Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
File: rLwtpPrHe7qtKaWYa0EH9THtLj4.mft (raw, json)
Hash identifier: PmxfHS2U/RmZ48LKHxPIi77epOrEyr6++xXM/pbJGTc=
Subject key identifier: 76:EC:BD:C0:34:1B:59:DD:4D:67:E9:A1:60:54:99:E2:E6:F2:61:B5
Authority key identifier: AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
Certificate issuer: /CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Certificate serial: 0194BCA9BF236E697A4BEC1DCE9F7F312A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
Manifest number: 12E0
Signing time: Fri 31 Jan 2025 14:00:28 +0000
Manifest this update: Fri 31 Jan 2025 14:00:28 +0000
Manifest next update: Sat 01 Feb 2025 14:00:28 +0000
Files and hashes: 1: idTCOx8-4Tst-Qoz7K6F7H3dYN4.roa (hash: arkT/3jnb38g6YOrTZp9aafP6pWkmdDHWiUSBAjozQo=)
2: rLwtpPrHe7qtKaWYa0EH9THtLj4.crl (hash: BTUP5aM4iBhSYfm+ONUY4cxgTEwMy7+xB4k6H2UlC7s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:bf:23:6e:69:7a:4b:ec:1d:ce:9f:7f:31:2a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Validity
Not Before: Jan 31 14:00:28 2025 GMT
Not After : Feb 1 14:00:28 2025 GMT
Subject: CN=76ecbdc0341b59dd4d67e9a1605499e2e6f261b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0d:71:66:35:c3:ed:34:de:2b:aa:85:c7:c2:
a8:15:08:92:5a:af:e9:0e:fa:3a:d3:a5:97:9e:ea:
01:1d:17:cb:ee:d0:87:2f:67:ba:72:e0:d6:d1:1b:
82:e1:41:58:a1:17:bc:14:9c:bb:51:0f:09:d9:9e:
f5:26:b0:c9:d4:aa:df:b4:cd:78:e4:db:62:42:87:
e0:f0:2f:1e:76:ea:d1:90:f8:aa:a4:89:be:25:6f:
8a:6e:37:d2:86:6e:f8:8f:85:90:e1:1b:a9:97:e6:
e2:eb:9f:e3:ce:76:10:46:04:8f:41:f1:72:87:9a:
2a:41:98:1b:53:3c:85:8e:f7:ad:60:80:ef:e7:91:
3d:8a:87:33:32:98:18:d8:f6:f0:d8:d9:99:58:0b:
eb:0a:77:87:62:ba:de:d7:e8:d5:3f:a9:fb:24:dc:
f6:70:80:c2:1a:d2:a0:cc:54:45:ef:2e:37:6f:42:
6b:10:9a:1f:8d:94:51:02:67:d0:9c:e7:97:d5:4f:
c1:8d:d7:15:c8:bb:c9:ca:ff:96:02:94:24:0e:99:
ed:30:92:5b:69:b5:39:03:59:f0:01:82:01:90:cf:
f1:81:bc:2a:2b:5c:e0:15:26:0c:1b:29:bf:fd:92:
1f:6f:07:93:da:8c:d4:30:db:5d:f1:87:24:53:84:
51:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:EC:BD:C0:34:1B:59:DD:4D:67:E9:A1:60:54:99:E2:E6:F2:61:B5
X509v3 Authority Key Identifier:
keyid:AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:cc:cd:6f:13:b7:b9:c1:ea:76:ef:a5:96:3e:f5:c9:62:c4:
18:3c:e7:bb:46:52:49:a8:6e:6b:41:7f:3f:37:e5:f4:25:b3:
a7:ad:d6:ba:d9:27:3f:d9:5f:af:07:27:e3:6e:9c:89:9f:26:
2d:79:7c:5d:d9:84:b8:e1:4d:0b:eb:da:79:44:22:f6:e3:66:
28:e8:bf:17:34:a1:40:65:30:67:fa:1f:73:2e:e5:e6:dd:c6:
16:1b:7b:25:77:06:0e:4a:aa:9a:2e:ee:1b:6b:1b:29:a1:32:
29:23:25:46:21:bf:ce:a1:a2:cb:85:a2:7c:82:f3:7a:54:6e:
45:33:cd:99:3c:eb:96:b6:17:84:60:a5:1e:87:ff:6e:fd:a9:
67:07:22:8a:30:b3:15:e1:fd:89:d4:a5:9a:2d:d0:42:97:f8:
b3:c0:54:f4:5b:85:b4:8e:0f:36:0d:e8:6f:6c:3c:54:5b:5d:
ac:de:b8:4f:3b:db:79:f0:a3:cb:65:80:e9:f8:33:a2:27:5d:
43:6b:78:33:f8:d9:64:51:6d:cc:1a:e3:c3:8f:a6:61:3f:4b:
6c:9f:71:1e:70:52:37:a3:65:04:b2:67:82:21:54:52:c1:0a:
65:18:1d:66:9f:4f:30:3d:be:f4:63:a1:43:6b:ad:53:9c:1b:
bd:3a:6e:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qb8jbml6S+wdzp9/MSqDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYmMyZGE0ZmFjNzdiYmFhZDI5YTU5ODZiNDEwN2Y1MzFl
ZDJlM2UwHhcNMjUwMTMxMTQwMDI4WhcNMjUwMjAxMTQwMDI4WjAzMTEwLwYDVQQD
Eyg3NmVjYmRjMDM0MWI1OWRkNGQ2N2U5YTE2MDU0OTllMmU2ZjI2MWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA1xZjXD7TTeK6qFx8KoFQiSWq/p
Dvo606WXnuoBHRfL7tCHL2e6cuDW0RuC4UFYoRe8FJy7UQ8J2Z71JrDJ1KrftM14
5NtiQofg8C8edurRkPiqpIm+JW+KbjfShm74j4WQ4Rupl+bi65/jznYQRgSPQfFy
h5oqQZgbUzyFjvetYIDv55E9ioczMpgY2Pbw2NmZWAvrCneHYrre1+jVP6n7JNz2
cIDCGtKgzFRF7y43b0JrEJofjZRRAmfQnOeX1U/BjdcVyLvJyv+WApQkDpntMJJb
abU5A1nwAYIBkM/xgbwqK1zgFSYMGym//ZIfbweT2ozUMNtd8YckU4RR5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbsvcA0G1ndTWfpoWBUmeLm8mG1MB8GA1UdIwQY
MBaAFKy8LaT6x3u6rSmlmGtBB/Ux7S4+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckx3dHBQckhlN3F0S2FXWWEwRUg5VEh0TGo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85OGE4YjktOGU5OS00ZGIzLWIwNjEt
ZTkyMzBlNTg4NjI2LzEvckx3dHBQckhlN3F0S2FXWWEwRUg5VEh0TGo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS85OGE4YjktOGU5OS00ZGIzLWIwNjEtZTkyMzBlNTg4NjI2
LzEvckx3dHBQckhlN3F0S2FXWWEwRUg5VEh0TGo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1szNbxO3
ucHqdu+llj71yWLEGDznu0ZSSahua0F/Pzfl9CWzp63WutknP9lfrwcn426ciZ8m
LXl8XdmEuOFNC+vaeUQi9uNmKOi/FzShQGUwZ/ofcy7l5t3GFht7JXcGDkqqmi7u
G2sbKaEyKSMlRiG/zqGiy4WifILzelRuRTPNmTzrlrYXhGClHof/bv2pZwciijCz
FeH9idSlmi3QQpf4s8BU9FuFtI4PNg3ob2w8VFtdrN64TzvbefCjy2WA6fgzoidd
Q2t4M/jZZFFtzBrjw4+mYT9LbJ9xHnBSN6NlBLJngiFUUsEKZRgdZp9PMD2+9GOh
Q2utU5wbvTpuBw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:31 2025 by rpki-client