Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
File: aMXwmzqQOVDz_NGyVQhu3kh26xE.mft (raw, json)
Hash identifier: YhGOFnr/rUUOszdO6qoXbrxp/tbC2mJGX3/i3uQlQsw=
Subject key identifier: 6E:AE:56:4B:2F:C6:CE:6B:54:EC:52:AA:F5:64:8E:37:2D:48:44:19
Authority key identifier: 68:C5:F0:9B:3A:90:39:50:F3:FC:D1:B2:55:08:6E:DE:48:76:EB:11
Certificate issuer: /CN=68c5f09b3a903950f3fcd1b255086ede4876eb11
Certificate serial: 0194BD85AB02C0E3F457EDBE1AB5BBA8E39F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
Manifest number: 137E
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: 5gxDURtK1rmOAdh1eWuh-NkY76k.roa (hash: QaQOgPlbLBzFETMJyWwYJQCd8vML1MyClKfr5uYQDoc=)
2: aMXwmzqQOVDz_NGyVQhu3kh26xE.crl (hash: RsHlAPvnUp5zBjJW+UoER+ptjg2J1tPU5nkuXMZR5Fk=)
3: svZ0I0CIbPuXgkYBH_VdeOt4OII.roa (hash: qDnNSem+sBmAuaKOVojckKZEahJzHvEbGjkFY5x9Sqc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ab:02:c0:e3:f4:57:ed:be:1a:b5:bb:a8:e3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c5f09b3a903950f3fcd1b255086ede4876eb11
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=6eae564b2fc6ce6b54ec52aaf5648e372d484419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:70:de:62:7a:19:00:b0:cb:48:48:b3:b4:16:
7e:61:71:e4:35:da:fc:50:ab:c9:81:42:ba:10:6a:
f2:4d:f3:4a:06:de:89:27:cd:de:95:f2:84:90:c4:
f1:a4:5d:9c:df:09:10:0a:50:bc:c3:61:ea:04:a8:
71:c5:99:91:93:46:ea:b1:c2:50:01:a3:54:e9:ac:
8a:00:c1:08:51:cd:1a:fd:e2:48:90:c1:fc:76:53:
e8:d4:ec:02:6c:67:6f:88:25:8e:a4:14:1a:92:9d:
92:ac:3b:ec:15:e6:ab:a1:12:85:d5:66:f8:ed:c5:
04:52:de:ec:98:f2:60:28:fb:82:85:85:eb:c1:a9:
84:91:7d:da:ec:05:a5:ab:37:ce:25:c4:59:3c:56:
6f:b6:b5:09:f8:bb:56:36:c4:c1:0c:7f:95:ad:31:
8e:7d:71:b0:f9:09:5c:41:fb:fb:06:c4:3b:2c:88:
c0:bd:8a:26:ba:e5:de:3f:b2:f3:aa:12:79:67:11:
d7:0a:92:f0:74:d2:ee:fb:0f:ab:22:51:d2:d2:97:
26:01:2a:91:35:bd:0d:d0:fb:05:a8:d5:d7:54:b5:
15:ba:cf:25:72:40:16:8c:95:af:2a:26:23:a3:4a:
09:22:1c:94:d6:24:a4:28:1a:49:9d:c1:ed:01:ad:
51:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AE:56:4B:2F:C6:CE:6B:54:EC:52:AA:F5:64:8E:37:2D:48:44:19
X509v3 Authority Key Identifier:
keyid:68:C5:F0:9B:3A:90:39:50:F3:FC:D1:B2:55:08:6E:DE:48:76:EB:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:8e:03:27:1d:65:88:ee:16:e9:b8:31:48:06:4a:36:85:ae:
9a:27:46:e4:69:37:a6:74:48:9e:ff:9f:e6:39:ac:1b:55:fa:
6b:46:fe:e8:fd:66:fd:0b:f8:ef:11:a8:80:f2:0c:85:45:be:
a8:44:74:6b:6d:2e:d9:da:da:4d:91:b9:08:d4:8e:a6:62:69:
5d:c2:10:6e:e8:2c:b2:64:2c:d9:7c:6c:a7:de:bd:04:72:ee:
f2:e1:ff:f1:e6:c0:08:09:e3:b7:0c:d1:98:d0:d4:13:df:d7:
c9:89:18:54:f2:88:b5:ef:33:83:65:24:62:7e:57:e3:b9:09:
06:b7:f9:0f:9d:29:8e:e3:fd:b3:0a:13:d4:1c:9e:be:94:5c:
9c:3a:bf:fb:3f:67:46:c6:a3:68:7f:55:60:63:1c:25:03:17:
30:72:b5:74:06:47:f7:1f:bd:f9:f1:72:46:8b:ce:87:3f:be:
bd:a5:dc:74:93:55:74:b3:19:8b:6e:ec:ab:68:0d:fd:3c:7f:
30:4a:13:de:02:79:48:84:c2:0c:f1:df:b0:4d:f0:ab:f9:6f:
59:20:56:47:b9:44:e0:95:66:97:c8:47:28:8b:df:aa:fb:53:
64:cb:b6:52:9f:f3:df:a3:fe:b5:a9:45:ab:6d:50:35:d2:d6:
38:01:38:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hasCwOP0V+2+GrW7qOOfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzVmMDliM2E5MDM5NTBmM2ZjZDFiMjU1MDg2ZWRlNDg3
NmViMTEwHhcNMjUwMTMxMTgwMDQxWhcNMjUwMjAxMTgwMDQxWjAzMTEwLwYDVQQD
Eyg2ZWFlNTY0YjJmYzZjZTZiNTRlYzUyYWFmNTY0OGUzNzJkNDg0NDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3DeYnoZALDLSEiztBZ+YXHkNdr8
UKvJgUK6EGryTfNKBt6JJ83elfKEkMTxpF2c3wkQClC8w2HqBKhxxZmRk0bqscJQ
AaNU6ayKAMEIUc0a/eJIkMH8dlPo1OwCbGdviCWOpBQakp2SrDvsFearoRKF1Wb4
7cUEUt7smPJgKPuChYXrwamEkX3a7AWlqzfOJcRZPFZvtrUJ+LtWNsTBDH+VrTGO
fXGw+QlcQfv7BsQ7LIjAvYomuuXeP7LzqhJ5ZxHXCpLwdNLu+w+rIlHS0pcmASqR
Nb0N0PsFqNXXVLUVus8lckAWjJWvKiYjo0oJIhyU1iSkKBpJncHtAa1R8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6uVksvxs5rVOxSqvVkjjctSEQZMB8GA1UdIwQY
MBaAFGjF8Js6kDlQ8/zRslUIbt5IdusRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1Yd216cVFPVkR6X05HeVZRaHUza2gyNnhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lZmExOGQtMDkwNy00NTkzLWFiYjgt
OTQ4MDI2MzZiYWQ5LzEvYU1Yd216cVFPVkR6X05HeVZRaHUza2gyNnhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9lZmExOGQtMDkwNy00NTkzLWFiYjgtOTQ4MDI2MzZiYWQ5
LzEvYU1Yd216cVFPVkR6X05HeVZRaHUza2gyNnhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOY4DJx1l
iO4W6bgxSAZKNoWumidG5Gk3pnRInv+f5jmsG1X6a0b+6P1m/Qv47xGogPIMhUW+
qER0a20u2draTZG5CNSOpmJpXcIQbugssmQs2Xxsp969BHLu8uH/8ebACAnjtwzR
mNDUE9/XyYkYVPKIte8zg2UkYn5X47kJBrf5D50pjuP9swoT1ByevpRcnDq/+z9n
RsajaH9VYGMcJQMXMHK1dAZH9x+9+fFyRovOhz++vaXcdJNVdLMZi27sq2gN/Tx/
MEoT3gJ5SITCDPHfsE3wq/lvWSBWR7lE4JVml8hHKIvfqvtTZMu2Up/z36P+talF
q21QNdLWOAE4Vw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:37 2025 by rpki-client