Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
File: piEYZBO7394g5ZL75VU95_lOWYc.mft (raw, json)
Hash identifier: PqoPqJaBSaHQSM6LtFfE+7sxIDbEZvx9i9s4go9qfPE=
Subject key identifier: 52:51:DC:2F:04:1E:DF:25:BE:53:38:3D:6E:78:17:95:D3:FB:7E:86
Authority key identifier: A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
Certificate issuer: /CN=a621186413bbdfde20e592fbe5553de7f94e5987
Certificate serial: 0194BC72FF454BA49AE87224A503AFB8847B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
Manifest number: 02FF
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: 2aIv5EFJCSs3iPuLEwGcOsjanoQ.roa (hash: rNsD7+Ehz0+ume5zSIU3z6oGfVe17YRXQCn2AWnXoqw=)
2: 3Z7L3_p0yn0EwtvhrBcb6RS6PAs.roa (hash: 4nmnsCr5dF+3f2AuaahP7K0weju+VIeFWLyhjXlOYao=)
3: piEYZBO7394g5ZL75VU95_lOWYc.crl (hash: jw3drROx7NMM+f+dTwXeUaILtVl9EAi5pX4BF3ETO7I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ff:45:4b:a4:9a:e8:72:24:a5:03:af:b8:84:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a621186413bbdfde20e592fbe5553de7f94e5987
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=5251dc2f041edf25be53383d6e781795d3fb7e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:74:fc:83:18:6d:d7:20:95:d2:77:20:61:
7d:4c:fe:bc:c6:49:7d:fb:4d:19:d4:4a:b2:aa:99:
fe:b1:b8:79:9f:95:79:95:96:4e:ab:d0:df:36:aa:
cc:ee:3e:09:b3:c3:39:3b:c2:cb:cd:4b:f7:cb:01:
86:60:7f:91:44:bd:46:cc:eb:93:7c:15:24:cd:c5:
b3:e3:f9:59:4f:d2:18:d2:5b:e4:a1:a1:38:57:db:
71:3f:79:5e:3c:60:b8:41:06:2e:fd:b5:67:f2:e5:
f4:85:35:29:a0:49:b0:9f:1a:e3:ef:a2:03:fb:69:
60:ea:38:7a:99:25:76:b9:a1:08:83:53:bf:9f:1b:
ad:37:0a:f8:be:73:52:2f:c0:b9:07:32:69:44:c9:
99:4b:d6:d5:fc:f9:78:6f:12:a0:9e:5c:17:c4:fe:
f5:98:e9:b5:38:ed:c6:f4:95:b9:40:e8:89:c9:f8:
ab:32:2d:e7:f7:73:e1:f3:04:40:ad:99:03:48:ca:
4f:06:be:fa:3b:9b:75:98:ba:ab:c6:39:61:a9:c8:
67:a9:3e:df:76:84:5d:af:25:1a:70:b2:28:ec:8a:
11:76:a4:2f:4d:6f:15:c9:5b:62:a4:d6:80:b3:8a:
07:aa:37:fe:da:dc:36:ea:92:d6:e9:14:cc:5b:6f:
c3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:51:DC:2F:04:1E:DF:25:BE:53:38:3D:6E:78:17:95:D3:FB:7E:86
X509v3 Authority Key Identifier:
keyid:A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:32:14:31:b6:c4:09:66:a2:07:88:94:0b:ab:67:a0:71:84:
af:44:4a:1b:70:26:09:49:66:73:98:04:51:dc:57:89:23:60:
ba:03:2e:24:b7:83:94:f9:52:13:21:51:b8:2f:5a:b4:d0:13:
6d:11:80:bc:94:a3:f0:14:27:3c:d2:10:6f:07:69:7d:ac:d0:
d3:b2:8e:78:78:87:44:c0:42:11:ea:a1:62:e3:20:7e:d8:51:
12:91:4e:e4:e7:0e:da:f7:d0:09:0c:ca:36:8e:3c:8c:59:48:
50:14:7d:64:ef:fb:5d:ab:a4:d9:27:dc:0b:e3:20:94:9c:92:
e0:09:8a:bb:5d:19:12:f7:2d:1d:5b:53:27:ce:50:40:b3:17:
45:e3:4b:2d:f1:cd:ef:ba:e3:bb:f2:9f:28:58:85:62:e4:07:
87:70:80:bb:0b:90:05:e4:b8:a3:fb:ea:49:1a:89:89:27:ec:
88:d6:1e:28:7d:e7:58:f3:2b:d0:b1:da:1b:92:87:d3:83:0e:
62:a9:e2:c8:8e:da:c6:d4:24:13:42:50:57:16:fe:a1:55:52:
ec:5d:c3:6d:64:92:03:d2:1f:ba:88:79:67:79:37:bf:62:c1:
5a:0d:1f:ab:d2:5b:41:93:7c:19:ff:21:a3:92:62:6c:41:05:
4c:74:dd:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cv9FS6Sa6HIkpQOvuIR7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MjExODY0MTNiYmRmZGUyMGU1OTJmYmU1NTUzZGU3Zjk0
ZTU5ODcwHhcNMjUwMTMxMTMwMDQwWhcNMjUwMjAxMTMwMDQwWjAzMTEwLwYDVQQD
Eyg1MjUxZGMyZjA0MWVkZjI1YmU1MzM4M2Q2ZTc4MTc5NWQzZmI3ZTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQd0/IMYbdcgldJ3IGF9TP68xkl9
+00Z1Eqyqpn+sbh5n5V5lZZOq9DfNqrM7j4Js8M5O8LLzUv3ywGGYH+RRL1GzOuT
fBUkzcWz4/lZT9IY0lvkoaE4V9txP3lePGC4QQYu/bVn8uX0hTUpoEmwnxrj76ID
+2lg6jh6mSV2uaEIg1O/nxutNwr4vnNSL8C5BzJpRMmZS9bV/Pl4bxKgnlwXxP71
mOm1OO3G9JW5QOiJyfirMi3n93Ph8wRArZkDSMpPBr76O5t1mLqrxjlhqchnqT7f
doRdryUacLIo7IoRdqQvTW8VyVtipNaAs4oHqjf+2tw26pLW6RTMW2/DeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJR3C8EHt8lvlM4PW54F5XT+36GMB8GA1UdIwQY
MBaAFKYhGGQTu9/eIOWS++VVPef5TlmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGlFWVpCTzczOTRnNVpMNzVWVTk1X2xPV1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8wMzk2YWQtZGRhNy00NjAwLThmNjYt
ZjU2Yzc3OWIxNDJmLzEvcGlFWVpCTzczOTRnNVpMNzVWVTk1X2xPV1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8wMzk2YWQtZGRhNy00NjAwLThmNjYtZjU2Yzc3OWIxNDJm
LzEvcGlFWVpCTzczOTRnNVpMNzVWVTk1X2xPV1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTIUMbbE
CWaiB4iUC6tnoHGEr0RKG3AmCUlmc5gEUdxXiSNgugMuJLeDlPlSEyFRuC9atNAT
bRGAvJSj8BQnPNIQbwdpfazQ07KOeHiHRMBCEeqhYuMgfthREpFO5OcO2vfQCQzK
No48jFlIUBR9ZO/7Xauk2SfcC+MglJyS4AmKu10ZEvctHVtTJ85QQLMXReNLLfHN
77rju/KfKFiFYuQHh3CAuwuQBeS4o/vqSRqJiSfsiNYeKH3nWPMr0LHaG5KH04MO
YqniyI7axtQkE0JQVxb+oVVS7F3DbWSSA9Ifuoh5Z3k3v2LBWg0fq9JbQZN8Gf8h
o5JibEEFTHTdlw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:34 2025 by rpki-client