Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
File: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft (raw, json)
Hash identifier: fVUl1+vjQIiGcRHs3yIVLts/UxkBpMhut9j7yxcRYbE=
Subject key identifier: 8F:00:34:E8:82:AA:7B:0F:A8:92:A8:6B:4F:8D:52:82:0F:14:1C:0F
Authority key identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
Certificate issuer: /CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Certificate serial: 0194BBCDBDFF8FA3544506A4C4456BB389FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:10 +0000
Manifest this update: Fri 31 Jan 2025 10:00:10 +0000
Manifest next update: Sat 01 Feb 2025 10:00:10 +0000
Files and hashes: 1: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl (hash: Yl/tvi1m0a9/68n29nDkeQ+T+nKjNPYzNmkGZDY3XqY=)
2: lsGbzxHmmLCraaV9m6GpjO-iIBA.roa (hash: Z6I8DbUnNuqgSWO6SRPbYw4EfdxPDhEpV2EFYvnSy8E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:bd:ff:8f:a3:54:45:06:a4:c4:45:6b:b3:89:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Validity
Not Before: Jan 31 10:00:10 2025 GMT
Not After : Feb 1 10:00:10 2025 GMT
Subject: CN=8f0034e882aa7b0fa892a86b4f8d52820f141c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:3b:24:ba:b1:24:c5:12:68:0a:31:51:85:
c7:6b:0d:97:31:df:65:31:fd:9f:a1:ad:fa:0f:f1:
5f:c8:fa:dd:83:78:fa:a7:91:3b:e2:19:7b:92:50:
4d:5a:a7:b0:29:1c:cd:66:aa:b4:c0:fc:09:61:95:
d3:8c:f6:ed:1c:04:de:36:97:53:1c:fa:d3:fa:5d:
bb:a5:0b:95:4c:7a:f0:c1:db:dd:49:59:82:f2:5e:
69:87:31:ec:93:77:83:cb:e4:ae:b6:f3:22:01:66:
5a:bd:2e:e8:92:86:2c:a5:80:4d:8c:10:b1:41:16:
c7:b5:9b:1d:c9:c3:39:84:05:27:cd:28:73:55:79:
62:04:ca:2f:f5:d3:5c:21:fc:2c:f0:6e:44:36:be:
26:26:6b:1e:8d:6b:cf:5c:b6:23:8e:5f:ab:b9:2c:
ed:9d:ee:23:50:e9:94:2a:1e:79:d6:b0:08:c6:8c:
16:14:a6:84:f7:c7:1e:f3:c9:2f:fa:17:91:d5:30:
a5:07:65:a6:c1:4d:30:9f:1a:e0:47:11:42:67:99:
12:6e:9f:8d:fc:16:b6:d0:04:a7:07:8a:63:1d:67:
20:5a:0e:a0:aa:51:99:ca:8a:1a:6b:ed:0a:bb:ea:
a3:45:29:a3:32:33:94:23:9f:4b:05:4c:18:23:00:
2f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:00:34:E8:82:AA:7B:0F:A8:92:A8:6B:4F:8D:52:82:0F:14:1C:0F
X509v3 Authority Key Identifier:
keyid:D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:db:b6:44:a1:64:86:f0:b2:86:00:8a:38:d8:a9:27:ca:46:
c8:b2:24:a2:6f:c9:24:2b:6d:81:13:dc:63:85:b6:04:63:a7:
2b:af:ff:20:75:95:25:97:99:e9:18:61:a4:c5:0e:d8:d6:b8:
01:d1:2f:8e:ac:78:84:34:09:10:46:11:12:57:62:1c:6c:f2:
99:15:0c:4c:4b:2c:fc:60:af:a9:f5:c3:a6:e8:7b:d2:d9:18:
5f:d2:c8:9c:56:47:40:e6:69:4d:f6:b2:0b:ef:04:72:72:26:
79:90:07:f7:c8:d1:70:ea:38:22:9b:60:e1:20:37:cc:65:7a:
ee:02:d8:e9:e3:ea:5d:6c:c7:f2:f9:1b:8b:3b:87:07:c5:06:
1c:25:04:ea:ce:fb:20:b3:4b:d0:d7:a1:1a:52:ab:df:4c:44:
a2:6c:00:67:cf:1c:c1:aa:b3:0a:ce:48:91:e0:44:c4:c0:7e:
d0:0d:eb:d6:00:d6:08:ef:a5:a2:bc:7f:b8:a0:57:8b:74:95:
93:8e:2b:cd:18:08:4a:09:12:91:2b:d7:52:91:bb:8b:18:50:
16:69:06:74:73:71:64:ae:47:fe:d5:e5:c7:b9:68:09:0a:95:
33:a4:7b:55:41:5e:91:35:e1:33:2d:42:95:5e:ac:b1:b9:00:
70:b8:c7:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zb3/j6NURQakxEVrs4n+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMmU5NWM0NTE5ZGU5MjA4ZTNkMjIzMzJhYWJlYzZiMWEy
ZWE3NTYwHhcNMjUwMTMxMTAwMDEwWhcNMjUwMjAxMTAwMDEwWjAzMTEwLwYDVQQD
Eyg4ZjAwMzRlODgyYWE3YjBmYTg5MmE4NmI0ZjhkNTI4MjBmMTQxYzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrU7JLqxJMUSaAoxUYXHaw2XMd9l
Mf2foa36D/FfyPrdg3j6p5E74hl7klBNWqewKRzNZqq0wPwJYZXTjPbtHATeNpdT
HPrT+l27pQuVTHrwwdvdSVmC8l5phzHsk3eDy+SutvMiAWZavS7okoYspYBNjBCx
QRbHtZsdycM5hAUnzShzVXliBMov9dNcIfws8G5ENr4mJmsejWvPXLYjjl+ruSzt
ne4jUOmUKh551rAIxowWFKaE98ce88kv+heR1TClB2WmwU0wnxrgRxFCZ5kSbp+N
/Ba20ASnB4pjHWcgWg6gqlGZyooaa+0Ku+qjRSmjMjOUI59LBUwYIwAvFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8ANOiCqnsPqJKoa0+NUoIPFBwPMB8GA1UdIwQY
MBaAFNIulcRRnekgjj0iMyqr7GsaLqdWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC85OTE1M2QtNDcwMi00Mzc1LThlNDQt
ZjJlNTRkZGVhM2IzLzEvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC85OTE1M2QtNDcwMi00Mzc1LThlNDQtZjJlNTRkZGVhM2Iz
LzEvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNu2RKFk
hvCyhgCKONipJ8pGyLIkom/JJCttgRPcY4W2BGOnK6//IHWVJZeZ6RhhpMUO2Na4
AdEvjqx4hDQJEEYREldiHGzymRUMTEss/GCvqfXDpuh70tkYX9LInFZHQOZpTfay
C+8EcnImeZAH98jRcOo4Iptg4SA3zGV67gLY6ePqXWzH8vkbizuHB8UGHCUE6s77
ILNL0NehGlKr30xEomwAZ88cwaqzCs5IkeBExMB+0A3r1gDWCO+lorx/uKBXi3SV
k44rzRgISgkSkSvXUpG7ixhQFmkGdHNxZK5H/tXlx7loCQqVM6R7VUFekTXhMy1C
lV6ssbkAcLjHlw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:31 2025 by rpki-client