
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
File: mnuajNgZ9KkgM01-cuwjQIcNd0k.mft (raw, json)
Hash identifier: N+jVVEL5AtogAcii63+neCf4i+f7adO6c5VRBAtMiVM=
Subject key identifier: DF:8E:68:DC:A0:06:DA:23:75:7D:5B:F1:BF:6B:8B:09:AF:F1:D5:DA
Authority key identifier: 9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49
Certificate issuer: /CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
Certificate serial: 0194BC052895FEDA4529E8292050BCBFA28B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
Manifest number: 0695
Signing time: Fri 31 Jan 2025 11:00:42 +0000
Manifest this update: Fri 31 Jan 2025 11:00:42 +0000
Manifest next update: Sat 01 Feb 2025 11:00:42 +0000
Files and hashes: 1: IKlMOdkuHyBNZAexC-GSK-hjGW0.roa (hash: uA4Q2gsvRlV+sSD0ED9KoTfpAy2mm9Pd7yFqglVpNvQ=)
2: ksVbRwAzzCZHci4kH2kQ6u8coqY.roa (hash: QaqWPpVajjOVbtuXKzhecjPRXn+V4yoJpRPVeesXbzw=)
3: mnuajNgZ9KkgM01-cuwjQIcNd0k.crl (hash: kAg9z2MuchfLQtQBwknxuqhqnlKhc2EVsmhdEN7fscs=)
4: uOUxSiBIbzpDJ7EaKMdYFnC-HEQ.roa (hash: P7xU7zipmmpWbMdR+tIYpEi0SHoYEWAWhVNCw2vAWTE=)
5: xH_26XIR8lPG36a6e_UAuv1nVvs.roa (hash: skoMmZjq1jRGHL/wRavlOMxLKJaRep20S4gGa/juF00=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:28:95:fe:da:45:29:e8:29:20:50:bc:bf:a2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
Validity
Not Before: Jan 31 11:00:42 2025 GMT
Not After : Feb 1 11:00:42 2025 GMT
Subject: CN=df8e68dca006da23757d5bf1bf6b8b09aff1d5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ac:a0:53:3a:e3:8a:9d:e7:38:11:4f:13:b2:
9d:cd:8a:a2:d8:e1:cc:84:fc:77:ac:82:7d:e2:89:
4e:b5:ec:53:e5:e3:3d:b0:cf:34:07:04:97:ae:7e:
f8:3d:31:11:e8:bc:32:11:9b:33:46:7d:85:2c:f0:
9f:a3:73:ef:35:31:fc:06:d3:ad:34:a6:f3:bd:01:
a8:4a:93:f8:09:9a:e2:b9:b4:0a:b2:c1:0e:e1:31:
41:43:4e:e9:48:b6:02:b1:01:2d:6a:e4:af:eb:44:
fa:6a:10:43:53:2f:67:52:d3:79:f3:b3:68:40:46:
4f:79:76:6d:7f:76:80:c7:2a:05:31:06:1f:ea:ad:
42:a8:80:84:5f:94:06:ef:49:64:f5:5d:b9:29:18:
74:bd:9b:f3:9a:0f:7b:52:43:0e:eb:1f:bb:68:32:
c9:c4:88:b4:31:b4:14:0b:36:0f:8c:3c:56:85:a1:
53:55:89:5e:20:81:b6:77:4d:a2:54:69:16:e1:cf:
da:df:dd:2c:e8:ae:c3:24:42:ad:48:1d:e1:ae:09:
01:5a:ba:07:bc:a7:02:77:f6:a1:4e:58:9c:e3:48:
75:b5:61:8f:bb:cd:7a:de:26:74:d2:39:be:1c:6e:
c9:05:2f:3a:b6:31:f0:21:65:3f:7b:81:87:ff:35:
57:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8E:68:DC:A0:06:DA:23:75:7D:5B:F1:BF:6B:8B:09:AF:F1:D5:DA
X509v3 Authority Key Identifier:
keyid:9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:5d:db:a7:04:8e:d8:a9:07:8f:5c:8d:a5:8e:97:ed:14:e2:
7b:e6:8c:a3:fc:1a:3d:4e:15:c7:1d:c2:21:64:12:c2:a0:5e:
f9:61:1f:cf:a1:6c:7c:88:b7:0a:17:a9:e6:46:ef:05:34:27:
9e:f5:dc:e4:1c:36:ff:ac:41:ae:29:41:65:42:3b:9e:2b:ef:
48:17:5f:d8:7b:8f:8c:a9:ac:dc:7f:75:02:d4:ec:43:60:1a:
5b:b9:89:5c:bc:18:27:41:c3:fd:ac:6b:1a:eb:eb:af:3c:e5:
ca:81:32:af:30:59:96:9e:6d:ab:2a:78:24:9a:f1:04:93:a9:
fa:70:fa:95:a8:fb:aa:32:6b:e6:20:ca:9e:ac:ce:c8:ee:a5:
03:64:91:59:5a:69:41:72:1b:d9:ae:59:69:bf:a2:29:b8:48:
a7:f6:ce:81:92:0d:e5:9f:1e:f6:8f:1c:3d:4e:86:c4:68:76:
99:85:82:71:3b:af:4b:7a:ac:b4:37:9e:b7:fa:22:d8:b5:63:
e4:1d:19:c9:e7:66:30:3b:8d:93:bf:ab:bf:b8:ae:a7:09:4b:
d2:ee:38:9e:30:17:34:b7:bb:5a:48:64:01:86:b8:81:71:b3:
a7:b3:da:8b:29:c2:98:fa:a8:35:88:4a:88:3b:00:c3:35:8a:
9b:0a:b7:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BSiV/tpFKegpIFC8v6KLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhN2I5YThjZDgxOWY0YTkyMDMzNGQ3ZTcyZWMyMzQwODcw
ZDc3NDkwHhcNMjUwMTMxMTEwMDQyWhcNMjUwMjAxMTEwMDQyWjAzMTEwLwYDVQQD
EyhkZjhlNjhkY2EwMDZkYTIzNzU3ZDViZjFiZjZiOGIwOWFmZjFkNWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaygUzrjip3nOBFPE7KdzYqi2OHM
hPx3rIJ94olOtexT5eM9sM80BwSXrn74PTER6LwyEZszRn2FLPCfo3PvNTH8BtOt
NKbzvQGoSpP4CZriubQKssEO4TFBQ07pSLYCsQEtauSv60T6ahBDUy9nUtN587No
QEZPeXZtf3aAxyoFMQYf6q1CqICEX5QG70lk9V25KRh0vZvzmg97UkMO6x+7aDLJ
xIi0MbQUCzYPjDxWhaFTVYleIIG2d02iVGkW4c/a390s6K7DJEKtSB3hrgkBWroH
vKcCd/ahTlic40h1tWGPu8163iZ00jm+HG7JBS86tjHwIWU/e4GH/zVXNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+OaNygBtojdX1b8b9riwmv8dXaMB8GA1UdIwQY
MBaAFJp7mozYGfSpIDNNfnLsI0CHDXdJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW51YWpOZ1o5S2tnTTAxLWN1d2pRSWNOZDBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83ZTBlYmItNDY4Ni00MDZlLWI5OWYt
MjFmYWYxNDRjYjYyLzEvbW51YWpOZ1o5S2tnTTAxLWN1d2pRSWNOZDBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS83ZTBlYmItNDY4Ni00MDZlLWI5OWYtMjFmYWYxNDRjYjYy
LzEvbW51YWpOZ1o5S2tnTTAxLWN1d2pRSWNOZDBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd13bpwSO
2KkHj1yNpY6X7RTie+aMo/waPU4Vxx3CIWQSwqBe+WEfz6FsfIi3Chep5kbvBTQn
nvXc5Bw2/6xBrilBZUI7nivvSBdf2HuPjKms3H91AtTsQ2AaW7mJXLwYJ0HD/axr
GuvrrzzlyoEyrzBZlp5tqyp4JJrxBJOp+nD6laj7qjJr5iDKnqzOyO6lA2SRWVpp
QXIb2a5Zab+iKbhIp/bOgZIN5Z8e9o8cPU6GxGh2mYWCcTuvS3qstDeet/oi2LVj
5B0ZyedmMDuNk7+rv7iupwlL0u44njAXNLe7WkhkAYa4gXGzp7PaiynCmPqoNYhK
iDsAwzWKmwq33g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:55:48 2025 by rpki-client