Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft
File: R0kcIjvm4aqla_7G2g2pDEqFKq8.mft (raw, json)
Hash identifier: y+iMjqmA8mpGNSrKI18cZwVf2cLF0ETSNTrwmO+oLxo=
Subject key identifier: 0D:0D:2E:D4:25:29:DD:B0:B2:7B:70:39:4B:7F:96:50:E3:5E:63:81
Authority key identifier: 47:49:1C:22:3B:E6:E1:AA:A5:6B:FE:C6:DA:0D:A9:0C:4A:85:2A:AF
Certificate issuer: /CN=47491c223be6e1aaa56bfec6da0da90c4a852aaf
Certificate serial: 0194BD8554BA4F4F5EA9B2ECB00AE2BAF29B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0kcIjvm4aqla_7G2g2pDEqFKq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft
Manifest number: 0192
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: R0kcIjvm4aqla_7G2g2pDEqFKq8.crl (hash: o+qnTiK7bwvddU5dMXC63X1QePDStpIdSAImcpKHV84=)
2: rVporlTC0KO2iHCmNkPkBQ1rLtA.roa (hash: QNFtzFtuUhiRexRD3zRBFnGt2eHAdDUybJR5bbQe4xM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:54:ba:4f:4f:5e:a9:b2:ec:b0:0a:e2:ba:f2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47491c223be6e1aaa56bfec6da0da90c4a852aaf
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=0d0d2ed42529ddb0b27b70394b7f9650e35e6381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1f:4c:73:32:a3:3e:2a:f2:4f:73:a8:74:9a:
c1:44:ba:19:41:82:16:ce:88:35:75:25:61:7c:b6:
74:45:78:ac:fc:84:0f:53:b2:82:bf:2e:b6:49:19:
15:51:43:7e:a7:9b:45:13:74:4c:bb:26:4b:0c:d2:
b4:60:a5:8e:ec:8a:98:ed:2c:ac:94:6f:04:45:c6:
d4:1d:55:21:9d:f8:53:db:5c:0e:04:8b:b1:b1:0b:
90:ab:3a:86:14:b9:58:d6:ce:86:81:6b:87:86:11:
8d:66:8d:7e:3f:ed:49:fd:0f:48:48:c9:1f:02:ec:
92:c0:fb:c6:ef:40:c5:8b:eb:4e:1d:a5:14:ca:45:
b5:e5:62:32:04:73:72:eb:84:aa:08:23:45:d8:2c:
e6:bd:5d:77:55:43:8a:40:92:7f:2a:e0:5d:41:49:
9c:f7:62:79:49:e5:7a:29:6f:f1:ab:b6:82:30:b0:
0b:91:bf:b5:be:09:f6:54:4e:0d:06:a1:62:b7:0b:
74:92:1d:49:bf:a2:50:c2:78:cb:35:4b:f6:6d:b0:
7f:9c:85:cf:bd:23:42:9c:be:e7:86:fb:a8:af:f9:
b5:3c:5a:21:4e:f5:9e:f4:8e:5d:2f:30:1e:0f:51:
2d:27:34:ac:69:94:cd:48:34:ee:f3:3b:04:18:3d:
63:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0D:2E:D4:25:29:DD:B0:B2:7B:70:39:4B:7F:96:50:E3:5E:63:81
X509v3 Authority Key Identifier:
keyid:47:49:1C:22:3B:E6:E1:AA:A5:6B:FE:C6:DA:0D:A9:0C:4A:85:2A:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0kcIjvm4aqla_7G2g2pDEqFKq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:0c:a8:3c:d8:0d:88:17:79:f1:d9:de:e8:a2:29:d7:7e:37:
43:e4:f6:cd:9c:2f:e7:3f:dc:8e:a5:3d:23:4b:b6:37:20:52:
69:a6:06:f2:91:c7:e6:56:84:25:bf:7d:43:b1:ba:f4:a4:bc:
15:63:df:6f:f5:33:25:e3:24:8a:a3:1a:0a:05:fd:b1:2a:be:
57:64:7a:9b:ca:80:4a:60:c6:18:72:df:4f:55:cc:ea:ea:76:
cb:74:e7:4e:fe:10:59:bd:63:78:a9:47:a7:92:22:5c:e4:a9:
c2:fe:83:6c:b0:10:17:e5:18:0d:2e:cb:92:21:07:19:43:7f:
e0:6d:b3:e1:64:52:60:16:b0:14:04:f1:4f:d4:22:b7:6a:b8:
8c:41:6f:7f:40:c7:03:d0:8f:87:7a:c7:51:b8:f6:ba:0c:d9:
87:db:d0:d8:9f:b3:09:d3:38:c2:a6:6e:75:a9:1b:f9:7a:50:
89:3f:56:94:35:e4:7e:ed:f1:cb:0d:7f:76:ec:66:28:06:b2:
97:98:1b:5e:8f:83:a0:c6:2c:a7:e2:6e:5f:6f:ea:36:af:2f:
7c:66:1f:6e:90:87:5c:13:fa:83:fa:36:62:7b:0d:d4:f9:77:
44:60:cd:9d:ed:50:14:d9:56:0b:ac:ae:6e:8d:e0:7f:ea:15:
cf:98:ca:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hVS6T09eqbLssAriuvKbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NDkxYzIyM2JlNmUxYWFhNTZiZmVjNmRhMGRhOTBjNGE4
NTJhYWYwHhcNMjUwMTMxMTgwMDE5WhcNMjUwMjAxMTgwMDE5WjAzMTEwLwYDVQQD
EygwZDBkMmVkNDI1MjlkZGIwYjI3YjcwMzk0YjdmOTY1MGUzNWU2MzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3R9MczKjPiryT3OodJrBRLoZQYIW
zog1dSVhfLZ0RXis/IQPU7KCvy62SRkVUUN+p5tFE3RMuyZLDNK0YKWO7IqY7Sys
lG8ERcbUHVUhnfhT21wOBIuxsQuQqzqGFLlY1s6GgWuHhhGNZo1+P+1J/Q9ISMkf
AuySwPvG70DFi+tOHaUUykW15WIyBHNy64SqCCNF2CzmvV13VUOKQJJ/KuBdQUmc
92J5SeV6KW/xq7aCMLALkb+1vgn2VE4NBqFitwt0kh1Jv6JQwnjLNUv2bbB/nIXP
vSNCnL7nhvuor/m1PFohTvWe9I5dLzAeD1EtJzSsaZTNSDTu8zsEGD1jFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0NLtQlKd2wsntwOUt/llDjXmOBMB8GA1UdIwQY
MBaAFEdJHCI75uGqpWv+xtoNqQxKhSqvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjBrY0lqdm00YXFsYV83RzJnMnBERXFGS3E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85NDY4YjgtYzdlOS00MzBmLWIxNjgt
OGFjZGY5NmM5OGEwLzEvUjBrY0lqdm00YXFsYV83RzJnMnBERXFGS3E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS85NDY4YjgtYzdlOS00MzBmLWIxNjgtOGFjZGY5NmM5OGEw
LzEvUjBrY0lqdm00YXFsYV83RzJnMnBERXFGS3E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIAyoPNgN
iBd58dne6KIp1343Q+T2zZwv5z/cjqU9I0u2NyBSaaYG8pHH5laEJb99Q7G69KS8
FWPfb/UzJeMkiqMaCgX9sSq+V2R6m8qASmDGGHLfT1XM6up2y3TnTv4QWb1jeKlH
p5IiXOSpwv6DbLAQF+UYDS7LkiEHGUN/4G2z4WRSYBawFATxT9Qit2q4jEFvf0DH
A9CPh3rHUbj2ugzZh9vQ2J+zCdM4wqZudakb+XpQiT9WlDXkfu3xyw1/duxmKAay
l5gbXo+DoMYsp+JuX2/qNq8vfGYfbpCHXBP6g/o2YnsN1Pl3RGDNne1QFNlWC6yu
bo3gf+oVz5jKGw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:36:11 2025 by rpki-client