Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
File: 6vlt8xs_QE31t345nOeTcbT0REM.mft (raw, json)
Hash identifier: wKrLW0zao9xiGOKORBu85nNXdgm5uokYFHkwALYPy1c=
Subject key identifier: A2:27:E5:F9:E0:F8:AE:99:D2:4E:39:D4:F4:69:80:13:96:D2:1C:FF
Authority key identifier: EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43
Certificate issuer: /CN=eaf96df31b3f404df5b77e399ce79371b4f44443
Certificate serial: 0194BCE0802F53B26857ACBB4AC2B0A301EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
Manifest number: 01CE
Signing time: Fri 31 Jan 2025 15:00:16 +0000
Manifest this update: Fri 31 Jan 2025 15:00:16 +0000
Manifest next update: Sat 01 Feb 2025 15:00:16 +0000
Files and hashes: 1: 6vlt8xs_QE31t345nOeTcbT0REM.crl (hash: NhRWqQFY0+XH8qRUU8i3t4xaJucAieA1Bt8vsH6VbAY=)
2: zku7rL4ehWHvRZK1RwrAb6MT-1c.roa (hash: nNwzvzSXO21Gwoc000T5O5APuYh4t3vWkKVJ9XFGR80=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:80:2f:53:b2:68:57:ac:bb:4a:c2:b0:a3:01:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaf96df31b3f404df5b77e399ce79371b4f44443
Validity
Not Before: Jan 31 15:00:16 2025 GMT
Not After : Feb 1 15:00:16 2025 GMT
Subject: CN=a227e5f9e0f8ae99d24e39d4f469801396d21cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fc:b0:bc:52:55:14:75:e0:53:d8:6a:88:4b:
50:d2:d5:b2:42:16:7d:3b:00:82:df:18:25:6e:5d:
53:53:32:b2:49:a0:12:46:7b:86:4e:00:20:f5:a4:
7c:90:4f:0c:13:05:32:19:ff:72:dd:ed:42:c1:49:
be:03:1b:7f:c0:f9:2f:a9:fb:e1:b7:68:48:b2:7f:
c9:8b:46:be:5c:35:62:a8:9d:8c:c1:d5:b7:99:cb:
fa:95:50:e0:6c:48:65:3a:37:09:ba:c7:c4:04:f3:
a5:97:94:76:99:c5:32:dd:c9:33:aa:f8:4a:a3:b3:
44:58:07:0c:96:66:a5:cb:ab:0e:5a:d0:92:31:d8:
51:55:b2:06:b2:9f:07:61:3b:22:9e:a8:6e:6d:55:
8e:f6:52:58:d9:33:4f:b0:24:97:0f:75:6b:06:84:
81:81:29:19:0b:4c:5a:db:0f:be:8e:4a:45:74:f3:
4b:29:57:0c:1b:9e:9a:0c:52:cc:af:fb:1c:85:71:
10:3f:e8:b8:f6:8d:e9:1c:39:63:10:62:91:79:77:
28:31:f7:f6:a6:32:a1:bf:03:d8:9b:ed:c9:96:c6:
e6:a2:e1:a7:91:bf:3f:9f:85:6e:83:67:8b:28:2b:
ec:a6:ee:55:48:c3:70:16:e5:31:ce:96:2d:ca:84:
e6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:27:E5:F9:E0:F8:AE:99:D2:4E:39:D4:F4:69:80:13:96:D2:1C:FF
X509v3 Authority Key Identifier:
keyid:EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:61:11:0a:61:68:0d:aa:a9:63:3e:09:d8:14:7c:9a:d4:72:
c3:e1:76:ce:2a:5f:75:35:e7:2d:33:5d:d2:2b:8d:68:c3:88:
17:82:11:1b:cc:4d:3b:ef:d4:c9:0e:6e:a2:2c:0b:5a:d0:81:
e5:f8:89:1c:42:b7:5a:64:55:32:28:36:e1:dc:34:3d:1c:dc:
39:ff:70:79:33:9a:43:fd:33:bc:3b:28:28:da:2b:ab:56:88:
c2:ef:7d:03:e5:d0:00:d4:c7:31:86:f0:05:15:53:d7:fe:f0:
4b:e4:25:36:e5:09:e1:32:68:b1:4a:3d:dc:d8:25:6e:b7:05:
62:43:cb:fd:15:42:75:b6:53:30:80:37:cc:82:a3:67:1f:68:
3c:02:ba:cb:e7:44:fe:d7:5d:93:bd:2b:de:1a:07:5e:1f:b1:
c9:d6:ba:82:c1:bc:f3:0d:cc:0d:3f:65:f0:31:ad:60:a0:25:
b2:49:5f:61:47:b3:98:c6:af:45:ad:2d:86:4b:29:59:06:19:
dc:06:96:80:6c:3c:07:63:14:30:b1:42:05:19:7a:4d:68:5b:
36:19:88:24:a4:8d:d1:7e:6a:49:1e:0e:e1:da:0d:a9:ef:b3:
0e:78:06:57:07:c2:64:2f:eb:c3:31:72:0b:a3:e0:12:c8:27:
b2:19:d6:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84IAvU7JoV6y7SsKwowHvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhZjk2ZGYzMWIzZjQwNGRmNWI3N2UzOTljZTc5MzcxYjRm
NDQ0NDMwHhcNMjUwMTMxMTUwMDE2WhcNMjUwMjAxMTUwMDE2WjAzMTEwLwYDVQQD
EyhhMjI3ZTVmOWUwZjhhZTk5ZDI0ZTM5ZDRmNDY5ODAxMzk2ZDIxY2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/ywvFJVFHXgU9hqiEtQ0tWyQhZ9
OwCC3xglbl1TUzKySaASRnuGTgAg9aR8kE8MEwUyGf9y3e1CwUm+Axt/wPkvqfvh
t2hIsn/Ji0a+XDViqJ2MwdW3mcv6lVDgbEhlOjcJusfEBPOll5R2mcUy3ckzqvhK
o7NEWAcMlmaly6sOWtCSMdhRVbIGsp8HYTsinqhubVWO9lJY2TNPsCSXD3VrBoSB
gSkZC0xa2w++jkpFdPNLKVcMG56aDFLMr/schXEQP+i49o3pHDljEGKReXcoMff2
pjKhvwPYm+3JlsbmouGnkb8/n4Vug2eLKCvspu5VSMNwFuUxzpYtyoTmaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIn5fng+K6Z0k451PRpgBOW0hz/MB8GA1UdIwQY
MBaAFOr5bfMbP0BN9bd+OZznk3G09ERDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnZsdDh4c19RRTMxdDM0NW5PZVRjYlQwUkVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wZTAzOWEtYmU5Ni00MWZjLWFiY2Qt
OTY0YjYxYmMzMTliLzEvNnZsdDh4c19RRTMxdDM0NW5PZVRjYlQwUkVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8wZTAzOWEtYmU5Ni00MWZjLWFiY2QtOTY0YjYxYmMzMTli
LzEvNnZsdDh4c19RRTMxdDM0NW5PZVRjYlQwUkVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2ERCmFo
DaqpYz4J2BR8mtRyw+F2zipfdTXnLTNd0iuNaMOIF4IRG8xNO+/UyQ5uoiwLWtCB
5fiJHEK3WmRVMig24dw0PRzcOf9weTOaQ/0zvDsoKNorq1aIwu99A+XQANTHMYbw
BRVT1/7wS+QlNuUJ4TJosUo93NglbrcFYkPL/RVCdbZTMIA3zIKjZx9oPAK6y+dE
/tddk70r3hoHXh+xyda6gsG88w3MDT9l8DGtYKAlsklfYUezmMavRa0thkspWQYZ
3AaWgGw8B2MUMLFCBRl6TWhbNhmIJKSN0X5qSR4O4doNqe+zDngGVwfCZC/rwzFy
C6PgEsgnshnW2A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:23:09 2025 by rpki-client