Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.mft
File: t1ELZRv73wnISGqBNiAABb77SX0.mft (raw, json)
Hash identifier: h2Puxj0n8RrwyAGKhLeaU7ypIxJYwo9zFYMgGDzSyms=
Subject key identifier: 8D:DE:7F:7A:A9:59:12:48:58:31:6A:11:53:23:28:D7:78:7B:C6:2B
Authority key identifier: B7:51:0B:65:1B:FB:DF:09:C8:48:6A:81:36:20:00:05:BE:FB:49:7D
Certificate issuer: /CN=b7510b651bfbdf09c8486a8136200005befb497d
Certificate serial: 0194BD17B14F3061C5D05C9F73E8B8776D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1ELZRv73wnISGqBNiAABb77SX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.mft
Manifest number: 0AAA
Signing time: Fri 31 Jan 2025 16:00:34 +0000
Manifest this update: Fri 31 Jan 2025 16:00:34 +0000
Manifest next update: Sat 01 Feb 2025 16:00:34 +0000
Files and hashes: 1: Jiow1t-Pk1ZOtI6Aqeh1RaSW3p4.roa (hash: DYR6jlP51Fl43ZL0B6qnJrGHJROyqbTA9KSRORts0Uo=)
2: t1ELZRv73wnISGqBNiAABb77SX0.crl (hash: DhEgbTbG4HIRQfdojQrtjhq539A2d2eT8PtIGo4d1Lw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b1:4f:30:61:c5:d0:5c:9f:73:e8:b8:77:6d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7510b651bfbdf09c8486a8136200005befb497d
Validity
Not Before: Jan 31 16:00:34 2025 GMT
Not After : Feb 1 16:00:34 2025 GMT
Subject: CN=8dde7f7aa959124858316a11532328d7787bc62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3b:d0:c4:35:c2:3f:ac:ca:02:cd:14:c0:2a:
81:1f:bd:b3:69:83:85:2c:1f:7a:51:dd:3f:ad:7f:
4a:29:98:b9:3e:d2:55:f1:57:37:33:ea:0d:30:6d:
4c:f4:cc:a0:55:d6:34:f8:8f:0d:66:5c:e9:55:06:
86:6b:37:2f:31:04:9b:d3:ba:88:09:65:b4:0b:73:
a4:fd:dc:22:cc:64:de:1b:57:e8:1a:e1:35:b3:6c:
d1:91:bd:7f:b6:25:cc:97:f9:eb:44:88:5d:a6:dc:
82:cb:2b:84:d7:8a:e4:34:57:7a:b8:fa:f7:e9:aa:
e8:26:fa:92:4f:40:27:25:4c:00:ab:35:77:a5:3c:
56:80:17:10:f4:47:57:92:97:c2:ac:62:57:4e:57:
4f:c5:39:4f:e9:02:84:2c:80:c4:0f:58:36:19:b3:
f0:a8:2e:38:c5:df:10:cc:c4:1f:36:a3:70:8e:b3:
7b:33:50:5b:3e:29:33:86:08:73:10:bd:24:79:e1:
93:d5:c0:2c:c5:89:2b:1e:c0:5f:8d:b7:2e:f7:34:
2b:46:9c:53:48:dc:11:b9:68:4c:54:55:1c:20:d6:
ec:2e:8a:b2:3f:cb:3f:52:db:dc:0f:0f:b8:c1:b6:
98:0a:eb:b6:dc:c9:43:e8:85:64:14:8f:c4:81:20:
f5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DE:7F:7A:A9:59:12:48:58:31:6A:11:53:23:28:D7:78:7B:C6:2B
X509v3 Authority Key Identifier:
keyid:B7:51:0B:65:1B:FB:DF:09:C8:48:6A:81:36:20:00:05:BE:FB:49:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1ELZRv73wnISGqBNiAABb77SX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6f:60:72:da:b3:6a:dd:e3:55:53:c0:c4:a5:82:21:0a:c1:
e3:da:df:30:36:89:f1:e4:cb:08:da:5c:cb:aa:c2:b2:70:ec:
a5:20:57:cd:fa:a3:68:4b:fb:88:55:b9:25:b0:15:8d:7e:7f:
7e:3b:70:bc:33:4d:db:b5:6e:a0:e3:da:ea:5d:98:d4:ee:bc:
8d:d0:2b:48:ea:de:1f:55:df:d3:e0:63:0e:71:51:bd:84:1c:
03:74:61:f2:a9:37:09:f5:08:e1:77:8d:a9:83:7d:89:a8:79:
f8:4b:bd:6f:55:9a:a6:33:69:09:59:da:4b:9c:51:93:39:65:
1f:59:e4:5d:33:4a:8b:78:5f:29:1b:e6:39:0b:e4:a6:ff:6d:
e4:2c:d3:ce:5e:20:f7:fc:03:d8:97:76:c0:3a:5f:fe:a0:67:
a9:d6:96:4d:49:71:d9:d4:06:ef:40:d1:7c:f7:07:83:fc:0f:
84:3a:99:ab:bb:67:f1:3f:72:33:ad:1a:54:a9:b6:14:43:29:
81:f1:c6:ba:b0:a4:9d:c5:57:62:fc:3f:eb:61:8e:62:86:cb:
31:97:83:4f:af:5b:d3:ac:45:a6:02:f7:db:0d:ce:ce:48:a1:
4e:04:38:16:7c:31:af:3d:c2:7c:88:a5:4c:2d:6e:3c:e8:a3:
d3:9c:a3:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F7FPMGHF0Fyfc+i4d22RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NTEwYjY1MWJmYmRmMDljODQ4NmE4MTM2MjAwMDA1YmVm
YjQ5N2QwHhcNMjUwMTMxMTYwMDM0WhcNMjUwMjAxMTYwMDM0WjAzMTEwLwYDVQQD
Eyg4ZGRlN2Y3YWE5NTkxMjQ4NTgzMTZhMTE1MzIzMjhkNzc4N2JjNjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjvQxDXCP6zKAs0UwCqBH72zaYOF
LB96Ud0/rX9KKZi5PtJV8Vc3M+oNMG1M9MygVdY0+I8NZlzpVQaGazcvMQSb07qI
CWW0C3Ok/dwizGTeG1foGuE1s2zRkb1/tiXMl/nrRIhdptyCyyuE14rkNFd6uPr3
6aroJvqST0AnJUwAqzV3pTxWgBcQ9EdXkpfCrGJXTldPxTlP6QKELIDED1g2GbPw
qC44xd8QzMQfNqNwjrN7M1BbPikzhghzEL0keeGT1cAsxYkrHsBfjbcu9zQrRpxT
SNwRuWhMVFUcINbsLoqyP8s/UtvcDw+4wbaYCuu23MlD6IVkFI/EgSD1HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3ef3qpWRJIWDFqEVMjKNd4e8YrMB8GA1UdIwQY
MBaAFLdRC2Ub+98JyEhqgTYgAAW++0l9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFFTFpSdjczd25JU0dxQk5pQUFCYjc3U1gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iZmYxYzMtMDA4NC00MmJiLWJjZjct
MmNiODg3N2ZkOTcwLzEvdDFFTFpSdjczd25JU0dxQk5pQUFCYjc3U1gwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9iZmYxYzMtMDA4NC00MmJiLWJjZjctMmNiODg3N2ZkOTcw
LzEvdDFFTFpSdjczd25JU0dxQk5pQUFCYjc3U1gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKm9gctqz
at3jVVPAxKWCIQrB49rfMDaJ8eTLCNpcy6rCsnDspSBXzfqjaEv7iFW5JbAVjX5/
fjtwvDNN27VuoOPa6l2Y1O68jdArSOreH1Xf0+BjDnFRvYQcA3Rh8qk3CfUI4XeN
qYN9iah5+Eu9b1WapjNpCVnaS5xRkzllH1nkXTNKi3hfKRvmOQvkpv9t5CzTzl4g
9/wD2Jd2wDpf/qBnqdaWTUlx2dQG70DRfPcHg/wPhDqZq7tn8T9yM60aVKm2FEMp
gfHGurCkncVXYvw/62GOYobLMZeDT69b06xFpgL32w3OzkihTgQ4Fnwxrz3CfIil
TC1uPOij05yjeg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:04 2025 by rpki-client