Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
File: dNAyUoux0Vl2bNed5HhtzZYqH7s.mft (raw, json)
Hash identifier: LIVEOGraDHhibMJkBvSz5UxiZaMrn+AGztKySeSK5mw=
Subject key identifier: 4B:A8:59:BC:68:AC:15:B4:56:43:69:6C:3D:FA:12:A5:3B:CB:16:9F
Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
Certificate issuer: /CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Certificate serial: 0194BBCE49F05B8646DC395B640F65B5EC59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
Manifest number: 11E9
Signing time: Fri 31 Jan 2025 10:00:46 +0000
Manifest this update: Fri 31 Jan 2025 10:00:46 +0000
Manifest next update: Sat 01 Feb 2025 10:00:46 +0000
Files and hashes: 1: O2QrsRpu21AzPFWSKx6-icFIuDk.roa (hash: yYvXQaBaDt2Fw+c7tWeP9pRQ80CLvEe29rG4qx33m94=)
2: dNAyUoux0Vl2bNed5HhtzZYqH7s.crl (hash: Fx4dqfe5kiXSn7g6lsgOpAzJ5NBdeGjcL+XaRsX52kg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:49:f0:5b:86:46:dc:39:5b:64:0f:65:b5:ec:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Validity
Not Before: Jan 31 10:00:46 2025 GMT
Not After : Feb 1 10:00:46 2025 GMT
Subject: CN=4ba859bc68ac15b45643696c3dfa12a53bcb169f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f9:a4:aa:d0:61:67:ad:50:cd:91:a9:d9:d9:
dd:c4:5d:54:37:88:94:5e:2c:de:7a:b8:b7:c6:ea:
3d:8b:a6:7f:53:56:b7:3f:85:bb:f0:98:9d:21:f4:
ec:52:70:8e:40:b2:48:42:9a:f7:77:bc:9a:f8:e6:
40:d9:e4:36:0a:ee:8e:37:20:7e:78:f7:c0:4e:26:
b1:7e:4a:1a:b3:5e:ad:70:90:8e:a3:81:63:54:6a:
c5:a7:dc:2f:65:a9:60:6f:5f:64:36:8a:af:1b:90:
d4:e4:c1:b5:07:b4:12:61:db:ad:07:5a:a5:5c:ae:
c4:0f:bb:03:b8:36:3d:10:1d:63:af:43:d5:8e:88:
2d:ae:d8:bd:dc:60:fd:f4:33:26:e2:ad:db:1a:f9:
eb:17:29:3b:6f:35:64:32:20:46:61:2e:1c:86:c4:
89:82:6e:e0:c0:1b:d7:3c:97:16:fc:ed:f8:34:e6:
cc:0a:5d:d4:f4:a3:8d:f9:ec:d3:4e:18:04:19:58:
61:28:42:a1:49:17:93:f7:46:48:0a:80:76:39:b0:
b7:68:e3:e5:29:18:d2:7a:6f:88:7f:f6:ab:49:a4:
ee:3a:66:1d:2c:30:ea:68:a3:70:7c:73:11:4d:fe:
31:f1:dd:85:95:06:8b:a6:55:de:7f:d8:7e:75:aa:
12:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A8:59:BC:68:AC:15:B4:56:43:69:6C:3D:FA:12:A5:3B:CB:16:9F
X509v3 Authority Key Identifier:
keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:6a:08:e7:6b:b5:c5:a8:6f:1a:9e:f4:13:96:c8:92:d6:3e:
54:d0:59:bd:36:13:bd:7f:83:43:66:53:63:a4:0e:35:74:8b:
a1:9a:89:c8:1c:07:1f:b3:b4:49:28:c8:16:70:5a:7f:49:02:
2f:fd:31:18:2d:13:28:2d:71:c0:8d:e1:75:b1:2e:dd:6d:3b:
09:94:d7:26:3f:6d:4b:cd:28:30:5c:d4:ca:75:42:d9:b3:52:
2d:a3:61:7e:b7:d5:75:2b:c6:df:ea:e5:1d:ea:8b:a8:25:c7:
53:8b:ff:31:bf:de:f6:a9:84:66:61:71:8c:b9:ce:c0:0a:47:
a8:c1:eb:ea:57:27:50:76:2f:a7:cc:d1:91:47:e1:ff:e3:da:
fe:2f:ba:df:88:0c:f4:63:f4:20:a9:f4:a0:88:59:28:66:f0:
24:9c:d1:eb:e3:86:85:82:83:d5:38:33:83:ea:60:50:1a:21:
98:03:11:a5:bc:92:9e:6a:5e:88:f5:f1:ee:90:38:6d:1c:9b:
ac:5b:6a:a7:5a:e5:38:43:eb:07:27:24:e3:b3:f2:96:b3:d7:
71:35:a5:d7:39:02:36:4a:b8:67:27:f6:34:28:39:94:15:0f:
79:f0:4c:97:f5:8d:25:ac:74:1e:3d:80:b9:ff:ca:e9:08:71:
05:22:92:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zknwW4ZG3DlbZA9ltexZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZDAzMjUyOGJiMWQxNTk3NjZjZDc5ZGU0Nzg2ZGNkOTYy
YTFmYmIwHhcNMjUwMTMxMTAwMDQ2WhcNMjUwMjAxMTAwMDQ2WjAzMTEwLwYDVQQD
Eyg0YmE4NTliYzY4YWMxNWI0NTY0MzY5NmMzZGZhMTJhNTNiY2IxNjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfmkqtBhZ61QzZGp2dndxF1UN4iU
Xizeeri3xuo9i6Z/U1a3P4W78JidIfTsUnCOQLJIQpr3d7ya+OZA2eQ2Cu6ONyB+
ePfATiaxfkoas16tcJCOo4FjVGrFp9wvZalgb19kNoqvG5DU5MG1B7QSYdutB1ql
XK7ED7sDuDY9EB1jr0PVjogtrti93GD99DMm4q3bGvnrFyk7bzVkMiBGYS4chsSJ
gm7gwBvXPJcW/O34NObMCl3U9KON+ezTThgEGVhhKEKhSReT90ZICoB2ObC3aOPl
KRjSem+If/arSaTuOmYdLDDqaKNwfHMRTf4x8d2FlQaLplXef9h+daoS1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuoWbxorBW0VkNpbD36EqU7yxafMB8GA1UdIwQY
MBaAFHTQMlKLsdFZdmzXneR4bc2WKh+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE5BeVVvdXgwVmwyYk5lZDVIaHR6WllxSDdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWE0MjItYTc5MS00ZGNmLTkwZmIt
MmM5MTI3YWI0OGMzLzEvZE5BeVVvdXgwVmwyYk5lZDVIaHR6WllxSDdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yOWE0MjItYTc5MS00ZGNmLTkwZmItMmM5MTI3YWI0OGMz
LzEvZE5BeVVvdXgwVmwyYk5lZDVIaHR6WllxSDdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq2oI52u1
xahvGp70E5bIktY+VNBZvTYTvX+DQ2ZTY6QONXSLoZqJyBwHH7O0SSjIFnBaf0kC
L/0xGC0TKC1xwI3hdbEu3W07CZTXJj9tS80oMFzUynVC2bNSLaNhfrfVdSvG3+rl
HeqLqCXHU4v/Mb/e9qmEZmFxjLnOwApHqMHr6lcnUHYvp8zRkUfh/+Pa/i+634gM
9GP0IKn0oIhZKGbwJJzR6+OGhYKD1Tgzg+pgUBohmAMRpbySnmpeiPXx7pA4bRyb
rFtqp1rlOEPrByck47PylrPXcTWl1zkCNkq4Zyf2NCg5lBUPefBMl/WNJax0Hj2A
uf/K6QhxBSKSXw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:41 2025 by rpki-client