Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
File: 25v841gk9uybXJ85qBFQzhYYEic.mft (raw, json)
Hash identifier: kFjdeKEzx++fnCV+s8tDQblKygRUCJKS/0elPurBqSk=
Subject key identifier: 38:51:39:A3:49:B2:BD:E4:9F:3F:0A:D5:82:42:4D:AF:E2:A7:66:56
Authority key identifier: DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
Certificate issuer: /CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Certificate serial: 0194BC3C7BE7CA2A395DC8E7D0D031F37878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
Manifest number: AE
Signing time: Fri 31 Jan 2025 12:01:07 +0000
Manifest this update: Fri 31 Jan 2025 12:01:07 +0000
Manifest next update: Sat 01 Feb 2025 12:01:07 +0000
Files and hashes: 1: 0Bo64BgX0hylRoEuTO1mVFUAcSM.roa (hash: k/E5TUmiripioDJT6E/uQgRfu9E1lOiyhVTdC1Kwllc=)
2: 25v841gk9uybXJ85qBFQzhYYEic.crl (hash: 6mkg+mPletK30V4yT7Kfr3Hfh9G9WwxlES61Ez0LgpM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7b:e7:ca:2a:39:5d:c8:e7:d0:d0:31:f3:78:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Validity
Not Before: Jan 31 12:01:07 2025 GMT
Not After : Feb 1 12:01:07 2025 GMT
Subject: CN=385139a349b2bde49f3f0ad582424dafe2a76656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:a1:5c:bb:1e:65:78:4b:ba:bf:fc:e4:86:
29:64:92:83:7c:40:8d:56:b7:8a:5c:75:a5:78:b9:
5f:06:18:18:44:ed:12:31:53:25:c1:7a:a8:39:a5:
99:be:6f:26:15:b4:7e:bf:e8:39:6d:44:1a:9e:c3:
4f:a5:75:58:a6:c1:c6:2b:7a:aa:cd:c5:f7:12:c0:
cf:5a:30:a0:3e:5f:59:4d:a9:8f:a4:77:0c:98:6b:
e5:b6:66:66:2c:a6:a0:cb:ad:9f:c7:80:7e:77:b1:
ef:ad:eb:d9:8a:8a:ec:ee:cb:b8:5c:16:c8:d2:5a:
a4:9e:46:c8:d9:69:be:08:50:80:d2:93:ae:9e:47:
b6:23:c6:92:9d:b1:89:39:47:a2:fc:fb:ce:86:49:
18:04:fc:d2:f4:7b:6f:db:61:46:ac:31:c2:46:76:
76:5b:90:c0:60:88:52:a0:84:0c:8c:f0:06:3c:66:
3c:dd:3d:ec:2a:3e:ca:c3:f6:59:98:ca:5d:6d:97:
4c:61:b3:45:70:4a:d9:e9:8f:28:af:d7:14:b1:6a:
9a:63:e2:a1:6e:d4:9e:48:51:f4:00:6b:1b:89:b4:
63:0b:b5:17:a0:c3:09:60:25:1a:ce:3e:45:c9:ee:
6f:22:9e:9d:aa:7e:77:b8:01:85:8e:a3:b2:b9:99:
ec:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:51:39:A3:49:B2:BD:E4:9F:3F:0A:D5:82:42:4D:AF:E2:A7:66:56
X509v3 Authority Key Identifier:
keyid:DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:9c:e4:84:5e:49:81:72:1b:9b:af:c0:09:3d:c9:2c:6b:d4:
f4:a9:69:d3:37:a3:3c:79:f7:09:7d:b7:31:ab:8f:36:51:18:
4b:20:2a:eb:f4:7e:08:70:f8:08:99:1c:bf:c0:27:83:63:e7:
aa:9d:b6:a6:3a:0d:3c:9f:06:e2:d6:8e:28:bc:dc:58:e0:6b:
b9:19:42:5c:60:74:2a:a5:5a:37:af:70:28:c7:ec:87:15:6e:
f0:f9:b1:e6:23:8f:af:9a:54:81:e6:71:83:13:92:87:b4:95:
52:0c:c5:c5:bf:b1:df:3f:3e:4e:63:21:fd:97:9e:bc:29:76:
90:45:1b:a6:21:dc:d4:8c:c4:8d:07:db:e7:57:09:59:12:65:
75:30:d5:31:7d:ec:fa:83:77:e2:c2:f8:ea:fe:9d:66:89:88:
87:f3:54:ed:e3:a6:24:94:65:24:da:86:e9:ff:92:54:69:6c:
45:98:96:50:dd:16:b4:d6:0b:cb:bc:46:14:a7:5b:62:e2:6c:
a1:b0:c7:1b:ce:4d:b2:f9:70:ed:27:89:d5:80:09:43:bc:10:
a3:0e:b1:a2:13:7d:bf:17:10:5e:62:03:d6:30:f5:70:36:a2:
80:f4:0c:d0:9c:8b:d6:fd:8a:c9:42:39:f9:6a:ca:ef:f1:00:
d1:e3:0c:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PHvnyio5Xcjn0NAx83h4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWJmY2UzNTgyNGY2ZWM5YjVjOWYzOWE4MTE1MGNlMTYx
ODEyMjcwHhcNMjUwMTMxMTIwMTA3WhcNMjUwMjAxMTIwMTA3WjAzMTEwLwYDVQQD
EygzODUxMzlhMzQ5YjJiZGU0OWYzZjBhZDU4MjQyNGRhZmUyYTc2NjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeehXLseZXhLur/85IYpZJKDfECN
VreKXHWleLlfBhgYRO0SMVMlwXqoOaWZvm8mFbR+v+g5bUQansNPpXVYpsHGK3qq
zcX3EsDPWjCgPl9ZTamPpHcMmGvltmZmLKagy62fx4B+d7HvrevZiors7su4XBbI
0lqknkbI2Wm+CFCA0pOunke2I8aSnbGJOUei/PvOhkkYBPzS9Htv22FGrDHCRnZ2
W5DAYIhSoIQMjPAGPGY83T3sKj7Kw/ZZmMpdbZdMYbNFcErZ6Y8or9cUsWqaY+Kh
btSeSFH0AGsbibRjC7UXoMMJYCUazj5Fye5vIp6dqn53uAGFjqOyuZnsvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhROaNJsr3knz8K1YJCTa/ip2ZWMB8GA1UdIwQY
MBaAFNub/ONYJPbsm1yfOagRUM4WGBInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjV2ODQxZ2s5dXliWEo4NXFCRlF6aFlZRWljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iMzg3MDctMzljZS00Y2NiLTk3YTAt
OWI3MGQ2MGM0ODAwLzEvMjV2ODQxZ2s5dXliWEo4NXFCRlF6aFlZRWljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9iMzg3MDctMzljZS00Y2NiLTk3YTAtOWI3MGQ2MGM0ODAw
LzEvMjV2ODQxZ2s5dXliWEo4NXFCRlF6aFlZRWljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArJzkhF5J
gXIbm6/ACT3JLGvU9Klp0zejPHn3CX23MauPNlEYSyAq6/R+CHD4CJkcv8Ang2Pn
qp22pjoNPJ8G4taOKLzcWOBruRlCXGB0KqVaN69wKMfshxVu8Pmx5iOPr5pUgeZx
gxOSh7SVUgzFxb+x3z8+TmMh/ZeevCl2kEUbpiHc1IzEjQfb51cJWRJldTDVMX3s
+oN34sL46v6dZomIh/NU7eOmJJRlJNqG6f+SVGlsRZiWUN0WtNYLy7xGFKdbYuJs
obDHG85Nsvlw7SeJ1YAJQ7wQow6xohN9vxcQXmID1jD1cDaigPQM0JyL1v2KyUI5
+WrK7/EA0eMMgg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:32 2025 by rpki-client