Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
File: _ORf1v09kyaEwMW8J_T6YVoQkOA.mft (raw, json)
Hash identifier: vkj7fNgfRvsQLv4b5w9PvBIzBj9c/YBYwTdZFp3eAjY=
Subject key identifier: 12:6A:06:11:02:94:4D:95:57:B0:5F:17:E3:9F:50:6E:75:CE:19:B2
Authority key identifier: FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
Certificate issuer: /CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Certificate serial: 0194BCA99CE08D422772989DB206EC80B9A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
Manifest number: 0AAE
Signing time: Fri 31 Jan 2025 14:00:19 +0000
Manifest this update: Fri 31 Jan 2025 14:00:19 +0000
Manifest next update: Sat 01 Feb 2025 14:00:19 +0000
Files and hashes: 1: 0q3J-c3dMCcb0fEi4kT4_OFKaDo.roa (hash: GFF2i9DOD9iNc83o9PQkrJQokdzx6TTVi4lrSIyhIgE=)
2: _ORf1v09kyaEwMW8J_T6YVoQkOA.crl (hash: h9StItUOftTeZfoNLDA4eeIURDsIBfUlX+pe5cmYcaE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9c:e0:8d:42:27:72:98:9d:b2:06:ec:80:b9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Validity
Not Before: Jan 31 14:00:19 2025 GMT
Not After : Feb 1 14:00:19 2025 GMT
Subject: CN=126a061102944d9557b05f17e39f506e75ce19b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:87:86:6d:b5:ae:f5:5d:2d:c8:3a:2c:81:51:
99:80:d3:08:0a:22:28:24:bf:3f:2a:7d:03:f4:54:
3d:23:b8:02:72:83:92:9e:b2:14:0b:c4:ee:db:53:
a3:1a:01:87:07:3c:ae:d4:4d:85:04:ff:b3:8d:46:
40:7f:2e:c9:d0:77:34:d4:f8:c0:85:38:f5:a6:fc:
4b:97:3e:e1:30:c3:9c:71:bc:45:4f:98:4d:62:59:
46:a5:8a:49:d1:c0:54:88:b0:8d:4f:d3:99:d0:03:
89:98:7c:fb:1d:e9:66:a0:70:53:98:56:53:cf:45:
48:3f:a3:80:ae:00:e0:dd:34:d2:a9:5b:06:24:9a:
b7:14:e0:71:92:8e:47:1b:63:71:e2:21:4f:42:46:
4d:03:00:f6:b1:0b:e7:1e:84:ad:1e:a8:e7:e8:ae:
b0:eb:a3:c2:0d:9a:78:bf:31:d5:0f:36:92:e2:d4:
7c:2e:20:d2:f0:ac:24:e2:12:69:7f:d6:e9:fb:ee:
c7:66:f2:41:85:c3:eb:2f:aa:e3:0d:8b:19:c9:65:
7a:01:dc:94:5f:2c:16:06:7f:7e:f1:32:79:4f:53:
78:04:dd:83:b5:2e:56:1c:f7:46:18:08:19:bd:1f:
0d:a4:52:90:5e:85:44:a5:58:78:75:03:0a:c1:a2:
ad:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6A:06:11:02:94:4D:95:57:B0:5F:17:E3:9F:50:6E:75:CE:19:B2
X509v3 Authority Key Identifier:
keyid:FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:54:55:d8:18:e8:9a:58:74:29:84:56:3b:9b:bc:b7:26:30:
05:86:92:34:49:66:33:8a:46:87:6b:e5:bb:c2:ee:1c:bb:75:
96:39:61:94:3a:e3:a8:79:39:38:0d:88:c6:26:68:62:41:45:
49:ec:ce:49:06:d7:f4:c9:87:85:89:1b:d3:fb:d7:93:0c:d9:
0d:c4:35:70:5f:9b:c5:83:73:20:5e:57:82:ac:4f:42:d5:5c:
0d:d9:50:4b:8a:b0:f3:af:cd:f1:f1:de:15:da:8a:a5:d6:7f:
1f:af:8f:59:4b:dc:54:83:43:7a:74:a4:5d:aa:e7:e1:6e:79:
d2:a4:e3:67:af:79:96:ac:7c:bd:00:d8:d3:0b:e6:25:f7:7f:
e5:b2:5a:17:5c:a9:ea:f9:bf:51:16:94:e5:6e:82:99:69:61:
58:86:bf:ae:29:86:49:8b:26:e0:fb:3c:ac:02:41:61:4a:ad:
7d:db:5f:86:c3:21:2a:97:d7:a8:c3:94:0b:d5:cd:d4:db:22:
7e:10:10:f9:2b:8b:22:90:ea:79:93:01:cf:29:a1:7e:60:1c:
52:a4:18:02:87:e7:00:27:43:f9:7f:ee:2b:35:8b:3e:60:18:
87:21:ca:53:39:70:a6:2f:d5:5c:a0:a6:5b:51:d1:65:4a:4d:
a7:40:e1:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qZzgjUIncpidsgbsgLmjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZTQ1ZmQ2ZmQzZDkzMjY4NGMwYzViYzI3ZjRmYTYxNWEx
MDkwZTAwHhcNMjUwMTMxMTQwMDE5WhcNMjUwMjAxMTQwMDE5WjAzMTEwLwYDVQQD
EygxMjZhMDYxMTAyOTQ0ZDk1NTdiMDVmMTdlMzlmNTA2ZTc1Y2UxOWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4eGbbWu9V0tyDosgVGZgNMICiIo
JL8/Kn0D9FQ9I7gCcoOSnrIUC8Tu21OjGgGHBzyu1E2FBP+zjUZAfy7J0Hc01PjA
hTj1pvxLlz7hMMOccbxFT5hNYllGpYpJ0cBUiLCNT9OZ0AOJmHz7HelmoHBTmFZT
z0VIP6OArgDg3TTSqVsGJJq3FOBxko5HG2Nx4iFPQkZNAwD2sQvnHoStHqjn6K6w
66PCDZp4vzHVDzaS4tR8LiDS8Kwk4hJpf9bp++7HZvJBhcPrL6rjDYsZyWV6AdyU
XywWBn9+8TJ5T1N4BN2DtS5WHPdGGAgZvR8NpFKQXoVEpVh4dQMKwaKtjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJqBhEClE2VV7BfF+OfUG51zhmyMB8GA1UdIwQY
MBaAFPzkX9b9PZMmhMDFvCf0+mFaEJDgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX09SZjF2MDlreWFFd01XOEpfVDZZVm9Ra09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9iZjVhNjQtOGFhZi00NGE4LWJhY2Ut
MzY4NTBkZjRlOTk3LzEvX09SZjF2MDlreWFFd01XOEpfVDZZVm9Ra09BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9iZjVhNjQtOGFhZi00NGE4LWJhY2UtMzY4NTBkZjRlOTk3
LzEvX09SZjF2MDlreWFFd01XOEpfVDZZVm9Ra09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATVRV2Bjo
mlh0KYRWO5u8tyYwBYaSNElmM4pGh2vlu8LuHLt1ljlhlDrjqHk5OA2IxiZoYkFF
SezOSQbX9MmHhYkb0/vXkwzZDcQ1cF+bxYNzIF5XgqxPQtVcDdlQS4qw86/N8fHe
FdqKpdZ/H6+PWUvcVINDenSkXarn4W550qTjZ695lqx8vQDY0wvmJfd/5bJaF1yp
6vm/URaU5W6CmWlhWIa/rimGSYsm4Ps8rAJBYUqtfdtfhsMhKpfXqMOUC9XN1Nsi
fhAQ+SuLIpDqeZMBzymhfmAcUqQYAofnACdD+X/uKzWLPmAYhyHKUzlwpi/VXKCm
W1HRZUpNp0DhIQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:25:54 2025 by rpki-client