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18aXeKcU6YRjolUiHTkE2h0IBNBp
tsE74NQdHH5J9/GSmGk4eUB5YC7piYenWe+ECurWQEe2M43oUi9Cf5KE6zPhtXYS
FU6gWszkrcA5qmCo60AGyF4tfQG0jJuc9Jzla7fR1smm6Z57ptLKJg2Y77zbiI1N
ZREbHR591inZWSBxxwqdA5254hNME7L2Boj8Hnjrl30y10/YoJWC4OoT5IsLHndl
MDTZEs+KMbg3hgQ307ibBGCTnPU7D5m6PhLkJ8XwHgwp10wQ0mJbOs8GIyZL2mCN
g9VlBGbUF32iTo7CsNmtcwB+c2yJ/B98dYp/ouAvkrE22ERquGeyl+/s2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfFF95XlQBGS6eimxg3KfkX1VT2MB8GA1UdIwQY
MBaAFK4KWhs4YXzBYfYGE9mOF5tTYMBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zMTk5MWEtYmRiOC00YjViLWFlNWQt
YjI5ODEyYzNlNDY1LzEvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zMTk5MWEtYmRiOC00YjViLWFlNWQtYjI5ODEyYzNlNDY1
LzEvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdF+4pw5Y
vqlojEWFphJlyTg4fn6tb30fq6JOAWJDxn4GdXx2wmwq3IaEdcgu3MeKF70BT08f
ZiZQG/6pJiB7+SX93m0wrpNTRRQzc98KWiWUVBSm5+d6ibk38wl3CNaY8iK2Sa8/
os52nFK9heA3Eh+AlzP/AI6x5AqhnExa2eTruY7R+G2z2ShDM6nLwD+iH7XbKHh3
OUpj3S4uAG/j/p63O31+icfSgXGA5DSN0wUgPqY/Np31RhueTc0a0k0ezohbs+BV
3x4WRhtwSEZY8PQRAxoF4y/YZ+1pRi02qixmTWzPhuWsMfv3LxNnmzutEVMKXWAW
7YO919PiU5qepQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:06 2025 by rpki-client