Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
File: rRfnAW-VOg5izKRWb_nRBSww8lo.mft (raw, json)
Hash identifier: zmO0dpOL+lYehsG8KOB4xYo6bfjmEX2tQTc2MRBWGiI=
Subject key identifier: 03:19:C8:7A:4E:7B:CA:C7:ED:45:BC:04:B6:FB:F6:35:A2:7E:3E:4B
Authority key identifier: AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
Certificate issuer: /CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Certificate serial: 0194BCE0E6491A24296141CFED9789944EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
Manifest number: 0360
Signing time: Fri 31 Jan 2025 15:00:43 +0000
Manifest this update: Fri 31 Jan 2025 15:00:43 +0000
Manifest next update: Sat 01 Feb 2025 15:00:43 +0000
Files and hashes: 1: AsUkbA5N2PUwSi47FKCaYRJKFUs.roa (hash: pCCYd/C+MlVrRZtG5LOO+Gem9dQw10KaWQbtM9c+M54=)
2: h73Bb2bBsx_sZgOVLIvtxZLolnY.roa (hash: x94KOnEBWaX982PvdAszj32cQ+ALwtBcUGMJov9xLw4=)
3: rRfnAW-VOg5izKRWb_nRBSww8lo.crl (hash: X1Qt1REJFzZReigpeelhab5EXSB/jgspQOomCkX5fPg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e6:49:1a:24:29:61:41:cf:ed:97:89:94:4e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Validity
Not Before: Jan 31 15:00:43 2025 GMT
Not After : Feb 1 15:00:43 2025 GMT
Subject: CN=0319c87a4e7bcac7ed45bc04b6fbf635a27e3e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1c:f1:d4:45:df:a8:4b:9c:8d:9f:46:bb:9d:
eb:72:ca:b3:ec:5c:8f:c5:00:a2:44:91:54:32:2b:
de:28:1f:18:a8:fd:e7:9a:6c:67:d6:4b:53:60:16:
ab:30:12:42:a2:e7:e6:8c:83:da:3f:33:2a:c9:c7:
68:04:1e:3b:13:a3:c9:ac:66:05:28:33:01:43:16:
19:7f:d3:01:c1:02:a0:29:e9:cf:77:2b:ca:62:da:
90:c7:8c:de:55:a8:0e:62:a3:31:6a:9f:39:03:23:
20:40:fc:1b:61:e3:73:01:f2:19:3e:f6:0b:dd:e7:
77:c2:1a:61:33:44:b6:8c:1e:7d:c4:ab:41:bf:f6:
a7:b2:77:f6:3c:06:1c:7e:46:31:71:ac:14:c5:01:
b7:f1:c8:e9:c6:a5:e5:66:23:b3:01:5c:ff:7f:27:
43:25:35:07:65:24:fb:9e:65:80:33:74:d7:51:c8:
2b:9e:d2:47:64:79:1a:e2:4d:26:f1:8e:cc:f1:f3:
fa:ef:79:8c:fc:15:80:97:ec:99:93:c9:64:fd:f1:
f7:64:f7:fe:9b:4c:0a:0c:16:04:fc:2f:49:5e:c8:
0e:7e:86:e3:af:d9:af:50:12:65:68:da:f1:0e:7a:
e4:bb:a1:12:66:57:ea:b2:63:08:c4:23:4a:03:55:
a0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:19:C8:7A:4E:7B:CA:C7:ED:45:BC:04:B6:FB:F6:35:A2:7E:3E:4B
X509v3 Authority Key Identifier:
keyid:AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b9:7d:3f:59:05:16:f1:72:f8:15:88:6e:0c:b4:d3:37:d6:
07:6c:11:30:50:59:9b:0a:65:21:3a:d9:e4:7f:aa:06:70:38:
4d:30:d0:98:83:2f:d6:57:1a:2b:36:fe:7f:2d:9b:15:51:13:
5a:71:01:b0:a6:49:e2:16:be:51:2b:3e:dd:36:41:eb:7f:88:
3f:76:72:75:12:b6:62:2d:20:d2:a4:bc:e4:10:49:84:ab:fd:
1f:b0:4c:d1:e2:df:49:68:9a:a4:ac:50:a8:ac:df:7e:7e:0b:
9a:7d:24:97:e8:94:1e:1b:83:69:42:c4:ce:15:1a:f0:61:7c:
06:64:72:e3:5b:55:cf:96:33:8f:8d:c2:c0:23:0a:a5:ad:2e:
fa:48:8f:44:e3:a4:a3:7c:7f:b2:ca:b6:b8:82:58:5d:aa:3d:
18:f2:8b:b7:29:ee:d2:68:ee:1c:b5:0b:6c:d0:2a:8b:63:f5:
19:b3:38:42:9f:b1:f3:35:b0:cc:40:17:48:7c:3a:2e:35:57:
2e:5a:40:02:82:0e:40:e9:62:9b:7f:01:9e:9a:4d:16:f1:df:
14:ea:4b:62:8f:49:ba:76:2c:ed:3d:27:58:c3:0f:4d:59:ac:
94:38:1f:af:df:67:d0:f7:57:49:f8:ee:2f:76:10:61:2e:5a:
ca:fa:ba:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84OZJGiQpYUHP7ZeJlE6/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMTdlNzAxNmY5NTNhMGU2MmNjYTQ1NjZmZjlkMTA1MmMz
MGYyNWEwHhcNMjUwMTMxMTUwMDQzWhcNMjUwMjAxMTUwMDQzWjAzMTEwLwYDVQQD
EygwMzE5Yzg3YTRlN2JjYWM3ZWQ0NWJjMDRiNmZiZjYzNWEyN2UzZTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhzx1EXfqEucjZ9Gu53rcsqz7FyP
xQCiRJFUMiveKB8YqP3nmmxn1ktTYBarMBJCoufmjIPaPzMqycdoBB47E6PJrGYF
KDMBQxYZf9MBwQKgKenPdyvKYtqQx4zeVagOYqMxap85AyMgQPwbYeNzAfIZPvYL
3ed3whphM0S2jB59xKtBv/ansnf2PAYcfkYxcawUxQG38cjpxqXlZiOzAVz/fydD
JTUHZST7nmWAM3TXUcgrntJHZHka4k0m8Y7M8fP673mM/BWAl+yZk8lk/fH3ZPf+
m0wKDBYE/C9JXsgOfobjr9mvUBJlaNrxDnrku6ESZlfqsmMIxCNKA1WgsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMZyHpOe8rH7UW8BLb79jWifj5LMB8GA1UdIwQY
MBaAFK0X5wFvlToOYsykVm/50QUsMPJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84M2M4ODEtYmVmNy00Zjc5LTkwYmEt
NTU5MDc2OGRlMmNmLzEvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84M2M4ODEtYmVmNy00Zjc5LTkwYmEtNTU5MDc2OGRlMmNm
LzEvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKLl9P1kF
FvFy+BWIbgy00zfWB2wRMFBZmwplITrZ5H+qBnA4TTDQmIMv1lcaKzb+fy2bFVET
WnEBsKZJ4ha+USs+3TZB63+IP3ZydRK2Yi0g0qS85BBJhKv9H7BM0eLfSWiapKxQ
qKzffn4Lmn0kl+iUHhuDaULEzhUa8GF8BmRy41tVz5Yzj43CwCMKpa0u+kiPROOk
o3x/ssq2uIJYXao9GPKLtynu0mjuHLULbNAqi2P1GbM4Qp+x8zWwzEAXSHw6LjVX
LlpAAoIOQOlim38BnppNFvHfFOpLYo9JunYs7T0nWMMPTVmslDgfr99n0PdXSfju
L3YQYS5ayvq6IQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:33:16 2025 by rpki-client