Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
File: imAdLqH5SMoBjDNb7actvsB51uY.mft (raw, json)
Hash identifier: sUuIfGgABSmTLCfjKzHBZw7uLW9HKYkKbeRZBlwEoWM=
Subject key identifier: 31:FD:82:CF:42:0E:65:76:5B:C5:C3:E4:CD:E4:97:5D:EE:A8:27:F6
Authority key identifier: 8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
Certificate issuer: /CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Certificate serial: 0194BCE0A2B1E3AE9D32233F598B616E8D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
Manifest number: 0316
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: gBpXU6HMs3EdVnZKM3W9dtj0eWk.roa (hash: /5HDlgNXt08tmw8LTatvLunizw0Atkb/+jC9ix7IJ4k=)
2: imAdLqH5SMoBjDNb7actvsB51uY.crl (hash: iLLOgBulrdKVIX/0uAsLty/cJC8V/DT3B5PVsXRce4E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a2:b1:e3:ae:9d:32:23:3f:59:8b:61:6e:8d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=31fd82cf420e65765bc5c3e4cde4975deea827f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9e:57:46:99:77:40:18:69:05:e8:e3:44:a7:
6a:1b:2d:50:4d:c0:12:74:6a:14:90:8b:7b:c2:df:
3a:d6:d0:4f:19:12:37:36:cf:a7:9b:0e:23:31:7c:
26:1d:78:c4:79:d3:72:f9:24:31:e9:4e:b6:0d:37:
95:7e:da:d8:20:85:27:b4:63:e0:32:19:59:4c:18:
78:af:3a:38:ca:68:d6:f0:5c:50:a8:ab:79:db:b9:
be:11:1f:5d:3a:d7:e9:87:b0:a8:c1:48:56:af:db:
82:93:a0:5b:0e:04:c0:fc:a1:50:21:67:79:13:4f:
6b:78:a1:76:71:eb:cf:86:c5:b6:30:9b:64:ed:2d:
ea:79:3c:d6:72:0c:83:a7:eb:e6:7d:af:8f:5f:b2:
f9:a2:ff:c9:11:1f:9e:71:34:71:f9:29:d2:9d:78:
1a:be:19:68:46:81:fd:67:ba:fd:ba:ce:e7:87:7c:
c2:0e:fb:71:7a:35:09:7c:60:bb:ed:2d:b4:8c:cf:
66:79:f1:a6:e8:14:48:b3:dd:37:26:36:90:cc:f3:
87:54:09:2c:bd:b9:05:e9:70:3d:38:57:eb:4b:13:
1c:ff:73:cd:3c:4a:68:ff:b2:ba:86:76:83:1f:ff:
b7:39:79:ab:25:fe:e9:c4:53:c3:14:41:93:e2:70:
89:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FD:82:CF:42:0E:65:76:5B:C5:C3:E4:CD:E4:97:5D:EE:A8:27:F6
X509v3 Authority Key Identifier:
keyid:8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:cc:28:f1:4f:9c:9b:8e:86:53:b9:7c:4f:18:32:40:83:5a:
b8:6f:8a:7f:77:ff:da:bb:d6:73:f6:74:96:76:97:72:dc:ff:
46:42:cc:a6:f6:ba:c9:c1:4f:f6:fe:b4:ed:20:36:25:09:14:
a7:aa:e5:d6:9f:7f:c5:bb:24:c2:fc:e4:4c:1f:76:c8:42:cd:
02:ad:1c:33:9b:83:0c:08:7e:cf:7f:d6:f9:3e:03:9c:23:03:
62:8b:7c:30:ec:c9:96:74:72:d9:b6:ba:23:fe:b4:e5:3c:13:
ff:be:8b:c7:13:87:4c:7c:0c:66:ba:e7:5a:60:b2:33:6c:18:
ab:70:3c:25:44:cf:38:6b:45:ef:e2:13:2d:c5:cb:41:dc:50:
6d:28:83:30:15:16:8a:d6:29:6e:10:71:5f:a1:99:26:af:27:
41:4d:9d:2b:5b:d5:11:87:6b:52:86:66:64:0a:2f:ff:3b:87:
23:f1:9c:f8:f9:23:14:96:44:36:a6:19:10:1b:fe:70:ec:30:
4b:6c:15:f3:92:b3:ff:62:9b:d2:56:2c:9f:c4:01:f4:93:b4:
f3:29:ca:5e:3c:32:96:ca:08:f6:13:cf:5e:f7:eb:28:4f:22:
84:88:c3:b3:e4:af:ae:69:99:d8:c8:af:1f:72:c8:af:c1:7c:
33:dd:ef:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84KKx466dMiM/WYthbo2XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNjAxZDJlYTFmOTQ4Y2EwMThjMzM1YmVkYTcyZGJlYzA3
OWQ2ZTYwHhcNMjUwMTMxMTUwMDI1WhcNMjUwMjAxMTUwMDI1WjAzMTEwLwYDVQQD
EygzMWZkODJjZjQyMGU2NTc2NWJjNWMzZTRjZGU0OTc1ZGVlYTgyN2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ5XRpl3QBhpBejjRKdqGy1QTcAS
dGoUkIt7wt861tBPGRI3Ns+nmw4jMXwmHXjEedNy+SQx6U62DTeVftrYIIUntGPg
MhlZTBh4rzo4ymjW8FxQqKt527m+ER9dOtfph7CowUhWr9uCk6BbDgTA/KFQIWd5
E09reKF2cevPhsW2MJtk7S3qeTzWcgyDp+vmfa+PX7L5ov/JER+ecTRx+SnSnXga
vhloRoH9Z7r9us7nh3zCDvtxejUJfGC77S20jM9mefGm6BRIs903JjaQzPOHVAks
vbkF6XA9OFfrSxMc/3PNPEpo/7K6hnaDH/+3OXmrJf7pxFPDFEGT4nCJfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDH9gs9CDmV2W8XD5M3kl13uqCf2MB8GA1UdIwQY
MBaAFIpgHS6h+UjKAYwzW+2nLb7AedbmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1BZExxSDVTTW9CakROYjdhY3R2c0I1MXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lNzk4OWEtMGI1ZS00YTkxLTlkYmEt
YTQyNTgyMDcwOTQ5LzEvaW1BZExxSDVTTW9CakROYjdhY3R2c0I1MXVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lNzk4OWEtMGI1ZS00YTkxLTlkYmEtYTQyNTgyMDcwOTQ5
LzEvaW1BZExxSDVTTW9CakROYjdhY3R2c0I1MXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjswo8U+c
m46GU7l8TxgyQINauG+Kf3f/2rvWc/Z0lnaXctz/RkLMpva6ycFP9v607SA2JQkU
p6rl1p9/xbskwvzkTB92yELNAq0cM5uDDAh+z3/W+T4DnCMDYot8MOzJlnRy2ba6
I/605TwT/76LxxOHTHwMZrrnWmCyM2wYq3A8JUTPOGtF7+ITLcXLQdxQbSiDMBUW
itYpbhBxX6GZJq8nQU2dK1vVEYdrUoZmZAov/zuHI/Gc+PkjFJZENqYZEBv+cOww
S2wV85Kz/2Kb0lYsn8QB9JO08ynKXjwylsoI9hPPXvfrKE8ihIjDs+SvrmmZ2Miv
H3LIr8F8M93vLg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:37 2025 by rpki-client