Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json)
Hash identifier: 9daZVJ6vNv3kzoouF703sGApj1oJ0XQjrNM0Stnch7k=
Subject key identifier: 3D:00:95:B0:E8:A4:50:BE:B3:1D:A6:69:25:BF:DE:CC:83:3B:0B:6F
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 0194BC7308DE6E7A9118EDCCAC76F98C75E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
Manifest number: 0830
Signing time: Fri 31 Jan 2025 13:00:42 +0000
Manifest this update: Fri 31 Jan 2025 13:00:42 +0000
Manifest next update: Sat 01 Feb 2025 13:00:42 +0000
Files and hashes: 1: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: zUreBWc4KwHKEAGqtDqzlW85KtASn9z7Mllg21Wvdwo=)
2: yzmCfwKm_JPG030YXapakt0raKE.roa (hash: FgUsVc5q6Pi83IVxku3Q5cKwPTsj2kNtxaix/96GJI0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:08:de:6e:7a:91:18:ed:cc:ac:76:f9:8c:75:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Jan 31 13:00:42 2025 GMT
Not After : Feb 1 13:00:42 2025 GMT
Subject: CN=3d0095b0e8a450beb31da66925bfdecc833b0b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6a:e4:46:4e:c1:98:9d:7f:f5:19:c5:da:81:
78:5e:cf:4b:53:2c:8a:86:6e:9f:32:47:63:5e:6c:
68:1f:9f:a5:dc:76:46:74:db:56:d6:45:ea:02:0b:
05:2c:92:64:14:3b:de:7a:91:8a:5f:3c:94:8b:d8:
05:77:59:0f:66:03:5d:fd:8f:f8:97:11:f4:d3:d4:
d4:5f:b3:48:09:ee:e2:27:21:5b:9c:23:2e:bf:7b:
54:39:93:4c:55:9a:45:a7:40:36:7a:08:e1:d0:95:
77:96:73:e6:b8:fe:08:5e:c5:f9:d9:da:f5:3f:18:
ad:38:e7:84:ae:02:bb:85:a7:80:43:aa:ae:9f:39:
2c:af:43:86:e1:01:fe:17:33:35:90:32:26:12:57:
19:f0:d0:09:0f:97:60:69:a0:5d:ee:ab:e5:80:97:
59:fa:0a:ca:b9:ed:2f:12:93:c0:ac:fb:58:2f:13:
57:22:99:74:bd:19:37:fa:a6:67:dc:b2:c8:ea:08:
42:2d:8e:e0:aa:9e:a8:78:e9:14:7d:d3:2c:76:01:
1a:eb:1e:1a:1a:0c:67:90:43:8a:b4:89:8e:9a:ef:
98:44:91:0e:63:6a:02:83:17:0b:d4:2c:1e:2a:b0:
6b:fa:0d:de:52:4c:c7:5d:e0:f9:81:a7:2a:ac:8e:
4c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:00:95:B0:E8:A4:50:BE:B3:1D:A6:69:25:BF:DE:CC:83:3B:0B:6F
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:2c:c6:b5:cd:d5:18:3c:a8:cf:bd:de:dd:ef:0e:aa:df:69:
89:d7:d4:49:bc:7b:4b:12:b3:2e:b8:c3:39:00:e3:ea:a9:10:
5d:0f:14:00:1b:7b:6b:ad:0f:c3:b9:cc:4c:7c:f4:ca:2a:f0:
e8:1d:d7:6c:f2:b9:6e:26:94:e7:23:c3:be:24:48:38:56:b6:
df:e5:32:07:a5:4f:e8:82:64:0d:80:27:a6:84:52:2e:0c:f8:
7b:06:2e:9b:f6:02:f3:0e:35:3b:ad:4a:f6:96:c1:c2:d0:cf:
7c:3b:aa:ed:55:58:4c:c3:a9:1a:26:db:3f:32:1d:7b:e7:8d:
05:70:8e:84:bf:a9:77:07:a8:28:2f:61:5b:5e:61:bc:2a:e9:
38:c9:71:73:7a:b7:56:71:65:ef:e8:cb:1c:d2:61:d7:0c:68:
c0:a5:26:b6:c2:a1:2a:cd:a9:9d:1f:24:a3:9e:51:f2:d0:85:
4c:53:bf:56:dd:aa:5d:cd:a1:e9:24:d9:52:a5:4e:dd:a2:a3:
25:a5:ea:56:61:95:36:90:9d:84:dc:ee:5a:82:7e:d7:d5:17:
46:02:64:9f:38:9c:87:0c:10:53:fd:8e:ed:87:41:2f:e8:b3:
c8:de:c8:23:84:c2:ea:9b:e4:32:ea:9b:6a:18:e0:c5:27:d2:
21:44:90:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cwjebnqRGO3MrHb5jHXiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYmExZDI0ZTcyYzQzOWVjN2E1Y2JkYzM5MTM1N2RkODlj
Yjg2YWIwHhcNMjUwMTMxMTMwMDQyWhcNMjUwMjAxMTMwMDQyWjAzMTEwLwYDVQQD
EygzZDAwOTViMGU4YTQ1MGJlYjMxZGE2NjkyNWJmZGVjYzgzM2IwYjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WrkRk7BmJ1/9RnF2oF4Xs9LUyyK
hm6fMkdjXmxoH5+l3HZGdNtW1kXqAgsFLJJkFDveepGKXzyUi9gFd1kPZgNd/Y/4
lxH009TUX7NICe7iJyFbnCMuv3tUOZNMVZpFp0A2egjh0JV3lnPmuP4IXsX52dr1
PxitOOeErgK7haeAQ6qunzksr0OG4QH+FzM1kDImElcZ8NAJD5dgaaBd7qvlgJdZ
+grKue0vEpPArPtYLxNXIpl0vRk3+qZn3LLI6ghCLY7gqp6oeOkUfdMsdgEa6x4a
GgxnkEOKtImOmu+YRJEOY2oCgxcL1CweKrBr+g3eUkzHXeD5gacqrI5MqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0AlbDopFC+sx2maSW/3syDOwtvMB8GA1UdIwQY
MBaAFGu6HSTnLEOex6XL3DkTV92Jy4arMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTdvZEpPY3NRNTdIcGN2Y09STlgzWW5MaHFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9hOTRhNGMtYTU1Mi00NmY2LThhODEt
Y2VmOTQ0ODEyNGIwLzEvYTdvZEpPY3NRNTdIcGN2Y09STlgzWW5MaHFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9hOTRhNGMtYTU1Mi00NmY2LThhODEtY2VmOTQ0ODEyNGIw
LzEvYTdvZEpPY3NRNTdIcGN2Y09STlgzWW5MaHFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApizGtc3V
GDyoz73e3e8Oqt9pidfUSbx7SxKzLrjDOQDj6qkQXQ8UABt7a60Pw7nMTHz0yirw
6B3XbPK5biaU5yPDviRIOFa23+UyB6VP6IJkDYAnpoRSLgz4ewYum/YC8w41O61K
9pbBwtDPfDuq7VVYTMOpGibbPzIde+eNBXCOhL+pdweoKC9hW15hvCrpOMlxc3q3
VnFl7+jLHNJh1wxowKUmtsKhKs2pnR8ko55R8tCFTFO/Vt2qXc2h6STZUqVO3aKj
JaXqVmGVNpCdhNzuWoJ+19UXRgJknzichwwQU/2O7YdBL+izyN7II4TC6pvkMuqb
ahjgxSfSIUSQjg==
-----END CERTIFICATE-----
Generated at Thu May 1 12:28:05 2025 by rpki-client