Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
File: m9o0FBNxKfo4psYcSWq4thQJzgI.mft (raw, json)
Hash identifier: b+gk9GqOOIuH2o+1X7q80k6lxnlz6H/4uaKtKuWkCiw=
Subject key identifier: 84:73:71:F5:00:65:F1:F4:6C:6C:82:A7:77:1E:8A:D2:8A:DD:66:69
Authority key identifier: 9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
Certificate issuer: /CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Certificate serial: 0194BCA9F39D94ACA5B589A066DFF82F0E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:42 +0000
Manifest this update: Fri 31 Jan 2025 14:00:42 +0000
Manifest next update: Sat 01 Feb 2025 14:00:42 +0000
Files and hashes: 1: U6nb6DpUzJV_xi4UhiA5O3aKdZE.roa (hash: at4iy2FPtAChzVS5IZxWuVWW9v3c10T2DEm7KMEtSwY=)
2: m9o0FBNxKfo4psYcSWq4thQJzgI.crl (hash: Kvp1ISWlFhoqvuQZnVYSCdYOpvA66122pTr4jETeGqM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f3:9d:94:ac:a5:b5:89:a0:66:df:f8:2f:0e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Validity
Not Before: Jan 31 14:00:42 2025 GMT
Not After : Feb 1 14:00:42 2025 GMT
Subject: CN=847371f50065f1f46c6c82a7771e8ad28add6669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:d1:3f:8f:59:11:4a:33:18:90:98:b3:8e:
4f:a1:a9:38:ba:ce:81:69:20:8f:1d:e5:29:2e:ab:
e4:22:68:b2:3d:56:a6:07:ce:96:9f:b8:05:d0:ec:
56:d0:18:73:82:e3:4b:9e:73:84:f5:2c:62:2f:d4:
15:7d:dd:3b:09:79:53:79:dd:f1:9d:50:6b:13:b6:
2d:cd:fe:a8:a4:23:2a:eb:43:6e:e1:1d:fa:88:e8:
b1:d9:08:99:95:b9:cf:0b:02:92:ef:93:03:8d:e6:
58:73:31:c4:f6:18:a7:20:9a:39:5a:93:f1:b5:85:
92:61:16:b2:8b:10:da:41:dd:54:2f:c8:4d:e1:4f:
cf:36:1f:16:12:1a:83:b5:4b:00:1e:42:e0:cb:8d:
fc:13:63:e7:aa:f8:ea:36:e8:59:c7:82:74:78:e6:
7d:c7:8c:3f:76:74:ca:1b:95:81:f0:60:b5:55:96:
f4:6a:e0:03:ca:5f:de:0c:e4:3a:b7:da:98:a3:98:
10:c0:e2:9c:79:4a:8a:24:09:4d:27:37:cb:23:e2:
39:ac:f4:11:cb:c7:29:d5:f3:2c:cc:7d:c7:f5:c0:
2a:64:eb:5c:86:1f:09:fb:13:b4:50:8c:27:0d:94:
a0:a2:80:bc:29:58:43:a4:fe:05:1f:e3:0e:ef:09:
e7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:73:71:F5:00:65:F1:F4:6C:6C:82:A7:77:1E:8A:D2:8A:DD:66:69
X509v3 Authority Key Identifier:
keyid:9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:70:2d:88:73:f9:af:d4:bc:b3:ed:91:23:ea:ab:ba:44:54:
ae:a9:bf:d0:d1:4d:a0:42:8e:71:99:92:3e:21:b4:db:58:b2:
8a:10:6e:f9:9b:0d:4c:86:c3:bb:92:2c:c0:86:04:f5:2d:e6:
f5:b1:61:d9:fb:cd:5b:4f:e0:91:b7:c9:f7:29:dd:59:a7:35:
6a:ff:9b:8f:19:2b:3b:68:08:49:76:d2:6e:4c:23:19:55:4a:
7d:00:5c:44:c4:10:eb:b3:46:11:21:52:43:66:d2:11:33:c5:
e2:28:9c:a1:32:a7:89:34:91:6e:51:c4:eb:9b:97:39:15:b1:
0d:fe:95:2f:0a:ef:09:70:06:71:04:a3:fa:e1:c1:00:11:c6:
70:03:58:60:df:df:8c:d6:f7:fd:b8:bf:21:9c:f3:a6:a2:93:
38:c8:8b:45:3b:c6:4d:7a:41:eb:4c:bb:8b:32:71:72:b7:00:
00:26:a3:41:cf:4a:5f:b7:a3:42:62:4b:89:7d:40:b7:2b:30:
35:0c:9c:8f:91:32:e9:c8:c2:4c:3d:e0:d6:e2:ec:e5:d8:bd:
fa:b1:94:6c:c9:38:c9:10:98:82:a5:e6:4f:81:78:f0:9b:1b:
f7:90:67:78:c4:73:20:e9:e0:5c:92:0b:44:7a:e3:65:e7:38:
a4:fe:60:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qfOdlKyltYmgZt/4Lw5fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZGEzNDE0MTM3MTI5ZmEzOGE2YzYxYzQ5NmFiOGI2MTQw
OWNlMDIwHhcNMjUwMTMxMTQwMDQyWhcNMjUwMjAxMTQwMDQyWjAzMTEwLwYDVQQD
Eyg4NDczNzFmNTAwNjVmMWY0NmM2YzgyYTc3NzFlOGFkMjhhZGQ2NjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz3RP49ZEUozGJCYs45Poak4us6B
aSCPHeUpLqvkImiyPVamB86Wn7gF0OxW0BhzguNLnnOE9SxiL9QVfd07CXlTed3x
nVBrE7Ytzf6opCMq60Nu4R36iOix2QiZlbnPCwKS75MDjeZYczHE9hinIJo5WpPx
tYWSYRayixDaQd1UL8hN4U/PNh8WEhqDtUsAHkLgy438E2PnqvjqNuhZx4J0eOZ9
x4w/dnTKG5WB8GC1VZb0auADyl/eDOQ6t9qYo5gQwOKceUqKJAlNJzfLI+I5rPQR
y8cp1fMszH3H9cAqZOtchh8J+xO0UIwnDZSgooC8KVhDpP4FH+MO7wnnzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRzcfUAZfH0bGyCp3ceitKK3WZpMB8GA1UdIwQY
MBaAFJvaNBQTcSn6OKbGHElquLYUCc4CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTlvMEZCTnhLZm80cHNZY1NXcTR0aFFKemdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yOTk1Y2QtNDY1Zi00YjQwLWE0NTUt
MTZkM2NkMzUyZjJlLzEvbTlvMEZCTnhLZm80cHNZY1NXcTR0aFFKemdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yOTk1Y2QtNDY1Zi00YjQwLWE0NTUtMTZkM2NkMzUyZjJl
LzEvbTlvMEZCTnhLZm80cHNZY1NXcTR0aFFKemdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXAtiHP5
r9S8s+2RI+qrukRUrqm/0NFNoEKOcZmSPiG021iyihBu+ZsNTIbDu5IswIYE9S3m
9bFh2fvNW0/gkbfJ9yndWac1av+bjxkrO2gISXbSbkwjGVVKfQBcRMQQ67NGESFS
Q2bSETPF4iicoTKniTSRblHE65uXORWxDf6VLwrvCXAGcQSj+uHBABHGcANYYN/f
jNb3/bi/IZzzpqKTOMiLRTvGTXpB60y7izJxcrcAACajQc9KX7ejQmJLiX1Atysw
NQycj5Ey6cjCTD3g1uLs5di9+rGUbMk4yRCYgqXmT4F48Jsb95BneMRzIOngXJIL
RHrjZec4pP5g5Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:26 2025 by rpki-client