Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
File: moBTvNLE2KeioyXit0ZBZqXkjd0.mft (raw, json)
Hash identifier: fGOhNcx0WQ8bHAr/aCBmwQ+XAFkJwVmOugRKNYEsMNg=
Subject key identifier: D9:A1:40:4D:4D:BF:9A:A7:C6:FF:60:BC:21:E3:6D:C2:1E:2A:71:3F
Authority key identifier: 9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD
Certificate issuer: /CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd
Certificate serial: 0194BD854627DC8C5B3714605E81C35E183A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
Manifest number: 0EB6
Signing time: Fri 31 Jan 2025 18:00:15 +0000
Manifest this update: Fri 31 Jan 2025 18:00:15 +0000
Manifest next update: Sat 01 Feb 2025 18:00:15 +0000
Files and hashes: 1: cxA-RyOMLkq935v_LceKQwYPwHs.roa (hash: HnGDMBYysRSj3AGQ0kR7dSJMblTeuNonvUsGSEcjwQ4=)
2: moBTvNLE2KeioyXit0ZBZqXkjd0.crl (hash: cLftog45ai5k2J0NJ1rMW1ZXIK4LWuvG00XBQep9n+M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:46:27:dc:8c:5b:37:14:60:5e:81:c3:5e:18:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd
Validity
Not Before: Jan 31 18:00:15 2025 GMT
Not After : Feb 1 18:00:15 2025 GMT
Subject: CN=d9a1404d4dbf9aa7c6ff60bc21e36dc21e2a713f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:92:59:99:4d:05:2f:23:ae:3f:30:18:c2:be:
0b:89:dc:ca:6a:26:00:09:6b:26:04:3e:04:19:7f:
78:60:0a:34:57:5e:db:15:cd:9c:a7:c1:07:58:9f:
57:d5:dc:98:13:ae:53:d2:01:48:4a:8b:4b:66:63:
3f:18:88:4c:b1:7b:b8:96:69:98:83:99:6d:c7:6e:
88:a3:88:01:b4:a3:f4:86:58:c0:1d:af:a9:02:3a:
28:ab:b2:5e:14:92:fe:40:97:11:77:2f:f8:38:b6:
fc:4d:b5:f4:49:12:7f:28:94:a5:2d:49:fe:88:70:
c9:cc:4c:05:f7:82:34:c5:10:b1:3a:ac:2f:e8:56:
a8:3b:bb:18:a1:7c:37:b4:2c:15:4f:1d:13:57:10:
8f:e8:e9:0e:37:df:4f:69:60:e5:2d:db:3d:ab:7f:
a0:d8:9c:e7:f4:09:68:51:28:87:8a:76:e7:f1:58:
7c:97:98:f9:f4:b3:e3:24:05:83:a7:96:44:07:c1:
2d:27:d8:68:95:28:37:26:9a:9d:18:53:22:08:c2:
8b:88:9b:24:02:51:eb:c8:a6:7b:44:15:5b:62:b3:
6a:1e:ac:3a:86:4f:14:33:3f:75:41:91:16:99:bf:
ad:f6:5e:63:48:9d:a5:48:21:ce:ba:31:c8:cd:77:
c4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A1:40:4D:4D:BF:9A:A7:C6:FF:60:BC:21:E3:6D:C2:1E:2A:71:3F
X509v3 Authority Key Identifier:
keyid:9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:e0:08:1f:de:86:54:ac:ec:86:c0:16:65:cf:b2:16:af:2e:
02:22:c3:d2:2d:62:57:52:4c:5b:2a:92:2e:75:85:98:ba:87:
78:44:33:cd:34:3c:2e:7f:ee:06:6a:15:cb:08:94:b3:50:bb:
33:88:50:86:26:81:7a:df:20:f0:5c:a9:16:ae:96:1c:40:2b:
35:57:bc:d1:70:fc:fd:97:77:c6:da:64:ce:60:73:20:fc:fe:
10:a3:6c:97:ef:f9:4e:8f:c2:6a:82:3a:77:5e:7f:1b:63:6d:
ae:25:b3:90:44:f1:70:bb:4a:43:f8:dd:46:52:5e:08:37:6f:
40:59:27:ed:04:33:e7:15:18:d7:22:34:5f:91:c4:c8:a4:e0:
3e:97:10:80:5e:1d:2e:6a:37:7e:a9:db:1d:d1:50:a2:9b:39:
d2:d9:5f:e2:58:1c:41:ea:1a:03:46:5b:1d:82:76:65:af:f8:
0e:59:49:47:50:94:a7:44:2b:a2:c2:17:71:57:c0:8e:b5:ec:
58:86:91:ce:cc:cd:78:00:e0:bd:a5:84:f7:4b:62:b5:b0:43:
4e:01:74:46:e9:61:f1:43:8b:1d:41:46:bf:30:44:0f:0c:37:
37:ee:51:6e:17:29:cb:09:44:cf:4d:ce:17:18:31:d8:c5:a6:
8c:82:f7:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hUYn3IxbNxRgXoHDXhg6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhODA1M2JjZDJjNGQ4YTdhMmEzMjVlMmI3NDY0MTY2YTVl
NDhkZGQwHhcNMjUwMTMxMTgwMDE1WhcNMjUwMjAxMTgwMDE1WjAzMTEwLwYDVQQD
EyhkOWExNDA0ZDRkYmY5YWE3YzZmZjYwYmMyMWUzNmRjMjFlMmE3MTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5JZmU0FLyOuPzAYwr4LidzKaiYA
CWsmBD4EGX94YAo0V17bFc2cp8EHWJ9X1dyYE65T0gFISotLZmM/GIhMsXu4lmmY
g5ltx26Io4gBtKP0hljAHa+pAjooq7JeFJL+QJcRdy/4OLb8TbX0SRJ/KJSlLUn+
iHDJzEwF94I0xRCxOqwv6FaoO7sYoXw3tCwVTx0TVxCP6OkON99PaWDlLds9q3+g
2Jzn9AloUSiHinbn8Vh8l5j59LPjJAWDp5ZEB8EtJ9holSg3JpqdGFMiCMKLiJsk
AlHryKZ7RBVbYrNqHqw6hk8UMz91QZEWmb+t9l5jSJ2lSCHOujHIzXfElQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmhQE1Nv5qnxv9gvCHjbcIeKnE/MB8GA1UdIwQY
MBaAFJqAU7zSxNinoqMl4rdGQWal5I3dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW9CVHZOTEUyS2Vpb3lYaXQwWkJacVhramQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kOTYxODktZWVlMS00ZTlmLTlkNjAt
OTVlOGQ4MjkzMDk4LzEvbW9CVHZOTEUyS2Vpb3lYaXQwWkJacVhramQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9kOTYxODktZWVlMS00ZTlmLTlkNjAtOTVlOGQ4MjkzMDk4
LzEvbW9CVHZOTEUyS2Vpb3lYaXQwWkJacVhramQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwOAIH96G
VKzshsAWZc+yFq8uAiLD0i1iV1JMWyqSLnWFmLqHeEQzzTQ8Ln/uBmoVywiUs1C7
M4hQhiaBet8g8FypFq6WHEArNVe80XD8/Zd3xtpkzmBzIPz+EKNsl+/5To/CaoI6
d15/G2NtriWzkETxcLtKQ/jdRlJeCDdvQFkn7QQz5xUY1yI0X5HEyKTgPpcQgF4d
Lmo3fqnbHdFQops50tlf4lgcQeoaA0ZbHYJ2Za/4DllJR1CUp0QrosIXcVfAjrXs
WIaRzszNeADgvaWE90titbBDTgF0Rulh8UOLHUFGvzBEDww3N+5RbhcpywlEz03O
Fxgx2MWmjIL3Cg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:14 2025 by rpki-client