Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
File: aNQlzHsbeICodfdr7agP4xCTGe0.mft (raw, json)
Hash identifier: KYDAyMr7PkhoNDgMsnj+f65TitVezNB0OlSvsSrE4+g=
Subject key identifier: 46:7C:8D:95:19:6F:19:9B:89:C5:0F:2D:7D:85:7F:C1:1C:94:E9:EF
Authority key identifier: 68:D4:25:CC:7B:1B:78:80:A8:75:F7:6B:ED:A8:0F:E3:10:93:19:ED
Certificate issuer: /CN=68d425cc7b1b7880a875f76beda80fe3109319ed
Certificate serial: 0194BC3C98391CB928145FA10132455CC33E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:15 +0000
Manifest this update: Fri 31 Jan 2025 12:01:15 +0000
Manifest next update: Sat 01 Feb 2025 12:01:15 +0000
Files and hashes: 1: 1ikX92cBkm7W7rHfhLCtgqKM0d8.roa (hash: oY5BxXRyJZhAnRLwWm3V4CClsVP5JaJOwIydkhqNE80=)
2: 2KU1lG8tmW62eqBwxBBDds81m5A.roa (hash: DXWqInrCKLzcQadKZzuaDGdIbNbzO5YygQPkSyOtdqY=)
3: aNQlzHsbeICodfdr7agP4xCTGe0.crl (hash: 4WxLscjP/aFGidCZ48Mz/kOFft26YxxBYiyOB7kOB3w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:98:39:1c:b9:28:14:5f:a1:01:32:45:5c:c3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d425cc7b1b7880a875f76beda80fe3109319ed
Validity
Not Before: Jan 31 12:01:15 2025 GMT
Not After : Feb 1 12:01:15 2025 GMT
Subject: CN=467c8d95196f199b89c50f2d7d857fc11c94e9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:bb:1b:18:c5:7d:76:1c:ac:50:2a:41:74:
cc:6b:60:0f:91:14:df:78:38:77:ed:e4:d1:c2:18:
f4:67:9d:86:0d:1e:3f:05:eb:29:f5:42:e1:7d:b1:
d6:e4:82:14:ac:cf:b0:a8:24:0b:9e:a3:be:31:c3:
d2:6b:0d:99:a8:ae:e2:63:cd:8a:70:67:cd:c6:de:
b3:3f:08:b4:32:d5:cd:32:e2:36:5e:12:1e:17:3e:
13:d8:b3:a3:dd:35:6f:63:7b:51:b6:00:0c:88:b1:
49:27:f0:55:32:1d:70:9a:cf:4f:80:b0:a1:ed:57:
60:9a:9f:fc:8c:ac:fd:69:e3:73:35:7d:20:40:fc:
f3:96:ec:ac:02:88:9b:3d:04:ba:db:2a:a8:1d:51:
b3:e2:5d:60:43:ba:71:ca:dc:50:d2:cc:7d:42:73:
e0:ad:6c:86:24:02:f0:8f:9f:6b:9f:e3:92:66:14:
b4:31:4f:3a:16:25:c0:39:7d:26:69:ba:87:08:8c:
29:dc:c7:2f:a2:5f:2f:01:4a:cf:ff:f3:17:4e:80:
c4:d0:7a:9a:5d:37:d1:8a:1b:a8:79:24:5c:68:b9:
7d:7e:98:71:bd:07:9f:16:62:b9:76:af:52:36:a1:
5d:3c:ee:fc:a4:88:d3:e1:6e:2e:6b:25:ed:c6:93:
65:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7C:8D:95:19:6F:19:9B:89:C5:0F:2D:7D:85:7F:C1:1C:94:E9:EF
X509v3 Authority Key Identifier:
keyid:68:D4:25:CC:7B:1B:78:80:A8:75:F7:6B:ED:A8:0F:E3:10:93:19:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:e9:a0:0a:f2:9c:7b:29:77:47:31:e5:85:9b:3c:ee:b9:95:
86:c9:55:2a:89:b5:f6:4c:1b:3d:3e:44:5e:2c:e0:97:5e:ea:
c4:80:38:7c:bb:59:16:fd:a5:26:e3:8d:51:1b:77:0e:1b:59:
96:6e:4a:2a:da:a9:c5:83:29:19:28:ea:e8:96:b6:b9:c8:ca:
56:4c:2e:fe:0c:f1:d0:e8:0f:bd:1d:e6:f0:52:d1:40:59:f1:
75:e7:ba:0b:03:05:50:f6:ff:ef:ba:4b:25:98:8a:55:1a:06:
0c:c5:2c:50:07:c1:2d:3a:5a:91:e6:6a:5b:f5:93:60:f6:98:
90:34:53:67:d3:a0:8b:73:f3:2f:b1:e5:e0:bd:ef:28:75:69:
2b:0c:97:ed:07:c5:c1:10:c3:ef:93:e9:61:77:60:68:58:c6:
09:95:22:5e:36:69:00:7b:ae:16:64:85:33:37:ac:2b:23:86:
b5:97:ef:2b:77:8b:30:ab:db:9f:fa:6a:e7:2e:2c:0e:a2:d5:
12:df:a7:4f:ba:eb:99:ca:a2:da:44:22:95:5f:c9:3a:54:c6:
50:80:13:c5:29:8d:49:a6:c4:c4:aa:e3:45:03:c2:5d:f5:0c:
d6:43:43:e0:09:f7:37:ec:70:80:ba:19:b2:88:ef:1f:1d:4d:
38:40:93:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PJg5HLkoFF+hATJFXMM+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZDQyNWNjN2IxYjc4ODBhODc1Zjc2YmVkYTgwZmUzMTA5
MzE5ZWQwHhcNMjUwMTMxMTIwMTE1WhcNMjUwMjAxMTIwMTE1WjAzMTEwLwYDVQQD
Eyg0NjdjOGQ5NTE5NmYxOTliODljNTBmMmQ3ZDg1N2ZjMTFjOTRlOWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxq7GxjFfXYcrFAqQXTMa2APkRTf
eDh37eTRwhj0Z52GDR4/Besp9ULhfbHW5IIUrM+wqCQLnqO+McPSaw2ZqK7iY82K
cGfNxt6zPwi0MtXNMuI2XhIeFz4T2LOj3TVvY3tRtgAMiLFJJ/BVMh1wms9PgLCh
7Vdgmp/8jKz9aeNzNX0gQPzzluysAoibPQS62yqoHVGz4l1gQ7pxytxQ0sx9QnPg
rWyGJALwj59rn+OSZhS0MU86FiXAOX0mabqHCIwp3Mcvol8vAUrP//MXToDE0Hqa
XTfRihuoeSRcaLl9fphxvQefFmK5dq9SNqFdPO78pIjT4W4uayXtxpNlowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZ8jZUZbxmbicUPLX2Ff8EclOnvMB8GA1UdIwQY
MBaAFGjUJcx7G3iAqHX3a+2oD+MQkxntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU5RbHpIc2JlSUNvZGZkcjdhZ1A0eENUR2UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jMGY3ZTMtNjNiOS00YTVmLTk2Y2Et
NWM0NWI2MThmOTkwLzEvYU5RbHpIc2JlSUNvZGZkcjdhZ1A0eENUR2UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9jMGY3ZTMtNjNiOS00YTVmLTk2Y2EtNWM0NWI2MThmOTkw
LzEvYU5RbHpIc2JlSUNvZGZkcjdhZ1A0eENUR2UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4+mgCvKc
eyl3RzHlhZs87rmVhslVKom19kwbPT5EXizgl17qxIA4fLtZFv2lJuONURt3DhtZ
lm5KKtqpxYMpGSjq6Ja2ucjKVkwu/gzx0OgPvR3m8FLRQFnxdee6CwMFUPb/77pL
JZiKVRoGDMUsUAfBLTpakeZqW/WTYPaYkDRTZ9Ogi3PzL7Hl4L3vKHVpKwyX7QfF
wRDD75PpYXdgaFjGCZUiXjZpAHuuFmSFMzesKyOGtZfvK3eLMKvbn/pq5y4sDqLV
Et+nT7rrmcqi2kQilV/JOlTGUIATxSmNSabExKrjRQPCXfUM1kND4An3N+xwgLoZ
sojvHx1NOECTuQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:38:07 2025 by rpki-client