Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
File: alQ3DEupveK5g3a_j5QqlJJsFRk.mft (raw, json)
Hash identifier: XR61F/tSM5TFblgcutkK4f1Loo5kZqKl+seztg3dosU=
Subject key identifier: 47:D9:73:02:51:D2:C8:4F:2A:94:FC:61:58:98:31:27:43:71:D8:05
Authority key identifier: 6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19
Certificate issuer: /CN=6a54370c4ba9bde2b98376bf8f942a94926c1519
Certificate serial: 0194BC7328A7404A90D337ACA90E09662723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
Manifest number: 011E
Signing time: Fri 31 Jan 2025 13:00:51 +0000
Manifest this update: Fri 31 Jan 2025 13:00:51 +0000
Manifest next update: Sat 01 Feb 2025 13:00:51 +0000
Files and hashes: 1: alQ3DEupveK5g3a_j5QqlJJsFRk.crl (hash: 0yk2nXHCZDQaXhjV/qfRlRUfzgJvVSUayykud+o6LE8=)
2: bFwnlPb3JkTM0-_fQyjycPLTOXg.roa (hash: T3+8uVMg57oldqwBxpb7FIVcJ3Kl6M0sjRANKp19Uzo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:28:a7:40:4a:90:d3:37:ac:a9:0e:09:66:27:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a54370c4ba9bde2b98376bf8f942a94926c1519
Validity
Not Before: Jan 31 13:00:51 2025 GMT
Not After : Feb 1 13:00:51 2025 GMT
Subject: CN=47d9730251d2c84f2a94fc61589831274371d805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:ab:4b:12:26:01:9d:9d:86:7a:6a:40:f2:
50:76:28:17:95:9d:bb:43:bb:23:b4:41:43:fc:b0:
92:d9:79:b5:7e:33:e6:c3:f9:ac:3b:36:f9:09:75:
c7:81:9a:97:e0:26:cf:cf:3f:ea:2c:1e:7e:77:e4:
c2:33:07:71:a8:11:0a:7d:8c:7e:5c:f6:6a:c8:53:
8c:62:82:c4:7f:92:98:a6:b3:bc:0d:98:8d:96:61:
fc:a3:23:bb:43:64:60:57:2e:73:82:31:9a:fa:ba:
0c:18:93:ef:e8:f4:6f:eb:51:f7:85:aa:4d:8e:dd:
4e:73:22:32:23:1c:2f:fe:0f:f7:60:a0:d8:52:77:
62:f7:a1:c5:ae:a2:57:93:5a:32:f4:d3:1b:49:0e:
cc:cd:7f:7e:5b:b3:78:6c:c3:a3:e1:32:cc:ef:a9:
11:cd:b8:de:a2:24:06:59:48:3f:7a:ec:eb:ce:44:
06:e2:d3:94:0b:d2:25:59:e4:d7:79:5b:5a:c1:1d:
d9:76:97:8d:7e:37:10:61:44:23:29:7e:1b:0f:89:
df:7d:e6:64:98:6b:61:0f:2a:c4:be:ab:47:07:78:
78:16:ff:82:f7:d4:ce:54:56:9e:b4:62:ba:55:0c:
ff:2d:75:28:5f:98:fd:11:ac:33:b4:a3:7f:7f:29:
ba:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D9:73:02:51:D2:C8:4F:2A:94:FC:61:58:98:31:27:43:71:D8:05
X509v3 Authority Key Identifier:
keyid:6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:42:6d:0b:6d:75:e0:64:67:2a:91:7f:3a:e5:54:cc:9d:d1:
0e:b7:98:35:63:0a:c4:c9:01:22:e4:58:9d:4d:3e:15:02:02:
40:93:76:36:ae:04:0d:70:2c:50:85:d6:9f:14:41:91:40:8e:
62:51:8e:58:f8:be:c0:fc:91:8c:54:fc:f9:59:c2:c5:b6:32:
6d:bf:73:4b:4b:b0:b2:6d:ee:3e:59:85:1f:9d:47:b4:ce:d7:
9e:41:19:6b:e6:04:3e:a1:fb:db:5b:77:c2:84:dd:b7:49:48:
d4:89:13:6c:2f:47:d3:04:4a:b3:cc:19:06:2a:b4:82:14:93:
a8:d8:93:48:ed:6f:ef:4e:42:b5:00:d0:07:42:00:16:39:7e:
59:91:85:82:0b:3b:08:98:f9:39:bf:e9:60:fb:18:47:da:24:
99:73:54:25:c0:ab:f4:d7:9c:fa:86:d7:e0:94:3c:8d:71:30:
00:19:41:ee:d6:14:2a:31:46:d9:00:af:dc:d0:7c:47:79:a4:
ad:34:69:bb:3a:09:3c:1d:39:28:3c:d3:49:01:91:29:17:da:
cb:1a:a1:46:c7:16:15:27:9b:ed:9b:d2:fa:7e:a9:48:32:a8:
d3:59:93:5c:30:c6:22:45:a8:ed:71:28:3b:9d:e4:96:85:5c:
a5:c0:c1:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cyinQEqQ0zesqQ4JZicjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNTQzNzBjNGJhOWJkZTJiOTgzNzZiZjhmOTQyYTk0OTI2
YzE1MTkwHhcNMjUwMTMxMTMwMDUxWhcNMjUwMjAxMTMwMDUxWjAzMTEwLwYDVQQD
Eyg0N2Q5NzMwMjUxZDJjODRmMmE5NGZjNjE1ODk4MzEyNzQzNzFkODA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAximrSxImAZ2dhnpqQPJQdigXlZ27
Q7sjtEFD/LCS2Xm1fjPmw/msOzb5CXXHgZqX4CbPzz/qLB5+d+TCMwdxqBEKfYx+
XPZqyFOMYoLEf5KYprO8DZiNlmH8oyO7Q2RgVy5zgjGa+roMGJPv6PRv61H3hapN
jt1OcyIyIxwv/g/3YKDYUndi96HFrqJXk1oy9NMbSQ7MzX9+W7N4bMOj4TLM76kR
zbjeoiQGWUg/euzrzkQG4tOUC9IlWeTXeVtawR3ZdpeNfjcQYUQjKX4bD4nffeZk
mGthDyrEvqtHB3h4Fv+C99TOVFaetGK6VQz/LXUoX5j9EawztKN/fym6owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfZcwJR0shPKpT8YViYMSdDcdgFMB8GA1UdIwQY
MBaAFGpUNwxLqb3iuYN2v4+UKpSSbBUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWxRM0RFdXB2ZUs1ZzNhX2o1UXFsSkpzRlJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My82NzYwM2EtZjUyOS00YjE4LTk5ZmIt
NTAzYjk5ZDVhZDY4LzEvYWxRM0RFdXB2ZUs1ZzNhX2o1UXFsSkpzRlJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My82NzYwM2EtZjUyOS00YjE4LTk5ZmItNTAzYjk5ZDVhZDY4
LzEvYWxRM0RFdXB2ZUs1ZzNhX2o1UXFsSkpzRlJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUJtC211
4GRnKpF/OuVUzJ3RDreYNWMKxMkBIuRYnU0+FQICQJN2Nq4EDXAsUIXWnxRBkUCO
YlGOWPi+wPyRjFT8+VnCxbYybb9zS0uwsm3uPlmFH51HtM7XnkEZa+YEPqH721t3
woTdt0lI1IkTbC9H0wRKs8wZBiq0ghSTqNiTSO1v705CtQDQB0IAFjl+WZGFggs7
CJj5Ob/pYPsYR9okmXNUJcCr9Nec+obX4JQ8jXEwABlB7tYUKjFG2QCv3NB8R3mk
rTRpuzoJPB05KDzTSQGRKRfayxqhRscWFSeb7ZvS+n6pSDKo01mTXDDGIkWo7XEo
O53kloVcpcDBgA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:53 2025 by rpki-client