Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
File: aLReYLH18sssYUoANB6BmW2U0TQ.mft (raw, json)
Hash identifier: qHlBApa2DX5NQRxbyOMoltVFgJxZ/CmKD5t819XWz1A=
Subject key identifier: 28:6B:36:77:C2:16:98:CD:1D:C8:19:49:33:C5:33:F4:3B:D7:C6:10
Authority key identifier: 68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
Certificate issuer: /CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Certificate serial: 0194BBCE04630C22B407DD2F923631387F6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
Manifest number: 010A
Signing time: Fri 31 Jan 2025 10:00:28 +0000
Manifest this update: Fri 31 Jan 2025 10:00:28 +0000
Manifest next update: Sat 01 Feb 2025 10:00:28 +0000
Files and hashes: 1: aLReYLH18sssYUoANB6BmW2U0TQ.crl (hash: zkWr9LaOLUnxMF7qnS+xVXyyHK9UgRP02RH+xpdQFO8=)
2: gKbl_ApJpltlQyfFare3nEvnPsU.roa (hash: tYvNM/6GmJahHZcQYjEfM07RPZ9Md8r3F+k+Tp4UUys=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:04:63:0c:22:b4:07:dd:2f:92:36:31:38:7f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Validity
Not Before: Jan 31 10:00:28 2025 GMT
Not After : Feb 1 10:00:28 2025 GMT
Subject: CN=286b3677c21698cd1dc8194933c533f43bd7c610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:28:04:6a:71:f5:5d:2d:7f:58:e4:d5:06:49:
55:94:81:3d:e4:d0:89:29:d4:bb:71:c1:7c:c4:fd:
f4:f5:1e:71:ed:fa:f9:1a:73:55:16:80:07:99:66:
c9:58:8f:5b:3b:2a:1b:bc:e2:a1:0d:41:f1:c3:4a:
89:5b:01:5b:11:0f:0d:05:2b:37:be:75:df:3b:86:
e8:96:48:9c:05:3b:f8:32:3f:8f:45:bd:6b:14:41:
20:8b:c0:45:de:e2:f0:56:46:32:6f:e5:2e:b4:8b:
f4:a8:c0:1f:90:16:87:34:ff:07:32:6f:96:ec:d5:
23:3c:c7:e8:5c:bf:14:9c:ec:76:b9:75:a1:c1:b8:
64:e6:cd:6d:31:2b:f1:77:7d:57:05:66:7e:2a:45:
05:51:5c:c8:ee:e7:60:1d:4c:5f:fb:7e:db:10:40:
3e:00:26:4f:2c:c0:9b:f5:95:6a:de:c4:7f:4e:35:
00:7b:10:73:55:ab:5d:a7:de:7a:a5:3d:04:7e:32:
37:c7:33:97:44:f3:f5:ba:ec:3e:ac:ac:17:c4:c0:
1e:2a:1e:6a:9f:51:c0:46:dc:82:6f:12:d7:ef:77:
e3:18:8c:03:33:c7:d0:c6:14:69:5d:9e:14:4f:39:
03:de:67:cb:a6:f0:05:2a:3a:4a:98:70:f8:99:4a:
4b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6B:36:77:C2:16:98:CD:1D:C8:19:49:33:C5:33:F4:3B:D7:C6:10
X509v3 Authority Key Identifier:
keyid:68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3b:71:ba:69:cb:67:9a:af:ba:20:c8:76:f8:df:af:ec:75:
a7:3a:c7:10:06:26:72:1f:a4:fc:36:99:a6:bd:22:c3:30:c5:
54:5e:07:ff:29:c3:95:c6:7f:68:9a:02:66:15:38:63:84:37:
81:74:0a:6e:a8:44:74:d9:c9:f8:79:e8:1e:84:44:6d:8e:02:
a7:c7:7e:5f:fc:fe:e7:8a:06:88:93:eb:36:61:2e:8b:5a:3c:
56:cf:90:de:71:65:9c:e0:57:73:bd:13:84:c3:6e:28:ac:16:
4f:52:06:fd:c8:34:2f:e3:77:e3:88:20:bc:2b:fa:da:ae:e2:
de:07:42:db:f5:18:8b:e2:76:f0:8d:50:ae:10:fb:07:1b:cf:
ec:b7:a8:4d:86:c2:bb:1b:08:bd:dc:f3:13:37:33:0e:83:03:
11:55:09:d1:71:53:a0:1d:c0:ae:6b:c3:f6:32:d5:a5:b7:fc:
08:ee:b4:88:4f:c7:b3:73:b5:cd:4c:41:7a:3d:d5:8a:22:e4:
3b:30:79:6c:46:24:be:1b:33:9a:6d:7a:c4:a9:ca:ef:46:96:
21:80:88:df:50:ab:a7:a3:0e:1e:f5:fe:d3:a8:ac:c8:0a:7a:
82:b2:38:ac:cb:33:10:ee:3f:3e:84:c5:f6:68:1d:44:5f:74:
37:3b:83:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zgRjDCK0B90vkjYxOH9vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YjQ1ZTYwYjFmNWYyY2IyYzYxNGEwMDM0MWU4MTk5NmQ5
NGQxMzQwHhcNMjUwMTMxMTAwMDI4WhcNMjUwMjAxMTAwMDI4WjAzMTEwLwYDVQQD
EygyODZiMzY3N2MyMTY5OGNkMWRjODE5NDkzM2M1MzNmNDNiZDdjNjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkygEanH1XS1/WOTVBklVlIE95NCJ
KdS7ccF8xP309R5x7fr5GnNVFoAHmWbJWI9bOyobvOKhDUHxw0qJWwFbEQ8NBSs3
vnXfO4bolkicBTv4Mj+PRb1rFEEgi8BF3uLwVkYyb+UutIv0qMAfkBaHNP8HMm+W
7NUjPMfoXL8UnOx2uXWhwbhk5s1tMSvxd31XBWZ+KkUFUVzI7udgHUxf+37bEEA+
ACZPLMCb9ZVq3sR/TjUAexBzVatdp956pT0EfjI3xzOXRPP1uuw+rKwXxMAeKh5q
n1HARtyCbxLX73fjGIwDM8fQxhRpXZ4UTzkD3mfLpvAFKjpKmHD4mUpLAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChrNnfCFpjNHcgZSTPFM/Q718YQMB8GA1UdIwQY
MBaAFGi0XmCx9fLLLGFKADQegZltlNE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUxSZVlMSDE4c3NzWVVvQU5CNkJtVzJVMFRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wODdhNTYtMGM2My00NzM4LTk5ZmMt
ZTNjNTViYjc3MjhlLzEvYUxSZVlMSDE4c3NzWVVvQU5CNkJtVzJVMFRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wODdhNTYtMGM2My00NzM4LTk5ZmMtZTNjNTViYjc3Mjhl
LzEvYUxSZVlMSDE4c3NzWVVvQU5CNkJtVzJVMFRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPztxumnL
Z5qvuiDIdvjfr+x1pzrHEAYmch+k/DaZpr0iwzDFVF4H/ynDlcZ/aJoCZhU4Y4Q3
gXQKbqhEdNnJ+HnoHoREbY4Cp8d+X/z+54oGiJPrNmEui1o8Vs+Q3nFlnOBXc70T
hMNuKKwWT1IG/cg0L+N344ggvCv62q7i3gdC2/UYi+J28I1QrhD7BxvP7LeoTYbC
uxsIvdzzEzczDoMDEVUJ0XFToB3ArmvD9jLVpbf8CO60iE/Hs3O1zUxBej3ViiLk
OzB5bEYkvhszmm16xKnK70aWIYCI31Crp6MOHvX+06isyAp6grI4rMszEO4/PoTF
9mgdRF90NzuD0A==
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:43:21 2025 by rpki-client