Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
File: 0hNMcoigwXozuLX-jFgGa0RC8YM.mft (raw, json)
Hash identifier: M6L1PZfEncOYhAUv/Y2SslbAM9Nmu1Rn8wCFBsd75D8=
Subject key identifier: EE:42:C1:FE:A1:86:60:EF:87:77:E5:51:04:A8:DD:86:4B:E4:19:34
Authority key identifier: D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
Certificate issuer: /CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Certificate serial: 0194BC3C44F8EDFF57588BBFA51D70DDDB99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
Manifest number: 025B
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: 0hNMcoigwXozuLX-jFgGa0RC8YM.crl (hash: Y09m6R4p6F2AQI8qwgDOcRy6/reM+ZWUZK/Az8+uhXg=)
2: IjuOSUk_7icZW2FOsDmStZ5tc0Y.roa (hash: /4IVw0ESBk+fPfscovcApWNjH6K3fkBcjRs0stf1FDw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:44:f8:ed:ff:57:58:8b:bf:a5:1d:70:dd:db:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=ee42c1fea18660ef8777e55104a8dd864be41934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:e1:e9:ef:e1:15:44:2f:2e:35:bd:9a:6c:
5c:73:c9:23:77:95:43:0c:9c:c9:91:c3:7b:24:2f:
ef:ca:07:4e:f1:5d:c1:1d:d6:11:5e:3f:29:61:d2:
14:6e:d2:9d:62:f8:e1:45:75:8e:96:52:e8:de:e7:
f6:35:93:b7:00:f6:30:9d:55:d6:0e:a0:e8:bd:54:
0d:53:c0:c8:ec:20:61:2e:a7:12:d0:42:b3:b2:64:
21:36:23:08:1b:b8:f6:3a:59:f1:c8:4d:af:a3:87:
53:d1:c3:c7:fd:4c:d9:57:27:0f:4b:12:a5:79:af:
2c:76:a9:e0:eb:0c:5f:1d:76:a0:1c:5c:6c:e2:ed:
28:b9:a9:ac:41:e6:91:4e:85:ce:8a:91:b3:bc:01:
f5:2b:11:f8:3b:87:6d:69:c0:5e:94:55:e2:56:54:
80:17:40:0a:5b:84:1e:ba:e5:d1:5a:4b:f7:a0:8d:
af:86:13:1c:eb:46:95:3f:b3:b1:4d:89:c8:5b:1a:
de:75:02:6f:df:e9:22:4b:83:66:41:4c:b7:73:3f:
c7:79:74:ea:d5:53:a5:13:b0:08:82:ec:eb:c1:93:
bc:c4:2e:cf:8c:e5:db:75:20:3f:43:d4:60:7c:4f:
93:10:c5:5f:2d:cd:92:af:f3:e2:b9:82:16:32:87:
cb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:42:C1:FE:A1:86:60:EF:87:77:E5:51:04:A8:DD:86:4B:E4:19:34
X509v3 Authority Key Identifier:
keyid:D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:fa:22:50:7e:5c:95:fa:d2:cf:54:b3:67:22:ec:e3:4d:ca:
0b:e3:4d:36:5a:ab:39:2b:b2:de:44:0e:1f:8f:52:36:20:95:
70:ac:cc:4d:01:81:95:5e:52:ce:74:a2:fd:0d:03:8f:2e:8e:
6f:6d:73:c9:32:57:6c:1c:b0:18:35:21:0b:e8:9a:26:dd:1d:
38:d9:f1:00:79:f4:eb:36:7a:60:6c:d7:67:7e:2b:89:bc:cb:
f2:bb:9d:dd:7f:46:51:4a:1a:f0:d2:a6:40:61:0c:d7:16:fb:
fa:7a:6b:18:d3:06:ca:e1:ca:8a:2c:77:82:e6:5c:62:c5:a6:
0a:d4:88:f3:29:9f:ee:c2:e7:40:db:53:bb:f1:0b:1e:38:0d:
da:bf:d0:8b:9a:38:ca:c7:6b:54:5d:68:da:ed:b0:9b:d1:be:
43:b7:e1:75:be:6b:3e:0a:f8:ab:b4:ae:52:91:54:fb:78:da:
31:77:36:41:28:1a:8e:2d:61:50:b7:b6:55:b0:2d:95:42:4b:
fd:1a:7d:d0:9c:95:5a:e6:d8:87:6a:ac:26:d9:90:cc:bc:5f:
56:70:df:d9:81:ec:fe:7b:a5:cc:6a:0f:28:48:7c:37:36:80:
2a:79:c3:87:aa:35:d8:0f:9b:ca:82:70:ef:cb:6e:07:cd:f5:
15:96:ae:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PET47f9XWIu/pR1w3duZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMTM0YzcyODhhMGMxN2EzM2I4YjVmZThjNTgwNjZiNDQ0
MmYxODMwHhcNMjUwMTMxMTIwMDUzWhcNMjUwMjAxMTIwMDUzWjAzMTEwLwYDVQQD
EyhlZTQyYzFmZWExODY2MGVmODc3N2U1NTEwNGE4ZGQ4NjRiZTQxOTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc3h6e/hFUQvLjW9mmxcc8kjd5VD
DJzJkcN7JC/vygdO8V3BHdYRXj8pYdIUbtKdYvjhRXWOllLo3uf2NZO3APYwnVXW
DqDovVQNU8DI7CBhLqcS0EKzsmQhNiMIG7j2OlnxyE2vo4dT0cPH/UzZVycPSxKl
ea8sdqng6wxfHXagHFxs4u0ouamsQeaRToXOipGzvAH1KxH4O4dtacBelFXiVlSA
F0AKW4QeuuXRWkv3oI2vhhMc60aVP7OxTYnIWxredQJv3+kiS4NmQUy3cz/HeXTq
1VOlE7AIguzrwZO8xC7PjOXbdSA/Q9RgfE+TEMVfLc2Sr/PiuYIWMofLBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5Cwf6hhmDvh3flUQSo3YZL5Bk0MB8GA1UdIwQY
MBaAFNITTHKIoMF6M7i1/oxYBmtEQvGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGhOTWNvaWd3WG96dUxYLWpGZ0dhMFJDOFlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kZGFmNDctNGU2ZC00OTk0LTg3N2It
MmE4OWRmMWFmMTZhLzEvMGhOTWNvaWd3WG96dUxYLWpGZ0dhMFJDOFlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kZGFmNDctNGU2ZC00OTk0LTg3N2ItMmE4OWRmMWFmMTZh
LzEvMGhOTWNvaWd3WG96dUxYLWpGZ0dhMFJDOFlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvoiUH5c
lfrSz1SzZyLs403KC+NNNlqrOSuy3kQOH49SNiCVcKzMTQGBlV5SznSi/Q0Djy6O
b21zyTJXbBywGDUhC+iaJt0dONnxAHn06zZ6YGzXZ34ribzL8rud3X9GUUoa8NKm
QGEM1xb7+nprGNMGyuHKiix3guZcYsWmCtSI8ymf7sLnQNtTu/ELHjgN2r/Qi5o4
ysdrVF1o2u2wm9G+Q7fhdb5rPgr4q7SuUpFU+3jaMXc2QSgaji1hULe2VbAtlUJL
/Rp90JyVWubYh2qsJtmQzLxfVnDf2YHs/nulzGoPKEh8NzaAKnnDh6o12A+byoJw
78tuB831FZau5g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:33 2025 by rpki-client