Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
File: A4uZY8lywdegPflvrSX2jr1PoUk.mft (raw, json)
Hash identifier: BX0QhjCeyg+TYnDQ80z1+5f9FtkvYEGyVTztQHGr+10=
Subject key identifier: A9:80:6A:CF:4C:A3:B9:5C:2F:94:A1:C3:74:B5:E2:98:48:BA:9D:60
Authority key identifier: 03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
Certificate issuer: /CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Certificate serial: 0194BD4E8A702798ACA69CF7093F543FE2AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:28 +0000
Manifest this update: Fri 31 Jan 2025 17:00:28 +0000
Manifest next update: Sat 01 Feb 2025 17:00:28 +0000
Files and hashes: 1: 3Et5DSQTmjw5JoMUf-Wa1H5e4PY.roa (hash: FOwnE+/UGLrWULx1HSQ846yUR+XWmJ/pKo/EVwX3S1M=)
2: A4uZY8lywdegPflvrSX2jr1PoUk.crl (hash: Jlrl0++GQJwGt4hC0P3SI9/pH0cdTD6uYezOHPBc9Eg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8a:70:27:98:ac:a6:9c:f7:09:3f:54:3f:e2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Validity
Not Before: Jan 31 17:00:28 2025 GMT
Not After : Feb 1 17:00:28 2025 GMT
Subject: CN=a9806acf4ca3b95c2f94a1c374b5e29848ba9d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3b:ae:81:59:93:fe:a1:f8:e8:20:3b:25:00:
f1:6f:de:47:58:70:6e:8b:44:85:89:25:cb:d2:16:
ed:3b:46:55:e6:a3:48:a8:0f:2a:af:1c:12:40:0b:
96:ce:4c:97:86:fe:d6:45:33:27:6c:b0:b0:65:14:
3e:c1:6f:2b:53:7b:f2:c2:2d:71:fa:f2:0f:0f:5a:
00:6b:b0:c7:f1:be:74:64:f1:47:01:41:2d:6c:c7:
fa:0c:11:90:14:49:5b:8d:81:90:15:ee:0f:f5:47:
ad:2e:79:4b:b7:71:ef:f9:5c:eb:a2:29:d2:eb:c5:
59:7e:0f:fb:88:4f:6b:e1:c1:ff:82:36:92:81:8f:
f4:65:43:25:5c:38:12:d7:d8:1b:f3:5b:7f:c4:54:
78:77:8a:62:f8:44:69:72:ce:43:d9:39:a1:75:03:
e2:bd:ac:2c:55:70:55:85:d1:77:8c:47:70:51:7a:
ea:46:3a:10:f5:07:37:06:fe:53:b1:a5:8f:9d:b0:
fc:04:44:ca:e3:64:61:31:d0:15:bc:49:6c:94:69:
9f:79:9c:e0:00:97:aa:43:87:8d:c9:cd:df:ae:b2:
d3:ab:8b:e5:97:2b:3a:30:cd:c5:11:00:39:0a:78:
05:fd:02:2e:a6:3c:8c:53:3c:d9:7b:92:14:cb:d7:
ee:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:80:6A:CF:4C:A3:B9:5C:2F:94:A1:C3:74:B5:E2:98:48:BA:9D:60
X509v3 Authority Key Identifier:
keyid:03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4f:c3:9a:e3:c9:4d:6b:49:29:fd:71:72:6d:44:25:20:f7:
fc:a0:94:76:12:95:5a:bc:33:ee:74:67:f4:e3:1f:67:6c:98:
d0:5e:f2:88:7e:76:98:a4:3c:11:52:a0:55:ed:e8:67:e5:1a:
8b:e3:f5:00:c8:a4:b0:09:4e:73:6b:b1:5d:5b:c1:cf:b6:7e:
90:8b:2a:cf:43:5c:4f:3a:21:c3:12:16:23:8c:1c:24:f7:5a:
cb:fc:3c:cb:e2:c6:65:de:f6:1f:19:4c:3b:b6:ff:7e:54:ce:
6e:b6:52:71:ee:14:78:d6:59:88:0f:69:5e:ec:e5:a4:e3:82:
b2:a9:0e:2a:df:25:a0:ae:93:29:3f:66:77:1c:83:a3:44:61:
58:fd:b3:29:38:2f:8f:91:50:91:27:33:c7:71:27:2a:ee:d8:
ce:fe:fe:b1:4c:f4:69:5a:a6:86:f4:38:c8:8d:9b:52:3c:eb:
53:35:71:8f:e1:ab:dd:49:ed:a4:40:cc:16:8a:5d:6b:ad:d7:
dc:a7:6f:04:2d:8d:91:27:3a:a0:5c:8d:08:5a:66:56:81:d1:
25:93:10:08:ba:1b:56:8d:fc:34:4c:bd:4b:a5:e7:f7:9d:73:
dc:15:70:8f:95:f6:c2:ff:04:09:c6:b6:20:e6:c4:0b:18:b2:
a8:03:48:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TopwJ5isppz3CT9UP+KrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOGI5OTYzYzk3MmMxZDdhMDNkZjk2ZmFkMjVmNjhlYmQ0
ZmExNDkwHhcNMjUwMTMxMTcwMDI4WhcNMjUwMjAxMTcwMDI4WjAzMTEwLwYDVQQD
EyhhOTgwNmFjZjRjYTNiOTVjMmY5NGExYzM3NGI1ZTI5ODQ4YmE5ZDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzuugVmT/qH46CA7JQDxb95HWHBu
i0SFiSXL0hbtO0ZV5qNIqA8qrxwSQAuWzkyXhv7WRTMnbLCwZRQ+wW8rU3vywi1x
+vIPD1oAa7DH8b50ZPFHAUEtbMf6DBGQFElbjYGQFe4P9UetLnlLt3Hv+VzroinS
68VZfg/7iE9r4cH/gjaSgY/0ZUMlXDgS19gb81t/xFR4d4pi+ERpcs5D2TmhdQPi
vawsVXBVhdF3jEdwUXrqRjoQ9Qc3Bv5TsaWPnbD8BETK42RhMdAVvElslGmfeZzg
AJeqQ4eNyc3frrLTq4vllys6MM3FEQA5CngF/QIupjyMUzzZe5IUy9fuyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmAas9Mo7lcL5Shw3S14phIup1gMB8GA1UdIwQY
MBaAFAOLmWPJcsHXoD35b60l9o69T6FJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTR1Wlk4bHl3ZGVnUGZsdnJTWDJqcjFQb1VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MDY4MDEtYjk0ZC00YjVkLTk0YWIt
NjE2M2I5OTdiNjQyLzEvQTR1Wlk4bHl3ZGVnUGZsdnJTWDJqcjFQb1VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS81MDY4MDEtYjk0ZC00YjVkLTk0YWItNjE2M2I5OTdiNjQy
LzEvQTR1Wlk4bHl3ZGVnUGZsdnJTWDJqcjFQb1VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOE/DmuPJ
TWtJKf1xcm1EJSD3/KCUdhKVWrwz7nRn9OMfZ2yY0F7yiH52mKQ8EVKgVe3oZ+Ua
i+P1AMiksAlOc2uxXVvBz7Z+kIsqz0NcTzohwxIWI4wcJPday/w8y+LGZd72HxlM
O7b/flTObrZSce4UeNZZiA9pXuzlpOOCsqkOKt8loK6TKT9mdxyDo0RhWP2zKTgv
j5FQkSczx3EnKu7Yzv7+sUz0aVqmhvQ4yI2bUjzrUzVxj+Gr3UntpEDMFopda63X
3KdvBC2NkSc6oFyNCFpmVoHRJZMQCLobVo38NEy9S6Xn951z3BVwj5X2wv8ECca2
IObECxiyqANI/g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:32:02 2025 by rpki-client