Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
File: rtyPMnpGGWTAqHqceAlAHFfIbUE.mft (raw, json)
Hash identifier: KXqLBVhJmr1blJiaNsc7v25/+mlM2eimWNNV/vJ2wq8=
Subject key identifier: FD:81:41:BB:D6:14:15:07:B4:17:29:0F:FB:0D:94:C1:9F:98:B9:A2
Authority key identifier: AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41
Certificate issuer: /CN=aedc8f327a461964c0a87a9c7809401c57c86d41
Certificate serial: 0194BD4E56171483F86AD8F754BD7A4586D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:15 +0000
Manifest this update: Fri 31 Jan 2025 17:00:15 +0000
Manifest next update: Sat 01 Feb 2025 17:00:15 +0000
Files and hashes: 1: 2r5V-jLaZB51UHtAh-bFMsh9deI.roa (hash: MKCPJpuTtJZg9qISSN6i7GBsMIxb/Qe56YUG3zY4d1Q=)
2: rtyPMnpGGWTAqHqceAlAHFfIbUE.crl (hash: j23GLeeCGNCnh/cYW2EsxFmhTepJxK0WDfqXo0qtNag=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:56:17:14:83:f8:6a:d8:f7:54:bd:7a:45:86:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedc8f327a461964c0a87a9c7809401c57c86d41
Validity
Not Before: Jan 31 17:00:15 2025 GMT
Not After : Feb 1 17:00:15 2025 GMT
Subject: CN=fd8141bbd6141507b417290ffb0d94c19f98b9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:28:23:79:62:52:00:e9:59:a2:3c:01:5e:0f:
f1:96:65:99:33:43:6e:b0:23:5d:57:e2:25:b1:b4:
9b:d5:8d:d9:93:c9:29:53:af:51:7a:e8:f3:ee:2a:
78:e9:88:e4:87:d7:4b:48:f0:ac:ae:18:14:08:f3:
b7:4e:c9:d3:ec:28:3a:b4:14:b0:26:fa:39:9e:a9:
c9:e7:0e:65:0e:ce:79:fa:f1:d6:59:48:2c:45:6a:
4d:3e:18:46:de:96:e4:15:50:56:ee:48:d7:8a:2c:
76:46:8d:0a:13:68:d5:86:b3:ca:8f:f2:58:61:67:
2d:2b:eb:83:c4:20:04:39:2c:70:83:5a:83:a9:04:
a4:76:83:33:0e:34:73:ec:ac:94:f2:db:55:a9:64:
fc:e8:58:c9:ae:e4:dd:35:fe:a9:fa:78:0c:60:6a:
4e:5a:c9:2f:af:7b:e8:be:9e:13:65:3e:6b:30:fa:
65:50:b1:9c:cb:75:3b:48:65:51:6c:bc:6b:ef:b9:
3e:61:33:ef:13:2a:1a:65:3b:cf:cd:f0:af:df:4b:
83:2f:60:d7:88:cf:58:52:37:d4:a3:bb:df:45:e0:
ac:80:66:65:cb:9e:0b:16:06:9e:c2:b9:69:02:34:
28:b7:fb:64:66:74:a8:3a:2d:b9:b5:dc:44:7e:c4:
46:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:81:41:BB:D6:14:15:07:B4:17:29:0F:FB:0D:94:C1:9F:98:B9:A2
X509v3 Authority Key Identifier:
keyid:AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c9:fd:c4:ce:66:e5:e8:a4:fa:72:79:fc:5d:da:e0:f3:50:
6c:7a:7b:50:ca:cb:c1:32:cf:0a:b2:85:93:d4:42:5a:d5:43:
a5:29:19:98:8f:53:37:d7:ca:fc:40:7c:d0:2a:2e:93:5e:6a:
1b:a9:77:28:dc:20:eb:23:b7:6e:68:0f:0f:c9:04:f6:da:20:
ec:e3:ea:80:05:df:2f:d7:12:d5:5b:60:51:3f:80:b4:37:02:
3d:12:e3:72:65:e5:46:c2:7e:81:74:2d:e1:d2:42:68:1e:86:
f4:f0:1b:a7:76:e4:45:87:c1:8f:c5:08:3b:07:7c:9c:46:7f:
48:9e:8e:74:e0:54:79:3a:40:4a:d5:cf:df:f9:22:49:62:ab:
74:00:10:7a:ab:b1:cb:55:77:26:f4:e1:40:36:e7:1a:91:0d:
dd:e3:16:ab:b2:34:cd:d6:84:e9:ad:e9:9e:84:6a:bf:4a:99:
7e:5e:94:a4:95:0a:6a:df:15:36:ea:25:d5:db:54:cd:b2:e8:
08:66:2d:01:34:d1:c2:ad:d8:c3:1b:3a:b3:e3:91:b6:8c:1a:
e1:ba:2f:7b:de:f9:a2:34:70:cb:e9:e6:23:17:5f:41:f4:82:
7a:da:3d:34:a2:5f:5a:2f:c6:82:79:ca:c8:31:31:47:05:51:
f2:33:eb:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TlYXFIP4atj3VL16RYbYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZGM4ZjMyN2E0NjE5NjRjMGE4N2E5Yzc4MDk0MDFjNTdj
ODZkNDEwHhcNMjUwMTMxMTcwMDE1WhcNMjUwMjAxMTcwMDE1WjAzMTEwLwYDVQQD
EyhmZDgxNDFiYmQ2MTQxNTA3YjQxNzI5MGZmYjBkOTRjMTlmOThiOWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSgjeWJSAOlZojwBXg/xlmWZM0Nu
sCNdV+IlsbSb1Y3Zk8kpU69Reujz7ip46Yjkh9dLSPCsrhgUCPO3TsnT7Cg6tBSw
Jvo5nqnJ5w5lDs55+vHWWUgsRWpNPhhG3pbkFVBW7kjXiix2Ro0KE2jVhrPKj/JY
YWctK+uDxCAEOSxwg1qDqQSkdoMzDjRz7KyU8ttVqWT86FjJruTdNf6p+ngMYGpO
Wskvr3vovp4TZT5rMPplULGcy3U7SGVRbLxr77k+YTPvEyoaZTvPzfCv30uDL2DX
iM9YUjfUo7vfReCsgGZly54LFgaewrlpAjQot/tkZnSoOi25tdxEfsRG2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2BQbvWFBUHtBcpD/sNlMGfmLmiMB8GA1UdIwQY
MBaAFK7cjzJ6RhlkwKh6nHgJQBxXyG1BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnR5UE1ucEdHV1RBcUhxY2VBbEFIRmZJYlVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iMGRjNTItNDE2ZS00YTAyLTg5OTMt
ZmJjNWExZTM4MmM1LzEvcnR5UE1ucEdHV1RBcUhxY2VBbEFIRmZJYlVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iMGRjNTItNDE2ZS00YTAyLTg5OTMtZmJjNWExZTM4MmM1
LzEvcnR5UE1ucEdHV1RBcUhxY2VBbEFIRmZJYlVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMn9xM5m
5eik+nJ5/F3a4PNQbHp7UMrLwTLPCrKFk9RCWtVDpSkZmI9TN9fK/EB80Couk15q
G6l3KNwg6yO3bmgPD8kE9tog7OPqgAXfL9cS1VtgUT+AtDcCPRLjcmXlRsJ+gXQt
4dJCaB6G9PAbp3bkRYfBj8UIOwd8nEZ/SJ6OdOBUeTpAStXP3/kiSWKrdAAQequx
y1V3JvThQDbnGpEN3eMWq7I0zdaE6a3pnoRqv0qZfl6UpJUKat8VNuol1dtUzbLo
CGYtATTRwq3Ywxs6s+ORtowa4bove975ojRwy+nmIxdfQfSCeto9NKJfWi/GgnnK
yDExRwVR8jPryQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:25 2025 by rpki-client