Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
File: p2q9qQNG0MrSXcpvdFC8z40I53E.mft (raw, json)
Hash identifier: eEhxMkYh159TwHhkfXMV7LJiFkkThNAaxym5V9sx/rU=
Subject key identifier: 32:A1:44:EF:4B:51:E0:C6:54:A0:9B:53:80:E6:CA:04:41:4F:5F:FD
Authority key identifier: A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
Certificate issuer: /CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Certificate serial: 0194BC04E8A6201E9D2013B4CB964ACEDD76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
Manifest number: 0B0C
Signing time: Fri 31 Jan 2025 11:00:25 +0000
Manifest this update: Fri 31 Jan 2025 11:00:25 +0000
Manifest next update: Sat 01 Feb 2025 11:00:25 +0000
Files and hashes: 1: MzC4INKIsgRwDzo9x7bkUxRAB1c.roa (hash: Uid11k3HN0TXoHFcev6gIuzNP6/XOwG1nE/1TIUrcps=)
2: p2q9qQNG0MrSXcpvdFC8z40I53E.crl (hash: sUgN0RvVVs7cZwrY5HtKJQIaOOx70YodcsfXkYDfG/A=)
3: qo2a4lO3f4INhuJwHg-a_kb1Uw0.roa (hash: Mq/0MPb+8DLoVQSsA/LmGY9yMeYe1hfS1EX+C5wkfg0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e8:a6:20:1e:9d:20:13:b4:cb:96:4a:ce:dd:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Validity
Not Before: Jan 31 11:00:25 2025 GMT
Not After : Feb 1 11:00:25 2025 GMT
Subject: CN=32a144ef4b51e0c654a09b5380e6ca04414f5ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:76:f6:c8:3a:83:1f:0f:08:94:c5:99:98:50:
b7:f1:cc:7f:ba:ee:7e:29:41:b4:12:f9:73:a9:08:
83:f1:c3:da:1d:cb:43:db:37:26:90:98:dc:c2:47:
f2:47:6e:f2:6d:ee:b4:4b:67:39:17:1c:75:de:a9:
d1:69:51:19:a4:17:3e:f3:7b:2c:54:f1:88:22:22:
31:ed:dd:d7:b0:9b:82:63:74:74:d4:10:e0:ad:7f:
ac:ce:a9:34:c9:f4:55:ae:31:1b:2f:3b:f1:2d:b6:
6a:f2:37:4f:1e:1d:be:7b:22:0b:63:bc:dd:c6:bb:
1d:b1:8a:d0:b7:d2:62:bd:54:35:e3:a1:2b:15:2a:
23:f6:8d:dd:c2:31:06:6f:52:3e:bd:e5:ef:65:7a:
0b:5b:dc:38:a7:e2:12:6a:cb:05:7a:06:1b:38:25:
6c:69:f5:67:98:cb:55:cb:aa:78:4d:1f:8c:f7:ba:
d4:65:e4:78:f0:65:36:bd:88:db:ae:b3:c9:71:20:
cb:a3:7d:7f:a2:72:5a:37:74:07:6e:e3:9b:6d:82:
32:75:df:0a:0f:2f:79:aa:bf:f6:dd:b1:18:fe:ee:
93:7d:68:4e:59:11:a7:e0:24:2e:8d:ba:11:c2:03:
6b:c0:0d:54:7c:c8:10:63:54:54:ab:4a:b6:c9:c9:
7b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A1:44:EF:4B:51:E0:C6:54:A0:9B:53:80:E6:CA:04:41:4F:5F:FD
X509v3 Authority Key Identifier:
keyid:A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:52:e6:af:71:4f:af:71:a9:c7:13:63:a6:4d:34:cd:e3:50:
d9:8a:dd:54:f9:35:b5:5f:32:66:9b:f8:89:ee:9a:fb:05:38:
c6:4f:28:02:ac:e1:26:70:2d:33:7d:98:9d:b1:e2:da:a6:88:
10:92:6d:a7:c2:1d:a2:54:60:0f:fe:20:cf:b2:d3:04:77:13:
5e:2b:20:62:55:45:6a:09:a7:9c:50:1a:fc:15:be:2f:53:e8:
67:e9:1f:c1:5c:4d:9c:ff:eb:a3:4f:a9:36:e4:a8:88:64:b6:
f3:6c:1a:bd:53:a4:2d:e1:e1:13:3c:4f:6f:5e:fa:7a:2e:40:
f6:3c:36:30:2e:94:d4:ac:48:15:e9:22:a4:1c:d6:ed:15:32:
c5:aa:8c:17:82:52:23:15:4d:0d:98:a4:91:46:9c:7f:84:a9:
da:00:61:83:62:30:9f:31:b6:72:6a:3f:6c:f5:00:58:e9:3a:
11:8a:fd:d4:ba:a5:5d:83:f0:bf:36:5e:10:0c:3b:59:fc:a2:
cd:e6:16:56:dd:79:0d:96:05:57:62:37:ec:3e:60:2e:c4:87:
6a:83:11:3a:6e:f5:10:ea:b4:41:a0:71:d9:2f:20:d6:4c:72:
d1:7b:03:53:8c:f5:ea:61:ea:d8:5f:29:0b:cc:e3:04:6f:1e:
c5:ad:e4:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BOimIB6dIBO0y5ZKzt12MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NmFiZGE5MDM0NmQwY2FkMjVkY2E2Zjc0NTBiY2NmOGQw
OGU3NzEwHhcNMjUwMTMxMTEwMDI1WhcNMjUwMjAxMTEwMDI1WjAzMTEwLwYDVQQD
EygzMmExNDRlZjRiNTFlMGM2NTRhMDliNTM4MGU2Y2EwNDQxNGY1ZmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3b2yDqDHw8IlMWZmFC38cx/uu5+
KUG0EvlzqQiD8cPaHctD2zcmkJjcwkfyR27ybe60S2c5Fxx13qnRaVEZpBc+83ss
VPGIIiIx7d3XsJuCY3R01BDgrX+szqk0yfRVrjEbLzvxLbZq8jdPHh2+eyILY7zd
xrsdsYrQt9JivVQ146ErFSoj9o3dwjEGb1I+veXvZXoLW9w4p+ISassFegYbOCVs
afVnmMtVy6p4TR+M97rUZeR48GU2vYjbrrPJcSDLo31/onJaN3QHbuObbYIydd8K
Dy95qr/23bEY/u6TfWhOWRGn4CQujboRwgNrwA1UfMgQY1RUq0q2ycl7iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKhRO9LUeDGVKCbU4DmygRBT1/9MB8GA1UdIwQY
MBaAFKdqvakDRtDK0l3Kb3RQvM+NCOdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDJxOXFRTkcwTXJTWGNwdmRGQzh6NDBJNTNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8zNDVjOWItN2I0YS00YjIxLTliMDAt
NGQzMDE2ODRjM2JjLzEvcDJxOXFRTkcwTXJTWGNwdmRGQzh6NDBJNTNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8zNDVjOWItN2I0YS00YjIxLTliMDAtNGQzMDE2ODRjM2Jj
LzEvcDJxOXFRTkcwTXJTWGNwdmRGQzh6NDBJNTNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlLmr3FP
r3GpxxNjpk00zeNQ2YrdVPk1tV8yZpv4ie6a+wU4xk8oAqzhJnAtM32YnbHi2qaI
EJJtp8IdolRgD/4gz7LTBHcTXisgYlVFagmnnFAa/BW+L1PoZ+kfwVxNnP/ro0+p
NuSoiGS282wavVOkLeHhEzxPb176ei5A9jw2MC6U1KxIFekipBzW7RUyxaqMF4JS
IxVNDZikkUacf4Sp2gBhg2IwnzG2cmo/bPUAWOk6EYr91LqlXYPwvzZeEAw7Wfyi
zeYWVt15DZYFV2I37D5gLsSHaoMROm71EOq0QaBx2S8g1kxy0XsDU4z16mHq2F8p
C8zjBG8exa3kmw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:20 2025 by rpki-client