Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
File: MnVXzyJinQWKURSWWy-d-O9NtpA.mft (raw, json)
Hash identifier: zM/GWMJLgHM/0u37bi0/wxFHJGwmACP71kWrw/uC2ZE=
Subject key identifier: D0:E1:18:5F:8F:EB:41:6F:7F:7B:97:8D:DC:71:71:62:BF:17:46:ED
Authority key identifier: 32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
Certificate issuer: /CN=327557cf22629d058a5114965b2f9df8ef4db690
Certificate serial: 0194BBCED3DF6891E5A26CA89E04FD11A03F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
Manifest number: 0B10
Signing time: Fri 31 Jan 2025 10:01:21 +0000
Manifest this update: Fri 31 Jan 2025 10:01:21 +0000
Manifest next update: Sat 01 Feb 2025 10:01:21 +0000
Files and hashes: 1: MnVXzyJinQWKURSWWy-d-O9NtpA.crl (hash: AspdFyklq8TNoQuObuf/ahRcbVWmjwI9XC7ZzpzHH5E=)
2: hApSbA3jzy_s3iVNvrGjhLhy3rU.roa (hash: 1X2vbtL7wfNX8hGTI4KlZns0bkwGbPIYpWY571Ew9V0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d3:df:68:91:e5:a2:6c:a8:9e:04:fd:11:a0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327557cf22629d058a5114965b2f9df8ef4db690
Validity
Not Before: Jan 31 10:01:21 2025 GMT
Not After : Feb 1 10:01:21 2025 GMT
Subject: CN=d0e1185f8feb416f7f7b978ddc717162bf1746ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1d:5e:4c:72:61:3c:84:c5:8c:93:aa:6c:7c:
61:8a:e3:a5:ea:fe:11:cb:0a:b6:61:60:22:4a:74:
a1:fa:f8:d8:3a:66:c7:a4:5b:21:1f:40:f2:7d:9b:
69:25:27:e9:a1:08:2b:b9:e6:b4:64:60:e1:68:9d:
30:93:4b:2f:39:c4:ad:1d:54:89:d9:9e:73:5e:9f:
7f:78:bd:93:bb:9b:cd:c2:0e:74:c6:24:c9:59:65:
15:53:68:e5:23:24:b4:ef:60:4b:b8:99:b6:f2:e6:
71:b3:fc:9b:a9:97:cc:7e:2e:49:9f:e6:5e:92:a4:
29:a1:f3:c3:7d:ad:76:b8:c6:44:39:f0:b7:96:22:
05:22:54:ea:a2:c2:d5:8b:10:a7:3e:7c:51:1f:00:
21:f8:d0:8a:df:94:18:dd:aa:fe:2d:1b:70:55:34:
eb:d4:2f:9e:1a:65:de:38:15:7e:b2:17:7a:a6:66:
1c:82:fc:26:68:26:73:ce:d9:e1:0d:fc:68:37:71:
fe:ce:1f:01:df:3f:d7:a3:7b:68:fa:09:93:7c:01:
27:8a:c0:30:6d:2f:24:50:c6:5d:3e:29:45:c4:5b:
b4:49:b1:2f:19:f7:d8:49:ae:3c:cf:df:14:36:9b:
db:d9:da:ab:c7:44:9b:13:4a:80:c9:bc:5e:24:ea:
bc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E1:18:5F:8F:EB:41:6F:7F:7B:97:8D:DC:71:71:62:BF:17:46:ED
X509v3 Authority Key Identifier:
keyid:32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:34:6d:e1:2f:c1:ec:1f:ee:e7:b6:e0:17:28:b9:10:21:4f:
d1:f5:92:3a:f1:dd:5a:4e:a0:ce:4b:0a:60:37:ef:d2:78:c9:
4e:24:70:7e:e5:fb:56:95:2f:f5:8e:f4:ff:98:98:3f:b9:76:
1e:6f:34:59:69:92:38:bc:a0:1e:bb:7d:d4:c7:86:ea:ce:4f:
d6:75:ae:29:fb:8d:c9:fb:99:5c:5a:4a:57:e9:73:1f:75:c7:
43:75:14:a7:7f:8b:b1:5a:e0:17:65:31:00:64:67:37:2b:dc:
ba:05:c5:db:3f:1c:93:c0:3c:14:8d:f4:d6:d8:18:14:4d:d3:
3f:3a:e1:22:2c:a0:d1:45:fa:1c:1c:e2:ac:7b:4a:69:d1:97:
82:9a:32:34:b1:bc:fd:39:2a:bc:85:12:11:50:32:dc:34:fd:
b4:f7:82:f3:48:85:f8:3e:38:d3:f9:c6:43:ba:e3:a9:f6:ff:
16:7c:8c:d1:23:f9:46:15:b6:b0:10:94:3e:c9:ec:dc:dd:dd:
13:53:c5:8d:6f:bb:ff:8b:ed:7e:cb:38:32:97:41:26:e2:0f:
c2:75:8d:bc:16:af:ff:f8:09:e5:2c:11:0c:af:d9:45:f2:9e:
2a:d5:78:b4:ab:c1:3a:91:51:8a:71:72:7a:25:45:d8:cd:fe:
7c:40:5f:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ztPfaJHlomyongT9EaA/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNzU1N2NmMjI2MjlkMDU4YTUxMTQ5NjViMmY5ZGY4ZWY0
ZGI2OTAwHhcNMjUwMTMxMTAwMTIxWhcNMjUwMjAxMTAwMTIxWjAzMTEwLwYDVQQD
EyhkMGUxMTg1ZjhmZWI0MTZmN2Y3Yjk3OGRkYzcxNzE2MmJmMTc0NmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh1eTHJhPITFjJOqbHxhiuOl6v4R
ywq2YWAiSnSh+vjYOmbHpFshH0DyfZtpJSfpoQgruea0ZGDhaJ0wk0svOcStHVSJ
2Z5zXp9/eL2Tu5vNwg50xiTJWWUVU2jlIyS072BLuJm28uZxs/ybqZfMfi5Jn+Ze
kqQpofPDfa12uMZEOfC3liIFIlTqosLVixCnPnxRHwAh+NCK35QY3ar+LRtwVTTr
1C+eGmXeOBV+shd6pmYcgvwmaCZzztnhDfxoN3H+zh8B3z/Xo3to+gmTfAEnisAw
bS8kUMZdPilFxFu0SbEvGffYSa48z98UNpvb2dqrx0SbE0qAybxeJOq80QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDhGF+P60Fvf3uXjdxxcWK/F0btMB8GA1UdIwQY
MBaAFDJ1V88iYp0FilEUllsvnfjvTbaQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85Y2ZmM2QtMTE2OC00MTFjLWEwNjUt
ZmQ3MjViODI1MjkxLzEvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC85Y2ZmM2QtMTE2OC00MTFjLWEwNjUtZmQ3MjViODI1Mjkx
LzEvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuTRt4S/B
7B/u57bgFyi5ECFP0fWSOvHdWk6gzksKYDfv0njJTiRwfuX7VpUv9Y70/5iYP7l2
Hm80WWmSOLygHrt91MeG6s5P1nWuKfuNyfuZXFpKV+lzH3XHQ3UUp3+LsVrgF2Ux
AGRnNyvcugXF2z8ck8A8FI301tgYFE3TPzrhIiyg0UX6HBzirHtKadGXgpoyNLG8
/TkqvIUSEVAy3DT9tPeC80iF+D440/nGQ7rjqfb/FnyM0SP5RhW2sBCUPsns3N3d
E1PFjW+7/4vtfss4MpdBJuIPwnWNvBav//gJ5SwRDK/ZRfKeKtV4tKvBOpFRinFy
eiVF2M3+fEBfmw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:56 2025 by rpki-client