Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
File: Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft (raw, json)
Hash identifier: BfKhgXCDqvqD0wh0BKtycLz1T0XdN36QnulZ+M3qu/8=
Subject key identifier: 26:DA:CF:38:30:9B:51:CA:DD:15:3D:20:3E:67:67:01:09:B3:75:A6
Authority key identifier: 45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
Certificate issuer: /CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Certificate serial: 0194BCA98FBB40265D33973E089B4E3E7584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
Manifest number: 0FE8
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: 4jpGoGfytvkcBWF1AUAJF0-qdUc.roa (hash: RRVQEgJXSCFRfqwvduB081T3vxLgFXzLMjRYLNyG6B8=)
2: 988R5OqLx1cdXJRL_JY-sifrbw8.roa (hash: BOCl4HP9kR43t+HCwvP5qbX3Z6YHP7lJJWGPo5+9LHA=)
3: Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl (hash: VFZB6pGkX0DCeSqvvLYoLOSKqHxtWBtfDoYPZZ60fEo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8f:bb:40:26:5d:33:97:3e:08:9b:4e:3e:75:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=26dacf38309b51cadd153d203e67670109b375a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4e:73:1e:06:ad:3d:29:06:03:f6:9d:cc:13:
bd:c9:c6:93:2d:13:b3:6e:3e:97:ee:77:56:78:f6:
ea:4d:92:86:6d:9e:97:e4:b0:f0:b4:d8:ae:b7:36:
38:3a:a1:4f:34:90:dc:7f:6f:6c:a9:99:1a:fa:30:
f1:97:86:b9:f9:90:70:99:b2:78:6e:24:54:9d:ac:
b7:58:d9:cb:24:33:fc:fa:fc:ef:49:ac:67:31:66:
74:d8:28:91:40:ab:99:63:ae:a6:e3:44:4d:ab:53:
44:25:12:c3:db:e3:66:a9:21:20:0e:2b:3d:8b:66:
f9:c0:ef:83:c5:32:79:b4:66:0a:2e:3f:de:b0:86:
2c:de:ce:f5:ac:3c:17:28:6a:cf:47:8f:f3:5c:bf:
34:53:f4:05:3f:66:e7:d2:d1:13:37:8a:b1:c3:ea:
90:30:22:2d:a2:8f:21:c6:9c:56:12:e4:c8:21:fd:
b5:67:9a:ea:dd:98:d4:35:b2:c1:70:00:0a:e1:00:
d3:39:87:c6:58:84:b5:89:79:4e:91:2d:d2:78:54:
6a:54:0a:1b:9a:af:b0:6e:fb:67:93:a8:ab:6d:5b:
87:e3:82:d4:7e:8c:13:55:fa:39:88:2c:f4:83:02:
c3:5e:3c:bb:cd:bc:70:97:c2:25:74:5e:6a:9a:ca:
7d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DA:CF:38:30:9B:51:CA:DD:15:3D:20:3E:67:67:01:09:B3:75:A6
X509v3 Authority Key Identifier:
keyid:45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ef:3e:fe:25:77:29:5f:01:6e:d6:f7:c3:03:4c:4f:04:c4:
a8:b6:3d:76:17:43:a0:09:d0:81:e2:a3:76:aa:42:45:d2:e4:
f1:1e:7c:4d:89:1c:9b:32:e8:a7:87:56:92:b2:cb:4d:4f:43:
9b:b5:79:2a:8a:1c:41:a6:c0:a4:c2:d6:f2:f7:3f:fc:40:90:
e4:df:55:76:ce:83:49:5d:75:07:16:3b:68:2c:c2:54:d2:dc:
e3:4e:17:66:6d:29:e6:5a:8d:11:95:5e:78:f5:84:7b:4e:17:
49:7d:72:a7:70:42:08:6a:50:10:94:9d:cf:38:5d:ea:9b:0e:
36:4e:b0:5f:e1:4c:3c:99:98:84:7e:80:c4:bc:8e:23:39:37:
77:25:96:ae:08:b0:cc:c5:00:56:3f:4d:82:ed:1e:24:bf:46:
1e:e9:73:a2:8d:5c:4a:09:ad:5a:22:11:35:19:8f:fa:04:b2:
26:36:13:d8:e8:7f:67:59:5d:b4:43:ce:b1:c7:dc:c1:98:62:
91:b6:3c:d1:5f:45:97:d8:c4:76:2a:3b:99:92:13:05:10:90:
44:0d:17:03:f2:6f:f4:1e:64:53:ef:56:9f:29:70:5a:56:63:
5c:58:fe:5a:d6:6a:80:4f:fd:d8:0f:19:5d:86:01:e9:48:29:
75:51:9b:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qY+7QCZdM5c+CJtOPnWEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1YWQ2ZjFmMWI3MzBjN2EwMTZiNTYyYzEyYjMxYmVjYzRi
M2UxZmEwHhcNMjUwMTMxMTQwMDE2WhcNMjUwMjAxMTQwMDE2WjAzMTEwLwYDVQQD
EygyNmRhY2YzODMwOWI1MWNhZGQxNTNkMjAzZTY3NjcwMTA5YjM3NWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok5zHgatPSkGA/adzBO9ycaTLROz
bj6X7ndWePbqTZKGbZ6X5LDwtNiutzY4OqFPNJDcf29sqZka+jDxl4a5+ZBwmbJ4
biRUnay3WNnLJDP8+vzvSaxnMWZ02CiRQKuZY66m40RNq1NEJRLD2+NmqSEgDis9
i2b5wO+DxTJ5tGYKLj/esIYs3s71rDwXKGrPR4/zXL80U/QFP2bn0tETN4qxw+qQ
MCItoo8hxpxWEuTIIf21Z5rq3ZjUNbLBcAAK4QDTOYfGWIS1iXlOkS3SeFRqVAob
mq+wbvtnk6irbVuH44LUfowTVfo5iCz0gwLDXjy7zbxwl8IldF5qmsp9cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbazzgwm1HK3RU9ID5nZwEJs3WmMB8GA1UdIwQY
MBaAFEWtbx8bcwx6AWtWLBKzG+zEs+H6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmExdkh4dHpESG9CYTFZc0VyTWI3TVN6NGZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wMGMwM2MtZDIwNy00ZWMxLTlkZDkt
MzI0NDljZTZjZjg5LzEvUmExdkh4dHpESG9CYTFZc0VyTWI3TVN6NGZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8wMGMwM2MtZDIwNy00ZWMxLTlkZDktMzI0NDljZTZjZjg5
LzEvUmExdkh4dHpESG9CYTFZc0VyTWI3TVN6NGZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApu8+/iV3
KV8Bbtb3wwNMTwTEqLY9dhdDoAnQgeKjdqpCRdLk8R58TYkcmzLop4dWkrLLTU9D
m7V5KoocQabApMLW8vc//ECQ5N9Vds6DSV11BxY7aCzCVNLc404XZm0p5lqNEZVe
ePWEe04XSX1yp3BCCGpQEJSdzzhd6psONk6wX+FMPJmYhH6AxLyOIzk3dyWWrgiw
zMUAVj9Ngu0eJL9GHulzoo1cSgmtWiIRNRmP+gSyJjYT2Oh/Z1ldtEPOscfcwZhi
kbY80V9Fl9jEdio7mZITBRCQRA0XA/Jv9B5kU+9WnylwWlZjXFj+WtZqgE/92A8Z
XYYB6UgpdVGb8g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:15:15 2025 by rpki-client