Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.mft
File: ADn3QWhtoR55rnxeSGqikICMsbc.mft (raw, json)
Hash identifier: aomFba05Ny8YJI6Vlzf66sEGfaELEiqgJPnGmdtLZw4=
Subject key identifier: AF:84:29:6A:FB:D1:89:43:F5:99:5F:94:D3:5D:63:A8:BA:38:72:53
Authority key identifier: 00:39:F7:41:68:6D:A1:1E:79:AE:7C:5E:48:6A:A2:90:80:8C:B1:B7
Certificate issuer: /CN=0039f741686da11e79ae7c5e486aa290808cb1b7
Certificate serial: 0194BC04D917285361C148B7C16D66FBCEB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.mft
Manifest number: 10D6
Signing time: Fri 31 Jan 2025 11:00:21 +0000
Manifest this update: Fri 31 Jan 2025 11:00:21 +0000
Manifest next update: Sat 01 Feb 2025 11:00:21 +0000
Files and hashes: 1: ADn3QWhtoR55rnxeSGqikICMsbc.crl (hash: u5csCLA1yQFbZrO+MgAkoCxicIziuTzk7rEKeVGfCwI=)
2: Y3i7R5k-pr2oJ6IrDbTR9kOWSc4.roa (hash: GTNPbNy0VtCzCDFPUyJZWkGeAio7wlfXOb9TWYRV6sE=)
3: e9a8ONYDtpKM0KoJ-RMqjCOdosE.roa (hash: tuQ0e/czULwl9GWCOBeKLYiHJIJXkYnYmwwjDNg8QOE=)
4: xewexu8qO3LGfnqqWqfVcH7b-hQ.roa (hash: foDGso9eJE+J/6Qu10A3sNz/jBAeKKZ8zvRJtBdUh9I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d9:17:28:53:61:c1:48:b7:c1:6d:66:fb:ce:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0039f741686da11e79ae7c5e486aa290808cb1b7
Validity
Not Before: Jan 31 11:00:21 2025 GMT
Not After : Feb 1 11:00:21 2025 GMT
Subject: CN=af84296afbd18943f5995f94d35d63a8ba387253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dd:5d:e8:e4:48:3a:9f:65:2d:16:a5:41:8a:
fd:96:d3:74:32:71:7c:66:02:10:25:e1:1c:c3:7a:
fe:36:cb:42:d4:bf:3e:ff:69:30:29:fd:9c:00:a0:
af:83:f9:86:a3:ba:cb:82:70:1f:e0:d3:9c:71:2b:
71:7f:ed:be:f6:cc:17:9a:b8:fc:50:33:ee:7e:b2:
d4:3b:d1:ab:d0:33:30:8f:19:8e:e0:0a:d9:a7:2f:
3e:14:17:76:19:c4:ec:43:a3:7c:38:81:e4:07:cd:
31:61:b8:b5:0d:af:9e:48:80:2d:b7:ba:0e:52:d2:
1a:c9:89:24:90:ba:e6:54:20:ac:f0:5e:4a:19:66:
f9:cf:5b:7a:1c:ee:d4:db:ea:d9:1d:17:ca:2d:aa:
24:d3:dc:ba:92:fe:7e:46:d7:96:ac:f4:0c:85:5e:
4b:ed:3e:33:ab:bc:c1:0c:84:d4:89:49:1f:7f:8f:
96:d6:78:0e:f6:3f:63:d6:4b:84:65:79:29:aa:0a:
5b:05:ef:d9:a8:93:12:08:f8:07:7d:e5:f3:3d:98:
26:c2:7c:30:d8:7d:a2:e5:e7:3e:5a:3e:35:99:41:
67:31:f3:46:77:aa:7d:b3:a4:3c:26:4a:da:c5:c6:
c6:a9:c6:bb:3e:77:12:f7:3f:b1:c0:72:44:dc:ad:
39:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:84:29:6A:FB:D1:89:43:F5:99:5F:94:D3:5D:63:A8:BA:38:72:53
X509v3 Authority Key Identifier:
keyid:00:39:F7:41:68:6D:A1:1E:79:AE:7C:5E:48:6A:A2:90:80:8C:B1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:b9:f4:0d:67:4b:e8:2d:8d:23:2b:9f:bb:eb:99:05:0b:0d:
29:b6:6b:45:76:c6:18:fc:a9:2a:e6:7e:eb:35:4d:e9:76:c1:
1d:94:07:43:90:5f:91:26:71:2c:d0:81:47:80:9a:e6:82:b3:
95:59:e3:ea:e1:6a:49:1a:23:82:cd:78:60:69:5b:3d:7f:c3:
eb:2a:df:62:46:4b:16:eb:e1:99:19:8c:23:41:f3:ea:4d:02:
93:1f:56:17:e9:c3:6d:79:8f:88:ea:19:ff:0b:5e:42:b5:e2:
b0:d7:9c:19:54:6f:09:6e:dd:69:44:58:a0:96:65:c0:ca:78:
73:ae:9f:b3:c2:76:73:7b:d8:55:60:38:dc:08:3e:45:dd:db:
dd:f9:9c:73:c3:e2:9d:e8:1e:4e:6d:45:e9:96:97:34:21:66:
1c:49:52:2f:29:f9:eb:6d:7f:20:29:a4:c0:ec:e5:94:65:88:
85:32:a8:7f:e8:74:92:ce:b8:2d:1d:1d:50:47:ea:76:9c:14:
a1:91:d5:e4:16:91:1f:67:28:d2:d4:43:f6:18:62:1e:cb:99:
38:e1:46:7b:93:c8:2a:0c:54:ae:39:11:94:d1:fe:e0:2b:70:
1d:9b:ee:6d:a4:81:97:c0:ce:a9:33:aa:c2:0d:10:e5:16:6f:
86:36:a6:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BNkXKFNhwUi3wW1m+86xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMzlmNzQxNjg2ZGExMWU3OWFlN2M1ZTQ4NmFhMjkwODA4
Y2IxYjcwHhcNMjUwMTMxMTEwMDIxWhcNMjUwMjAxMTEwMDIxWjAzMTEwLwYDVQQD
EyhhZjg0Mjk2YWZiZDE4OTQzZjU5OTVmOTRkMzVkNjNhOGJhMzg3MjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN1d6ORIOp9lLRalQYr9ltN0MnF8
ZgIQJeEcw3r+NstC1L8+/2kwKf2cAKCvg/mGo7rLgnAf4NOccStxf+2+9swXmrj8
UDPufrLUO9Gr0DMwjxmO4ArZpy8+FBd2GcTsQ6N8OIHkB80xYbi1Da+eSIAtt7oO
UtIayYkkkLrmVCCs8F5KGWb5z1t6HO7U2+rZHRfKLaok09y6kv5+RteWrPQMhV5L
7T4zq7zBDITUiUkff4+W1ngO9j9j1kuEZXkpqgpbBe/ZqJMSCPgHfeXzPZgmwnww
2H2i5ec+Wj41mUFnMfNGd6p9s6Q8JkraxcbGqca7PncS9z+xwHJE3K05+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+EKWr70YlD9ZlflNNdY6i6OHJTMB8GA1UdIwQY
MBaAFAA590FobaEeea58XkhqopCAjLG3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQURuM1FXaHRvUjU1cm54ZVNHcWlrSUNNc2JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8zYzYxNmYtMDEzOC00ZmZiLWFmMTct
NTVmNDFmZGYwZTYzLzEvQURuM1FXaHRvUjU1cm54ZVNHcWlrSUNNc2JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8zYzYxNmYtMDEzOC00ZmZiLWFmMTctNTVmNDFmZGYwZTYz
LzEvQURuM1FXaHRvUjU1cm54ZVNHcWlrSUNNc2JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7n0DWdL
6C2NIyufu+uZBQsNKbZrRXbGGPypKuZ+6zVN6XbBHZQHQ5BfkSZxLNCBR4Ca5oKz
lVnj6uFqSRojgs14YGlbPX/D6yrfYkZLFuvhmRmMI0Hz6k0Ckx9WF+nDbXmPiOoZ
/wteQrXisNecGVRvCW7daURYoJZlwMp4c66fs8J2c3vYVWA43Ag+Rd3b3fmcc8Pi
negeTm1F6ZaXNCFmHElSLyn5621/ICmkwOzllGWIhTKof+h0ks64LR0dUEfqdpwU
oZHV5BaRH2co0tRD9hhiHsuZOOFGe5PIKgxUrjkRlNH+4CtwHZvubaSBl8DOqTOq
wg0Q5RZvhjamJQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:22:06 2025 by rpki-client