Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
File: l72bhlMeVEr6AwnYvip7ppFj-a0.mft (raw, json)
Hash identifier: pRK5Rau2ZGLb298PgZ3G0YbzUSEkryjm9oQ6FVOK708=
Subject key identifier: FE:0D:82:C6:ED:C9:2D:9F:00:BF:A3:C7:00:94:2A:B1:25:12:14:3C
Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
Certificate issuer: /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Certificate serial: 0194BBCE0D5AC19D14481EF0B24D99D01319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
Manifest number: 11DD
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: 7SgT1T8GY35kSnEoENoGRVl8t2M.roa (hash: ZowBMdWF4vxOJGtzURbMH56eDerFCtOrpRC/BvBG7J0=)
2: jkSVZWrRJ0p_sHmkLKgtRqPLq4c.roa (hash: 5AMIR+nAOYfoGTd/SNFuAJTTjyBmPlK6SsLZWPzLm6Q=)
3: l72bhlMeVEr6AwnYvip7ppFj-a0.crl (hash: BQdOd0KhW220n0B7aLnWNNO+x/jYcoWpf11YhKu0DOM=)
4: vYaorPpQFuOhpBOvS0Y7tNPAUfw.roa (hash: yR9f2kZ/nIXVrv9dXrEzRY+6fv+TWV0eQZK0RZqpM/c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0d:5a:c1:9d:14:48:1e:f0:b2:4d:99:d0:13:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=fe0d82c6edc92d9f00bfa3c700942ab12512143c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:26:61:f1:b6:bf:a9:16:42:1b:c9:eb:49:c8:
7e:94:f7:eb:5d:d5:f2:7b:9c:72:74:aa:a7:b0:90:
9f:a4:94:48:0d:c4:aa:a7:01:e9:b7:39:a8:65:bc:
e8:93:10:83:ef:b5:33:f4:29:01:89:10:56:44:80:
e0:83:26:25:80:56:fe:6a:79:ab:18:7f:40:81:50:
a7:00:66:a5:ec:bd:ee:da:cf:a0:62:4f:ea:85:13:
32:70:99:c7:c8:49:21:4f:ba:e2:50:65:4d:e7:f0:
76:e7:e9:02:8c:aa:32:13:5f:b9:3b:fa:62:2b:62:
40:65:c9:b2:0c:90:ae:b6:5b:73:a0:6c:58:97:07:
ad:99:32:db:e0:bc:07:b6:77:3b:d7:97:7f:85:21:
5b:f0:95:a2:56:43:a2:7e:87:c6:ae:a3:f8:16:09:
f1:9f:0b:e7:22:8f:f3:25:bf:5a:4f:71:10:c5:1b:
ed:fe:ff:6e:f9:15:db:28:8c:88:5f:29:88:89:5d:
bb:0b:02:06:5f:a9:9a:1b:56:e0:41:88:32:d1:60:
67:e8:02:03:bb:c0:45:9d:c3:78:18:15:27:df:33:
91:62:d4:e7:56:8e:ac:43:ca:07:03:30:c4:c0:79:
28:18:59:76:da:3e:6d:2e:72:6c:b2:67:eb:5a:3f:
7a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0D:82:C6:ED:C9:2D:9F:00:BF:A3:C7:00:94:2A:B1:25:12:14:3C
X509v3 Authority Key Identifier:
keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:bb:68:07:52:7f:54:f9:57:8e:a7:e9:d7:1b:4a:11:26:9e:
47:d6:83:b8:38:17:88:2e:48:dc:80:96:8e:1c:e5:f7:70:b9:
1a:3a:5f:0c:3d:38:9a:25:b1:e7:ee:e8:38:c2:0b:da:35:91:
fb:13:77:16:98:f8:1b:c5:b9:06:ca:29:c3:0f:1b:c4:5c:68:
46:14:97:72:ef:67:b9:a8:22:63:a8:1e:ce:f6:d3:f7:d0:58:
97:54:47:8b:1b:48:56:0e:85:5e:8b:c9:f5:ac:88:b3:8e:d8:
63:4c:52:ef:46:34:b2:22:33:71:2a:26:d8:c6:b2:02:d3:5e:
62:64:12:1f:80:4c:90:79:10:f1:7b:38:5c:5a:8e:fb:b9:ca:
61:a8:88:99:85:57:96:14:6b:60:ab:b9:17:0d:b4:b5:63:38:
82:72:89:4b:2a:b6:c8:fc:d2:9e:a0:1f:4c:fc:43:eb:83:01:
1c:a1:e7:fc:a6:31:77:f3:70:cc:82:10:93:53:4a:82:e1:e2:
1b:da:f9:4d:5d:c2:13:ef:11:03:e5:f8:03:36:9c:fa:40:9f:
60:fe:82:76:e9:2f:23:99:48:ff:ba:ef:ff:30:18:f1:4b:e4:
45:87:d4:e0:47:d0:b0:bc:03:87:94:12:08:3b:b7:71:dd:83:
b1:ee:6b:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zg1awZ0USB7wsk2Z0BMZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YmQ5Yjg2NTMxZTU0NGFmYTAzMDlkOGJlMmE3YmE2OTE2
M2Y5YWQwHhcNMjUwMTMxMTAwMDMwWhcNMjUwMjAxMTAwMDMwWjAzMTEwLwYDVQQD
EyhmZTBkODJjNmVkYzkyZDlmMDBiZmEzYzcwMDk0MmFiMTI1MTIxNDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiZh8ba/qRZCG8nrSch+lPfrXdXy
e5xydKqnsJCfpJRIDcSqpwHptzmoZbzokxCD77Uz9CkBiRBWRIDggyYlgFb+anmr
GH9AgVCnAGal7L3u2s+gYk/qhRMycJnHyEkhT7riUGVN5/B25+kCjKoyE1+5O/pi
K2JAZcmyDJCutltzoGxYlwetmTLb4LwHtnc715d/hSFb8JWiVkOifofGrqP4Fgnx
nwvnIo/zJb9aT3EQxRvt/v9u+RXbKIyIXymIiV27CwIGX6maG1bgQYgy0WBn6AID
u8BFncN4GBUn3zORYtTnVo6sQ8oHAzDEwHkoGFl22j5tLnJssmfrWj96VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4NgsbtyS2fAL+jxwCUKrElEhQ8MB8GA1UdIwQY
MBaAFJe9m4ZTHlRK+gMJ2L4qe6aRY/mtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjIt
MzQ2MGNjMjY0ODBiLzEvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjItMzQ2MGNjMjY0ODBi
LzEvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUrtoB1J/
VPlXjqfp1xtKESaeR9aDuDgXiC5I3ICWjhzl93C5GjpfDD04miWx5+7oOMIL2jWR
+xN3Fpj4G8W5Bsopww8bxFxoRhSXcu9nuagiY6gezvbT99BYl1RHixtIVg6FXovJ
9ayIs47YY0xS70Y0siIzcSom2MayAtNeYmQSH4BMkHkQ8Xs4XFqO+7nKYaiImYVX
lhRrYKu5Fw20tWM4gnKJSyq2yPzSnqAfTPxD64MBHKHn/KYxd/NwzIIQk1NKguHi
G9r5TV3CE+8RA+X4Azac+kCfYP6CdukvI5lI/7rv/zAY8UvkRYfU4EfQsLwDh5QS
CDu3cd2Dse5rtg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:21 2025 by rpki-client