Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
File: _x9hW5GDn1HtOltTdTsnsCx22pU.mft (raw, json)
Hash identifier: hiNqsbKoU5ueF/fhBp5mxM1Br8mv6U9EnGMvvJtLrIc=
Subject key identifier: 63:DF:96:8A:8C:C1:52:53:93:12:DF:B5:58:86:C3:9D:F5:27:1B:52
Authority key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
Certificate issuer: /CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Certificate serial: 0194BC727CF92CF5EFEF9ECF2335A601F389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:07 +0000
Manifest this update: Fri 31 Jan 2025 13:00:07 +0000
Manifest next update: Sat 01 Feb 2025 13:00:07 +0000
Files and hashes: 1: 7a7WUL8xvDPo2P-5omM4jYtGU5Y.roa (hash: UostfHkB3oR0Iku8D5pESC2eAmHKknmIvGYXu5RiVk8=)
2: E72VdoRs1WH4lPVFyfKcgtxOU8Q.roa (hash: LmX4spgkKMlRcTCE+F8dcGQpsB1FUNFcfYjRwXtYks0=)
3: _x9hW5GDn1HtOltTdTsnsCx22pU.crl (hash: QdeaPu6IRvij517FjruLrEItMInc+eRIoNQ7A1frLRk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7c:f9:2c:f5:ef:ef:9e:cf:23:35:a6:01:f3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Validity
Not Before: Jan 31 13:00:07 2025 GMT
Not After : Feb 1 13:00:07 2025 GMT
Subject: CN=63df968a8cc152539312dfb55886c39df5271b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:21:68:68:55:85:83:66:4f:b5:1e:a6:72:65:
a4:19:99:59:ae:09:99:93:d2:68:78:79:5d:fa:5a:
c1:c3:98:ce:ef:99:8a:f8:b4:a6:61:21:a8:2b:39:
c3:bf:f9:d5:3e:07:5c:26:0c:94:36:56:dd:74:d8:
c1:bb:7b:50:9d:df:a6:65:a9:7e:bf:83:e8:1f:52:
a4:ee:20:d9:fe:af:17:37:a2:b9:e4:ba:cf:1d:60:
8d:84:68:6b:0c:12:aa:a6:63:83:f1:34:be:9c:1f:
80:cb:f0:96:89:d2:be:cd:b2:f9:c8:34:58:f9:4d:
ec:3c:1c:b4:e4:87:ad:2b:56:1e:b7:a8:8c:4d:7e:
b4:54:95:a6:f6:30:e9:7b:51:a3:97:e9:87:49:2e:
d6:11:96:79:c0:7f:06:ee:ee:b5:3e:2b:3c:b3:18:
ae:ec:12:32:52:b4:08:eb:a1:cf:f5:c7:0d:64:ec:
04:b3:e2:94:a1:8c:3d:0b:61:08:8c:0c:ba:14:24:
bd:38:d5:a6:f6:8e:22:6e:a6:c9:76:3a:53:c3:95:
0b:c5:6c:f1:19:d0:a8:7e:49:44:e2:da:2e:e4:bd:
48:0d:7f:ba:6e:04:62:43:65:50:c8:fd:ec:1f:dd:
16:60:73:43:cc:78:30:26:6c:24:f8:16:6e:45:85:
c6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DF:96:8A:8C:C1:52:53:93:12:DF:B5:58:86:C3:9D:F5:27:1B:52
X509v3 Authority Key Identifier:
keyid:FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:1d:e7:e7:37:f0:63:8c:ad:eb:e9:fc:ec:d7:d0:21:c1:84:
c3:dd:0b:0a:1b:98:57:80:5d:09:2f:9d:ef:f3:40:ca:3b:42:
1a:fe:8d:e0:f5:d7:98:4a:b3:5f:25:2a:d6:eb:cf:d7:14:f7:
80:85:08:d4:3b:72:3f:77:54:4f:2f:b3:8f:ef:04:57:4f:65:
5e:60:77:3f:cd:23:2a:7f:0a:69:96:c3:ef:f5:09:42:f4:3a:
ce:77:65:8f:5d:5f:a3:03:22:66:34:92:c5:d4:06:10:a6:0a:
9b:a5:7d:1c:ea:31:dd:ca:96:01:bf:53:c6:38:ee:41:99:a4:
e0:36:2b:2a:ed:8a:1d:21:ef:21:72:10:f5:73:bd:f3:df:d8:
83:02:e5:be:81:c6:7f:8a:bd:7a:af:a0:7c:e6:29:5e:2d:4e:
71:4c:63:8f:14:5b:a8:1f:82:39:a2:6b:b6:db:77:f4:a9:cd:
70:7d:2c:f8:5e:1c:83:ff:92:c8:39:a0:1e:4e:0a:26:01:b4:
c0:96:31:2f:96:f6:0e:38:2f:d3:4d:c9:01:c2:20:f8:0c:97:
3c:98:fc:a0:4d:b4:5e:f1:33:0f:23:d4:54:18:55:8d:18:10:
65:ac:ab:f4:11:8e:ff:99:4f:17:0d:28:75:99:a0:15:9f:77:
80:5e:5d:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cnz5LPXv757PIzWmAfOJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMWY2MTViOTE4MzlmNTFlZDNhNWI1Mzc1M2IyN2IwMmM3
NmRhOTUwHhcNMjUwMTMxMTMwMDA3WhcNMjUwMjAxMTMwMDA3WjAzMTEwLwYDVQQD
Eyg2M2RmOTY4YThjYzE1MjUzOTMxMmRmYjU1ODg2YzM5ZGY1MjcxYjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCFoaFWFg2ZPtR6mcmWkGZlZrgmZ
k9JoeHld+lrBw5jO75mK+LSmYSGoKznDv/nVPgdcJgyUNlbddNjBu3tQnd+mZal+
v4PoH1Kk7iDZ/q8XN6K55LrPHWCNhGhrDBKqpmOD8TS+nB+Ay/CWidK+zbL5yDRY
+U3sPBy05IetK1Yet6iMTX60VJWm9jDpe1Gjl+mHSS7WEZZ5wH8G7u61Pis8sxiu
7BIyUrQI66HP9ccNZOwEs+KUoYw9C2EIjAy6FCS9ONWm9o4ibqbJdjpTw5ULxWzx
GdCofklE4tou5L1IDX+6bgRiQ2VQyP3sH90WYHNDzHgwJmwk+BZuRYXG8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPfloqMwVJTkxLftViGw531JxtSMB8GA1UdIwQY
MBaAFP8fYVuRg59R7TpbU3U7J7AsdtqVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3g5aFc1R0RuMUh0T2x0VGRUc25zQ3gyMnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9iNDE2YTUtZWU0Zi00Y2M3LWIwYzQt
NzQ3NWY3MGRmOWZhLzEvX3g5aFc1R0RuMUh0T2x0VGRUc25zQ3gyMnBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9iNDE2YTUtZWU0Zi00Y2M3LWIwYzQtNzQ3NWY3MGRmOWZh
LzEvX3g5aFc1R0RuMUh0T2x0VGRUc25zQ3gyMnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAth3n5zfw
Y4yt6+n87NfQIcGEw90LChuYV4BdCS+d7/NAyjtCGv6N4PXXmEqzXyUq1uvP1xT3
gIUI1DtyP3dUTy+zj+8EV09lXmB3P80jKn8KaZbD7/UJQvQ6zndlj11fowMiZjSS
xdQGEKYKm6V9HOox3cqWAb9TxjjuQZmk4DYrKu2KHSHvIXIQ9XO989/YgwLlvoHG
f4q9eq+gfOYpXi1OcUxjjxRbqB+COaJrttt39KnNcH0s+F4cg/+SyDmgHk4KJgG0
wJYxL5b2Djgv003JAcIg+AyXPJj8oE20XvEzDyPUVBhVjRgQZayr9BGO/5lPFw0o
dZmgFZ93gF5dGg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:44 2025 by rpki-client