Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
File: RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft (raw, json)
Hash identifier: yuGQh8z2aysIM6211+2I0Zq0+eOFU1u1rdxziwnK2rg=
Subject key identifier: FD:57:CE:73:02:A4:35:F6:66:FF:F9:88:A0:6B:E6:65:41:39:3D:62
Authority key identifier: 46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90
Certificate issuer: /CN=462231e713f0f834bd09c3f76e12e250e773c290
Certificate serial: 0194BC3C3B4B729A7C1B7DA74C94A4D2EF62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
Manifest number: 133A
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl (hash: Cy+XvGNT7J0yiBZjO0b9rIijfyQmmp3RIjpXKWJVucs=)
2: xmUpqD4NUMAqisL66k_x6MTYnaQ.roa (hash: dGRcbHkgyhvucFtnmzWvrILS2aHk2c8SQDJ6rOX+JL4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3b:4b:72:9a:7c:1b:7d:a7:4c:94:a4:d2:ef:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=462231e713f0f834bd09c3f76e12e250e773c290
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=fd57ce7302a435f666fff988a06be66541393d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0c:f1:d5:b4:67:eb:62:42:58:ce:13:83:b5:
b3:59:89:02:47:f6:fa:bb:3a:9f:71:8d:de:de:54:
f2:54:19:2b:cb:70:73:be:ae:fd:1e:03:24:06:d1:
f3:96:e8:a0:3b:41:df:96:3d:ac:1a:f9:fe:29:a5:
b9:0f:c9:96:d9:bf:1b:ea:14:4e:79:e2:1f:bf:53:
51:59:b4:36:e6:8d:06:a3:35:d9:50:99:dc:f6:f8:
75:a0:d4:bc:80:a5:08:2d:40:34:3b:bc:e9:61:d1:
4d:20:cb:85:52:40:6b:a4:df:8f:fe:d0:0b:85:a4:
d7:3a:09:5f:fe:1b:a1:a1:8a:64:78:97:44:cd:9b:
d3:b6:bf:1e:75:aa:cf:e0:ad:0e:8e:17:ed:08:1e:
e6:b9:a4:a5:a6:2b:84:a0:52:f6:50:41:64:b3:b8:
a5:96:86:8a:a7:70:7b:ac:9a:a2:d5:05:e1:6d:45:
6b:79:0f:b6:c2:71:69:9b:08:0a:71:6e:bb:0d:c0:
2b:dc:17:2b:a9:bf:b2:61:c2:2f:01:ae:83:a0:92:
0b:8e:86:a9:9c:83:1e:f0:22:b8:34:80:88:77:ba:
0b:08:65:94:08:b5:0f:a0:eb:99:c2:42:f7:2d:ed:
9f:53:88:5e:b9:ec:36:2f:fb:53:23:d4:f2:ad:b6:
41:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:57:CE:73:02:A4:35:F6:66:FF:F9:88:A0:6B:E6:65:41:39:3D:62
X509v3 Authority Key Identifier:
keyid:46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:b7:41:e2:65:bf:e2:26:74:fd:f9:11:10:e7:06:ba:c4:5e:
58:38:a2:9c:a1:54:b5:42:dd:e0:94:f0:d1:ff:45:27:cc:11:
61:64:89:67:bb:a4:3a:bb:ca:33:3f:c6:b3:b1:c5:6c:4d:7e:
14:f5:e7:13:f6:34:ff:a3:ac:98:99:a5:35:79:d8:a9:64:19:
d4:2b:76:7d:7c:6f:f7:b5:9c:43:44:23:57:77:46:9d:a5:56:
66:6b:af:c0:ce:3e:0b:3d:ea:ad:e5:9c:e7:56:5d:88:ba:3d:
44:f6:ec:91:b1:4f:84:4d:9c:37:93:a8:27:27:35:d4:7d:13:
d2:29:cc:69:f6:30:8d:77:63:e3:bb:40:79:0f:77:1a:dc:cb:
71:5d:2a:b1:df:3f:8e:1d:5c:d4:55:b6:03:25:02:45:89:75:
c7:4e:b3:4e:2a:af:16:f1:cd:9b:6f:fe:5d:85:e6:14:db:50:
98:18:6d:7b:69:66:f7:b5:0d:f3:b3:59:53:56:b0:c3:b7:ae:
3d:b1:9e:7c:a5:80:ea:4e:c2:68:2a:33:58:5a:29:e5:0d:33:
93:0b:6e:10:31:7b:81:dc:ba:77:a5:db:aa:30:44:5f:fa:69:
b9:38:59:39:7e:ac:c1:f9:1d:c1:7d:3e:68:06:18:78:65:e5:
94:aa:60:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PDtLcpp8G32nTJSk0u9iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MjIzMWU3MTNmMGY4MzRiZDA5YzNmNzZlMTJlMjUwZTc3
M2MyOTAwHhcNMjUwMTMxMTIwMDUxWhcNMjUwMjAxMTIwMDUxWjAzMTEwLwYDVQQD
EyhmZDU3Y2U3MzAyYTQzNWY2NjZmZmY5ODhhMDZiZTY2NTQxMzkzZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Azx1bRn62JCWM4Tg7WzWYkCR/b6
uzqfcY3e3lTyVBkry3Bzvq79HgMkBtHzluigO0Hflj2sGvn+KaW5D8mW2b8b6hRO
eeIfv1NRWbQ25o0GozXZUJnc9vh1oNS8gKUILUA0O7zpYdFNIMuFUkBrpN+P/tAL
haTXOglf/huhoYpkeJdEzZvTtr8edarP4K0OjhftCB7muaSlpiuEoFL2UEFks7il
loaKp3B7rJqi1QXhbUVreQ+2wnFpmwgKcW67DcAr3Bcrqb+yYcIvAa6DoJILjoap
nIMe8CK4NICId7oLCGWUCLUPoOuZwkL3Le2fU4heuew2L/tTI9TyrbZBcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1XznMCpDX2Zv/5iKBr5mVBOT1iMB8GA1UdIwQY
MBaAFEYiMecT8Pg0vQnD924S4lDnc8KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmlJeDV4UHctRFM5Q2NQM2JoTGlVT2R6d3BBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85YWIzYTUtMWM0Ni00YmUwLTg5Mzct
YWQ0YmQ3ZjIzY2U0LzEvUmlJeDV4UHctRFM5Q2NQM2JoTGlVT2R6d3BBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi85YWIzYTUtMWM0Ni00YmUwLTg5MzctYWQ0YmQ3ZjIzY2U0
LzEvUmlJeDV4UHctRFM5Q2NQM2JoTGlVT2R6d3BBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA47dB4mW/
4iZ0/fkREOcGusReWDiinKFUtULd4JTw0f9FJ8wRYWSJZ7ukOrvKMz/Gs7HFbE1+
FPXnE/Y0/6OsmJmlNXnYqWQZ1Ct2fXxv97WcQ0QjV3dGnaVWZmuvwM4+Cz3qreWc
51ZdiLo9RPbskbFPhE2cN5OoJyc11H0T0inMafYwjXdj47tAeQ93GtzLcV0qsd8/
jh1c1FW2AyUCRYl1x06zTiqvFvHNm2/+XYXmFNtQmBhte2lm97UN87NZU1aww7eu
PbGefKWA6k7CaCozWFop5Q0zkwtuEDF7gdy6d6XbqjBEX/ppuThZOX6swfkdwX0+
aAYYeGXllKpgNw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:48:50 2025 by rpki-client