Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.mft
File: 6SnD2lr0FZyTY3duwz3FuscKMk0.mft (raw, json)
Hash identifier: y+ozsKiz0gapygD6iiUupx3YWdjv7Vz2Sx+/WQs76DY=
Subject key identifier: 51:63:72:5A:85:C6:ED:C7:BD:6D:7C:64:EE:39:C0:DD:A1:A1:66:07
Authority key identifier: E9:29:C3:DA:5A:F4:15:9C:93:63:77:6E:C3:3D:C5:BA:C7:0A:32:4D
Certificate issuer: /CN=e929c3da5af4159c9363776ec33dc5bac70a324d
Certificate serial: 0194BC04C250A0F405857F2CF2E0EF46E400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SnD2lr0FZyTY3duwz3FuscKMk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.mft
Manifest number: CB
Signing time: Fri 31 Jan 2025 11:00:15 +0000
Manifest this update: Fri 31 Jan 2025 11:00:15 +0000
Manifest next update: Sat 01 Feb 2025 11:00:15 +0000
Files and hashes: 1: 6SnD2lr0FZyTY3duwz3FuscKMk0.crl (hash: F7d2AKJiMpamFca6D1MsF56HAXgadBjSy7Pjjz65hRo=)
2: h7PFRK9JVEjEeYKLwrOpI4thEoU.roa (hash: I2CraLnGlKelMJHEzdxSGPPTjEK/b4QFtKA7mGsY/DE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c2:50:a0:f4:05:85:7f:2c:f2:e0:ef:46:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e929c3da5af4159c9363776ec33dc5bac70a324d
Validity
Not Before: Jan 31 11:00:15 2025 GMT
Not After : Feb 1 11:00:15 2025 GMT
Subject: CN=5163725a85c6edc7bd6d7c64ee39c0dda1a16607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:77:9a:86:65:fe:6d:f8:4f:54:2d:d6:3b:
90:3a:dd:f2:ce:19:49:5d:df:86:c3:c0:ec:2a:91:
82:76:86:aa:d2:fb:31:d5:62:16:4d:1e:37:e1:67:
5a:d0:53:5a:e7:e6:ad:11:9b:60:f2:e3:77:5b:6d:
17:85:20:f7:88:4b:4d:3a:d5:46:0f:b4:1d:ec:36:
4f:f4:ae:98:8d:5e:13:ae:fb:39:51:fa:bc:cc:7f:
b3:1b:44:e2:fa:63:2c:a2:7e:c8:f6:32:58:63:d4:
bc:97:65:01:21:bb:31:21:97:cf:93:a4:cb:e8:0e:
4a:1d:07:b2:a6:b8:e9:b4:b2:11:bb:59:bc:36:5b:
c5:5a:f0:46:e7:65:37:7b:63:4c:66:0c:af:be:b5:
e2:c1:5f:44:8d:81:99:70:9f:45:a7:78:48:43:85:
46:25:48:e3:c6:5e:dc:2c:ae:09:a5:a5:6c:b6:2f:
e5:ba:5b:76:52:a8:d9:6c:7c:a7:5c:b8:8d:0d:0d:
6e:0e:c5:ae:47:1e:87:34:ab:d2:fa:ed:69:5d:b7:
7c:1c:ca:ac:a0:07:73:b4:32:53:17:ea:19:b5:b2:
96:31:56:e5:29:27:87:f8:f5:09:5d:9a:02:87:6a:
6e:af:f1:8d:e9:16:e5:0f:ac:d6:bf:e0:c9:d2:46:
4e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:63:72:5A:85:C6:ED:C7:BD:6D:7C:64:EE:39:C0:DD:A1:A1:66:07
X509v3 Authority Key Identifier:
keyid:E9:29:C3:DA:5A:F4:15:9C:93:63:77:6E:C3:3D:C5:BA:C7:0A:32:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SnD2lr0FZyTY3duwz3FuscKMk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:df:16:f8:43:15:aa:53:f0:60:cf:d2:35:12:f4:29:ec:ec:
45:e9:eb:34:b8:45:27:ae:d9:2f:bc:2f:59:fb:c4:06:68:60:
db:9c:da:36:58:43:1a:38:0a:e8:4e:48:ee:f2:f3:38:b6:97:
30:96:bb:f9:e0:e4:0f:2c:e4:0e:b9:2a:82:e4:8d:70:76:0e:
c2:38:07:30:18:a9:e7:f1:d7:72:78:c2:b3:42:3a:1d:d7:08:
20:6b:c9:ab:57:46:ec:ec:7b:09:59:76:d1:9a:d7:10:04:01:
fb:8e:63:bd:8d:57:87:74:bf:84:23:43:2b:d5:42:f0:4f:1b:
d4:d7:51:e4:70:19:17:1b:7a:43:5f:6f:53:f2:8c:d9:3d:46:
9f:bc:3a:f1:02:cd:82:44:f6:53:64:d5:8b:a1:be:82:c2:a6:
56:e0:cb:0b:a2:3f:54:9b:c5:09:34:30:79:36:33:76:a7:f7:
c6:b2:16:a5:42:c5:eb:94:5e:7e:2c:19:a7:5e:19:78:b1:cf:
c9:56:98:d9:45:3e:13:00:97:df:6f:8a:c8:ef:eb:55:0a:20:
e0:32:83:59:92:6f:3b:17:3a:46:1f:b7:b4:24:7d:06:86:51:
3d:ae:16:bd:87:8b:1a:0e:1e:56:24:3f:75:59:0f:05:ef:f4:
ec:4b:98:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BMJQoPQFhX8s8uDvRuQAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MjljM2RhNWFmNDE1OWM5MzYzNzc2ZWMzM2RjNWJhYzcw
YTMyNGQwHhcNMjUwMTMxMTEwMDE1WhcNMjUwMjAxMTEwMDE1WjAzMTEwLwYDVQQD
Eyg1MTYzNzI1YTg1YzZlZGM3YmQ2ZDdjNjRlZTM5YzBkZGExYTE2NjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpt3moZl/m34T1Qt1juQOt3yzhlJ
Xd+Gw8DsKpGCdoaq0vsx1WIWTR434Wda0FNa5+atEZtg8uN3W20XhSD3iEtNOtVG
D7Qd7DZP9K6YjV4Trvs5Ufq8zH+zG0Ti+mMson7I9jJYY9S8l2UBIbsxIZfPk6TL
6A5KHQeyprjptLIRu1m8NlvFWvBG52U3e2NMZgyvvrXiwV9EjYGZcJ9Fp3hIQ4VG
JUjjxl7cLK4JpaVsti/lult2UqjZbHynXLiNDQ1uDsWuRx6HNKvS+u1pXbd8HMqs
oAdztDJTF+oZtbKWMVblKSeH+PUJXZoCh2pur/GN6RblD6zWv+DJ0kZO0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFjclqFxu3HvW18ZO45wN2hoWYHMB8GA1UdIwQY
MBaAFOkpw9pa9BWck2N3bsM9xbrHCjJNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlNuRDJscjBGWnlUWTNkdXd6M0Z1c2NLTWswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC84MzhhNzgtN2E3MC00NDhlLThlNDMt
M2MzYmUyYzI5Zjc5LzEvNlNuRDJscjBGWnlUWTNkdXd6M0Z1c2NLTWswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC84MzhhNzgtN2E3MC00NDhlLThlNDMtM2MzYmUyYzI5Zjc5
LzEvNlNuRDJscjBGWnlUWTNkdXd6M0Z1c2NLTWswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmN8W+EMV
qlPwYM/SNRL0KezsRenrNLhFJ67ZL7wvWfvEBmhg25zaNlhDGjgK6E5I7vLzOLaX
MJa7+eDkDyzkDrkqguSNcHYOwjgHMBip5/HXcnjCs0I6HdcIIGvJq1dG7Ox7CVl2
0ZrXEAQB+45jvY1Xh3S/hCNDK9VC8E8b1NdR5HAZFxt6Q19vU/KM2T1Gn7w68QLN
gkT2U2TVi6G+gsKmVuDLC6I/VJvFCTQweTYzdqf3xrIWpULF65RefiwZp14ZeLHP
yVaY2UU+EwCX32+KyO/rVQog4DKDWZJvOxc6Rh+3tCR9BoZRPa4WvYeLGg4eViQ/
dVkPBe/07EuYeg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:01 2025 by rpki-client