Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
File: M7psC8yhbGhdx7myfxmbQrS-7uk.mft (raw, json)
Hash identifier: IbPUezAp3RN20pWWH9dOIjxTeFYncQ7VoB2oDXbEcOc=
Subject key identifier: AA:A1:5C:F2:67:1A:15:CC:ED:13:53:49:6C:07:CD:8D:B3:41:98:64
Authority key identifier: 33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
Certificate issuer: /CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Certificate serial: 0194BC72BCF54D168FEDFF3B260BBE1CBABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
Manifest number: 0B87
Signing time: Fri 31 Jan 2025 13:00:23 +0000
Manifest this update: Fri 31 Jan 2025 13:00:23 +0000
Manifest next update: Sat 01 Feb 2025 13:00:23 +0000
Files and hashes: 1: 7CqJNaZo5ctYVYkh7BnnRFJ4n6g.roa (hash: g3H+PUgTlcgmkdBNY/9GLU9RUNlL9Z2bzApO3ET0ifk=)
2: M7psC8yhbGhdx7myfxmbQrS-7uk.crl (hash: nRanC3eYz1KtyqYRkMhlPSiQQ6zMm2JzoGCPHT9jPwg=)
3: kPhGzXODbRD6DaiKt_1D_SiuRQ8.roa (hash: 9eEDMcEOBSRwouzuH08DzSkvaYWRY3j//V52rGTuy7I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:bc:f5:4d:16:8f:ed:ff:3b:26:0b:be:1c:ba:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Validity
Not Before: Jan 31 13:00:23 2025 GMT
Not After : Feb 1 13:00:23 2025 GMT
Subject: CN=aaa15cf2671a15cced1353496c07cd8db3419864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:e0:4f:77:3b:e1:b5:0d:dd:26:de:1a:a9:
d2:9e:82:93:f9:5e:8f:81:e7:ab:27:0c:c0:6d:ec:
a1:90:fd:fe:60:c5:b9:8f:5f:f0:e7:23:0e:6e:9a:
5d:2e:ac:4b:63:90:3b:83:ce:9d:e9:be:12:3f:b3:
87:31:08:a8:4d:9b:96:20:aa:52:8e:92:bf:2d:cc:
09:66:f8:70:5e:53:53:0c:84:42:d3:f7:d7:6e:bc:
c5:5b:05:b5:28:16:f1:df:2c:3e:b5:a4:79:d9:98:
b5:25:9b:8a:71:60:38:b1:16:68:72:eb:56:0c:c4:
01:38:d9:73:16:67:34:2c:90:d8:ad:41:d4:f3:62:
60:a1:04:d5:f4:f6:ab:82:0e:a5:c7:b7:e6:c4:af:
fd:3d:26:aa:af:db:08:d8:8d:89:ac:58:a8:57:79:
5f:82:d8:7e:13:49:b1:d2:fe:9b:f9:ac:55:8b:ce:
3f:9a:cd:b8:fa:a9:b3:27:5a:84:45:dc:f3:58:19:
c8:97:ee:99:d0:80:5d:16:c4:a5:cc:ed:4d:fe:f7:
8b:7f:55:eb:22:29:c2:68:87:de:9e:0e:04:c5:b0:
2b:c0:63:44:b2:22:98:69:3c:c3:68:48:01:9a:7e:
c5:71:61:ae:49:c9:05:89:69:a3:53:1f:09:bd:36:
29:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A1:5C:F2:67:1A:15:CC:ED:13:53:49:6C:07:CD:8D:B3:41:98:64
X509v3 Authority Key Identifier:
keyid:33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:2f:51:19:41:33:31:d8:19:73:ac:0f:b3:65:79:7f:62:50:
39:0b:79:95:af:d4:fb:73:a7:07:be:e4:68:c1:4c:2f:fc:96:
fd:f8:0d:77:37:aa:ac:4d:29:28:42:d0:1e:77:b3:94:c9:51:
a0:8d:e7:3a:15:ca:bd:68:0e:5c:61:1e:9c:29:b0:f6:da:46:
f4:13:9b:ea:7b:28:da:c3:c8:01:75:88:ab:fa:be:0c:4a:25:
c8:b6:29:f9:91:da:fc:0c:b4:46:51:8b:4f:55:72:f3:dc:8e:
75:61:5f:aa:5a:c6:2d:f6:c4:b5:9a:12:a5:33:8c:65:13:da:
e3:74:e1:ef:bf:28:97:6d:a8:33:52:4e:38:ed:30:b0:fa:e1:
99:7a:7c:cc:41:93:20:0e:d0:f2:a7:bb:3e:9a:39:55:99:36:
d3:a8:33:02:30:a8:e1:3b:cf:ba:17:cb:eb:03:e4:94:65:58:
89:eb:7a:a5:e0:cb:61:d5:80:46:b3:ee:79:6c:45:2a:1f:44:
a2:a9:f0:18:b6:82:95:a1:20:c9:25:fa:82:a5:2a:6e:61:e7:
09:31:02:57:fa:7b:f2:1d:eb:3a:48:23:ff:c8:5d:4e:67:db:
28:35:a8:b4:de:8c:6e:24:48:ed:27:fc:bf:45:b6:24:e3:84:
b8:f8:7c:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8crz1TRaP7f87Jgu+HLq8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYmE2YzBiY2NhMTZjNjg1ZGM3YjliMjdmMTk5YjQyYjRi
ZWVlZTkwHhcNMjUwMTMxMTMwMDIzWhcNMjUwMjAxMTMwMDIzWjAzMTEwLwYDVQQD
EyhhYWExNWNmMjY3MWExNWNjZWQxMzUzNDk2YzA3Y2Q4ZGIzNDE5ODY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMPgT3c74bUN3SbeGqnSnoKT+V6P
geerJwzAbeyhkP3+YMW5j1/w5yMObppdLqxLY5A7g86d6b4SP7OHMQioTZuWIKpS
jpK/LcwJZvhwXlNTDIRC0/fXbrzFWwW1KBbx3yw+taR52Zi1JZuKcWA4sRZocutW
DMQBONlzFmc0LJDYrUHU82JgoQTV9Pargg6lx7fmxK/9PSaqr9sI2I2JrFioV3lf
gth+E0mx0v6b+axVi84/ms24+qmzJ1qERdzzWBnIl+6Z0IBdFsSlzO1N/veLf1Xr
IinCaIfeng4ExbArwGNEsiKYaTzDaEgBmn7FcWGuSckFiWmjUx8JvTYpHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqhXPJnGhXM7RNTSWwHzY2zQZhkMB8GA1UdIwQY
MBaAFDO6bAvMoWxoXce5sn8Zm0K0vu7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTdwc0M4eWhiR2hkeDdteWZ4bWJRclMtN3VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi81MTBlOGYtOTY3Zi00MTM3LWI0ZTYt
Y2M3NTc5NzUxOGEwLzEvTTdwc0M4eWhiR2hkeDdteWZ4bWJRclMtN3VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi81MTBlOGYtOTY3Zi00MTM3LWI0ZTYtY2M3NTc5NzUxOGEw
LzEvTTdwc0M4eWhiR2hkeDdteWZ4bWJRclMtN3VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVy9RGUEz
MdgZc6wPs2V5f2JQOQt5la/U+3OnB77kaMFML/yW/fgNdzeqrE0pKELQHnezlMlR
oI3nOhXKvWgOXGEenCmw9tpG9BOb6nso2sPIAXWIq/q+DEolyLYp+ZHa/Ay0RlGL
T1Vy89yOdWFfqlrGLfbEtZoSpTOMZRPa43Th778ol22oM1JOOO0wsPrhmXp8zEGT
IA7Q8qe7Ppo5VZk206gzAjCo4TvPuhfL6wPklGVYiet6peDLYdWARrPueWxFKh9E
oqnwGLaClaEgySX6gqUqbmHnCTECV/p78h3rOkgj/8hdTmfbKDWotN6MbiRI7Sf8
v0W2JOOEuPh8cQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:23 2025 by rpki-client