Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
File: Rji_aLZnXipaOnki9kd9Kvs1f6w.mft (raw, json)
Hash identifier: /tGhneHSeoHt9A87fSvR4bsvMICk4z8DPWAO5drXxYo=
Subject key identifier: E2:EE:14:0B:2B:DB:61:D4:4D:4B:21:5D:5E:91:97:93:9C:23:D8:C4
Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
Certificate issuer: /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Certificate serial: 0194BCA9CA69E2012678854CB3D4E5E5E154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
Manifest number: 0235
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: Rji_aLZnXipaOnki9kd9Kvs1f6w.crl (hash: LBYXxzFwL5qIMki7MAJ9zJoC3yIcHik0jmmo8zBUKKk=)
2: hXFvDfauLNPAF9WisFevrAfOB1o.roa (hash: +PM39yo15WknA3d/avFILeomoy0TBmCYWA48pwr5g+I=)
3: si-C49_gCXDqHgV15BpjmdVSEiE.roa (hash: M/s+DA7HYj5VOC6CBgokuKGD9N5LSw7UMOrHEdp5Yqo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ca:69:e2:01:26:78:85:4c:b3:d4:e5:e5:e1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=e2ee140b2bdb61d44d4b215d5e9197939c23d8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:17:47:b3:71:f4:a9:5a:95:66:d0:b7:b9:09:
25:0d:ba:65:17:a6:c7:6d:88:5d:30:27:c8:ca:b5:
65:2f:42:39:6a:0f:bd:4a:1c:32:40:06:7a:39:20:
11:7d:98:6c:73:e0:03:e9:7f:70:e6:9d:c5:d6:8c:
f1:9d:17:2b:29:f3:b9:bc:32:fb:47:8d:2c:3e:c6:
3f:ca:03:ac:54:80:d6:71:29:d2:5b:e5:70:e3:09:
3d:5c:2d:99:08:b5:2e:25:f1:cc:c3:1a:0c:c0:b3:
05:0b:50:86:f6:2a:e9:54:dc:c3:d8:50:00:d7:f4:
39:2c:6a:d8:79:ac:b9:16:df:e9:a4:66:2a:d6:c0:
94:2f:fe:4c:a7:48:07:63:77:3e:6c:59:04:7c:3b:
cc:84:62:4f:2b:46:e2:b3:8a:3d:6e:3a:c0:c4:5c:
da:d4:9a:7a:aa:bc:7f:52:3e:03:d4:7c:dc:da:a1:
2d:00:76:60:e7:61:03:39:26:cd:90:d4:bc:e0:d8:
49:05:c3:32:62:40:b7:7e:e6:db:43:75:ef:71:c2:
80:08:50:f3:bd:19:e6:ac:21:e3:da:98:c4:dd:ce:
8a:56:6e:9e:f2:f7:12:d2:9d:ca:89:4f:99:9b:4f:
88:d2:3b:a1:b7:33:f8:3c:3e:45:16:a3:38:36:a3:
57:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EE:14:0B:2B:DB:61:D4:4D:4B:21:5D:5E:91:97:93:9C:23:D8:C4
X509v3 Authority Key Identifier:
keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:6b:fc:a1:69:bc:e7:b7:32:3f:70:c1:f8:f2:fd:a1:38:dd:
1e:17:96:a1:0e:14:7a:ed:15:89:18:d8:9a:26:57:01:2d:3d:
c6:2a:39:f3:85:eb:a7:9b:16:73:50:46:15:94:ce:f2:d5:38:
93:2b:37:83:72:d5:fa:27:73:0d:f3:cd:b8:34:18:a4:39:69:
d6:46:87:63:e7:6a:23:ff:24:54:62:9b:53:e5:ed:e6:45:44:
6a:41:26:c4:33:5b:f7:6e:e5:24:d0:a0:93:3c:1d:91:b1:97:
31:23:68:44:e5:e2:31:a8:de:ab:0b:de:09:70:2d:4f:49:5e:
73:88:1e:7e:0d:86:f1:29:e6:9d:b0:a8:37:70:a8:36:1e:a7:
c1:04:35:f0:56:f8:ab:d6:0e:08:dc:48:80:df:6b:be:61:b8:
a6:e1:e5:dc:c2:3d:36:06:b3:b9:c4:fc:ef:c6:96:ac:b6:97:
e0:31:de:b4:bf:2f:36:17:ef:87:88:c3:f5:c0:32:26:77:4a:
ec:2d:66:eb:0a:bb:e7:f7:e6:90:78:85:73:38:d0:88:d5:af:
d6:45:24:2b:49:7a:1d:95:3c:b4:a1:e5:80:75:b8:92:ae:76:
06:30:a7:74:5d:39:91:d1:6c:79:3f:70:2a:bf:2b:3d:58:a1:
ef:92:45:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qcpp4gEmeIVMs9Tl5eFUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MzhiZjY4YjY2NzVlMmE1YTNhNzkyMmY2NDc3ZDJhZmIz
NTdmYWMwHhcNMjUwMTMxMTQwMDMxWhcNMjUwMjAxMTQwMDMxWjAzMTEwLwYDVQQD
EyhlMmVlMTQwYjJiZGI2MWQ0NGQ0YjIxNWQ1ZTkxOTc5MzljMjNkOGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRdHs3H0qVqVZtC3uQklDbplF6bH
bYhdMCfIyrVlL0I5ag+9ShwyQAZ6OSARfZhsc+AD6X9w5p3F1ozxnRcrKfO5vDL7
R40sPsY/ygOsVIDWcSnSW+Vw4wk9XC2ZCLUuJfHMwxoMwLMFC1CG9irpVNzD2FAA
1/Q5LGrYeay5Ft/ppGYq1sCUL/5Mp0gHY3c+bFkEfDvMhGJPK0bis4o9bjrAxFza
1Jp6qrx/Uj4D1Hzc2qEtAHZg52EDOSbNkNS84NhJBcMyYkC3fubbQ3XvccKACFDz
vRnmrCHj2pjE3c6KVm6e8vcS0p3KiU+Zm0+I0juhtzP4PD5FFqM4NqNXEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLuFAsr22HUTUshXV6Rl5OcI9jEMB8GA1UdIwQY
MBaAFEY4v2i2Z14qWjp5IvZHfSr7NX+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmppX2FMWm5YaXBhT25raTlrZDlLdnMxZjZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9lMmY2MTUtNmNhNC00YmY1LTlmNTMt
ODcwNzNmNDM0YjAzLzEvUmppX2FMWm5YaXBhT25raTlrZDlLdnMxZjZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9lMmY2MTUtNmNhNC00YmY1LTlmNTMtODcwNzNmNDM0YjAz
LzEvUmppX2FMWm5YaXBhT25raTlrZDlLdnMxZjZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqWv8oWm8
57cyP3DB+PL9oTjdHheWoQ4Ueu0ViRjYmiZXAS09xio584Xrp5sWc1BGFZTO8tU4
kys3g3LV+idzDfPNuDQYpDlp1kaHY+dqI/8kVGKbU+Xt5kVEakEmxDNb927lJNCg
kzwdkbGXMSNoROXiMajeqwveCXAtT0lec4gefg2G8SnmnbCoN3CoNh6nwQQ18Fb4
q9YOCNxIgN9rvmG4puHl3MI9NgazucT878aWrLaX4DHetL8vNhfvh4jD9cAyJndK
7C1m6wq75/fmkHiFczjQiNWv1kUkK0l6HZU8tKHlgHW4kq52BjCndF05kdFseT9w
Kr8rPVih75JFDA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:12 2025 by rpki-client