Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
File: R6guVXeaHqTvmWf4IdXMBbe9mek.mft (raw, json)
Hash identifier: dXKHMfM6LLbKtPKZ30YEHvyXL8MlDzm2abwr3BPsmOU=
Subject key identifier: 9F:2A:07:BE:4F:2E:CD:1A:96:22:23:12:A2:C9:4C:CD:99:59:F3:1B
Authority key identifier: 47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
Certificate issuer: /CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Certificate serial: 0194BD4E9E737295F246500EDFB907830BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: CFUwFBzQtfgbafFzZOyLhQjWkGM.roa (hash: 97CGeBu3yLbE5oYRJj25Ylb6GhnLEinlvUvhqt045H4=)
2: R6guVXeaHqTvmWf4IdXMBbe9mek.crl (hash: 7RfIJuWOPrMnJYELrg85xi3xr02AuYuJXTycEbwxdn4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9e:73:72:95:f2:46:50:0e:df:b9:07:83:0b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=9f2a07be4f2ecd1a96222312a2c94ccd9959f31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:09:d2:b7:25:d6:19:39:54:f1:2b:8f:36:27:
d1:09:c6:2e:f2:86:03:ca:0b:52:68:2b:8f:d6:e2:
60:47:9e:cc:8b:02:b0:68:63:85:dd:a9:e7:c9:45:
3b:2e:e3:f3:9f:83:39:7c:43:ca:c6:9b:9d:db:60:
c9:67:d3:35:98:78:68:45:5f:6c:30:df:90:45:33:
62:63:45:e3:22:dd:0e:67:83:8c:35:32:e3:4c:e8:
5b:42:2c:48:a4:51:1a:cb:ce:cb:35:8e:92:3d:7f:
0c:42:7e:ab:6e:e2:a3:61:59:cb:ba:bd:c8:5d:19:
c6:58:38:6e:82:d3:4f:78:b3:be:e6:f2:40:5b:0e:
85:c3:83:1b:47:13:9e:53:25:29:87:79:ad:44:49:
d7:43:4d:f4:0a:af:bd:e4:71:ca:7f:ca:ae:df:96:
f3:ab:1c:ee:a9:da:96:eb:c2:86:6f:80:6f:d9:67:
53:5f:c6:c4:e7:bb:9d:77:95:04:7a:4d:ff:85:53:
50:be:63:4e:20:6c:9b:ce:67:79:3b:32:93:5b:e2:
ff:31:f1:d0:21:f1:e9:ae:1a:e0:90:3c:5e:2d:d2:
32:6b:ab:a6:7c:b0:0d:cf:b6:eb:0e:17:ad:de:a8:
6e:c0:a7:4e:f0:d9:57:b5:4f:66:38:51:19:15:1c:
f6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2A:07:BE:4F:2E:CD:1A:96:22:23:12:A2:C9:4C:CD:99:59:F3:1B
X509v3 Authority Key Identifier:
keyid:47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4e:a0:42:f4:f8:b7:ea:a7:a5:75:18:e9:fd:d7:8e:44:d5:
7b:d3:73:da:5d:ee:bf:ab:f7:89:c2:f8:cd:29:2e:27:fd:0a:
aa:21:33:27:2f:f1:65:ec:6b:7f:57:cd:e6:a2:d9:f7:fb:97:
7f:e7:bd:1f:cf:4a:b5:84:bd:e5:9a:11:58:a5:4a:57:f7:21:
46:c1:af:46:cb:d8:13:76:c8:3a:e1:8f:51:d5:35:0d:5f:4f:
89:7e:3e:a4:e4:a5:93:cd:46:df:4a:f5:b1:d2:94:48:88:94:
d6:88:24:cd:4a:2d:69:1c:79:a6:2d:98:3f:59:40:34:16:f3:
08:ee:5f:2d:06:91:c1:c0:e8:f2:c2:c5:c6:76:42:1f:15:25:
59:62:53:42:cc:51:ef:4b:58:51:7b:17:36:ed:ef:66:6b:6b:
b3:b7:7a:54:00:e7:fa:23:5a:c0:59:be:91:24:7d:83:6f:1b:
18:3b:21:76:7e:96:a6:0b:1f:26:aa:2e:3f:4a:d7:96:5f:54:
37:78:6b:0c:48:40:08:c7:2b:7a:47:6f:80:cd:ea:f6:60:1d:
36:eb:6e:ff:b2:c3:25:d9:b8:42:0e:94:77:2f:75:9c:0b:5a:
fc:5c:f8:e3:d6:ac:3f:90:fc:c4:79:9b:58:e1:4a:e1:ea:c1:
f3:64:2f:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tp5zcpXyRlAO37kHgwvQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YTgyZTU1Nzc5YTFlYTRlZjk5NjdmODIxZDVjYzA1Yjdi
ZDk5ZTkwHhcNMjUwMTMxMTcwMDMzWhcNMjUwMjAxMTcwMDMzWjAzMTEwLwYDVQQD
Eyg5ZjJhMDdiZTRmMmVjZDFhOTYyMjIzMTJhMmM5NGNjZDk5NTlmMzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQnStyXWGTlU8SuPNifRCcYu8oYD
ygtSaCuP1uJgR57MiwKwaGOF3annyUU7LuPzn4M5fEPKxpud22DJZ9M1mHhoRV9s
MN+QRTNiY0XjIt0OZ4OMNTLjTOhbQixIpFEay87LNY6SPX8MQn6rbuKjYVnLur3I
XRnGWDhugtNPeLO+5vJAWw6Fw4MbRxOeUyUph3mtREnXQ030Cq+95HHKf8qu35bz
qxzuqdqW68KGb4Bv2WdTX8bE57udd5UEek3/hVNQvmNOIGybzmd5OzKTW+L/MfHQ
IfHprhrgkDxeLdIya6umfLANz7brDhet3qhuwKdO8NlXtU9mOFEZFRz2MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8qB75PLs0aliIjEqLJTM2ZWfMbMB8GA1UdIwQY
MBaAFEeoLlV3mh6k75ln+CHVzAW3vZnpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjZndVZYZWFIcVR2bVdmNElkWE1CYmU5bWVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81OWFmYWItZTBhOC00MmQwLTg3M2It
NjAwNWMwMTExZjFlLzEvUjZndVZYZWFIcVR2bVdmNElkWE1CYmU5bWVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81OWFmYWItZTBhOC00MmQwLTg3M2ItNjAwNWMwMTExZjFl
LzEvUjZndVZYZWFIcVR2bVdmNElkWE1CYmU5bWVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFE6gQvT4
t+qnpXUY6f3XjkTVe9Nz2l3uv6v3icL4zSkuJ/0KqiEzJy/xZexrf1fN5qLZ9/uX
f+e9H89KtYS95ZoRWKVKV/chRsGvRsvYE3bIOuGPUdU1DV9PiX4+pOSlk81G30r1
sdKUSIiU1ogkzUotaRx5pi2YP1lANBbzCO5fLQaRwcDo8sLFxnZCHxUlWWJTQsxR
70tYUXsXNu3vZmtrs7d6VADn+iNawFm+kSR9g28bGDshdn6WpgsfJqouP0rXll9U
N3hrDEhACMcrekdvgM3q9mAdNutu/7LDJdm4Qg6Udy91nAta/Fz449asP5D8xHmb
WOFK4erB82Qv6g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:33 2025 by rpki-client