Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
File: 0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft (raw, json)
Hash identifier: z93cfPwffQtN8tqaSUfiAR2LeMIrfYvGbYTeJ1WXR9k=
Subject key identifier: B3:69:04:C5:E1:A6:2F:FB:A0:07:6C:FD:2F:42:0F:5D:C4:C0:15:31
Authority key identifier: D3:2D:00:03:68:C1:D5:4F:08:A7:78:2C:07:67:3B:68:A9:3E:DF:C5
Certificate issuer: /CN=d32d000368c1d54f08a7782c07673b68a93edfc5
Certificate serial: 0194BCE0E28E24E6EBCAB7CC9E588B86DE68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
Manifest number: 1034
Signing time: Fri 31 Jan 2025 15:00:42 +0000
Manifest this update: Fri 31 Jan 2025 15:00:42 +0000
Manifest next update: Sat 01 Feb 2025 15:00:42 +0000
Files and hashes: 1: 0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl (hash: 6XeB2BK9mGwf6mx7KP0KfojV7jQtiRQlSx9LxACIf2M=)
2: jQ4CExkfR5inS0zDHfJTtnlJ6V8.roa (hash: GXyBOWfkGPF9vLeodoo4anr9TA244Yte3dkyFGm9PtM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e2:8e:24:e6:eb:ca:b7:cc:9e:58:8b:86:de:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32d000368c1d54f08a7782c07673b68a93edfc5
Validity
Not Before: Jan 31 15:00:42 2025 GMT
Not After : Feb 1 15:00:42 2025 GMT
Subject: CN=b36904c5e1a62ffba0076cfd2f420f5dc4c01531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8b:ba:38:50:90:6c:75:75:ea:06:d8:ec:99:
51:22:b2:e0:6a:0d:a5:f1:0e:f0:67:99:c1:03:b3:
c9:99:cc:88:ac:d9:85:5d:f8:48:b0:d6:e6:f0:46:
7b:6e:ab:1e:47:62:ea:f5:31:18:a8:c4:19:e4:9c:
e1:d1:b2:48:51:6b:1b:ef:87:51:a6:7d:d7:a8:7e:
3d:f2:98:f5:00:df:23:7e:b8:bc:28:e7:68:0f:79:
f6:eb:d9:9e:d9:0b:f1:eb:78:ad:6b:41:08:07:83:
42:7c:90:73:0b:5d:97:2d:88:ad:84:01:33:54:cb:
d6:49:9b:89:f9:0e:b4:12:34:fb:36:4f:6a:b5:32:
ca:92:1d:6c:ea:1c:4c:f8:2d:79:b4:cf:2b:ad:d2:
8e:45:e6:a3:d1:9c:d1:f5:ea:ce:74:db:8e:1b:2e:
e2:9c:55:46:7a:68:9a:0b:32:4c:23:30:c4:15:83:
98:65:02:20:69:c0:8c:02:9f:87:6f:7f:fb:49:f9:
5c:58:58:5c:d8:ef:5b:7b:59:c2:9c:3d:4b:27:3c:
b9:db:b7:47:56:38:f0:5a:48:d5:26:7c:63:64:b7:
b8:66:09:b1:1f:64:12:ea:05:07:59:20:50:1c:ab:
d9:84:51:de:95:01:c2:7e:02:d6:3b:e3:0d:2a:92:
fc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:69:04:C5:E1:A6:2F:FB:A0:07:6C:FD:2F:42:0F:5D:C4:C0:15:31
X509v3 Authority Key Identifier:
keyid:D3:2D:00:03:68:C1:D5:4F:08:A7:78:2C:07:67:3B:68:A9:3E:DF:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:7f:16:9e:c8:8a:68:2d:8d:40:e0:4a:7a:74:b8:d3:53:cd:
9f:4c:ff:6e:a7:1f:6a:0e:9c:74:22:18:f6:35:26:ef:e0:2a:
60:37:6d:96:f3:d1:de:02:7e:c6:2f:ff:85:bc:8a:78:fe:eb:
1e:85:77:67:f2:13:80:da:82:34:5d:d8:ee:a4:0b:ad:e0:5d:
0b:a7:08:cf:65:86:9f:a0:3b:a1:72:57:d3:fe:39:4e:0a:a4:
78:e5:7a:2e:de:06:37:4d:7c:c2:c9:a3:cc:c7:a9:13:95:44:
bb:81:6b:e7:89:74:d3:06:80:b4:f9:f3:49:bc:4b:fa:ea:08:
e2:32:74:93:ab:44:ec:5b:7f:e5:ff:d0:91:9b:d8:e9:a4:bd:
ee:51:61:6d:b3:05:a6:5c:7a:2e:da:e8:01:47:cd:50:5d:4c:
2b:17:e0:74:fe:1b:84:2c:9c:3e:0a:82:5d:2b:f9:21:fe:da:
ad:87:3d:21:ad:a7:24:96:54:e5:16:cb:f1:0b:85:b9:ae:d1:
9b:cc:c5:33:39:57:b2:b6:6e:56:62:2b:b7:dc:4e:51:77:e8:
67:fb:4b:6b:7d:11:6f:bb:a8:75:3e:47:c5:cd:e0:30:66:bb:
8a:04:38:ab:2d:13:81:e0:d7:81:f3:98:fc:61:33:cc:39:1b:
a3:43:10:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84OKOJObryrfMnliLht5oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMmQwMDAzNjhjMWQ1NGYwOGE3NzgyYzA3NjczYjY4YTkz
ZWRmYzUwHhcNMjUwMTMxMTUwMDQyWhcNMjUwMjAxMTUwMDQyWjAzMTEwLwYDVQQD
EyhiMzY5MDRjNWUxYTYyZmZiYTAwNzZjZmQyZjQyMGY1ZGM0YzAxNTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYu6OFCQbHV16gbY7JlRIrLgag2l
8Q7wZ5nBA7PJmcyIrNmFXfhIsNbm8EZ7bqseR2Lq9TEYqMQZ5Jzh0bJIUWsb74dR
pn3XqH498pj1AN8jfri8KOdoD3n269me2Qvx63ita0EIB4NCfJBzC12XLYithAEz
VMvWSZuJ+Q60EjT7Nk9qtTLKkh1s6hxM+C15tM8rrdKOReaj0ZzR9erOdNuOGy7i
nFVGemiaCzJMIzDEFYOYZQIgacCMAp+Hb3/7SflcWFhc2O9be1nCnD1LJzy527dH
VjjwWkjVJnxjZLe4ZgmxH2QS6gUHWSBQHKvZhFHelQHCfgLWO+MNKpL8awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNpBMXhpi/7oAds/S9CD13EwBUxMB8GA1UdIwQY
MBaAFNMtAANowdVPCKd4LAdnO2ipPt/FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHkwQUEyakIxVThJcDNnc0IyYzdhS2stMzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NjgwNjUtMjIzMy00ZGM3LWI5NWMt
YTdiYjM4YTFhNTNkLzEvMHkwQUEyakIxVThJcDNnc0IyYzdhS2stMzhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80NjgwNjUtMjIzMy00ZGM3LWI5NWMtYTdiYjM4YTFhNTNk
LzEvMHkwQUEyakIxVThJcDNnc0IyYzdhS2stMzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG38WnsiK
aC2NQOBKenS401PNn0z/bqcfag6cdCIY9jUm7+AqYDdtlvPR3gJ+xi//hbyKeP7r
HoV3Z/ITgNqCNF3Y7qQLreBdC6cIz2WGn6A7oXJX0/45TgqkeOV6Lt4GN018wsmj
zMepE5VEu4Fr54l00waAtPnzSbxL+uoI4jJ0k6tE7Ft/5f/QkZvY6aS97lFhbbMF
plx6LtroAUfNUF1MKxfgdP4bhCycPgqCXSv5If7arYc9Ia2nJJZU5RbL8QuFua7R
m8zFMzlXsrZuVmIrt9xOUXfoZ/tLa30Rb7uodT5Hxc3gMGa7igQ4qy0TgeDXgfOY
/GEzzDkbo0MQuw==
-----END CERTIFICATE-----
Generated at Thu May 1 12:58:18 2025 by rpki-client