Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
File: 15ToHXL1nGWg0YFEobJgeYNTa0o.mft (raw, json)
Hash identifier: tTZoc6siSnjhBbXfpzLLp7NxAMV/vJqhpvLBEjy7ezA=
Subject key identifier: EC:A4:CD:80:81:27:52:4E:21:B7:52:C8:57:AD:6C:7D:29:58:DD:86
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Certificate issuer: /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial: 0194BC7322F2F0F0346D99E37E9A4DBC0414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
Manifest number: 0B33
Signing time: Fri 31 Jan 2025 13:00:49 +0000
Manifest this update: Fri 31 Jan 2025 13:00:49 +0000
Manifest next update: Sat 01 Feb 2025 13:00:49 +0000
Files and hashes: 1: 15ToHXL1nGWg0YFEobJgeYNTa0o.crl (hash: ixjYTPmyZIq4Vyq1zHtdl1u5xOgvly7Yg5bFMHvqmjI=)
2: ATm3n0KFZ5OKTQtdaMLYTaNNVew.roa (hash: 2UTJGztOoJrr9yNdFqpMauhjZZvVEquE5BNwI7gR6Xg=)
3: ac_ZR0uyAlaCoYYTyxabMzs0ruQ.roa (hash: 2lsdqjwrAVWCJd53FIUYeMEFwheNjGGCw24m80TwAaw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:22:f2:f0:f0:34:6d:99:e3:7e:9a:4d:bc:04:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Validity
Not Before: Jan 31 13:00:49 2025 GMT
Not After : Feb 1 13:00:49 2025 GMT
Subject: CN=eca4cd808127524e21b752c857ad6c7d2958dd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ba:59:23:05:45:f1:1f:4d:d7:b9:a5:0e:11:
30:6c:4b:65:1b:c8:23:64:9d:2b:75:1e:66:a2:c7:
4c:9e:b1:f5:9d:73:5e:ae:11:71:d7:82:55:3e:a9:
06:70:4f:bd:01:4f:da:b8:32:8a:a8:eb:e7:a1:ed:
eb:b0:a1:83:49:fa:80:78:ac:26:c4:0d:fe:91:47:
4f:f9:99:52:17:b9:1e:f0:89:cd:07:55:1f:d6:29:
79:24:e3:44:9c:22:50:ee:74:13:11:f5:63:c2:03:
71:e3:0b:f6:1a:28:ec:8a:c8:be:b8:ad:12:07:e3:
d4:9c:02:3e:a7:25:35:ce:fd:24:9a:09:3d:56:5a:
db:5a:94:8e:d1:b3:89:e1:8d:be:94:bf:29:56:c8:
05:ca:ac:23:de:d0:a5:1e:05:44:29:9f:52:d8:4f:
80:68:9d:c1:a1:22:9a:4b:ad:3b:bc:32:de:0c:7b:
a5:fe:17:e5:36:84:65:24:13:91:b0:61:94:ff:69:
35:a4:5d:62:ce:18:d6:da:07:9d:40:3f:79:a3:fc:
c0:48:7e:67:6a:b6:42:34:ba:12:2d:d7:61:d9:ca:
30:dc:af:c1:14:f3:cb:8b:9e:46:23:ec:ff:f2:9b:
06:cf:d1:f0:b4:b2:19:1e:0c:62:a1:6e:5b:38:8e:
89:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A4:CD:80:81:27:52:4E:21:B7:52:C8:57:AD:6C:7D:29:58:DD:86
X509v3 Authority Key Identifier:
keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1d:2f:82:1b:8e:6f:69:15:91:1a:79:19:cb:7f:ac:29:d0:
1b:7a:e2:87:f7:e1:42:ce:f8:d6:29:0f:75:4f:71:cd:d9:7b:
9a:7a:9e:55:85:02:fb:fb:4b:e2:e7:6f:52:29:9e:ea:43:2e:
5b:44:40:ee:f1:42:8d:76:5b:04:de:78:70:a1:bb:02:a1:49:
a9:a3:84:a0:87:05:6d:29:9e:97:1f:2e:8d:d8:fb:22:b2:39:
02:ed:08:a0:38:c6:94:2c:a0:fa:ab:74:8f:1b:0e:62:0b:c3:
0d:65:ab:01:98:d0:e1:de:3b:1f:31:6b:7f:0d:1d:6b:f1:e4:
4c:03:a9:6e:a3:db:4a:18:a3:3a:8a:b3:10:f7:f1:ed:f1:ee:
cd:38:d0:fa:53:63:ba:92:54:16:a1:91:a5:ad:32:44:4f:4c:
c2:61:1b:26:a7:d1:ae:a5:91:5b:b8:36:b8:90:b3:16:3f:53:
16:3e:54:f7:0a:87:71:85:3d:42:fe:f4:c1:9c:ca:c0:4c:0c:
06:c1:0c:c7:d0:a4:8c:ea:33:d3:6d:2d:ce:e5:f3:58:2e:90:
8c:83:49:c7:e6:ef:47:d2:d4:67:8d:55:4d:c9:c1:c3:10:a0:
18:36:fb:fa:1d:f1:74:a8:f0:9d:dd:53:33:e0:1f:cf:dc:3f:
e9:db:f6:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cyLy8PA0bZnjfppNvAQUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OTRlODFkNzJmNTljNjVhMGQxODE0NGExYjI2MDc5ODM1
MzZiNGEwHhcNMjUwMTMxMTMwMDQ5WhcNMjUwMjAxMTMwMDQ5WjAzMTEwLwYDVQQD
EyhlY2E0Y2Q4MDgxMjc1MjRlMjFiNzUyYzg1N2FkNmM3ZDI5NThkZDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27pZIwVF8R9N17mlDhEwbEtlG8gj
ZJ0rdR5mosdMnrH1nXNerhFx14JVPqkGcE+9AU/auDKKqOvnoe3rsKGDSfqAeKwm
xA3+kUdP+ZlSF7ke8InNB1Uf1il5JONEnCJQ7nQTEfVjwgNx4wv2Gijsisi+uK0S
B+PUnAI+pyU1zv0kmgk9VlrbWpSO0bOJ4Y2+lL8pVsgFyqwj3tClHgVEKZ9S2E+A
aJ3BoSKaS607vDLeDHul/hflNoRlJBORsGGU/2k1pF1izhjW2gedQD95o/zASH5n
arZCNLoSLddh2cow3K/BFPPLi55GI+z/8psGz9HwtLIZHgxioW5bOI6JQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOykzYCBJ1JOIbdSyFetbH0pWN2GMB8GA1UdIwQY
MBaAFNeU6B1y9ZxloNGBRKGyYHmDU2tKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTVUb0hYTDFuR1dnMFlGRW9iSmdlWU5UYTBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mNmExMjQtN2YwMS00ZTQwLWI3OTYt
Y2NhNTJiNjI2ZmNhLzEvMTVUb0hYTDFuR1dnMFlGRW9iSmdlWU5UYTBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mNmExMjQtN2YwMS00ZTQwLWI3OTYtY2NhNTJiNjI2ZmNh
LzEvMTVUb0hYTDFuR1dnMFlGRW9iSmdlWU5UYTBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAER0vghuO
b2kVkRp5Gct/rCnQG3rih/fhQs741ikPdU9xzdl7mnqeVYUC+/tL4udvUime6kMu
W0RA7vFCjXZbBN54cKG7AqFJqaOEoIcFbSmelx8ujdj7IrI5Au0IoDjGlCyg+qt0
jxsOYgvDDWWrAZjQ4d47HzFrfw0da/HkTAOpbqPbShijOoqzEPfx7fHuzTjQ+lNj
upJUFqGRpa0yRE9MwmEbJqfRrqWRW7g2uJCzFj9TFj5U9wqHcYU9Qv70wZzKwEwM
BsEMx9CkjOoz020tzuXzWC6QjINJx+bvR9LUZ41VTcnBwxCgGDb7+h3xdKjwnd1T
M+Afz9w/6dv2LA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:51 2025 by rpki-client