Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
File: roNVKZN0KXkz0oH1HrdLpcLJHME.mft (raw, json)
Hash identifier: UNmGBt6tH5YUxqM47HP85/ygf8E0HanwD2GCGWtFkYc=
Subject key identifier: 78:67:CA:F1:4F:FC:3C:E4:B5:EC:86:E8:3B:29:37:8A:01:86:EB:51
Authority key identifier: AE:83:55:29:93:74:29:79:33:D2:81:F5:1E:B7:4B:A5:C2:C9:1C:C1
Certificate issuer: /CN=ae8355299374297933d281f51eb74ba5c2c91cc1
Certificate serial: 0194BD85AB17A9EB179C5B6C018EBD3D403B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
Manifest number: 0F7E
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: RaM_OWQwVXsafD9lAhumGxuaVJ0.roa (hash: 9wqEU77JRh8FONfv1sMAYtuNvig1s1ZaVt3dre8RnDg=)
2: roNVKZN0KXkz0oH1HrdLpcLJHME.crl (hash: oJ5FaxoWcOoHRZi7To+gIltRxU2C81Oi6TLMqb5KN5Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ab:17:a9:eb:17:9c:5b:6c:01:8e:bd:3d:40:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae8355299374297933d281f51eb74ba5c2c91cc1
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=7867caf14ffc3ce4b5ec86e83b29378a0186eb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:08:a7:ef:c2:52:c4:b6:7c:0e:a2:ce:c5:6c:
ae:9a:92:35:c3:ce:3d:83:2f:37:18:29:4a:fb:81:
3f:50:ab:53:79:a5:9b:32:a7:15:eb:fd:ad:67:04:
68:ea:37:f7:75:04:de:1c:25:78:ed:70:8f:a1:50:
0a:a3:06:98:0d:40:c1:d7:9f:79:d9:2e:e2:13:0f:
6c:99:50:46:0e:da:c9:57:e4:0f:12:80:ff:34:92:
c5:7b:c1:4f:30:5a:48:4d:e7:44:79:08:62:12:52:
62:74:f3:2f:68:90:47:44:f3:1f:d2:c0:51:e2:17:
72:09:e7:7f:50:fc:1d:c2:0d:75:be:92:8f:47:15:
c3:43:2c:d1:e2:34:7f:ae:4b:cc:a4:30:c6:00:20:
bc:f6:46:60:bd:af:06:ba:3f:1a:87:b9:bf:67:44:
00:a1:20:9f:92:3f:63:fb:f8:2b:af:47:6d:d0:f3:
39:bb:e4:58:df:43:65:09:48:e4:4f:a2:27:7b:53:
6b:06:38:53:e3:df:21:3f:88:9d:3c:31:88:c9:e2:
24:9d:32:a9:10:ab:77:1d:9d:19:64:f3:ad:af:14:
48:fd:e6:80:bc:1b:df:ac:95:44:87:7c:06:8f:8b:
d7:30:ce:70:a0:7a:be:16:1a:ba:c8:e3:df:0e:82:
65:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:67:CA:F1:4F:FC:3C:E4:B5:EC:86:E8:3B:29:37:8A:01:86:EB:51
X509v3 Authority Key Identifier:
keyid:AE:83:55:29:93:74:29:79:33:D2:81:F5:1E:B7:4B:A5:C2:C9:1C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e1:65:e7:f5:5f:6a:6e:02:f2:a9:af:f5:8b:72:f8:66:34:
9a:de:2a:0a:80:82:ff:45:e4:ae:6b:b1:63:7a:15:59:57:14:
85:ee:4c:37:c9:aa:97:1a:3e:5c:29:89:2c:81:e2:5c:04:54:
a1:3f:b9:49:2d:b8:54:e2:11:66:31:02:3a:b0:58:ba:39:41:
59:eb:e8:21:59:88:6e:76:52:07:62:68:51:d1:a0:91:b4:7a:
e9:54:2a:03:c0:d8:f5:df:ec:07:78:f3:b8:62:a1:37:3c:05:
37:a7:f8:67:92:4f:5d:a5:6f:06:3f:cb:b9:27:d7:98:17:35:
70:a4:2e:eb:c4:58:d8:6b:b7:ba:ca:54:e9:ca:76:2c:4f:77:
cc:17:ec:25:f4:9c:11:94:11:c3:78:80:da:2f:9c:e2:4a:dd:
45:5d:c8:51:0c:74:12:df:c6:b1:1f:e1:10:42:0e:97:5b:1d:
2a:6a:df:2e:aa:6d:28:d5:a3:7a:be:b5:68:19:09:79:2b:eb:
06:c8:a6:ca:eb:c4:8d:9e:28:b8:7f:fe:a8:5e:b5:2b:c7:f4:
0c:27:ba:18:6a:b6:58:7d:64:3c:d5:f5:07:7f:07:db:47:b2:
4c:91:72:66:c4:06:6e:a3:ab:ee:88:73:87:63:45:de:da:42:
43:02:26:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hasXqesXnFtsAY69PUA7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlODM1NTI5OTM3NDI5NzkzM2QyODFmNTFlYjc0YmE1YzJj
OTFjYzEwHhcNMjUwMTMxMTgwMDQxWhcNMjUwMjAxMTgwMDQxWjAzMTEwLwYDVQQD
Eyg3ODY3Y2FmMTRmZmMzY2U0YjVlYzg2ZTgzYjI5Mzc4YTAxODZlYjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAin78JSxLZ8DqLOxWyumpI1w849
gy83GClK+4E/UKtTeaWbMqcV6/2tZwRo6jf3dQTeHCV47XCPoVAKowaYDUDB1595
2S7iEw9smVBGDtrJV+QPEoD/NJLFe8FPMFpITedEeQhiElJidPMvaJBHRPMf0sBR
4hdyCed/UPwdwg11vpKPRxXDQyzR4jR/rkvMpDDGACC89kZgva8Guj8ah7m/Z0QA
oSCfkj9j+/grr0dt0PM5u+RY30NlCUjkT6Ine1NrBjhT498hP4idPDGIyeIknTKp
EKt3HZ0ZZPOtrxRI/eaAvBvfrJVEh3wGj4vXMM5woHq+Fhq6yOPfDoJlJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhnyvFP/DzkteyG6DspN4oBhutRMB8GA1UdIwQY
MBaAFK6DVSmTdCl5M9KB9R63S6XCyRzBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm9OVktaTjBLWGt6MG9IMUhyZExwY0xKSE1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8wZjJlYjgtOTgwMC00NjIxLWI2NzQt
M2I0ZDAyYTYxZWMyLzEvcm9OVktaTjBLWGt6MG9IMUhyZExwY0xKSE1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8wZjJlYjgtOTgwMC00NjIxLWI2NzQtM2I0ZDAyYTYxZWMy
LzEvcm9OVktaTjBLWGt6MG9IMUhyZExwY0xKSE1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKuFl5/Vf
am4C8qmv9Yty+GY0mt4qCoCC/0XkrmuxY3oVWVcUhe5MN8mqlxo+XCmJLIHiXARU
oT+5SS24VOIRZjECOrBYujlBWevoIVmIbnZSB2JoUdGgkbR66VQqA8DY9d/sB3jz
uGKhNzwFN6f4Z5JPXaVvBj/LuSfXmBc1cKQu68RY2Gu3uspU6cp2LE93zBfsJfSc
EZQRw3iA2i+c4krdRV3IUQx0Et/GsR/hEEIOl1sdKmrfLqptKNWjer61aBkJeSvr
BsimyuvEjZ4ouH/+qF61K8f0DCe6GGq2WH1kPNX1B38H20eyTJFyZsQGbqOr7ohz
h2NF3tpCQwImjQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:58:14 2025 by rpki-client