Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
File: orYjcexi79D0OF-gRzBW8IgY3nM.mft (raw, json)
Hash identifier: JQG1HODwv24dGhF/uotYhrbzxMBSWys84EUTQ27Jk54=
Subject key identifier: 55:69:6D:AE:4A:48:41:BA:B6:01:AC:8F:A1:34:55:FB:0E:C0:1B:8B
Authority key identifier: A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
Certificate issuer: /CN=a2b62371ec62efd0f4385fa0473056f08818de73
Certificate serial: 0194BD4E9C1B5E85BD3DC0436A0B884F19A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
Manifest number: 0146
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: orYjcexi79D0OF-gRzBW8IgY3nM.crl (hash: JvgJtK5DIUYjoITbZNkjMo3neMQD0WKd7HeJqOtnnnk=)
2: xmi3fJrgJjbuIQRSW7_29egRqxw.roa (hash: ls6p+3WnPBbAThIcDQa0gnCwKorxkU+YFEDzxCOD1ho=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9c:1b:5e:85:bd:3d:c0:43:6a:0b:88:4f:19:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62371ec62efd0f4385fa0473056f08818de73
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=55696dae4a4841bab601ac8fa13455fb0ec01b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c5:90:2d:5a:6d:30:05:da:4c:07:f3:8a:e9:
4b:ef:8f:15:35:3f:0b:81:1a:63:d1:46:43:f7:3f:
d3:bc:d4:6d:b3:4c:5e:10:1a:76:ce:18:2d:41:1e:
b4:bc:9a:b4:33:09:34:d9:15:b7:a4:75:11:5f:be:
1d:4c:dc:8e:1e:1b:f0:42:c8:6c:78:79:01:6c:85:
e5:1a:7d:e6:2e:6f:da:4c:9c:1b:42:32:18:9a:ad:
a5:4d:68:c8:fa:72:38:78:38:e3:d8:75:30:01:59:
73:58:1a:a4:04:39:54:5c:a3:77:c8:f9:58:2f:bd:
93:44:a7:cf:63:5b:03:a5:e7:7a:45:03:b6:d1:bd:
f8:7f:c6:eb:0a:fb:f7:19:69:cd:e6:6d:52:88:ec:
38:92:00:ef:03:cc:c9:42:c1:5b:ee:79:2e:af:ea:
88:ae:dc:d0:93:ee:fd:55:1c:ee:95:49:37:f5:45:
c7:2f:8d:0a:73:57:68:c8:a6:eb:a5:32:f5:02:f5:
e0:81:5e:6b:29:8c:49:33:98:69:9a:a6:8b:79:aa:
6a:07:cc:1f:53:f3:15:a0:8e:13:56:b4:45:25:cc:
30:9c:d0:6e:26:37:96:ab:97:b1:68:3d:49:cd:c7:
52:ed:e9:09:73:67:b3:9e:85:88:5c:d0:20:65:f9:
d0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:69:6D:AE:4A:48:41:BA:B6:01:AC:8F:A1:34:55:FB:0E:C0:1B:8B
X509v3 Authority Key Identifier:
keyid:A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:75:50:6e:53:70:36:f4:19:f9:17:e6:57:21:9a:4b:cd:97:
ba:c8:b4:8a:08:aa:4b:a6:8f:35:01:af:c2:02:0f:51:84:2c:
39:95:3a:ba:54:3a:3d:ec:b1:10:ff:0f:a0:b5:59:e1:9d:f4:
0c:02:d7:c4:6c:f1:41:bd:70:71:b6:51:7a:6f:5a:9b:f1:68:
a5:ad:56:a9:01:ff:97:32:4d:07:1c:34:88:22:92:a4:b7:cc:
ac:a7:54:5d:fa:a2:be:8d:3f:99:c4:32:07:bb:ef:16:09:be:
13:2a:38:65:f3:66:1a:d5:2d:0c:5e:a4:4c:54:87:e1:91:39:
94:ef:17:73:fd:85:51:ec:fc:d3:db:3d:18:27:61:94:24:93:
fb:1d:7c:89:ad:51:45:11:79:5f:05:62:e5:ef:ff:2b:9c:ca:
96:52:1a:73:8f:b1:d9:96:ed:60:dd:00:05:0a:59:0c:c0:5d:
be:29:dc:b4:cf:96:1b:6d:64:79:4a:27:50:95:e2:79:e6:ba:
97:8c:21:9f:be:58:e1:7f:78:ff:90:fb:9c:d1:67:77:28:3a:
3c:f5:13:28:40:68:f6:20:fa:05:b9:7f:ab:c9:74:f2:0f:c1:
e8:31:0b:58:78:98:3f:37:ce:f0:04:d8:37:22:b3:da:b6:af:
99:9f:88:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TpwbXoW9PcBDaguITxmlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYjYyMzcxZWM2MmVmZDBmNDM4NWZhMDQ3MzA1NmYwODgx
OGRlNzMwHhcNMjUwMTMxMTcwMDMzWhcNMjUwMjAxMTcwMDMzWjAzMTEwLwYDVQQD
Eyg1NTY5NmRhZTRhNDg0MWJhYjYwMWFjOGZhMTM0NTVmYjBlYzAxYjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18WQLVptMAXaTAfziulL748VNT8L
gRpj0UZD9z/TvNRts0xeEBp2zhgtQR60vJq0Mwk02RW3pHURX74dTNyOHhvwQshs
eHkBbIXlGn3mLm/aTJwbQjIYmq2lTWjI+nI4eDjj2HUwAVlzWBqkBDlUXKN3yPlY
L72TRKfPY1sDped6RQO20b34f8brCvv3GWnN5m1SiOw4kgDvA8zJQsFb7nkur+qI
rtzQk+79VRzulUk39UXHL40Kc1doyKbrpTL1AvXggV5rKYxJM5hpmqaLeapqB8wf
U/MVoI4TVrRFJcwwnNBuJjeWq5exaD1JzcdS7ekJc2eznoWIXNAgZfnQXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVpba5KSEG6tgGsj6E0VfsOwBuLMB8GA1UdIwQY
MBaAFKK2I3HsYu/Q9DhfoEcwVvCIGN5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3JZamNleGk3OUQwT0YtZ1J6Qlc4SWdZM25NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8wYmU1NTEtZDYwZC00OWJiLThjYWQt
Njc1ZTA3MjM1NjU3LzEvb3JZamNleGk3OUQwT0YtZ1J6Qlc4SWdZM25NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8wYmU1NTEtZDYwZC00OWJiLThjYWQtNjc1ZTA3MjM1NjU3
LzEvb3JZamNleGk3OUQwT0YtZ1J6Qlc4SWdZM25NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmXVQblNw
NvQZ+RfmVyGaS82Xusi0igiqS6aPNQGvwgIPUYQsOZU6ulQ6PeyxEP8PoLVZ4Z30
DALXxGzxQb1wcbZRem9am/Fopa1WqQH/lzJNBxw0iCKSpLfMrKdUXfqivo0/mcQy
B7vvFgm+Eyo4ZfNmGtUtDF6kTFSH4ZE5lO8Xc/2FUez809s9GCdhlCST+x18ia1R
RRF5XwVi5e//K5zKllIac4+x2ZbtYN0ABQpZDMBdvinctM+WG21keUonUJXieea6
l4whn75Y4X94/5D7nNFndyg6PPUTKEBo9iD6Bbl/q8l08g/B6DELWHiYPzfO8ATY
NyKz2ravmZ+IJA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:43:00 2025 by rpki-client