Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
File: 9Ma33VF1vo23oFIvfU5BxcQsayk.mft (raw, json)
Hash identifier: PrafnwQJ9golwUz8Wypjw+F5W33FrwU76jY8X4LY+gQ=
Subject key identifier: 45:AC:6D:CF:CA:76:D8:F9:D9:0B:3E:61:3C:1A:A2:C1:21:1E:7F:02
Authority key identifier: F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
Certificate issuer: /CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Certificate serial: 0194BCE07140603983EDD48041A98EBB3BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
Manifest number: 10B4
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: 9Ma33VF1vo23oFIvfU5BxcQsayk.crl (hash: Af1ppQIjZH7VhUpRT9/X69XJaWHzPZj9ihIqwcUKcqI=)
2: qfFwvTio97FSRHjQYuRGTKpqDNg.roa (hash: svdnZox06xTajQljreSGSixFuAOWPF1/7KNajKyZt9E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:71:40:60:39:83:ed:d4:80:41:a9:8e:bb:3b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=45ac6dcfca76d8f9d90b3e613c1aa2c1211e7f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7f:f0:44:e5:70:82:bc:ca:b1:1a:1e:6b:76:
cc:f8:ec:59:de:0a:6e:06:a9:37:64:3d:57:3a:b6:
ec:5b:97:9f:7e:16:2c:fa:33:1b:8a:3d:f5:ce:1a:
bc:35:77:5c:5b:c4:73:a2:f8:b3:05:45:15:11:3a:
6e:fa:0a:aa:50:63:71:36:93:a8:03:c1:44:c3:d2:
25:00:a4:fa:cf:f0:d9:c7:de:dd:03:b1:13:1e:8e:
5f:0c:e2:1b:52:0b:2a:fe:48:19:be:84:d3:81:09:
34:ad:27:a2:97:c0:1e:bc:94:39:df:44:95:0c:cc:
c0:3f:21:c5:e5:5e:66:9b:f2:d1:b5:bc:8d:97:4b:
b6:64:f5:b7:62:7e:a2:2a:0e:63:9d:2c:70:26:b6:
59:7f:7f:53:de:dd:31:25:ff:20:0f:c5:0e:52:5b:
e1:71:97:d9:3c:72:ec:b7:50:e9:f4:25:23:37:b5:
89:19:fe:e2:50:ee:e6:97:9b:9a:6e:b9:40:0a:37:
05:9b:00:ec:bd:d6:c8:a7:66:24:b5:d3:81:69:8e:
74:f5:f3:45:55:61:12:58:24:d1:56:24:d0:97:67:
c6:cb:3f:b0:d4:04:57:90:04:e5:6e:4f:8c:4d:33:
42:d7:3e:b9:3d:ff:a6:5e:e9:44:6e:d2:89:03:93:
7c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AC:6D:CF:CA:76:D8:F9:D9:0B:3E:61:3C:1A:A2:C1:21:1E:7F:02
X509v3 Authority Key Identifier:
keyid:F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:de:c9:8b:09:48:19:a3:2f:39:84:c5:01:03:d7:23:c3:fc:
8e:d8:ed:58:f3:5e:e1:cd:66:e2:6a:e0:6b:dd:ae:2a:f1:88:
23:17:3e:3c:9d:af:b0:ee:d5:a4:d8:35:65:87:a1:df:df:c3:
51:6f:aa:a4:87:06:39:0f:7d:ee:7e:0a:be:c1:9a:eb:d2:9f:
e5:fa:8a:c9:99:92:6a:61:8d:a5:c6:eb:c2:17:6f:f0:9f:85:
cd:44:a8:e0:46:a3:f8:75:4c:f8:46:9b:8d:6d:db:c9:d9:be:
bb:3e:23:d2:81:82:21:06:4a:37:80:a6:e3:01:a1:7d:20:c8:
2c:fe:cc:4d:d7:35:4b:72:7c:58:7b:ef:26:db:d0:b3:d4:2c:
9f:42:b6:8e:97:13:61:cc:01:b8:37:ce:04:86:6d:14:d1:c6:
d0:fe:9a:8d:e5:df:3c:8c:46:93:a9:d2:24:a5:1e:0e:08:20:
96:fd:af:99:7f:b2:7f:c6:c4:31:13:50:9e:9d:ca:c0:92:43:
19:8d:c3:cf:b4:1c:7c:81:82:d7:94:6c:ec:15:80:33:c8:cf:
79:35:0f:83:1d:91:18:9a:b4:76:a3:7d:bd:8f:cb:af:22:63:
6e:32:71:65:29:bd:31:63:b6:b8:77:94:fb:d6:7f:7b:ba:e9:
9f:c7:f3:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84HFAYDmD7dSAQamOuzutMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YzZiN2RkNTE3NWJlOGRiN2EwNTIyZjdkNGU0MWM1YzQy
YzZiMjkwHhcNMjUwMTMxMTUwMDEzWhcNMjUwMjAxMTUwMDEzWjAzMTEwLwYDVQQD
Eyg0NWFjNmRjZmNhNzZkOGY5ZDkwYjNlNjEzYzFhYTJjMTIxMWU3ZjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX/wROVwgrzKsRoea3bM+OxZ3gpu
Bqk3ZD1XOrbsW5effhYs+jMbij31zhq8NXdcW8RzovizBUUVETpu+gqqUGNxNpOo
A8FEw9IlAKT6z/DZx97dA7ETHo5fDOIbUgsq/kgZvoTTgQk0rSeil8AevJQ530SV
DMzAPyHF5V5mm/LRtbyNl0u2ZPW3Yn6iKg5jnSxwJrZZf39T3t0xJf8gD8UOUlvh
cZfZPHLst1Dp9CUjN7WJGf7iUO7ml5uabrlACjcFmwDsvdbIp2YktdOBaY509fNF
VWESWCTRViTQl2fGyz+w1ARXkATlbk+MTTNC1z65Pf+mXulEbtKJA5N8KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWsbc/Kdtj52Qs+YTwaosEhHn8CMB8GA1UdIwQY
MBaAFPTGt91Rdb6Nt6BSL31OQcXELGspMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU1hMzNWRjF2bzIzb0ZJdmZVNUJ4Y1FzYXlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNWY3MTQtNDcyYy00ODU2LWFhNGIt
OWIyMWI2ZjY2NzlhLzEvOU1hMzNWRjF2bzIzb0ZJdmZVNUJ4Y1FzYXlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jNWY3MTQtNDcyYy00ODU2LWFhNGItOWIyMWI2ZjY2Nzlh
LzEvOU1hMzNWRjF2bzIzb0ZJdmZVNUJ4Y1FzYXlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFN7JiwlI
GaMvOYTFAQPXI8P8jtjtWPNe4c1m4mrga92uKvGIIxc+PJ2vsO7VpNg1ZYeh39/D
UW+qpIcGOQ997n4KvsGa69Kf5fqKyZmSamGNpcbrwhdv8J+FzUSo4Eaj+HVM+Eab
jW3bydm+uz4j0oGCIQZKN4Cm4wGhfSDILP7MTdc1S3J8WHvvJtvQs9Qsn0K2jpcT
YcwBuDfOBIZtFNHG0P6ajeXfPIxGk6nSJKUeDggglv2vmX+yf8bEMRNQnp3KwJJD
GY3Dz7QcfIGC15Rs7BWAM8jPeTUPgx2RGJq0dqN9vY/LryJjbjJxZSm9MWO2uHeU
+9Z/e7rpn8fzOg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:58 2025 by rpki-client