Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
File: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft (raw, json)
Hash identifier: XmfRYrl+nMk20Dyfa2jjRD35CguydscNSRa4rjKVR54=
Subject key identifier: E3:8A:BE:1B:D3:DA:2E:56:D5:34:AE:AE:18:65:DB:10:6C:D9:BD:C1
Authority key identifier: A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
Certificate issuer: /CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Certificate serial: 0194BC3BF71D8BC0AC1C7718380F231E6F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
Manifest number: 143A
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: VuINTwukw5gk-GpLk8S7BysJ2QQ.roa (hash: /kBRgqE3JbZP3MZS0KUDmcjo+++iqmd1/lk+a59O9c4=)
2: Vz4KDvni-pIG9pERT0AYceBbHa0.roa (hash: pYtbdwqDoFmUa9j2KOPzRaeu3zPU5WrvlE2/yiAXzDw=)
3: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl (hash: l0U6NejfAeBQTrK+Xh1UlwYbgFC7KrHc3r/h+LSFC+s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f7:1d:8b:c0:ac:1c:77:18:38:0f:23:1e:6f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=e38abe1bd3da2e56d534aeae1865db106cd9bdc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:f5:89:b6:15:cd:7f:87:37:a8:bd:cd:7b:
97:7b:0f:80:24:28:cf:e0:35:06:49:6d:97:e0:52:
e1:fc:21:0f:00:8d:d6:59:12:1b:db:da:55:29:e7:
c9:7c:5d:ad:69:76:af:18:4b:1b:13:23:f2:2a:3b:
e2:1a:c2:3f:a8:64:dd:9e:92:45:bf:c1:27:1d:fe:
95:3f:b4:54:92:d9:0f:65:9f:65:4c:51:2c:8f:fa:
11:dd:3d:a6:af:5c:ef:94:f6:56:58:9e:5f:f7:38:
1b:55:f2:02:fe:d0:e1:6f:42:2b:e4:f4:cf:f3:d7:
c2:f1:92:82:fc:4b:4e:1a:9d:0a:b3:2d:d4:26:34:
df:3a:34:4d:7e:96:c2:79:9f:36:be:b5:66:04:2e:
e7:4c:be:12:72:e3:e1:e2:c0:ef:dd:6a:55:07:a3:
87:60:0d:d5:da:d2:42:2b:fc:63:a7:48:d0:21:e1:
86:c9:1a:69:ec:ef:9b:ba:bc:e5:af:95:ab:27:51:
b6:1f:dd:d3:36:b5:f9:0e:64:f3:d4:f3:69:0c:22:
dc:9a:27:44:d5:a2:da:9f:ec:00:b0:34:55:f3:59:
3d:ec:0d:b6:6a:b5:25:c2:12:58:9a:b7:d4:62:4f:
80:9d:07:98:fa:97:52:50:f4:e0:9f:10:10:af:9d:
7b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8A:BE:1B:D3:DA:2E:56:D5:34:AE:AE:18:65:DB:10:6C:D9:BD:C1
X509v3 Authority Key Identifier:
keyid:A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:35:d0:9a:4a:9b:65:54:bd:a4:f6:cd:8c:6d:c2:c0:e2:ed:
ed:02:78:d3:75:15:3d:99:18:9e:43:df:20:3f:c4:00:e2:96:
4e:93:e5:04:dd:5c:f3:5b:66:ca:64:f1:35:3e:2a:8c:6a:fb:
e9:e8:aa:de:e7:13:e1:4d:af:20:fd:70:eb:6f:88:e5:be:27:
6b:06:2e:36:b6:a1:d9:aa:94:8f:dd:95:0f:d4:45:24:b3:38:
3c:b9:86:fc:93:e6:9a:83:41:36:c0:5c:33:0c:61:29:c0:ae:
a0:a0:1e:e5:f9:e8:c4:2d:73:71:9f:fa:9b:eb:eb:3f:68:71:
b2:95:47:76:5f:cf:b7:71:a9:74:47:e5:3b:59:34:25:7e:6f:
c8:7a:36:06:e4:c7:73:f8:23:85:5f:a9:76:02:47:15:7e:8b:
31:c1:99:94:bf:48:ac:04:63:ce:c8:ce:e8:6e:61:9d:b9:10:
f1:ba:d3:29:d3:1d:a3:97:ef:8c:3d:7b:19:30:04:b7:2f:94:
1e:41:0b:09:87:2d:c3:56:72:96:3d:f2:31:c1:97:a4:4e:3c:
9f:15:84:e2:9a:85:d1:da:d8:e7:9f:d2:35:8a:d8:8a:42:07:
df:1b:7a:fd:87:60:a0:b4:38:33:5a:d5:a0:ea:e4:0b:8a:8a:
35:51:d0:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O/cdi8CsHHcYOA8jHm8qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzOWI0OTQzZTdkNmI0YjBlMWRlODVjOWJjMzhiODU3NTU0
ZGQ0N2QwHhcNMjUwMTMxMTIwMDMzWhcNMjUwMjAxMTIwMDMzWjAzMTEwLwYDVQQD
EyhlMzhhYmUxYmQzZGEyZTU2ZDUzNGFlYWUxODY1ZGIxMDZjZDliZGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8H1ibYVzX+HN6i9zXuXew+AJCjP
4DUGSW2X4FLh/CEPAI3WWRIb29pVKefJfF2taXavGEsbEyPyKjviGsI/qGTdnpJF
v8EnHf6VP7RUktkPZZ9lTFEsj/oR3T2mr1zvlPZWWJ5f9zgbVfIC/tDhb0Ir5PTP
89fC8ZKC/EtOGp0Ksy3UJjTfOjRNfpbCeZ82vrVmBC7nTL4ScuPh4sDv3WpVB6OH
YA3V2tJCK/xjp0jQIeGGyRpp7O+burzlr5WrJ1G2H93TNrX5DmTz1PNpDCLcmidE
1aLan+wAsDRV81k97A22arUlwhJYmrfUYk+AnQeY+pdSUPTgnxAQr517bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOKvhvT2i5W1TSurhhl2xBs2b3BMB8GA1UdIwQY
MBaAFKObSUPn1rSw4d6Fybw4uFdVTdR9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzV0SlEtZld0TERoM29YSnZEaTRWMVZOMUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82Y2Y3MTItZGQwYi00YTkwLTk1OGUt
NjkzYmY2N2U2MWYzLzEvbzV0SlEtZld0TERoM29YSnZEaTRWMVZOMUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS82Y2Y3MTItZGQwYi00YTkwLTk1OGUtNjkzYmY2N2U2MWYz
LzEvbzV0SlEtZld0TERoM29YSnZEaTRWMVZOMUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDXQmkqb
ZVS9pPbNjG3CwOLt7QJ403UVPZkYnkPfID/EAOKWTpPlBN1c81tmymTxNT4qjGr7
6eiq3ucT4U2vIP1w62+I5b4nawYuNrah2aqUj92VD9RFJLM4PLmG/JPmmoNBNsBc
MwxhKcCuoKAe5fnoxC1zcZ/6m+vrP2hxspVHdl/Pt3GpdEflO1k0JX5vyHo2BuTH
c/gjhV+pdgJHFX6LMcGZlL9IrARjzsjO6G5hnbkQ8brTKdMdo5fvjD17GTAEty+U
HkELCYctw1Zylj3yMcGXpE48nxWE4pqF0drY55/SNYrYikIH3xt6/YdgoLQ4M1rV
oOrkC4qKNVHQsg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:36:52 2025 by rpki-client