Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
File: RMO0TLvE89paS0KFyW6jy1DU0HM.mft (raw, json)
Hash identifier: AnwhWzxYa1K8lnziMNBbt4gphA/GM84ZF1/zzzmpNWk=
Subject key identifier: 65:62:D6:57:B5:4D:E4:C1:34:10:C8:CA:2C:9C:55:FC:30:71:AE:97
Authority key identifier: 44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
Certificate issuer: /CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Certificate serial: 0194BC04C289A20458EB343E2178B82395EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
Manifest number: 0AA8
Signing time: Fri 31 Jan 2025 11:00:15 +0000
Manifest this update: Fri 31 Jan 2025 11:00:15 +0000
Manifest next update: Sat 01 Feb 2025 11:00:15 +0000
Files and hashes: 1: Bfc7EUchdTgGElUv3uM8P6L_JN4.roa (hash: zmd7LnQJEMvAXNDrVc3GmLiOfsPuEL2IoD+oEByUhjA=)
2: RMO0TLvE89paS0KFyW6jy1DU0HM.crl (hash: SPTXtEAuZW7rJXo3OoLVT74wv22EPSRsiIuhYNjEJks=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c2:89:a2:04:58:eb:34:3e:21:78:b8:23:95:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Validity
Not Before: Jan 31 11:00:15 2025 GMT
Not After : Feb 1 11:00:15 2025 GMT
Subject: CN=6562d657b54de4c13410c8ca2c9c55fc3071ae97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:24:5d:2c:52:d5:80:74:97:05:f3:fd:5b:14:
8b:1d:29:6e:a8:d4:8b:18:cd:f4:ed:05:95:4b:f8:
6f:fb:85:37:43:bf:02:c5:c9:0c:e6:52:5e:6b:15:
9f:04:4e:03:58:92:af:69:86:f5:50:a6:0a:0d:40:
8c:9a:f9:95:87:60:e0:da:40:95:2b:7c:a7:38:db:
f3:76:ba:ec:6b:69:9c:b2:1d:ac:cf:62:25:41:c6:
64:22:93:74:15:bf:2b:9f:f8:8d:12:d3:2b:20:59:
60:75:d0:58:f4:85:10:fc:d7:05:70:04:c9:ca:8d:
cb:c6:57:92:bb:ee:01:d5:28:bf:a7:31:01:bb:b5:
89:ed:73:fa:c8:e0:29:4e:c5:8c:5f:ff:94:f4:1d:
7b:8e:ff:42:6e:8e:dd:6f:4b:5f:cd:c9:24:00:e7:
c9:0a:ec:a1:bc:56:85:2b:6f:41:16:cb:dc:e8:65:
f5:54:25:93:15:cf:75:44:7b:a9:92:63:d1:0a:57:
27:65:f0:9a:40:09:dc:40:54:f2:14:a6:04:6e:09:
a6:4c:25:48:71:f7:a0:53:db:7c:d4:d0:87:fe:79:
bf:33:89:e0:8e:f6:82:be:a5:9a:1d:19:b0:31:ca:
d8:3c:03:57:b9:6c:82:d9:e0:12:8e:1e:c5:c5:e6:
a5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:62:D6:57:B5:4D:E4:C1:34:10:C8:CA:2C:9C:55:FC:30:71:AE:97
X509v3 Authority Key Identifier:
keyid:44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:29:9f:d9:28:06:4d:0c:53:29:64:3c:fc:53:ac:6d:94:07:
35:90:96:a5:f9:1b:34:f4:c5:84:06:2b:dc:92:46:5a:cf:bd:
59:54:8c:80:1f:06:b4:c2:a4:e6:d3:a0:d9:e1:af:c4:35:d1:
34:eb:71:06:25:e5:a5:6b:3a:4a:21:b1:10:6c:d7:c7:dc:e2:
57:4e:66:7c:fa:67:db:b0:19:41:39:85:5a:b5:2c:71:9e:6b:
d2:48:77:82:66:87:e2:e2:b7:55:58:03:4c:3a:c1:ea:ee:38:
9a:ca:99:3f:e9:b3:35:fe:17:cd:40:c6:e9:5a:ae:f2:24:31:
99:0c:64:fe:3a:95:30:b6:2f:4b:b6:f7:83:dc:32:e1:b5:1b:
8b:10:21:37:3a:7b:e6:75:9d:e4:32:f8:de:c2:8c:b7:81:e3:
dd:d0:0f:6e:df:2f:26:32:81:e9:3b:cc:4f:ce:6f:ed:46:cb:
c4:90:3e:e5:34:72:4e:e0:ee:c1:8c:57:5c:13:82:95:72:41:
d8:7b:ca:63:c5:01:cb:d0:9e:24:d7:7e:58:d1:98:cf:ae:41:
50:bd:92:97:2f:d9:c3:b8:52:89:fc:ae:b8:a0:89:c9:a1:0d:
f8:8c:43:e8:0d:3b:05:82:8c:56:70:eb:bc:ad:29:97:06:5d:
4c:47:a5:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BMKJogRY6zQ+IXi4I5XsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YzNiNDRjYmJjNGYzZGE1YTRiNDI4NWM5NmVhM2NiNTBk
NGQwNzMwHhcNMjUwMTMxMTEwMDE1WhcNMjUwMjAxMTEwMDE1WjAzMTEwLwYDVQQD
Eyg2NTYyZDY1N2I1NGRlNGMxMzQxMGM4Y2EyYzljNTVmYzMwNzFhZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCRdLFLVgHSXBfP9WxSLHSluqNSL
GM307QWVS/hv+4U3Q78CxckM5lJeaxWfBE4DWJKvaYb1UKYKDUCMmvmVh2Dg2kCV
K3ynONvzdrrsa2mcsh2sz2IlQcZkIpN0Fb8rn/iNEtMrIFlgddBY9IUQ/NcFcATJ
yo3LxleSu+4B1Si/pzEBu7WJ7XP6yOApTsWMX/+U9B17jv9Cbo7db0tfzckkAOfJ
CuyhvFaFK29BFsvc6GX1VCWTFc91RHupkmPRClcnZfCaQAncQFTyFKYEbgmmTCVI
cfegU9t81NCH/nm/M4ngjvaCvqWaHRmwMcrYPANXuWyC2eASjh7Fxeal6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVi1le1TeTBNBDIyiycVfwwca6XMB8GA1UdIwQY
MBaAFETDtEy7xPPaWktChcluo8tQ1NBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk1PMFRMdkU4OXBhUzBLRnlXNmp5MURVMEhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9iMjg0YTMtYzJmMS00MjA1LWIxZDUt
NDc5Nzc2Njk5NThkLzEvUk1PMFRMdkU4OXBhUzBLRnlXNmp5MURVMEhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9iMjg0YTMtYzJmMS00MjA1LWIxZDUtNDc5Nzc2Njk5NThk
LzEvUk1PMFRMdkU4OXBhUzBLRnlXNmp5MURVMEhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZimf2SgG
TQxTKWQ8/FOsbZQHNZCWpfkbNPTFhAYr3JJGWs+9WVSMgB8GtMKk5tOg2eGvxDXR
NOtxBiXlpWs6SiGxEGzXx9ziV05mfPpn27AZQTmFWrUscZ5r0kh3gmaH4uK3VVgD
TDrB6u44msqZP+mzNf4XzUDG6Vqu8iQxmQxk/jqVMLYvS7b3g9wy4bUbixAhNzp7
5nWd5DL43sKMt4Hj3dAPbt8vJjKB6TvMT85v7UbLxJA+5TRyTuDuwYxXXBOClXJB
2HvKY8UBy9CeJNd+WNGYz65BUL2Sly/Zw7hSifyuuKCJyaEN+IxD6A07BYKMVnDr
vK0plwZdTEelJg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:44 2025 by rpki-client