Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
File: A4r4Z5VBejWE1hY3UgmnLv7iRis.mft (raw, json)
Hash identifier: ghAOt80b5Xqe26caVlVLN1UCJ8BUwKG3F1h74l0ylnw=
Subject key identifier: F7:69:73:4D:75:5A:C4:31:0D:73:67:91:5B:08:C1:8C:DD:FA:B7:A4
Authority key identifier: 03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
Certificate issuer: /CN=038af86795417a3584d616375209a72efee2462b
Certificate serial: 0194BCA9B944D8F08C61BFBBC33B51C96BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
Manifest number: 0BB1
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: 1-ojoRJbswRkkiGkqXab5Mi6LHY.roa (hash: 60oY4GGKsVQvbVXZplutdFLjGZggdXVeIQnzzP1SLeY=)
2: A4r4Z5VBejWE1hY3UgmnLv7iRis.crl (hash: QfnCyko7eknatO8traAHgbCDlo1X4qudLcUqY/BuNgc=)
3: WIaOGWdkdCPNTnZSI-W-XTK4te4.roa (hash: jVJuCp2YFk4DEa8ZbdmENwzLLMmsULw4LDZkckWi3gI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b9:44:d8:f0:8c:61:bf:bb:c3:3b:51:c9:6b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038af86795417a3584d616375209a72efee2462b
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=f769734d755ac4310d7367915b08c18cddfab7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1a:7f:c9:44:04:b1:06:b8:fb:9f:fc:a0:4b:
42:f3:2f:8c:5e:15:aa:c7:d6:94:f7:2a:de:f0:12:
be:fb:6c:7e:40:98:29:5d:05:51:21:ba:d6:f5:e7:
86:33:9b:6e:30:f2:77:2c:36:83:68:68:7a:99:a2:
70:53:f5:8e:42:bb:49:1c:cf:1e:7c:c8:ee:81:92:
0e:eb:47:ef:3d:47:8d:49:ad:54:aa:5f:e5:88:de:
5f:ce:94:d7:ce:6f:9d:9d:ec:81:6a:e3:56:5a:43:
7d:c2:ca:68:5d:4b:e8:d9:1b:1b:c9:00:f5:85:37:
da:19:0f:e9:94:fa:62:2c:0b:bc:48:79:b3:f5:35:
e7:60:bd:69:38:c9:6f:a6:0e:af:57:bc:27:67:b1:
f1:ab:6b:e6:02:09:bb:c0:56:f9:af:cf:13:ca:a9:
2f:a1:da:74:31:8d:42:0d:02:68:3b:f8:37:3e:0c:
45:46:fc:62:84:0e:90:22:d9:6f:a9:0f:fa:a2:8b:
7b:0b:74:76:aa:d2:25:ad:ee:3c:6d:57:a8:7a:4f:
40:26:12:4a:8d:24:e2:a1:b0:98:bf:20:4f:31:58:
3f:c0:d5:40:8d:72:22:e8:74:18:e2:73:87:13:63:
6a:40:fa:08:eb:20:a7:05:f3:10:75:aa:31:2f:70:
2b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:69:73:4D:75:5A:C4:31:0D:73:67:91:5B:08:C1:8C:DD:FA:B7:A4
X509v3 Authority Key Identifier:
keyid:03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2a:f9:81:a5:a4:62:6c:90:e2:42:36:76:30:61:bc:3c:b5:
75:9d:de:64:20:6f:8b:48:d4:3b:17:8f:70:f0:1e:d9:00:bd:
55:95:7c:84:6d:4e:65:ed:5a:e3:af:b2:52:ab:f3:ff:51:7b:
f5:bd:ad:73:1c:27:2c:d8:44:a6:9c:29:1f:36:f3:0d:17:a2:
24:bc:a2:c1:15:c5:77:1f:12:ec:a9:58:ba:82:60:f7:68:e5:
19:e6:35:50:a2:21:80:c6:31:3c:c9:4d:a9:0f:b6:b8:14:aa:
10:94:15:39:ea:18:ac:47:e1:8d:d0:c0:93:43:08:f5:84:51:
72:fa:c3:ab:35:5e:fd:3c:ac:47:f6:da:ea:b7:34:f7:63:44:
6a:73:76:30:ac:52:9d:70:04:38:d5:2c:74:83:fb:cb:7f:97:
fe:ca:22:64:e9:2c:cf:aa:9f:71:ee:7c:37:18:01:19:a1:c4:
ed:1e:04:82:1d:b5:e4:e0:e9:e5:3a:71:10:39:e6:a5:ac:56:
c4:f7:db:cd:89:dd:df:2e:57:d4:66:99:08:6e:c2:92:e8:e6:
ec:5f:fd:d1:9a:8d:20:48:d6:59:0c:a0:4f:e5:86:64:f4:7e:
c5:f6:e1:5c:7c:0a:2e:90:eb:e3:77:35:09:48:37:db:4f:fa:
14:9b:96:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qblE2PCMYb+7wztRyWuvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOGFmODY3OTU0MTdhMzU4NGQ2MTYzNzUyMDlhNzJlZmVl
MjQ2MmIwHhcNMjUwMTMxMTQwMDI3WhcNMjUwMjAxMTQwMDI3WjAzMTEwLwYDVQQD
EyhmNzY5NzM0ZDc1NWFjNDMxMGQ3MzY3OTE1YjA4YzE4Y2RkZmFiN2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hp/yUQEsQa4+5/8oEtC8y+MXhWq
x9aU9yre8BK++2x+QJgpXQVRIbrW9eeGM5tuMPJ3LDaDaGh6maJwU/WOQrtJHM8e
fMjugZIO60fvPUeNSa1Uql/liN5fzpTXzm+dneyBauNWWkN9wspoXUvo2RsbyQD1
hTfaGQ/plPpiLAu8SHmz9TXnYL1pOMlvpg6vV7wnZ7Hxq2vmAgm7wFb5r88Tyqkv
odp0MY1CDQJoO/g3PgxFRvxihA6QItlvqQ/6oot7C3R2qtIlre48bVeoek9AJhJK
jSTiobCYvyBPMVg/wNVAjXIi6HQY4nOHE2NqQPoI6yCnBfMQdaoxL3ArYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdpc011WsQxDXNnkVsIwYzd+rekMB8GA1UdIwQY
MBaAFAOK+GeVQXo1hNYWN1IJpy7+4kYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTRyNFo1VkJlaldFMWhZM1VnbW5MdjdpUmlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81N2U0MTktNDJmNC00ZDhjLWI2YjQt
NDMxZjI3YTYyZWQ4LzEvQTRyNFo1VkJlaldFMWhZM1VnbW5MdjdpUmlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81N2U0MTktNDJmNC00ZDhjLWI2YjQtNDMxZjI3YTYyZWQ4
LzEvQTRyNFo1VkJlaldFMWhZM1VnbW5MdjdpUmlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATCr5gaWk
YmyQ4kI2djBhvDy1dZ3eZCBvi0jUOxePcPAe2QC9VZV8hG1OZe1a46+yUqvz/1F7
9b2tcxwnLNhEppwpHzbzDReiJLyiwRXFdx8S7KlYuoJg92jlGeY1UKIhgMYxPMlN
qQ+2uBSqEJQVOeoYrEfhjdDAk0MI9YRRcvrDqzVe/TysR/ba6rc092NEanN2MKxS
nXAEONUsdIP7y3+X/soiZOksz6qfce58NxgBGaHE7R4Egh215ODp5TpxEDnmpaxW
xPfbzYnd3y5X1GaZCG7Ckujm7F/90ZqNIEjWWQygT+WGZPR+xfbhXHwKLpDr43c1
CUg320/6FJuW5Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:45:24 2025 by rpki-client