Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
File: a30fHod8EnmCdOATNFVPiZ846sE.mft (raw, json)
Hash identifier: +s1ms27XZPrpYP2s40DoYiUE0W0g2HL7xnRKLDDh6sg=
Subject key identifier: 85:3A:3A:00:67:F3:62:28:22:B5:4F:65:D8:70:66:32:54:25:1A:05
Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
Certificate issuer: /CN=6b7d1f1e877c12798274e01334554f899f38eac1
Certificate serial: 0194BD4E3CF2DB0C72B8ACEF2433C604BBDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
Manifest number: 0EB8
Signing time: Fri 31 Jan 2025 17:00:08 +0000
Manifest this update: Fri 31 Jan 2025 17:00:08 +0000
Manifest next update: Sat 01 Feb 2025 17:00:08 +0000
Files and hashes: 1: 1-47yB099htuBv2m-mnsxmo5hMaE.roa (hash: glbHBbOOXucvNPZBEZEZlyBvhlSEAVVGrvhxKUG4Uz4=)
2: St4HRjoesIgHRfExOBffE_pcBIw.roa (hash: zj7JSUVTgp8pR7SRQVxha79Is1N6T3q+JK526mfdo5s=)
3: ZRn8_lnFsXvgqivcUn4eIrUv-Ic.roa (hash: ViUiWV5ebu4waGuKqQE1IWidKaFMMzGFtUARe3tVsh4=)
4: a30fHod8EnmCdOATNFVPiZ846sE.crl (hash: DkLh9RAwis84EbwGDxZA0/zZCV7LY23SUFXpatkNBKo=)
5: lKdTsJ9TvIICTgPRcm3O1hlBWiM.roa (hash: py16JH9zUXcJT+HWUygN67vLSyq6kBTksveRhrIkt/k=)
6: pTwzFC29LPXNKIBj8fs94m0Kbbg.roa (hash: sPgk9WDd2v8KxrBOyyp78OiRQG9IETqQ+gnNWNn4qjQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3c:f2:db:0c:72:b8:ac:ef:24:33:c6:04:bb:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1
Validity
Not Before: Jan 31 17:00:08 2025 GMT
Not After : Feb 1 17:00:08 2025 GMT
Subject: CN=853a3a0067f3622822b54f65d870663254251a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4a:fd:a2:78:a8:09:67:e3:cc:04:a9:b3:b0:
84:f0:7d:f0:60:dd:fd:22:95:31:d3:77:71:f3:00:
d1:54:ad:b4:6e:0f:a2:2a:4c:e4:26:f5:6f:66:e8:
83:df:9e:cc:a0:ac:cc:0a:25:20:6c:3c:19:30:d3:
dc:bc:c1:e2:34:7f:48:3f:f8:c2:23:18:2b:0d:1f:
4d:b6:1c:21:de:dc:ad:41:92:dd:d4:fa:e9:4c:47:
4f:94:c5:9d:70:f7:09:38:96:29:6f:ef:b2:f1:82:
01:6b:3e:3d:c8:42:86:ad:97:d9:5a:52:8a:99:86:
1c:10:77:68:e2:6f:00:60:1a:42:f9:f4:e7:57:6c:
e9:cc:b1:bd:23:f0:a8:20:b0:9a:4f:1b:a3:1c:ac:
35:9d:7d:95:94:c6:30:ed:56:a4:cc:ab:18:0b:07:
23:7d:e9:16:a9:0b:28:08:2e:a9:7f:c3:4e:32:bd:
4f:7f:ae:0e:01:f6:00:fb:2e:ca:e8:00:21:d7:c0:
d6:03:ab:1d:f4:7c:9d:d8:43:ee:d8:60:f5:6b:db:
24:d1:fc:21:31:56:29:ae:6c:ea:bc:5b:27:d9:6d:
55:93:c4:8d:e8:27:68:f0:79:ec:21:9b:cd:79:c7:
a7:d7:29:61:74:98:a4:82:a6:fd:c3:21:1e:17:ff:
ac:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3A:3A:00:67:F3:62:28:22:B5:4F:65:D8:70:66:32:54:25:1A:05
X509v3 Authority Key Identifier:
keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:cb:53:c5:1a:eb:7e:79:3a:84:b0:f3:07:6c:95:23:ab:05:
99:4b:08:58:a1:6b:fd:49:ee:7c:bd:60:75:eb:da:32:32:b7:
2b:e5:25:ee:12:e0:6e:03:6a:90:3a:0a:ef:68:e2:94:98:c1:
7c:91:3d:30:3a:b3:f0:85:b5:3b:c0:34:ae:b5:2b:97:81:41:
53:d9:e8:51:c0:fb:24:65:6c:cf:c6:27:bc:4c:c8:c4:23:a5:
9f:71:97:a9:0e:68:bc:40:ed:81:36:6e:c2:66:ba:31:e3:9a:
c4:f6:d1:68:48:08:88:d4:f8:32:df:66:4f:34:44:8b:6f:17:
58:29:fc:fc:83:94:35:c2:fd:43:95:52:f4:65:7e:f4:71:85:
8f:9d:c2:15:74:18:d3:e4:b3:18:78:8b:76:50:a7:7b:13:ec:
16:f0:ec:8f:94:51:f5:f2:1e:70:f5:f4:71:bd:cb:7d:ad:eb:
26:ab:82:0a:ae:9d:2b:dc:cd:7d:fd:23:b7:89:f2:e4:19:78:
32:3d:34:6a:c9:05:ce:a4:10:0f:c9:85:93:ab:98:ba:75:cb:
6f:cb:0a:b6:24:83:65:6c:f2:9d:2a:42:0f:00:73:db:dc:76:
84:30:94:67:9d:46:56:ad:90:c8:25:ea:64:7a:96:87:20:56:
87:db:66:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tjzy2wxyuKzvJDPGBLvaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiN2QxZjFlODc3YzEyNzk4Mjc0ZTAxMzM0NTU0Zjg5OWYz
OGVhYzEwHhcNMjUwMTMxMTcwMDA4WhcNMjUwMjAxMTcwMDA4WjAzMTEwLwYDVQQD
Eyg4NTNhM2EwMDY3ZjM2MjI4MjJiNTRmNjVkODcwNjYzMjU0MjUxYTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ur9onioCWfjzASps7CE8H3wYN39
IpUx03dx8wDRVK20bg+iKkzkJvVvZuiD357MoKzMCiUgbDwZMNPcvMHiNH9IP/jC
IxgrDR9Nthwh3tytQZLd1PrpTEdPlMWdcPcJOJYpb++y8YIBaz49yEKGrZfZWlKK
mYYcEHdo4m8AYBpC+fTnV2zpzLG9I/CoILCaTxujHKw1nX2VlMYw7VakzKsYCwcj
fekWqQsoCC6pf8NOMr1Pf64OAfYA+y7K6AAh18DWA6sd9Hyd2EPu2GD1a9sk0fwh
MVYprmzqvFsn2W1Vk8SN6Cdo8HnsIZvNecen1ylhdJikgqb9wyEeF/+sGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIU6OgBn82IoIrVPZdhwZjJUJRoFMB8GA1UdIwQY
MBaAFGt9Hx6HfBJ5gnTgEzRVT4mfOOrBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUt
MmZhZDlhMmZjM2VmLzEvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUtMmZhZDlhMmZjM2Vm
LzEvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp8tTxRrr
fnk6hLDzB2yVI6sFmUsIWKFr/UnufL1gdevaMjK3K+Ul7hLgbgNqkDoK72jilJjB
fJE9MDqz8IW1O8A0rrUrl4FBU9noUcD7JGVsz8YnvEzIxCOln3GXqQ5ovEDtgTZu
wma6MeOaxPbRaEgIiNT4Mt9mTzREi28XWCn8/IOUNcL9Q5VS9GV+9HGFj53CFXQY
0+SzGHiLdlCnexPsFvDsj5RR9fIecPX0cb3Lfa3rJquCCq6dK9zNff0jt4ny5Bl4
Mj00askFzqQQD8mFk6uYunXLb8sKtiSDZWzynSpCDwBz29x2hDCUZ51GVq2QyCXq
ZHqWhyBWh9tmJQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:21 2025 by rpki-client