
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
File: R-348b8MT7xGnnHJnYJInqHz2ko.mft (raw, json)
Hash identifier: tAlNMWn4qi2VrD4C+BjoRe//OZSodya2RChNtiubKZY=
Subject key identifier: B7:0A:F6:D1:65:54:56:66:A3:8F:30:AC:D2:E5:72:8C:7E:2A:FB:39
Authority key identifier: 47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
Certificate issuer: /CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Certificate serial: 0194BC051C6B608B6BA16E306F6FEAAFBD78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:39 +0000
Manifest this update: Fri 31 Jan 2025 11:00:39 +0000
Manifest next update: Sat 01 Feb 2025 11:00:39 +0000
Files and hashes: 1: R-348b8MT7xGnnHJnYJInqHz2ko.crl (hash: vWVV3WruZ8tsPtAYx66KILoTye/9d9Vx0XJW8PWhBvU=)
2: gCOs3KLA0tgwiwT7QoZeSEcVloU.roa (hash: hS15w3lAiyNuXEphV/hfqWJDGTaMGPBiRqmkz4Z4hHA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1c:6b:60:8b:6b:a1:6e:30:6f:6f:ea:af:bd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Validity
Not Before: Jan 31 11:00:39 2025 GMT
Not After : Feb 1 11:00:39 2025 GMT
Subject: CN=b70af6d165545666a38f30acd2e5728c7e2afb39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a0:5b:77:ef:dd:5a:3d:71:4e:ee:ff:db:f9:
b8:bd:cc:bb:48:b1:55:f7:03:a6:00:8c:3d:85:0d:
f4:92:66:68:5f:77:1c:60:77:b7:ad:c8:33:d6:c3:
95:79:65:19:53:40:5d:10:60:fc:50:c6:c9:1f:20:
e7:7f:d3:23:77:5f:91:79:28:7d:69:96:a5:d7:63:
a0:da:4e:32:ef:7e:6d:03:52:90:d1:bf:89:2e:b7:
64:71:4e:89:d4:69:98:e1:c7:95:75:53:1f:11:bd:
d4:b9:b8:fb:a2:4c:2d:20:e6:03:37:3b:96:6e:d7:
1d:e8:6a:03:74:84:f7:c3:91:ee:33:b8:31:3c:51:
7f:ce:24:da:56:ff:b7:37:40:a3:d6:23:d0:74:4b:
af:93:61:7c:ec:0b:42:84:41:af:ef:e3:d8:74:cb:
fe:28:45:e9:36:5b:68:05:6b:d3:1f:ed:ec:fe:1e:
62:95:67:d3:75:5e:18:42:ba:f7:43:78:3b:5d:69:
99:4a:89:e7:b0:b1:f2:c4:04:ec:43:9e:b7:05:15:
53:8c:b5:07:74:dc:0b:c6:38:68:58:f2:3b:7e:8a:
66:76:4d:41:1b:39:b3:77:55:64:da:a1:16:9c:f7:
0f:cd:d9:2c:e8:a9:4c:3e:0d:ab:ad:45:83:96:37:
e2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0A:F6:D1:65:54:56:66:A3:8F:30:AC:D2:E5:72:8C:7E:2A:FB:39
X509v3 Authority Key Identifier:
keyid:47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:60:e2:a7:54:88:2f:03:40:e8:10:85:f3:01:73:d4:87:2b:
5c:fa:e9:20:1b:55:85:df:08:8d:49:51:30:a9:a3:ff:80:5d:
02:64:4b:78:6d:00:fe:98:b9:c6:1c:f4:1f:ac:36:89:40:ff:
01:3a:2d:7f:77:74:fe:27:e9:d3:0d:50:c9:3c:33:31:e3:df:
8f:00:ab:2b:6a:b0:ad:7d:a0:99:d3:d3:19:8a:6d:db:45:1a:
bb:16:66:14:97:39:14:88:72:32:b4:17:94:83:b5:6e:9e:ab:
ee:fe:97:51:93:74:82:11:5c:a7:99:f5:98:f2:51:c2:a8:8f:
88:dc:cb:e3:69:2a:b7:d6:61:23:a8:c7:1d:3b:81:fa:85:bd:
29:5d:fe:11:54:ff:a3:94:54:37:29:3d:1c:61:d4:66:98:01:
63:19:3f:cf:ac:35:3c:af:ba:39:b8:74:f8:78:d7:3a:98:a4:
82:4a:a2:68:9f:98:e5:a1:90:0c:62:5f:44:75:a2:f6:ec:75:
4e:75:54:d2:92:4e:c9:46:08:37:28:4f:eb:5e:3e:da:b3:bc:
1f:af:bf:71:4b:40:c0:d1:24:d3:ee:76:c2:de:2e:cf:6a:25:
4c:b3:37:4d:08:30:f3:2d:ea:de:8a:1b:78:00:64:a1:71:0d:
85:63:91:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BRxrYItroW4wb2/qr714MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZWRmOGYxYmYwYzRmYmM0NjllNzFjOTlkODI0ODllYTFm
M2RhNGEwHhcNMjUwMTMxMTEwMDM5WhcNMjUwMjAxMTEwMDM5WjAzMTEwLwYDVQQD
EyhiNzBhZjZkMTY1NTQ1NjY2YTM4ZjMwYWNkMmU1NzI4YzdlMmFmYjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKBbd+/dWj1xTu7/2/m4vcy7SLFV
9wOmAIw9hQ30kmZoX3ccYHe3rcgz1sOVeWUZU0BdEGD8UMbJHyDnf9Mjd1+ReSh9
aZal12Og2k4y735tA1KQ0b+JLrdkcU6J1GmY4ceVdVMfEb3Uubj7okwtIOYDNzuW
btcd6GoDdIT3w5HuM7gxPFF/ziTaVv+3N0Cj1iPQdEuvk2F87AtChEGv7+PYdMv+
KEXpNltoBWvTH+3s/h5ilWfTdV4YQrr3Q3g7XWmZSonnsLHyxATsQ563BRVTjLUH
dNwLxjhoWPI7fopmdk1BGzmzd1Vk2qEWnPcPzdks6KlMPg2rrUWDljfibwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcK9tFlVFZmo48wrNLlcox+Kvs5MB8GA1UdIwQY
MBaAFEft+PG/DE+8Rp5xyZ2CSJ6h89pKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUi0zNDhiOE1UN3hHbm5ISm5ZSklucUh6MmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82ZGIzNGItOGFmYS00OWM1LWI3M2Yt
OTIwNGMxOTdhYTY1LzEvUi0zNDhiOE1UN3hHbm5ISm5ZSklucUh6MmtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82ZGIzNGItOGFmYS00OWM1LWI3M2YtOTIwNGMxOTdhYTY1
LzEvUi0zNDhiOE1UN3hHbm5ISm5ZSklucUh6MmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2Dip1SI
LwNA6BCF8wFz1IcrXPrpIBtVhd8IjUlRMKmj/4BdAmRLeG0A/pi5xhz0H6w2iUD/
ATotf3d0/ifp0w1QyTwzMePfjwCrK2qwrX2gmdPTGYpt20UauxZmFJc5FIhyMrQX
lIO1bp6r7v6XUZN0ghFcp5n1mPJRwqiPiNzL42kqt9ZhI6jHHTuB+oW9KV3+EVT/
o5RUNyk9HGHUZpgBYxk/z6w1PK+6Obh0+HjXOpikgkqiaJ+Y5aGQDGJfRHWi9ux1
TnVU0pJOyUYINyhP614+2rO8H6+/cUtAwNEk0+52wt4uz2olTLM3TQgw8y3q3oob
eABkoXENhWORsQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:16 2025 by rpki-client