Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
File: RMKVym7oyucAa1d69U43ZiPfd5k.mft (raw, json)
Hash identifier: xv/fUpox2J9Ygl6QPJ1DJEh1FKwNBsQum7CZtKHKYX4=
Subject key identifier: 67:88:92:C4:72:67:30:CB:97:60:CB:3C:8D:29:1A:E0:CC:2E:81:A2
Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
Certificate issuer: /CN=44c295ca6ee8cae7006b577af54e376623df7799
Certificate serial: 0194BC3C201214837C9B301F9DB55543A199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
Manifest number: 11F8
Signing time: Fri 31 Jan 2025 12:00:44 +0000
Manifest this update: Fri 31 Jan 2025 12:00:44 +0000
Manifest next update: Sat 01 Feb 2025 12:00:44 +0000
Files and hashes: 1: 1-a4x5OOX4iisCDf6ed1yjE-GXUQ.roa (hash: sw8ry0bOHDndmxXW/2FyYZ7exmAZ4VvNy12eeZpqa3o=)
2: RMKVym7oyucAa1d69U43ZiPfd5k.crl (hash: TGk2OUCUWoioV36RPGtMFdIUb549fbSjdgGKFlphN1M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:20:12:14:83:7c:9b:30:1f:9d:b5:55:43:a1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799
Validity
Not Before: Jan 31 12:00:44 2025 GMT
Not After : Feb 1 12:00:44 2025 GMT
Subject: CN=678892c4726730cb9760cb3c8d291ae0cc2e81a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:94:31:80:53:a7:ab:a8:09:df:37:f0:e7:
eb:07:ab:f5:54:f3:10:af:b3:fe:1b:26:da:95:e5:
bd:b0:fc:ce:02:78:00:7b:14:9a:c4:61:cb:c4:98:
9e:6f:16:d5:f1:76:6a:b5:14:28:52:fd:a9:10:82:
83:b8:08:2e:9d:40:85:d6:2f:a8:3b:80:4d:64:36:
58:8b:36:d2:c3:a1:98:5e:3c:86:94:1e:81:14:a6:
2f:5d:f1:a4:b9:12:a1:39:a9:8b:eb:32:5c:6c:f9:
08:a5:49:32:8e:85:53:a4:22:e7:09:84:65:d5:bd:
e1:5a:b9:7e:c1:b5:09:da:b8:41:e4:5f:f5:3e:bb:
e6:73:b7:51:cc:97:27:ed:9d:5a:b3:83:d8:91:1d:
9f:e4:70:57:53:45:55:41:6b:4b:dd:62:3c:07:7d:
fb:91:1c:75:31:7d:24:b8:91:0e:62:f5:ce:bb:b3:
d4:d2:52:49:86:c0:df:46:c7:1e:09:38:1f:6b:a0:
60:e0:52:79:97:b1:dc:9a:10:99:f1:6c:42:7c:d2:
a2:01:de:a1:6c:45:f0:f4:25:c6:c1:4e:5d:b5:9d:
21:c7:91:71:f0:60:08:47:82:fa:e3:2e:ba:84:b8:
63:ca:d1:c7:ad:52:0e:c6:1f:a0:e9:7d:cd:28:ea:
27:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:88:92:C4:72:67:30:CB:97:60:CB:3C:8D:29:1A:E0:CC:2E:81:A2
X509v3 Authority Key Identifier:
keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ac:84:06:d0:42:78:74:5f:03:79:9a:40:24:e6:33:e0:37:
e9:78:a3:52:8e:94:7f:9d:ad:c1:56:75:77:fe:d9:a3:ec:90:
1b:bc:85:4c:19:2f:d6:97:cd:cf:3d:d6:6f:30:f5:55:20:f2:
7c:d0:b1:8e:d3:c2:bf:eb:f5:9d:e6:5c:58:df:62:5e:8f:c4:
47:fe:1c:72:a0:ce:d1:69:89:91:95:af:97:d2:11:b5:f4:08:
cc:3b:86:cc:0b:cd:ee:19:4e:9b:10:83:94:67:95:5c:00:e2:
b0:c8:45:03:51:bf:d1:c3:50:58:1b:09:7b:e6:10:47:d4:bf:
0c:da:11:4d:b6:72:52:b9:68:05:e0:83:0d:ae:87:32:ee:b8:
00:69:08:17:cb:af:f2:c4:ce:24:37:2c:aa:7a:b8:35:f7:85:
7d:e7:80:ad:e2:50:8a:30:23:04:7a:94:84:82:de:5f:f8:ca:
37:6c:68:b0:f2:74:8f:19:8d:41:04:32:91:e7:76:2b:a7:39:
6c:3a:a4:16:c1:43:00:9c:6d:bc:4d:37:b0:34:2f:d5:ca:c3:
45:06:e5:f9:ed:96:7b:56:2f:3b:fa:24:0a:85:7b:98:d6:b0:
00:df:d0:11:08:9b:74:9e:9f:d9:27:5d:c1:a8:94:af:73:80:
f0:00:85:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PCASFIN8mzAfnbVVQ6GZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YzI5NWNhNmVlOGNhZTcwMDZiNTc3YWY1NGUzNzY2MjNk
Zjc3OTkwHhcNMjUwMTMxMTIwMDQ0WhcNMjUwMjAxMTIwMDQ0WjAzMTEwLwYDVQQD
Eyg2Nzg4OTJjNDcyNjczMGNiOTc2MGNiM2M4ZDI5MWFlMGNjMmU4MWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspSUMYBTp6uoCd838OfrB6v1VPMQ
r7P+GybaleW9sPzOAngAexSaxGHLxJiebxbV8XZqtRQoUv2pEIKDuAgunUCF1i+o
O4BNZDZYizbSw6GYXjyGlB6BFKYvXfGkuRKhOamL6zJcbPkIpUkyjoVTpCLnCYRl
1b3hWrl+wbUJ2rhB5F/1Prvmc7dRzJcn7Z1as4PYkR2f5HBXU0VVQWtL3WI8B337
kRx1MX0kuJEOYvXOu7PU0lJJhsDfRsceCTgfa6Bg4FJ5l7HcmhCZ8WxCfNKiAd6h
bEXw9CXGwU5dtZ0hx5Fx8GAIR4L64y66hLhjytHHrVIOxh+g6X3NKOonswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGeIksRyZzDLl2DLPI0pGuDMLoGiMB8GA1UdIwQY
MBaAFETClcpu6MrnAGtXevVON2Yj33eZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xN2E4OGQtMjM2ZC00ZmFkLTkwMzUt
NzU5OWI0NDFjZDFjLzEvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xN2E4OGQtMjM2ZC00ZmFkLTkwMzUtNzU5OWI0NDFjZDFj
LzEvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcqyEBtBC
eHRfA3maQCTmM+A36XijUo6Uf52twVZ1d/7Zo+yQG7yFTBkv1pfNzz3WbzD1VSDy
fNCxjtPCv+v1neZcWN9iXo/ER/4ccqDO0WmJkZWvl9IRtfQIzDuGzAvN7hlOmxCD
lGeVXADisMhFA1G/0cNQWBsJe+YQR9S/DNoRTbZyUrloBeCDDa6HMu64AGkIF8uv
8sTOJDcsqnq4NfeFfeeAreJQijAjBHqUhILeX/jKN2xosPJ0jxmNQQQyked2K6c5
bDqkFsFDAJxtvE03sDQv1crDRQbl+e2We1YvO/okCoV7mNawAN/QEQibdJ6f2Sdd
waiUr3OA8ACF4w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:50 2025 by rpki-client