Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
File: p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft (raw, json)
Hash identifier: nh+JbJo2KVSRwbzvNe1aHjfIpA7SSlaAtpB2siGn24o=
Subject key identifier: 89:4D:C3:04:F5:BC:89:F1:B4:69:4E:41:17:C6:9E:A9:02:23:33:FB
Authority key identifier: A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
Certificate issuer: /CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Certificate serial: 0194BCE0E1E1F193F58F64D160AE80FB3C73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
Manifest number: 1165
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: BzSGdKXS_5WRE8i4u-1soKeFtzM.roa (hash: vrT1E18BTpX1mS9gu66zvt/nerXMjovuRA/4FT5P190=)
2: p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl (hash: d1TJPfs9fhUgQ7lYtc7z5S3lbc1uWYx3b3Wx1KqQv/c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e1:e1:f1:93:f5:8f:64:d1:60:ae:80:fb:3c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=894dc304f5bc89f1b4694e4117c69ea9022333fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:af:6a:87:e3:79:10:5f:8a:41:b5:8f:c1:23:
90:9d:20:42:90:ec:82:d9:46:1f:1c:62:6c:a2:91:
53:3b:4d:8f:9e:68:45:11:a6:1c:b2:0c:eb:1d:89:
12:8e:a6:0e:6a:56:97:22:9a:e5:eb:34:38:12:76:
dc:24:aa:db:61:be:5f:a3:70:6a:b4:b5:4a:e5:e8:
57:7b:6d:87:85:bb:d1:67:ac:f4:f9:00:e9:0c:e8:
46:93:9f:26:f9:39:c5:e8:f2:3a:8b:d0:74:c9:1e:
18:95:2b:a6:bb:1a:83:a6:da:bd:ee:e5:36:80:a7:
1d:3d:c5:fa:f1:53:88:04:dd:43:dc:24:f5:61:09:
97:20:ba:80:28:42:c7:c9:7c:6d:7f:48:75:c4:e9:
dc:f9:cd:03:21:df:fb:f9:a3:38:dd:bd:e3:90:af:
b0:0a:e9:e6:c1:8b:ff:73:cf:d1:24:0a:95:f4:bb:
9a:98:9f:69:29:77:c0:61:2d:34:8f:bc:b7:64:c6:
73:e5:18:ee:99:93:34:08:30:fd:18:22:3b:43:28:
01:70:00:1d:16:72:b9:7b:bb:7f:5a:d1:52:47:cb:
ca:c3:52:3c:09:67:ea:a0:83:f3:a4:bf:86:1b:71:
ec:bc:89:0c:99:ac:03:f8:24:3b:91:a2:e1:f4:56:
69:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4D:C3:04:F5:BC:89:F1:B4:69:4E:41:17:C6:9E:A9:02:23:33:FB
X509v3 Authority Key Identifier:
keyid:A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:71:81:4e:43:11:a3:97:c6:82:0a:be:59:ee:e6:9d:04:09:
99:23:53:92:1b:d8:f0:09:a1:d6:ac:af:44:d2:f7:48:98:a0:
7f:33:c5:67:91:fd:29:0a:c8:68:f7:9a:7e:bc:17:7a:6d:06:
01:a0:0f:37:5a:fb:a1:33:b8:ab:09:d3:d7:36:f9:b2:2e:86:
84:19:ff:f6:a6:5a:c5:ed:f3:24:29:93:df:36:01:32:6c:04:
4f:67:34:ba:de:78:a2:ba:81:e1:3d:60:e4:d4:bb:12:1b:db:
45:6f:cf:27:49:ca:71:a8:19:5a:09:96:f7:50:45:30:ab:a5:
73:98:43:67:4c:78:73:15:71:14:e3:d4:13:28:10:7b:3a:4f:
4d:53:20:e6:c5:d8:6f:82:e4:de:34:2c:da:21:e5:73:e5:18:
12:9b:e4:c8:e8:5d:63:2c:51:15:bf:34:b5:e7:fc:09:cc:92:
19:97:27:5f:93:a7:d3:a8:bb:ad:6e:d2:ed:b4:5c:08:69:8b:
ce:a1:7c:b2:90:46:5f:5d:ec:4b:e5:1a:43:28:9b:25:fc:5b:
0f:2c:37:a4:6d:83:da:00:15:1b:eb:d0:c7:a8:4c:33:a6:a8:
cc:60:4e:65:db:cf:cd:9b:9d:22:73:23:c4:e8:9b:d2:b9:0a:
78:a7:26:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84OHh8ZP1j2TRYK6A+zxzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NjRhMjZmNzYzNTUxNDBhYTY5NmUwYTRmMWYwYzMxMmI3
Mjc3YzAwHhcNMjUwMTMxMTUwMDQxWhcNMjUwMjAxMTUwMDQxWjAzMTEwLwYDVQQD
Eyg4OTRkYzMwNGY1YmM4OWYxYjQ2OTRlNDExN2M2OWVhOTAyMjMzM2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq9qh+N5EF+KQbWPwSOQnSBCkOyC
2UYfHGJsopFTO02PnmhFEaYcsgzrHYkSjqYOalaXIprl6zQ4EnbcJKrbYb5fo3Bq
tLVK5ehXe22HhbvRZ6z0+QDpDOhGk58m+TnF6PI6i9B0yR4YlSumuxqDptq97uU2
gKcdPcX68VOIBN1D3CT1YQmXILqAKELHyXxtf0h1xOnc+c0DId/7+aM43b3jkK+w
CunmwYv/c8/RJAqV9LuamJ9pKXfAYS00j7y3ZMZz5RjumZM0CDD9GCI7QygBcAAd
FnK5e7t/WtFSR8vKw1I8CWfqoIPzpL+GG3HsvIkMmawD+CQ7kaLh9FZpnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlNwwT1vInxtGlOQRfGnqkCIzP7MB8GA1UdIwQY
MBaAFKdkom92NVFAqmluCk8fDDErcnfAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDJTaWIzWTFVVUNxYVc0S1R4OE1NU3R5ZDhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xZTgxODMtYWFkMS00ZmQ3LWIxMGYt
ZmZhNDk1MGExY2NiLzEvcDJTaWIzWTFVVUNxYVc0S1R4OE1NU3R5ZDhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8xZTgxODMtYWFkMS00ZmQ3LWIxMGYtZmZhNDk1MGExY2Ni
LzEvcDJTaWIzWTFVVUNxYVc0S1R4OE1NU3R5ZDhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHGBTkMR
o5fGggq+We7mnQQJmSNTkhvY8Amh1qyvRNL3SJigfzPFZ5H9KQrIaPeafrwXem0G
AaAPN1r7oTO4qwnT1zb5si6GhBn/9qZaxe3zJCmT3zYBMmwET2c0ut54orqB4T1g
5NS7EhvbRW/PJ0nKcagZWgmW91BFMKulc5hDZ0x4cxVxFOPUEygQezpPTVMg5sXY
b4Lk3jQs2iHlc+UYEpvkyOhdYyxRFb80tef8CcySGZcnX5On06i7rW7S7bRcCGmL
zqF8spBGX13sS+UaQyibJfxbDyw3pG2D2gAVG+vQx6hMM6aozGBOZdvPzZudInMj
xOib0rkKeKcmZA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:29:45 2025 by rpki-client