Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
File: 6rR29nfNDDKY0oEeYPSOGymzr-8.mft (raw, json)
Hash identifier: rZS1cbzZu+uWBmmfbbZoQWwWSLevdUma89C38DzILrQ=
Subject key identifier: FE:5C:27:9D:F3:65:D2:63:9C:D2:71:EF:27:01:D5:48:74:3F:65:54
Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Certificate serial: 0194BC04B7759BC6720DF770157C0E6D0777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
Manifest number: 126E
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: 0UzsGme_k2nP3xmC23x_NIyPI4I.roa (hash: 9GCcsHrAPMsxEip94efAnxBNP67TuW3l3gu24kwBziA=)
2: 6rR29nfNDDKY0oEeYPSOGymzr-8.crl (hash: J5KDoS4C4h1PBdl1lBF+3QUzx5khe2I1i3VJf2uCgO0=)
3: QhX-bY8Pyu0IVpXlU-objdMMYgU.roa (hash: AtV/TPeQmqPYNR6TwwiivnQLG1K0ZguaxSrJsKzoymM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b7:75:9b:c6:72:0d:f7:70:15:7c:0e:6d:07:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=fe5c279df365d2639cd271ef2701d548743f6554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:e1:69:23:7a:0d:59:05:19:68:11:2b:e2:
38:53:f9:27:de:73:93:23:87:c0:96:95:41:5a:c7:
98:55:20:ae:0d:69:47:5f:48:82:e8:06:5a:4b:58:
dd:b9:cd:f9:e8:db:d1:93:a8:5c:64:00:32:f6:c2:
d3:13:23:16:bf:ac:f5:22:99:c2:9a:a1:f4:46:dc:
1b:fd:72:eb:38:b8:c7:d1:cd:83:e1:07:60:c6:9e:
7a:a8:bc:66:10:b3:98:d7:f5:9e:8c:e1:19:b7:a3:
a6:1d:90:47:14:69:ed:ce:8d:42:41:33:f1:57:88:
76:db:a5:49:22:bd:3e:a5:c5:13:d8:ca:e3:d1:2f:
ee:f9:3b:57:f4:cb:16:0a:21:03:a2:09:44:c4:d9:
01:9f:10:f2:0f:9f:ab:f2:68:0c:17:91:35:75:39:
b7:4c:60:88:e7:da:81:53:f1:84:00:b0:42:b7:7e:
fc:c6:66:1d:35:97:c7:f3:ff:42:14:92:de:a8:10:
4d:bb:2e:71:cf:1c:c2:5f:0e:1f:fb:59:e6:86:c3:
60:31:62:a5:87:57:85:f0:57:44:8a:b9:6e:2b:ef:
89:d4:19:94:48:22:25:2b:b5:f8:b5:45:f0:d7:dd:
89:91:e9:42:2f:9c:16:57:c1:78:9e:fa:1c:2a:e2:
6a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5C:27:9D:F3:65:D2:63:9C:D2:71:EF:27:01:D5:48:74:3F:65:54
X509v3 Authority Key Identifier:
keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:38:b3:71:35:c0:46:b2:03:1f:2d:23:ae:81:f9:76:39:bb:
d6:f7:ac:7a:f0:95:1f:e3:6d:3c:c4:cc:6d:4c:5b:f5:8c:b9:
94:9c:4d:d6:d5:8e:c6:1a:b8:3e:5e:45:f5:5e:ae:94:94:7c:
f6:b1:e0:ff:63:57:5a:0d:c7:df:33:73:2e:9d:0b:a1:65:d3:
81:ea:d7:c6:fe:55:7f:76:23:99:49:54:c6:c8:76:f0:4f:bc:
a8:e2:34:6c:8e:85:99:7d:4e:f5:a5:95:37:bf:66:8d:54:b7:
64:97:26:7e:cc:57:77:e7:cd:d8:2d:97:96:6c:74:30:d7:33:
39:66:c4:d2:c1:a3:e3:c5:9d:f9:1f:b3:c1:c6:97:0d:c8:e7:
78:e5:6b:db:d7:8b:2d:7f:03:a8:1d:fe:30:e8:65:83:92:74:
da:f4:06:60:bf:85:4c:be:af:a4:91:98:3d:0a:c3:de:eb:af:
3b:0d:1d:75:4d:a2:37:97:f9:d1:b5:39:69:4a:45:8d:d1:43:
59:4e:14:70:e6:e4:8c:7f:6b:ca:6e:88:85:58:a9:a1:cc:c1:
73:4c:7e:e9:0a:95:06:8b:8f:ac:95:cc:ef:1c:c0:0d:bb:76:
f5:1f:cd:fa:8c:16:72:0d:06:8b:67:ac:f8:af:6d:62:b1:08:
d3:8d:18:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLd1m8ZyDfdwFXwObQd3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYjQ3NmY2NzdjZDBjMzI5OGQyODExZTYwZjQ4ZTFiMjli
M2FmZWYwHhcNMjUwMTMxMTEwMDEzWhcNMjUwMjAxMTEwMDEzWjAzMTEwLwYDVQQD
EyhmZTVjMjc5ZGYzNjVkMjYzOWNkMjcxZWYyNzAxZDU0ODc0M2Y2NTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdzhaSN6DVkFGWgRK+I4U/kn3nOT
I4fAlpVBWseYVSCuDWlHX0iC6AZaS1jduc356NvRk6hcZAAy9sLTEyMWv6z1IpnC
mqH0Rtwb/XLrOLjH0c2D4Qdgxp56qLxmELOY1/WejOEZt6OmHZBHFGntzo1CQTPx
V4h226VJIr0+pcUT2Mrj0S/u+TtX9MsWCiEDoglExNkBnxDyD5+r8mgMF5E1dTm3
TGCI59qBU/GEALBCt378xmYdNZfH8/9CFJLeqBBNuy5xzxzCXw4f+1nmhsNgMWKl
h1eF8FdEirluK++J1BmUSCIlK7X4tUXw192JkelCL5wWV8F4nvocKuJqawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5cJ53zZdJjnNJx7ycB1Uh0P2VUMB8GA1UdIwQY
MBaAFOq0dvZ3zQwymNKBHmD0jhsps6/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnJSMjluZk5EREtZMG9FZVlQU09HeW16ci04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi82NTdhOTItNjIyMC00NDI1LTg4OTkt
MDdmMTk1MGQ4ODk0LzEvNnJSMjluZk5EREtZMG9FZVlQU09HeW16ci04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi82NTdhOTItNjIyMC00NDI1LTg4OTktMDdmMTk1MGQ4ODk0
LzEvNnJSMjluZk5EREtZMG9FZVlQU09HeW16ci04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtDizcTXA
RrIDHy0jroH5djm71vesevCVH+NtPMTMbUxb9Yy5lJxN1tWOxhq4Pl5F9V6ulJR8
9rHg/2NXWg3H3zNzLp0LoWXTgerXxv5Vf3YjmUlUxsh28E+8qOI0bI6FmX1O9aWV
N79mjVS3ZJcmfsxXd+fN2C2Xlmx0MNczOWbE0sGj48Wd+R+zwcaXDcjneOVr29eL
LX8DqB3+MOhlg5J02vQGYL+FTL6vpJGYPQrD3uuvOw0ddU2iN5f50bU5aUpFjdFD
WU4UcObkjH9rym6IhVipoczBc0x+6QqVBouPrJXM7xzADbt29R/N+owWcg0Gi2es
+K9tYrEI040YHw==
-----END CERTIFICATE-----
Generated at Thu May 1 06:34:43 2025 by rpki-client