Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/mmwLn7E_QxbtbKP4b_xxhcCds9c.mft
File: mmwLn7E_QxbtbKP4b_xxhcCds9c.mft (raw, json)
Hash identifier: tiJh2FZZgsTVrHZYPgV/46xHfiiIx7eD/I2WN32rF6g=
Subject key identifier: B5:96:D8:AC:AC:64:4A:AE:3E:FD:09:B6:1B:B1:47:07:8E:83:6E:03
Authority key identifier: 9A:6C:0B:9F:B1:3F:43:16:ED:6C:A3:F8:6F:FC:71:85:C0:9D:B3:D7
Certificate issuer: /CN=9a6c0b9fb13f4316ed6ca3f86ffc7185c09db3d7
Certificate serial: 0194BD858008AA7905DB587D650BD497CA81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmwLn7E_QxbtbKP4b_xxhcCds9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/mmwLn7E_QxbtbKP4b_xxhcCds9c.mft
Manifest number: 01DC
Signing time: Fri 31 Jan 2025 18:00:30 +0000
Manifest this update: Fri 31 Jan 2025 18:00:30 +0000
Manifest next update: Sat 01 Feb 2025 18:00:30 +0000
Files and hashes: 1: 1ttBSna0nLfwG1nJtSGf5q_JjKk.roa (hash: m74pjqodozkLHsQi98B9EOi05a8gpyyAWgkyD/Vzf2c=)
2: 9nGi0GaQ-mUZLQJZf4HlCcb6wIc.roa (hash: pSH8ptTsxSAlhoS4qLcEBiOaIHL5q7GZu0kDDTwaHJ4=)
3: mmwLn7E_QxbtbKP4b_xxhcCds9c.crl (hash: 3CdM0YrapkJmIaaWTa/l1CiUMBjavYy5yZnAQMoLxn0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:80:08:aa:79:05:db:58:7d:65:0b:d4:97:ca:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6c0b9fb13f4316ed6ca3f86ffc7185c09db3d7
Validity
Not Before: Jan 31 18:00:30 2025 GMT
Not After : Feb 1 18:00:30 2025 GMT
Subject: CN=b596d8acac644aae3efd09b61bb147078e836e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:45:06:23:a6:95:ba:a9:44:f4:56:36:f8:58:
51:c5:07:0c:ed:05:2d:09:d5:6e:ea:34:2d:c6:3d:
40:82:b7:90:85:5d:c7:cd:5d:d9:0e:1f:97:57:58:
cb:9e:5b:b8:3f:7c:99:de:4c:2a:8b:59:92:62:de:
01:78:01:1c:b2:34:1d:c1:4d:8c:be:e1:44:63:40:
8f:47:68:e1:ca:a2:af:1b:16:a0:9e:c1:23:a2:27:
11:46:42:ac:14:bb:45:de:98:72:ab:c9:8a:81:44:
85:95:a5:0a:be:bd:2a:43:f3:7c:2d:57:bf:d0:dc:
c8:04:50:36:e6:e8:b3:5a:26:1f:46:24:56:70:71:
56:7d:8d:c1:22:ff:dc:5d:e7:89:03:12:17:12:e9:
ee:9c:17:56:94:ee:ae:ea:f8:d6:c6:57:fa:ce:34:
01:15:f0:53:18:5e:d4:af:ff:20:c6:38:d6:7b:ca:
97:7a:6e:b7:63:e4:8f:21:fb:77:08:39:4d:a3:9c:
d2:c3:34:d2:89:43:cb:1d:b1:17:6c:ab:82:ce:9f:
b1:6f:45:5b:8e:f7:5a:1f:8c:be:5a:a3:28:12:b3:
43:ce:63:e9:87:12:8b:a2:c6:ee:63:92:08:39:c2:
ec:86:00:24:e2:63:2f:87:34:59:71:b5:dc:bf:29:
46:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:96:D8:AC:AC:64:4A:AE:3E:FD:09:B6:1B:B1:47:07:8E:83:6E:03
X509v3 Authority Key Identifier:
keyid:9A:6C:0B:9F:B1:3F:43:16:ED:6C:A3:F8:6F:FC:71:85:C0:9D:B3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmwLn7E_QxbtbKP4b_xxhcCds9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/mmwLn7E_QxbtbKP4b_xxhcCds9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/mmwLn7E_QxbtbKP4b_xxhcCds9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a5:22:d9:06:f2:2d:6e:71:b2:bb:18:e6:a7:ea:01:57:06:
bf:3b:2c:d3:e5:85:31:d3:76:80:d2:f0:b2:81:41:b6:8b:6b:
96:44:a9:3f:05:1e:8d:2c:3e:1f:da:ac:93:92:ec:3c:c6:e7:
71:18:3f:4c:7f:92:35:a9:c1:5e:c1:2f:ba:a2:f3:9f:92:e8:
54:42:8a:1c:46:25:a8:b5:a2:c0:f1:c8:7a:f5:2a:b5:f6:a2:
b1:f0:15:94:1f:9f:13:d2:da:c1:ad:db:b6:27:48:30:04:e7:
b2:92:62:f3:93:0b:79:3b:33:d0:df:26:c0:9a:d0:b1:48:e8:
05:4d:3b:29:7e:ea:92:81:5c:74:81:a2:6c:9a:70:85:73:4c:
f5:bf:3a:53:c0:28:80:e8:d9:f4:ba:d6:af:d3:ef:87:79:de:
18:25:d2:56:7b:3c:8e:ca:3c:cb:80:ce:10:28:8e:0f:3a:e7:
c8:f8:89:1e:15:20:12:92:44:e9:47:29:b0:0b:45:6a:0c:07:
05:18:08:f9:34:f0:88:ac:8b:8a:1e:0e:e6:2c:b1:80:54:83:
43:ea:00:5b:b5:73:22:62:f3:79:de:49:c8:df:bd:b8:bf:1c:
5c:4e:45:51:1b:a4:b3:e0:ba:93:a8:0e:39:40:e8:59:09:28:
86:44:84:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hYAIqnkF21h9ZQvUl8qBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNmMwYjlmYjEzZjQzMTZlZDZjYTNmODZmZmM3MTg1YzA5
ZGIzZDcwHhcNMjUwMTMxMTgwMDMwWhcNMjUwMjAxMTgwMDMwWjAzMTEwLwYDVQQD
EyhiNTk2ZDhhY2FjNjQ0YWFlM2VmZDA5YjYxYmIxNDcwNzhlODM2ZTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEUGI6aVuqlE9FY2+FhRxQcM7QUt
CdVu6jQtxj1AgreQhV3HzV3ZDh+XV1jLnlu4P3yZ3kwqi1mSYt4BeAEcsjQdwU2M
vuFEY0CPR2jhyqKvGxagnsEjoicRRkKsFLtF3phyq8mKgUSFlaUKvr0qQ/N8LVe/
0NzIBFA25uizWiYfRiRWcHFWfY3BIv/cXeeJAxIXEununBdWlO6u6vjWxlf6zjQB
FfBTGF7Ur/8gxjjWe8qXem63Y+SPIft3CDlNo5zSwzTSiUPLHbEXbKuCzp+xb0Vb
jvdaH4y+WqMoErNDzmPphxKLosbuY5IIOcLshgAk4mMvhzRZcbXcvylG+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWW2KysZEquPv0JthuxRweOg24DMB8GA1UdIwQY
MBaAFJpsC5+xP0MW7Wyj+G/8cYXAnbPXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW13TG43RV9ReGJ0YktQNGJfeHhoY0NkczljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81MGEyMzktZDViYy00MmZlLTk1YTUt
MWFjMDhlOGE4Y2I0LzEvbW13TG43RV9ReGJ0YktQNGJfeHhoY0NkczljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi81MGEyMzktZDViYy00MmZlLTk1YTUtMWFjMDhlOGE4Y2I0
LzEvbW13TG43RV9ReGJ0YktQNGJfeHhoY0NkczljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK6Ui2Qby
LW5xsrsY5qfqAVcGvzss0+WFMdN2gNLwsoFBtotrlkSpPwUejSw+H9qsk5LsPMbn
cRg/TH+SNanBXsEvuqLzn5LoVEKKHEYlqLWiwPHIevUqtfaisfAVlB+fE9Lawa3b
tidIMATnspJi85MLeTsz0N8mwJrQsUjoBU07KX7qkoFcdIGibJpwhXNM9b86U8Ao
gOjZ9LrWr9Pvh3neGCXSVns8jso8y4DOECiODzrnyPiJHhUgEpJE6UcpsAtFagwH
BRgI+TTwiKyLih4O5iyxgFSDQ+oAW7VzImLzed5JyN+9uL8cXE5FURuks+C6k6gO
OUDoWQkohkSElQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:01 2025 by rpki-client