Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
File: v9eGsktLMCdbzI1SRONO4ASB15A.mft (raw, json)
Hash identifier: UrtfkQzDigZl8VIW2zZ2MVjc8CWROosrhBQEL613RfY=
Subject key identifier: 94:D3:B8:3A:7D:9F:44:2B:C9:C4:F5:5E:3F:AF:33:E3:45:FB:61:4A
Authority key identifier: BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
Certificate issuer: /CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Certificate serial: 0194BBCEEBFA7BA85395A961019C743A6B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
Manifest number: 0FAE
Signing time: Fri 31 Jan 2025 10:01:27 +0000
Manifest this update: Fri 31 Jan 2025 10:01:27 +0000
Manifest next update: Sat 01 Feb 2025 10:01:27 +0000
Files and hashes: 1: jvaFexoxtk4rKhDumsQjGLQsBLU.roa (hash: trR6TCS5RgKXy+FTVPF28Tq5uhqKg+8D3gvbODYNaCY=)
2: v9eGsktLMCdbzI1SRONO4ASB15A.crl (hash: 2m2FwkK39MEou/xBC3Of2UhUS7eGY1BH5w5/i6jLSGI=)
3: zPseRt5WlA5PNoUFkbv3vmUfDV8.roa (hash: Ya/w9mpoqyM5Bw8KTqPuY/qxCTIk7UQN48ES6+Vh43g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:eb:fa:7b:a8:53:95:a9:61:01:9c:74:3a:6b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Validity
Not Before: Jan 31 10:01:27 2025 GMT
Not After : Feb 1 10:01:27 2025 GMT
Subject: CN=94d3b83a7d9f442bc9c4f55e3faf33e345fb614a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5c:b5:61:71:f6:b2:60:f2:22:04:0a:a5:df:
f8:46:6b:21:76:c5:1d:e1:b0:76:03:6a:52:23:11:
18:bf:5f:9f:ce:18:c8:fd:ed:44:98:0e:0f:89:05:
87:46:0d:71:b6:36:2d:9e:00:ea:54:d3:f8:9e:91:
a5:6c:9c:03:e8:58:5a:90:5c:6c:26:98:f8:66:65:
6b:bb:3a:18:d5:2b:55:25:f8:12:41:2f:ce:cb:34:
d0:22:26:ac:7e:d5:28:6c:f1:15:fb:bd:4f:d1:65:
74:f7:6d:a6:bb:e9:54:a9:71:b5:c5:65:b2:92:e6:
92:5f:2b:d3:54:b5:6e:bc:18:38:1c:44:13:22:0c:
dc:33:a6:c2:ef:f6:22:52:a9:77:d8:b2:36:99:e1:
40:e4:10:7b:93:f2:f6:4b:d1:df:bd:3b:31:6b:0a:
53:b5:b4:46:43:d3:4c:79:e2:85:57:93:71:de:ee:
af:07:11:af:c6:23:9d:1d:4d:f2:6b:c9:ff:50:a9:
43:40:2b:e6:7a:9f:f6:65:c8:ae:97:2f:05:59:ad:
05:1c:f7:a7:68:a6:65:81:c8:7a:6f:22:9a:f0:f5:
8e:cb:14:b1:25:c2:76:1e:71:58:48:63:f3:06:bb:
d5:67:e3:3d:8c:97:28:32:36:da:3b:89:46:fa:7a:
b1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D3:B8:3A:7D:9F:44:2B:C9:C4:F5:5E:3F:AF:33:E3:45:FB:61:4A
X509v3 Authority Key Identifier:
keyid:BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c4:aa:89:0d:b0:b0:19:88:cf:72:c5:d4:83:20:49:30:3a:
39:2c:7d:b3:54:7e:37:4c:8f:fa:60:02:aa:70:16:cb:fd:63:
01:6f:44:bf:83:61:b9:a6:4a:ef:32:5b:8c:04:82:8c:d7:ed:
40:20:28:b3:91:d2:ec:68:02:81:03:63:b8:c6:dc:52:d9:25:
75:19:b0:28:8c:e5:96:6d:92:45:29:40:01:65:b9:5a:0d:1b:
7c:02:47:3a:2f:f0:4d:22:9b:6b:2b:23:d9:e2:99:3d:ac:14:
8e:4c:64:d3:95:5a:91:9e:93:41:a0:14:52:f8:b6:2b:27:21:
cc:45:80:fe:ff:8a:1a:ab:37:04:5a:fa:44:5c:a0:21:bd:36:
3a:99:3d:bd:e1:30:a0:6d:e9:7c:a6:5b:ab:35:c8:89:f3:05:
42:27:95:fc:ad:b7:cc:7e:8b:da:b6:53:dc:c3:40:f3:cc:bb:
9d:89:52:98:01:cf:80:ab:ed:57:16:ec:cd:99:b0:94:0e:f3:
72:40:2a:56:02:9e:10:af:fb:d0:9e:c4:9c:a7:41:49:86:ba:
ee:b2:4b:69:b4:a0:3c:f6:05:86:58:c5:29:b9:99:5a:aa:e5:
2e:c6:ca:dd:82:01:34:86:42:ca:4b:5d:22:6a:80:5d:31:c2:
f9:25:e6:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zuv6e6hTlalhAZx0OmtzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZDc4NmIyNGI0YjMwMjc1YmNjOGQ1MjQ0ZTM0ZWUwMDQ4
MWQ3OTAwHhcNMjUwMTMxMTAwMTI3WhcNMjUwMjAxMTAwMTI3WjAzMTEwLwYDVQQD
Eyg5NGQzYjgzYTdkOWY0NDJiYzljNGY1NWUzZmFmMzNlMzQ1ZmI2MTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1y1YXH2smDyIgQKpd/4RmshdsUd
4bB2A2pSIxEYv1+fzhjI/e1EmA4PiQWHRg1xtjYtngDqVNP4npGlbJwD6FhakFxs
Jpj4ZmVruzoY1StVJfgSQS/OyzTQIiasftUobPEV+71P0WV0922mu+lUqXG1xWWy
kuaSXyvTVLVuvBg4HEQTIgzcM6bC7/YiUql32LI2meFA5BB7k/L2S9HfvTsxawpT
tbRGQ9NMeeKFV5Nx3u6vBxGvxiOdHU3ya8n/UKlDQCvmep/2Zciuly8FWa0FHPen
aKZlgch6byKa8PWOyxSxJcJ2HnFYSGPzBrvVZ+M9jJcoMjbaO4lG+nqx1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTTuDp9n0QrycT1Xj+vM+NF+2FKMB8GA1UdIwQY
MBaAFL/XhrJLSzAnW8yNUkTjTuAEgdeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjllR3NrdExNQ2RiekkxU1JPTk80QVNCMTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lMTRlYmUtNDVkZC00NGRiLWI5Yjct
MWExZjkzNjQ1NGVjLzEvdjllR3NrdExNQ2RiekkxU1JPTk80QVNCMTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lMTRlYmUtNDVkZC00NGRiLWI5YjctMWExZjkzNjQ1NGVj
LzEvdjllR3NrdExNQ2RiekkxU1JPTk80QVNCMTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsSqiQ2w
sBmIz3LF1IMgSTA6OSx9s1R+N0yP+mACqnAWy/1jAW9Ev4NhuaZK7zJbjASCjNft
QCAos5HS7GgCgQNjuMbcUtkldRmwKIzllm2SRSlAAWW5Wg0bfAJHOi/wTSKbaysj
2eKZPawUjkxk05VakZ6TQaAUUvi2KychzEWA/v+KGqs3BFr6RFygIb02Opk9veEw
oG3pfKZbqzXIifMFQieV/K23zH6L2rZT3MNA88y7nYlSmAHPgKvtVxbszZmwlA7z
ckAqVgKeEK/70J7EnKdBSYa67rJLabSgPPYFhljFKbmZWqrlLsbK3YIBNIZCyktd
ImqAXTHC+SXmeg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:54:54 2025 by rpki-client