Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
File: al1BD0JdNedNRW9_h7ro7ZKzyCk.mft (raw, json)
Hash identifier: YZRbZYucMOJ31CYchMzPkXGokRW+AmuAL2mZCu3HI6g=
Subject key identifier: 70:84:D5:74:9B:C4:94:8A:12:46:95:94:DE:45:FC:53:E3:5D:B9:51
Authority key identifier: 6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29
Certificate issuer: /CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829
Certificate serial: 0194BC3C02D337825024000D661AF1EF9BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 12:00:36 +0000
Manifest this update: Fri 31 Jan 2025 12:00:36 +0000
Manifest next update: Sat 01 Feb 2025 12:00:36 +0000
Files and hashes: 1: YRcPB026UNAbaic7bC0XnagQJ_8.roa (hash: F5LbuOIZKUKKLsIhj9ecbNiDMJqNxgANq1yR2w3iRxE=)
2: al1BD0JdNedNRW9_h7ro7ZKzyCk.crl (hash: +muyUcWuzOaIfeeT2mC2bCovQBpTCrIrSHsb+LWGdLA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:02:d3:37:82:50:24:00:0d:66:1a:f1:ef:9b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829
Validity
Not Before: Jan 31 12:00:36 2025 GMT
Not After : Feb 1 12:00:36 2025 GMT
Subject: CN=7084d5749bc4948a12469594de45fc53e35db951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2a:28:6d:7f:c2:7a:9a:b9:f9:14:2d:21:dc:
28:bd:0b:98:12:73:ff:97:fe:dd:b7:1f:3f:dc:2b:
11:cb:a6:9a:f6:b1:82:45:37:c0:fb:33:57:c0:51:
61:94:07:be:4e:cb:9a:6e:1c:c2:39:a6:4b:9d:37:
aa:b6:24:f4:71:d7:7b:eb:73:79:02:cd:15:85:93:
e8:6c:b2:67:64:70:46:87:14:88:5f:7d:8c:62:88:
cd:8b:db:13:7b:db:c2:c4:ba:48:c5:aa:22:7d:a0:
f2:16:7a:13:7c:6c:a6:b0:2f:bb:ed:68:7e:97:de:
e7:7b:fc:a1:e0:11:bc:8f:0a:a6:39:c9:7e:cd:94:
e3:6c:8a:d7:fb:2f:65:34:d6:8b:78:86:84:f0:1e:
12:e7:7b:79:64:f1:bc:b7:cc:a3:c8:f6:a2:b5:95:
a1:71:c5:70:3d:62:d0:c3:72:a0:cb:9a:01:69:ec:
c9:b0:8e:b4:73:57:5b:6b:ce:b6:69:32:14:2e:ef:
b3:2d:ce:b6:58:f1:b7:82:14:3a:2d:a1:33:b4:51:
e6:60:f7:c8:71:eb:15:35:39:51:aa:da:be:d6:2c:
c9:da:01:e5:15:67:e4:c0:bc:29:87:d1:37:00:fe:
a1:aa:6f:f8:0f:60:02:28:dd:52:ee:cf:53:97:0f:
36:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:84:D5:74:9B:C4:94:8A:12:46:95:94:DE:45:FC:53:E3:5D:B9:51
X509v3 Authority Key Identifier:
keyid:6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:51:5a:7e:b9:4a:68:73:1f:fc:f2:1d:cc:e4:c7:ac:c4:55:
82:63:b3:54:11:ac:0f:86:56:46:df:e4:76:42:ab:58:3e:34:
2b:fe:6a:dc:cb:e4:75:77:a2:c7:4f:4d:ed:96:44:f5:4f:c2:
ab:46:30:d8:a5:b2:ab:61:67:71:f7:69:bb:77:b4:7c:5e:12:
d6:69:cb:1f:0d:54:79:1c:8c:8a:45:82:10:cb:97:1c:28:d0:
f1:72:b9:f0:01:fb:44:f9:4a:46:9b:5f:d6:7a:db:37:8c:77:
6d:09:3d:4b:f0:e2:4e:d1:70:86:fe:c4:98:f0:d9:74:84:59:
b0:9e:6d:f2:46:ea:e3:6a:c7:62:45:95:bc:a0:e3:d3:74:68:
18:08:a2:b7:17:a5:38:2f:d0:49:fb:f2:51:36:f7:40:be:38:
5b:71:5a:14:c5:2b:6e:f8:a0:15:7b:53:01:87:50:f4:c5:6f:
8b:53:0c:89:d4:28:7f:1a:ab:32:ad:53:a2:bc:40:95:39:bf:
02:d8:a1:e1:08:e1:55:9a:64:b1:7d:b9:07:3c:9d:d4:43:61:
39:63:fe:ad:ea:47:9f:bf:32:ed:e2:86:13:77:a1:f9:bb:15:
f2:ab:7a:05:76:f8:6c:28:64:63:1a:4b:62:2b:74:1f:8e:57:
78:23:6c:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PALTN4JQJAANZhrx75vwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNWQ0MTBmNDI1ZDM1ZTc0ZDQ1NmY3Zjg3YmFlOGVkOTJi
M2M4MjkwHhcNMjUwMTMxMTIwMDM2WhcNMjUwMjAxMTIwMDM2WjAzMTEwLwYDVQQD
Eyg3MDg0ZDU3NDliYzQ5NDhhMTI0Njk1OTRkZTQ1ZmM1M2UzNWRiOTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSoobX/Cepq5+RQtIdwovQuYEnP/
l/7dtx8/3CsRy6aa9rGCRTfA+zNXwFFhlAe+TsuabhzCOaZLnTeqtiT0cdd763N5
As0VhZPobLJnZHBGhxSIX32MYojNi9sTe9vCxLpIxaoifaDyFnoTfGymsC+77Wh+
l97ne/yh4BG8jwqmOcl+zZTjbIrX+y9lNNaLeIaE8B4S53t5ZPG8t8yjyPaitZWh
ccVwPWLQw3Kgy5oBaezJsI60c1dba862aTIULu+zLc62WPG3ghQ6LaEztFHmYPfI
cesVNTlRqtq+1izJ2gHlFWfkwLwph9E3AP6hqm/4D2ACKN1S7s9Tlw82twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCE1XSbxJSKEkaVlN5F/FPjXblRMB8GA1UdIwQY
MBaAFGpdQQ9CXTXnTUVvf4e66O2Ss8gpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWwxQkQwSmROZWROUlc5X2g3cm83Wkt6eUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kNWYxNGYtMjcwNS00MmVjLTkwMGYt
NjkzNGNhZmI2YmNkLzEvYWwxQkQwSmROZWROUlc5X2g3cm83Wkt6eUNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9kNWYxNGYtMjcwNS00MmVjLTkwMGYtNjkzNGNhZmI2YmNk
LzEvYWwxQkQwSmROZWROUlc5X2g3cm83Wkt6eUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1VFafrlK
aHMf/PIdzOTHrMRVgmOzVBGsD4ZWRt/kdkKrWD40K/5q3MvkdXeix09N7ZZE9U/C
q0Yw2KWyq2Fncfdpu3e0fF4S1mnLHw1UeRyMikWCEMuXHCjQ8XK58AH7RPlKRptf
1nrbN4x3bQk9S/DiTtFwhv7EmPDZdIRZsJ5t8kbq42rHYkWVvKDj03RoGAiitxel
OC/QSfvyUTb3QL44W3FaFMUrbvigFXtTAYdQ9MVvi1MMidQofxqrMq1TorxAlTm/
Atih4QjhVZpksX25Bzyd1ENhOWP+repHn78y7eKGE3eh+bsV8qt6BXb4bChkYxpL
Yit0H45XeCNstg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:16 2025 by rpki-client