Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
File: 6xU9o8JM4SNuIMRoYWNdyO-1apI.mft (raw, json)
Hash identifier: DrVaUCqRIJn4R2ePS3pTVun6w9LOw+W5ltZgzpTqD64=
Subject key identifier: 25:C1:B9:DF:43:70:62:48:C8:FD:6C:92:85:71:C2:03:82:00:65:CD
Authority key identifier: EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92
Certificate issuer: /CN=eb153da3c24ce1236e20c46861635dc8efb56a92
Certificate serial: 0194BD4E720735E1EC734EB76FB7E10E7276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
Manifest number: 0B11
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: 6xU9o8JM4SNuIMRoYWNdyO-1apI.crl (hash: jBJo7PRpmjkYIkuoYua7PT6iH5d71cqtdy1xrmn34E0=)
2: ipmJ5LQmK4ddp63lgFVAIAYopkE.roa (hash: YVYb+vZufn7OkrWKbNACiC73zlWWGlO/lMGiNA3e8zY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:72:07:35:e1:ec:73:4e:b7:6f:b7:e1:0e:72:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb153da3c24ce1236e20c46861635dc8efb56a92
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=25c1b9df43706248c8fd6c928571c203820065cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:e4:e0:1d:4a:ce:a0:22:4f:b3:8e:5c:ce:
57:d9:80:ce:39:7e:5d:bd:c2:ad:d5:3b:3d:1c:d2:
fa:5e:ec:2c:43:b8:65:d2:46:85:37:62:b6:0a:78:
a3:28:ca:a6:ea:a8:de:d4:bb:ad:90:d3:24:c7:9d:
c0:b8:cf:3e:fb:0d:39:dd:17:98:03:e6:ce:b6:e7:
ab:d9:f3:49:78:b2:c3:70:3f:50:e9:27:1c:bf:9f:
54:78:c3:a9:af:10:73:1b:55:3b:01:32:2e:23:6c:
dc:0c:fd:2e:12:8d:5d:d4:2d:00:63:c6:8d:71:1f:
05:13:29:1c:f0:23:36:42:48:ba:39:af:6b:fa:ef:
2d:a4:04:74:4a:99:b3:35:4e:34:f4:17:15:5a:26:
e4:67:a9:fe:b4:8e:63:4d:d7:24:d1:c5:c4:e1:3c:
bd:10:32:dc:ba:e2:0c:7b:8d:ab:fc:81:94:c6:80:
cc:73:7a:bd:d4:89:cd:a0:05:f6:56:6e:8a:b3:17:
e5:e1:c2:52:a5:b9:f1:af:57:90:c2:a0:59:f5:14:
46:45:cb:dd:62:8b:81:50:69:2f:2e:a7:9f:4f:3d:
0e:61:ba:d2:5a:c7:1a:fe:16:29:5b:7f:87:65:d0:
58:a3:7f:33:02:a1:ee:6f:bc:65:bb:9b:0e:ac:a3:
9a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C1:B9:DF:43:70:62:48:C8:FD:6C:92:85:71:C2:03:82:00:65:CD
X509v3 Authority Key Identifier:
keyid:EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:4e:69:dc:a0:13:59:7b:4b:a8:02:cc:8d:91:57:51:cb:98:
e1:39:74:23:a6:6a:a8:1d:1f:ab:78:2c:c2:45:dd:72:2d:7c:
61:4c:3e:04:c2:81:cc:18:3b:28:32:e7:9b:21:d0:97:5b:e8:
91:da:2b:4a:ef:a0:ba:0b:94:0a:ac:28:e6:e1:af:de:a8:60:
75:5b:64:e6:f6:bc:e8:57:73:53:9b:e2:f6:51:5b:3c:b0:37:
b6:47:61:bb:dd:82:fe:8e:93:7d:47:89:6e:07:50:72:62:85:
9b:05:90:01:36:94:7e:63:01:78:9d:fe:e2:ba:d9:3c:4a:97:
d7:c9:8f:5c:7d:9f:4b:5f:c6:f6:3c:4e:37:60:54:96:71:ea:
03:9c:59:1c:3e:1b:6b:a0:94:70:ac:ee:f4:50:94:e4:00:a0:
7e:3d:93:06:26:b8:5c:9d:7c:15:76:ad:ec:b4:1a:dd:ce:ed:
b6:99:40:18:c0:bc:e0:0c:78:c8:82:d9:fb:21:b7:dc:74:44:
25:7a:ca:0d:e1:91:27:79:21:fd:c8:da:47:ad:70:d6:7d:e4:
4d:6c:37:f9:28:aa:d4:d4:69:15:2f:c5:ca:50:0e:77:29:4e:
ce:81:48:ab:c6:63:92:75:de:0d:a0:1f:e9:58:db:1c:ac:67:
a7:5c:17:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TnIHNeHsc063b7fhDnJ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMTUzZGEzYzI0Y2UxMjM2ZTIwYzQ2ODYxNjM1ZGM4ZWZi
NTZhOTIwHhcNMjUwMTMxMTcwMDIyWhcNMjUwMjAxMTcwMDIyWjAzMTEwLwYDVQQD
EygyNWMxYjlkZjQzNzA2MjQ4YzhmZDZjOTI4NTcxYzIwMzgyMDA2NWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr27k4B1KzqAiT7OOXM5X2YDOOX5d
vcKt1Ts9HNL6XuwsQ7hl0kaFN2K2CnijKMqm6qje1LutkNMkx53AuM8++w053ReY
A+bOtuer2fNJeLLDcD9Q6Sccv59UeMOprxBzG1U7ATIuI2zcDP0uEo1d1C0AY8aN
cR8FEykc8CM2Qki6Oa9r+u8tpAR0SpmzNU409BcVWibkZ6n+tI5jTdck0cXE4Ty9
EDLcuuIMe42r/IGUxoDMc3q91InNoAX2Vm6Ksxfl4cJSpbnxr1eQwqBZ9RRGRcvd
YouBUGkvLqefTz0OYbrSWsca/hYpW3+HZdBYo38zAqHub7xlu5sOrKOaJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXBud9DcGJIyP1skoVxwgOCAGXNMB8GA1UdIwQY
MBaAFOsVPaPCTOEjbiDEaGFjXcjvtWqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnhVOW84Sk00U051SU1Sb1lXTmR5Ty0xYXBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80YmIwNjctYzM2NS00NTJlLWE5M2Ut
MzlkYTFhZThiNzMxLzEvNnhVOW84Sk00U051SU1Sb1lXTmR5Ty0xYXBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy80YmIwNjctYzM2NS00NTJlLWE5M2UtMzlkYTFhZThiNzMx
LzEvNnhVOW84Sk00U051SU1Sb1lXTmR5Ty0xYXBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApU5p3KAT
WXtLqALMjZFXUcuY4Tl0I6ZqqB0fq3gswkXdci18YUw+BMKBzBg7KDLnmyHQl1vo
kdorSu+guguUCqwo5uGv3qhgdVtk5va86FdzU5vi9lFbPLA3tkdhu92C/o6TfUeJ
bgdQcmKFmwWQATaUfmMBeJ3+4rrZPEqX18mPXH2fS1/G9jxON2BUlnHqA5xZHD4b
a6CUcKzu9FCU5ACgfj2TBia4XJ18FXat7LQa3c7ttplAGMC84Ax4yILZ+yG33HRE
JXrKDeGRJ3kh/cjaR61w1n3kTWw3+Siq1NRpFS/FylAOdylOzoFIq8ZjknXeDaAf
6VjbHKxnp1wXkQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:46:14 2025 by rpki-client