Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
File: piqMeh9qTJSeAntTadl9dXbhR_g.mft (raw, json)
Hash identifier: Bco5xyK+/1sl7A6vgePB6zGzUCJGFrucjyqvLGHwnfk=
Subject key identifier: 42:46:92:33:33:A6:FC:D9:B4:58:04:00:8F:37:C0:9B:18:42:15:C8
Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
Certificate issuer: /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Certificate serial: 0194BBCE21D0FF8510835BFDD5E7EDB4E00B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
Manifest number: 086D
Signing time: Fri 31 Jan 2025 10:00:35 +0000
Manifest this update: Fri 31 Jan 2025 10:00:35 +0000
Manifest next update: Sat 01 Feb 2025 10:00:35 +0000
Files and hashes: 1: BxgD-RrZabBuEEfFQkOR7JzPkYA.roa (hash: Dbgg4n4USIHYY1LVI9yt8KqtluJXraRBx7hK71/1AxU=)
2: _HboziFCCXY6Aftni-9e_QXHS7Y.roa (hash: 1Dtm7p4VO9zPNWsz+P/VL1I6c+v4X7GMgtJoAtf8pBU=)
3: piqMeh9qTJSeAntTadl9dXbhR_g.crl (hash: qhPDBVsQwqCEJ0UtkLXYI4Xqad77OviKjLMPeSRPDtA=)
4: y3UMX5qqKpS7PayD_PFfS-9xYiA.roa (hash: 1x0+PMsy7NMRlTF0Iq4hoHsB7a+mNEhOddx/6ZAYPrE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:21:d0:ff:85:10:83:5b:fd:d5:e7:ed:b4:e0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Validity
Not Before: Jan 31 10:00:35 2025 GMT
Not After : Feb 1 10:00:35 2025 GMT
Subject: CN=4246923333a6fcd9b45804008f37c09b184215c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:e2:9c:fb:af:69:92:e2:c5:83:21:ed:83:
7a:c3:f3:1e:45:1b:3f:53:70:7e:8f:f1:d8:aa:11:
1d:d1:1a:71:54:e9:d2:9d:f8:ea:fe:58:4f:a0:c3:
ae:38:8a:39:5b:de:e4:8e:ae:7b:1d:fa:76:22:e5:
c6:89:42:be:b1:44:fc:d7:1d:a3:95:2b:2d:7a:a1:
b9:b6:a8:aa:23:f0:61:7b:e8:18:98:62:4b:44:ae:
35:7d:54:f9:a6:90:97:9c:50:c9:6a:75:b6:4e:8f:
fb:6c:9b:84:0a:06:1d:93:4a:78:03:99:fc:30:bb:
d8:73:16:e8:71:70:50:8c:c9:15:33:36:2f:85:3f:
60:75:b3:12:93:7d:91:40:89:d5:0a:ab:7a:c5:16:
3f:85:e8:52:c4:21:a5:ac:60:25:8e:6f:ba:75:8d:
73:db:12:6b:07:11:20:64:84:28:0d:9f:bb:14:d3:
28:55:35:a5:1e:bd:86:52:e8:6d:f2:0d:9b:e8:1e:
db:9d:11:86:a2:c3:dc:39:01:18:9d:d3:0f:bd:78:
83:d7:51:6a:a2:2e:19:fb:8d:5a:92:0a:b9:0b:7b:
99:3d:96:f3:d6:36:08:76:7d:4f:5b:a9:83:e1:46:
42:72:37:6d:af:2d:1e:39:dd:26:fc:42:dd:ed:53:
b5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:46:92:33:33:A6:FC:D9:B4:58:04:00:8F:37:C0:9B:18:42:15:C8
X509v3 Authority Key Identifier:
keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a9:a6:b4:d4:ae:89:84:88:d7:1b:1f:70:d3:1c:f6:9d:10:
d9:4c:19:4f:40:70:35:3b:9f:a4:fe:fe:7a:67:50:6c:47:59:
02:d5:6f:65:ee:78:ec:05:06:b9:00:25:45:8f:2b:3f:a2:28:
6c:14:5d:b5:dd:40:93:48:f5:38:2b:f8:5f:7d:c4:f9:d7:e6:
3e:8d:75:f4:d1:1a:1b:d5:34:96:cd:79:25:70:ae:3f:40:4d:
a8:68:86:1c:0e:a9:fc:87:3e:a9:26:41:86:a7:d5:a4:35:f6:
ba:dc:f8:f7:61:91:f8:7f:f5:26:a4:84:76:bd:7f:26:18:8b:
4f:e0:a0:c6:9d:c2:ef:a4:0c:f3:20:af:28:1c:cd:56:52:9a:
82:e9:7f:7d:93:fa:0f:75:2d:fa:57:d3:56:5a:ca:aa:1d:8c:
69:92:b7:13:ec:ea:3e:c0:2a:73:60:ce:c5:4a:a4:89:d6:01:
bb:00:30:50:ca:45:9b:7f:8a:9c:09:06:40:b7:ac:d7:19:06:
5b:f0:75:18:5e:53:eb:19:17:57:e6:10:99:3e:ec:27:03:01:
dc:70:ba:e3:f4:7b:53:6d:8e:64:7e:5c:28:ce:cf:b9:b5:ef:
6c:37:3b:94:e5:5f:58:28:0e:0d:aa:f4:84:05:fe:0e:0e:2b:
30:5d:05:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ziHQ/4UQg1v91efttOALMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MmE4YzdhMWY2YTRjOTQ5ZTAyN2I1MzY5ZDk3ZDc1NzZl
MTQ3ZjgwHhcNMjUwMTMxMTAwMDM1WhcNMjUwMjAxMTAwMDM1WjAzMTEwLwYDVQQD
Eyg0MjQ2OTIzMzMzYTZmY2Q5YjQ1ODA0MDA4ZjM3YzA5YjE4NDIxNWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXXinPuvaZLixYMh7YN6w/MeRRs/
U3B+j/HYqhEd0RpxVOnSnfjq/lhPoMOuOIo5W97kjq57Hfp2IuXGiUK+sUT81x2j
lSsteqG5tqiqI/Bhe+gYmGJLRK41fVT5ppCXnFDJanW2To/7bJuECgYdk0p4A5n8
MLvYcxbocXBQjMkVMzYvhT9gdbMSk32RQInVCqt6xRY/hehSxCGlrGAljm+6dY1z
2xJrBxEgZIQoDZ+7FNMoVTWlHr2GUuht8g2b6B7bnRGGosPcOQEYndMPvXiD11Fq
oi4Z+41akgq5C3uZPZbz1jYIdn1PW6mD4UZCcjdtry0eOd0m/ELd7VO13QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJGkjMzpvzZtFgEAI83wJsYQhXIMB8GA1UdIwQY
MBaAFKYqjHofakyUngJ7U2nZfXV24Uf4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGlxTWVoOXFUSlNlQW50VGFkbDlkWGJoUl9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mYzAyMmQtZjhlNS00YTZlLThiMWYt
NThjODVkNDMzNmJjLzEvcGlxTWVoOXFUSlNlQW50VGFkbDlkWGJoUl9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9mYzAyMmQtZjhlNS00YTZlLThiMWYtNThjODVkNDMzNmJj
LzEvcGlxTWVoOXFUSlNlQW50VGFkbDlkWGJoUl9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg6mmtNSu
iYSI1xsfcNMc9p0Q2UwZT0BwNTufpP7+emdQbEdZAtVvZe547AUGuQAlRY8rP6Io
bBRdtd1Ak0j1OCv4X33E+dfmPo119NEaG9U0ls15JXCuP0BNqGiGHA6p/Ic+qSZB
hqfVpDX2utz492GR+H/1JqSEdr1/JhiLT+Cgxp3C76QM8yCvKBzNVlKagul/fZP6
D3Ut+lfTVlrKqh2MaZK3E+zqPsAqc2DOxUqkidYBuwAwUMpFm3+KnAkGQLes1xkG
W/B1GF5T6xkXV+YQmT7sJwMB3HC64/R7U22OZH5cKM7PubXvbDc7lOVfWCgODar0
hAX+Dg4rMF0Fvw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:38 2025 by rpki-client