Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.mft
File: aJQuPste6nkqdvray-wBqFaOl_Q.mft (raw, json)
Hash identifier: GwCOXmESZtgXKxqhvaoyKyhdJ/osiDfjsZu0fT/60jY=
Subject key identifier: 4D:06:05:27:09:A5:34:25:AF:51:E4:D8:50:86:11:47:F8:92:05:D0
Authority key identifier: 68:94:2E:3E:CB:5E:EA:79:2A:76:FA:DA:CB:EC:01:A8:56:8E:97:F4
Certificate issuer: /CN=68942e3ecb5eea792a76fadacbec01a8568e97f4
Certificate serial: 0194BD4E61E32CECF4A743B142B9FCB6877D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJQuPste6nkqdvray-wBqFaOl_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: 2I7Ug_0TKUirYBKdCRFB3X-yPVM.roa (hash: OuAKBuCtiZrdtqQo3Ia+YQ9DdlyXDqDuhn9BW+I9wGc=)
2: aJQuPste6nkqdvray-wBqFaOl_Q.crl (hash: 6WNMMaBeROQHrX9X1wulybSwnODJbYubiuWmjyg5ZFI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:61:e3:2c:ec:f4:a7:43:b1:42:b9:fc:b6:87:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68942e3ecb5eea792a76fadacbec01a8568e97f4
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=4d06052709a53425af51e4d850861147f89205d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:91:4b:ac:53:09:da:5f:f4:bc:1a:1b:37:4f:
60:2a:a3:5b:9f:b7:3f:e1:05:74:1a:a6:30:e0:3f:
d7:ee:50:3d:75:5b:77:f0:4c:1c:8b:f7:83:c0:35:
4a:95:51:db:bc:c2:96:a7:0a:8f:3d:e3:32:b5:26:
2a:f1:95:cf:67:78:31:3f:f3:f2:58:6c:4a:7e:5b:
e7:fc:54:12:9c:ba:c8:db:b1:b6:b1:21:20:7a:0e:
b7:76:28:54:22:be:5d:73:2a:83:d7:54:7b:f5:2a:
da:63:b5:a3:11:36:ce:dd:08:dd:49:9f:e6:b6:bb:
4c:67:72:6d:c7:cb:63:82:5b:41:e9:9b:ff:84:ea:
73:d6:f5:01:ec:17:c1:14:84:c2:90:43:8a:85:46:
b5:ea:13:5c:db:35:26:9d:43:78:98:30:0e:f8:18:
22:e7:2d:97:ac:2b:ba:33:7f:94:4a:c5:2c:d2:7f:
62:38:c9:e5:ea:da:d0:c8:65:51:7c:d5:ca:d6:c0:
01:28:94:6b:3e:94:b1:15:fd:46:69:1e:10:45:02:
cb:c7:4c:86:b6:5a:2c:88:8c:ad:d7:41:56:5f:c9:
d8:19:50:e1:ef:67:c1:fe:49:40:ed:68:06:6b:98:
96:fc:06:9a:71:a0:70:59:0e:f1:33:d1:00:ef:d9:
01:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:06:05:27:09:A5:34:25:AF:51:E4:D8:50:86:11:47:F8:92:05:D0
X509v3 Authority Key Identifier:
keyid:68:94:2E:3E:CB:5E:EA:79:2A:76:FA:DA:CB:EC:01:A8:56:8E:97:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJQuPste6nkqdvray-wBqFaOl_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f1:29:da:fa:a9:3e:db:fb:bf:0f:f3:b3:6c:ff:cd:71:78:
40:c4:ad:e8:d1:4f:15:e0:c5:ea:c3:07:cf:a7:b1:9f:2d:5e:
c3:36:2e:8a:37:76:1a:ad:a6:28:de:07:d5:0e:93:7a:0f:43:
04:fe:2c:9e:9f:ce:98:86:ca:d6:b0:9c:ce:ae:1d:28:b9:60:
3d:d0:9a:d6:e3:54:b5:3a:98:d9:f9:4c:3e:6f:9c:f5:ab:49:
16:d5:c6:c6:66:9c:6d:4c:18:e6:f2:c2:b1:83:c4:e2:57:71:
22:46:c8:29:ef:c0:97:ee:88:20:e2:42:59:94:d9:a5:73:8e:
a8:7e:bf:a2:ef:19:c9:27:4b:20:02:92:63:ae:94:8d:d9:96:
49:3a:32:e4:ec:e3:b0:6f:9d:7f:35:3d:45:81:7a:da:91:4c:
cf:04:96:32:fe:73:05:66:a1:3d:4c:a6:4a:cd:c4:c3:a1:2c:
68:c2:45:6e:84:2b:10:31:45:db:32:86:db:b9:e4:68:df:d6:
93:fb:f4:8f:bd:d8:8c:e2:dc:8f:19:c7:0e:5a:9b:d5:d3:30:
43:16:99:2f:93:a3:82:93:b8:cf:bc:88:ac:5a:64:b9:e9:56:
f3:1d:ef:0d:0b:59:dc:d9:07:fd:cf:75:20:68:86:78:90:4c:
66:78:d0:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TmHjLOz0p0OxQrn8tod9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OTQyZTNlY2I1ZWVhNzkyYTc2ZmFkYWNiZWMwMWE4NTY4
ZTk3ZjQwHhcNMjUwMTMxMTcwMDE4WhcNMjUwMjAxMTcwMDE4WjAzMTEwLwYDVQQD
Eyg0ZDA2MDUyNzA5YTUzNDI1YWY1MWU0ZDg1MDg2MTE0N2Y4OTIwNWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZFLrFMJ2l/0vBobN09gKqNbn7c/
4QV0GqYw4D/X7lA9dVt38Ewci/eDwDVKlVHbvMKWpwqPPeMytSYq8ZXPZ3gxP/Py
WGxKflvn/FQSnLrI27G2sSEgeg63dihUIr5dcyqD11R79SraY7WjETbO3QjdSZ/m
trtMZ3Jtx8tjgltB6Zv/hOpz1vUB7BfBFITCkEOKhUa16hNc2zUmnUN4mDAO+Bgi
5y2XrCu6M3+USsUs0n9iOMnl6trQyGVRfNXK1sABKJRrPpSxFf1GaR4QRQLLx0yG
tlosiIyt10FWX8nYGVDh72fB/klA7WgGa5iW/AaacaBwWQ7xM9EA79kBlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0GBScJpTQlr1Hk2FCGEUf4kgXQMB8GA1UdIwQY
MBaAFGiULj7LXup5Knb62svsAahWjpf0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUpRdVBzdGU2bmtxZHZyYXktd0JxRmFPbF9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9iZWIzYTgtNGI3Mi00OGVjLThlMDQt
MDNjY2UzOTY5ZjljLzEvYUpRdVBzdGU2bmtxZHZyYXktd0JxRmFPbF9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9iZWIzYTgtNGI3Mi00OGVjLThlMDQtMDNjY2UzOTY5Zjlj
LzEvYUpRdVBzdGU2bmtxZHZyYXktd0JxRmFPbF9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/Ep2vqp
Ptv7vw/zs2z/zXF4QMSt6NFPFeDF6sMHz6exny1ewzYuijd2Gq2mKN4H1Q6Teg9D
BP4snp/OmIbK1rCczq4dKLlgPdCa1uNUtTqY2flMPm+c9atJFtXGxmacbUwY5vLC
sYPE4ldxIkbIKe/Al+6IIOJCWZTZpXOOqH6/ou8ZySdLIAKSY66UjdmWSToy5Ozj
sG+dfzU9RYF62pFMzwSWMv5zBWahPUymSs3Ew6EsaMJFboQrEDFF2zKG27nkaN/W
k/v0j73YjOLcjxnHDlqb1dMwQxaZL5OjgpO4z7yIrFpkuelW8x3vDQtZ3NkH/c91
IGiGeJBMZnjQyQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:07 2025 by rpki-client