Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft
File: mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft (raw, json)
Hash identifier: O+3+qdHKm/xtbj4+vbwQi9dCZ4toOy44tTHUjkj8a7k=
Subject key identifier: 0D:03:68:26:1E:59:26:65:32:CB:D6:41:2F:FB:17:CD:DB:3C:4C:50
Authority key identifier: 99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61
Certificate issuer: /CN=993900f66e70b2fffd9c0ce92602f2f45c659961
Certificate serial: 0194BBCE8BD9AA375831C802AA8AF0162371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft
Manifest number: 8B
Signing time: Fri 31 Jan 2025 10:01:02 +0000
Manifest this update: Fri 31 Jan 2025 10:01:02 +0000
Manifest next update: Sat 01 Feb 2025 10:01:02 +0000
Files and hashes: 1: BX8TzVbCvSIW38h_vPu5ASmAFTU.roa (hash: 9fbeu4ndfIatRqGo7OJ1vRbIh5amuFXDGED1/l+TEsY=)
2: jq_1ppFWb5g9HX-Mw-WYljosNes.roa (hash: lwyW5RQhcptTES0umbfYTj6Bk0XX6clHFX008ryFUIs=)
3: mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl (hash: 87XJ7i23stjgTa7o0w/cZFnNtqtbOAZ3/7BqP7wFnsg=)
4: oz7JKl-4NZzBhNGzabLNqFsOhAA.roa (hash: ZfAKA4bqtPr1c9bg/21Eh2BpRLDxFurecYRLK6HJ27c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8b:d9:aa:37:58:31:c8:02:aa:8a:f0:16:23:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993900f66e70b2fffd9c0ce92602f2f45c659961
Validity
Not Before: Jan 31 10:01:02 2025 GMT
Not After : Feb 1 10:01:02 2025 GMT
Subject: CN=0d0368261e59266532cbd6412ffb17cddb3c4c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c3:78:32:c2:a6:3e:d3:7b:d8:7a:a8:75:f2:
90:77:11:a2:36:cb:da:9e:1e:62:38:72:f1:43:9b:
5e:1b:21:16:f1:8d:5c:d6:9c:23:72:ca:d4:6e:cc:
52:e1:24:b5:dd:d1:aa:ee:d3:80:32:4c:6f:0e:45:
52:15:18:95:52:04:5b:b2:b1:54:ab:2a:18:05:42:
00:cf:1e:0f:19:c9:88:c8:94:0e:6d:4e:31:29:f3:
86:45:ac:37:21:21:33:56:fe:f0:c4:75:25:56:a9:
b8:da:32:86:db:6a:0b:77:f4:97:f6:e1:82:1b:5c:
9a:c2:10:71:29:51:3c:f3:23:6f:cd:22:43:48:4a:
3c:43:45:93:b8:aa:c2:02:99:f4:0d:8a:4b:a1:98:
25:9f:09:5d:58:f3:7b:1c:88:58:a4:d0:6b:35:8d:
e1:08:05:8c:6e:23:82:9b:41:e1:4e:47:38:59:eb:
74:5e:b8:97:37:ca:10:fb:c0:c6:e8:76:a4:db:5b:
7c:5a:59:d2:b7:fc:c7:9e:81:a6:a5:99:b5:17:88:
43:02:89:13:3e:74:5d:36:37:64:b8:2b:c6:ec:94:
f5:35:10:ba:ce:68:31:20:99:38:aa:b7:40:27:29:
e4:cf:57:65:19:e4:e1:02:62:f4:d5:b8:72:6a:d3:
55:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:03:68:26:1E:59:26:65:32:CB:D6:41:2F:FB:17:CD:DB:3C:4C:50
X509v3 Authority Key Identifier:
keyid:99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7d:fd:eb:44:e7:e7:d3:3b:44:08:37:46:48:bd:a7:26:83:
f5:32:ea:b3:0b:d0:7a:04:72:94:11:d8:76:bc:c6:37:88:40:
da:cf:a0:d8:eb:08:2e:4b:7c:92:ed:8f:74:24:11:cd:2d:61:
56:9b:47:6c:51:0b:56:e8:92:10:ae:ac:94:e3:c6:2b:12:93:
8a:77:a4:e4:b4:3d:0d:ae:9f:a6:d1:2d:53:1b:89:17:3d:88:
e2:f3:2f:2c:bd:df:14:7a:f6:1f:d4:d0:ef:0e:de:78:e1:7e:
54:a5:0c:f7:43:de:3e:dd:87:2d:b4:e7:52:8e:bf:10:48:bf:
d3:e9:b2:59:20:9d:51:98:a7:5f:07:cd:1f:1c:b1:cd:e7:38:
9b:cc:09:df:79:51:af:35:c2:67:be:07:41:a7:8a:e7:29:7e:
f3:a8:f8:33:14:4f:ba:5e:96:74:42:52:95:92:fd:d6:05:63:
0d:75:5f:fc:72:f7:e4:f2:27:75:9f:5b:9c:8f:18:4e:77:31:
09:83:ee:b4:aa:90:ad:20:d1:2a:2c:01:4c:34:97:c0:9f:0b:
9f:71:39:17:7a:e7:0f:94:f2:af:59:fd:5c:a0:8f:35:e1:b5:
d7:b4:0f:93:2e:fc:c6:1b:74:c4:bd:cb:cd:b1:79:38:04:d2:
c3:00:1b:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zovZqjdYMcgCqorwFiNxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MzkwMGY2NmU3MGIyZmZmZDljMGNlOTI2MDJmMmY0NWM2
NTk5NjEwHhcNMjUwMTMxMTAwMTAyWhcNMjUwMjAxMTAwMTAyWjAzMTEwLwYDVQQD
EygwZDAzNjgyNjFlNTkyNjY1MzJjYmQ2NDEyZmZiMTdjZGRiM2M0YzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8N4MsKmPtN72HqodfKQdxGiNsva
nh5iOHLxQ5teGyEW8Y1c1pwjcsrUbsxS4SS13dGq7tOAMkxvDkVSFRiVUgRbsrFU
qyoYBUIAzx4PGcmIyJQObU4xKfOGRaw3ISEzVv7wxHUlVqm42jKG22oLd/SX9uGC
G1yawhBxKVE88yNvzSJDSEo8Q0WTuKrCApn0DYpLoZglnwldWPN7HIhYpNBrNY3h
CAWMbiOCm0HhTkc4Wet0XriXN8oQ+8DG6Hak21t8WlnSt/zHnoGmpZm1F4hDAokT
PnRdNjdkuCvG7JT1NRC6zmgxIJk4qrdAJynkz1dlGeThAmL01bhyatNVMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0DaCYeWSZlMsvWQS/7F83bPExQMB8GA1UdIwQY
MBaAFJk5APZucLL//ZwM6SYC8vRcZZlhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVRrQTltNXdzdl85bkF6cEpnTHk5RnhsbVdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jMWNmNmYtNTRjZC00MzRhLTgzN2Qt
ZGVmNmVmYjQ0MzE5LzEvbVRrQTltNXdzdl85bkF6cEpnTHk5RnhsbVdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9jMWNmNmYtNTRjZC00MzRhLTgzN2QtZGVmNmVmYjQ0MzE5
LzEvbVRrQTltNXdzdl85bkF6cEpnTHk5RnhsbVdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC33960Tn
59M7RAg3Rki9pyaD9TLqswvQegRylBHYdrzGN4hA2s+g2OsILkt8ku2PdCQRzS1h
VptHbFELVuiSEK6slOPGKxKTinek5LQ9Da6fptEtUxuJFz2I4vMvLL3fFHr2H9TQ
7w7eeOF+VKUM90PePt2HLbTnUo6/EEi/0+myWSCdUZinXwfNHxyxzec4m8wJ33lR
rzXCZ74HQaeK5yl+86j4MxRPul6WdEJSlZL91gVjDXVf/HL35PIndZ9bnI8YTncx
CYPutKqQrSDRKiwBTDSXwJ8Ln3E5F3rnD5Tyr1n9XKCPNeG117QPky78xht0xL3L
zbF5OATSwwAbaw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:36:30 2025 by rpki-client