Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
File: ao7dovIciF--ZyhiGLgxjWrSOJY.mft (raw, json)
Hash identifier: ReSQMnkj1o7gEEcf06Kf4Jf2jCvO1f/eqmBuiAmnhR0=
Subject key identifier: 51:4C:26:70:41:1F:6F:C6:4A:4B:E6:8C:39:0E:83:E0:96:F0:9E:06
Authority key identifier: 6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
Certificate issuer: /CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Certificate serial: 0194BCA9768A6EECC4F07776718363F12A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
Manifest number: 06DB
Signing time: Fri 31 Jan 2025 14:00:09 +0000
Manifest this update: Fri 31 Jan 2025 14:00:09 +0000
Manifest next update: Sat 01 Feb 2025 14:00:09 +0000
Files and hashes: 1: 3raexFFj3tPstgifa_l8jJHkazQ.roa (hash: tJRmWB+nxgvOJkVjhkrY7i53nGolZQoscv3aKM9NJDk=)
2: SsPMfuLYiptAn1KbqNePMw_A4VY.roa (hash: s7uhDyPNR/o8+HrZcEPeZiMphtLlmdxbZNwJprWhgdg=)
3: ao7dovIciF--ZyhiGLgxjWrSOJY.crl (hash: vjGtHiYqOVF1X9zdKcvuS3YBLaJYc1NGX21FUF24MNg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:76:8a:6e:ec:c4:f0:77:76:71:83:63:f1:2a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Validity
Not Before: Jan 31 14:00:09 2025 GMT
Not After : Feb 1 14:00:09 2025 GMT
Subject: CN=514c2670411f6fc64a4be68c390e83e096f09e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3c:21:ed:f5:7a:aa:b5:21:d4:7d:fe:cc:3e:
c5:b7:d3:25:49:d0:d1:c6:a8:56:13:fa:a7:1d:14:
8e:fe:ab:d5:63:34:e4:fe:7a:0d:ef:98:45:52:b2:
cb:a9:44:34:9f:7c:7b:12:3e:62:70:9a:98:3b:5c:
fa:f3:84:de:75:97:98:fc:15:b1:1f:cd:e0:d4:da:
eb:63:25:d5:19:2d:6e:20:72:6b:68:49:bc:4c:d3:
67:76:f9:85:bf:d1:9c:fb:66:e5:c8:69:21:44:e2:
24:3c:d4:f4:b9:dd:2b:d6:bb:8d:3a:e6:68:d3:48:
a9:8f:03:e5:0a:0f:d2:c4:73:1b:41:9a:1e:f7:06:
ab:51:88:96:db:81:d7:90:8f:28:37:e4:57:98:2e:
36:7a:a0:9d:7a:0d:b2:ee:ce:db:21:53:1c:ed:44:
7f:8c:a8:1b:22:2e:cc:0e:28:b0:cf:bf:33:93:31:
88:a8:29:42:27:86:4a:3d:fd:e8:d8:57:13:f5:73:
ec:29:a9:2b:0e:c6:a8:21:e6:39:55:1e:7d:53:1b:
c2:b8:3d:69:88:89:c2:92:69:2a:16:55:98:1d:39:
ab:a0:08:33:8a:20:fd:71:47:ae:f4:83:d7:8a:5e:
f1:2d:19:44:61:9b:5f:33:6d:6a:4a:85:90:3a:e1:
13:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4C:26:70:41:1F:6F:C6:4A:4B:E6:8C:39:0E:83:E0:96:F0:9E:06
X509v3 Authority Key Identifier:
keyid:6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:05:be:86:b1:c3:05:e7:60:77:74:a6:69:e8:4d:b5:0a:6e:
b5:9c:d2:58:20:35:39:95:1e:0b:23:68:a7:16:3e:1d:77:b9:
f5:b8:7d:9b:d3:b2:75:9b:a9:76:41:de:42:01:8a:cd:93:2f:
a9:6f:3e:b7:9f:f7:ef:7d:bb:26:de:56:99:1b:52:06:57:68:
4a:bb:82:ba:5f:63:cd:8c:aa:e6:a0:16:b7:55:09:24:eb:2c:
11:63:7b:9b:4b:91:9c:a6:cd:fa:3f:8c:b5:09:48:9b:9a:5d:
8f:85:66:30:ef:c1:c6:6f:c8:29:e9:00:7f:11:98:37:24:44:
92:00:23:b1:ac:21:0e:ca:45:93:68:d6:99:8e:86:6a:bd:eb:
cb:b9:94:fa:2c:e8:ea:a4:ad:d7:a3:b0:18:fe:6f:4f:f6:b9:
a6:5f:63:38:2e:f6:7c:4d:03:ce:37:9b:cd:3e:e5:be:52:92:
17:1d:cb:7a:e1:a1:73:3a:b3:c3:64:b3:53:c4:67:59:62:b9:
84:1b:28:f8:78:87:20:2d:56:04:1f:b0:b3:70:9a:2b:96:dd:
5f:db:be:4c:f9:4f:38:bb:9f:6f:40:50:f3:35:87:3b:bf:d4:
a9:8b:f1:74:22:a7:64:b1:08:33:1c:16:5c:cb:fc:00:ee:ec:
a4:04:c3:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qXaKbuzE8Hd2cYNj8SoGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOGVkZGEyZjIxYzg4NWZiZTY3Mjg2MjE4YjgzMThkNmFk
MjM4OTYwHhcNMjUwMTMxMTQwMDA5WhcNMjUwMjAxMTQwMDA5WjAzMTEwLwYDVQQD
Eyg1MTRjMjY3MDQxMWY2ZmM2NGE0YmU2OGMzOTBlODNlMDk2ZjA5ZTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDwh7fV6qrUh1H3+zD7Ft9MlSdDR
xqhWE/qnHRSO/qvVYzTk/noN75hFUrLLqUQ0n3x7Ej5icJqYO1z684TedZeY/BWx
H83g1NrrYyXVGS1uIHJraEm8TNNndvmFv9Gc+2blyGkhROIkPNT0ud0r1ruNOuZo
00ipjwPlCg/SxHMbQZoe9warUYiW24HXkI8oN+RXmC42eqCdeg2y7s7bIVMc7UR/
jKgbIi7MDiiwz78zkzGIqClCJ4ZKPf3o2FcT9XPsKakrDsaoIeY5VR59UxvCuD1p
iInCkmkqFlWYHTmroAgziiD9cUeu9IPXil7xLRlEYZtfM21qSoWQOuETYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFMJnBBH2/GSkvmjDkOg+CW8J4GMB8GA1UdIwQY
MBaAFGqO3aLyHIhfvmcoYhi4MY1q0jiWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW83ZG92SWNpRi0tWnloaUdMZ3hqV3JTT0pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82ZGI3OTctYTNkMy00MjQxLTkwM2Et
MGM2Njg0MDE5OGQwLzEvYW83ZG92SWNpRi0tWnloaUdMZ3hqV3JTT0pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS82ZGI3OTctYTNkMy00MjQxLTkwM2EtMGM2Njg0MDE5OGQw
LzEvYW83ZG92SWNpRi0tWnloaUdMZ3hqV3JTT0pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhAW+hrHD
Bedgd3SmaehNtQputZzSWCA1OZUeCyNopxY+HXe59bh9m9OydZupdkHeQgGKzZMv
qW8+t5/37327Jt5WmRtSBldoSruCul9jzYyq5qAWt1UJJOssEWN7m0uRnKbN+j+M
tQlIm5pdj4VmMO/Bxm/IKekAfxGYNyREkgAjsawhDspFk2jWmY6Gar3ry7mU+izo
6qSt16OwGP5vT/a5pl9jOC72fE0DzjebzT7lvlKSFx3LeuGhczqzw2SzU8RnWWK5
hBso+HiHIC1WBB+ws3CaK5bdX9u+TPlPOLufb0BQ8zWHO7/UqYvxdCKnZLEIMxwW
XMv8AO7spATDDg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:32 2025 by rpki-client