Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
File: raXVKzyodFRXW2W3IO74GiYqXzo.mft (raw, json)
Hash identifier: +bhSb2XZ6T0KUE5Nd/wxxiUWT+DO/eS2VfG35wnDKtY=
Subject key identifier: 9D:3E:AE:79:A6:79:D6:C7:B2:57:9B:A2:31:C6:18:CC:35:F6:CA:80
Authority key identifier: AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
Certificate issuer: /CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Certificate serial: 0194BC3C0943435991A38C5B76F78280C0A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
Manifest number: 0D69
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: YkyLNJe8eg5_ZWWXRqgb1FEedCU.roa (hash: yKbeF3cM/odTGzY3J6HPYew0I5seEJaLqL9iFLq9XbY=)
2: raXVKzyodFRXW2W3IO74GiYqXzo.crl (hash: 8ujto7K1V12cJ7YLOFEmwIp5FaXKeh8teql1ctWqEeU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:09:43:43:59:91:a3:8c:5b:76:f7:82:80:c0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=9d3eae79a679d6c7b2579ba231c618cc35f6ca80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a8:56:85:17:3c:de:a1:39:3e:14:20:ec:27:
3c:22:b6:56:a5:45:47:dd:17:85:cc:d0:1a:e2:30:
2e:2f:7b:a6:89:d3:38:fa:29:4d:66:c6:d9:d0:54:
c0:e9:7e:b7:63:43:ed:c4:d1:39:b2:fb:87:3e:4a:
62:49:c0:f9:ce:e6:b4:04:d9:43:c8:2e:a4:f1:ec:
b8:0a:0f:4f:cd:f8:76:52:d8:2a:a3:4d:89:3b:0c:
93:1c:f4:8b:a7:db:c2:f1:54:c0:53:13:75:c7:ad:
85:dc:d0:82:d3:04:1c:04:cf:fc:42:7e:c2:c0:1d:
59:b3:28:fd:58:89:8e:5b:b9:49:4d:f4:43:5c:35:
eb:cb:54:1c:5b:0b:98:70:c6:70:39:b4:95:2b:75:
fa:19:07:48:6b:a9:bd:f2:5b:b4:57:f3:7b:4a:35:
b7:d6:3e:b1:b4:df:b4:c0:aa:7b:03:78:47:bf:f6:
25:0a:d2:18:c7:46:98:ce:44:36:aa:21:dc:61:c3:
b8:0f:bc:ab:78:b2:79:64:f5:85:9d:e0:2a:1c:de:
b6:63:c7:0c:de:55:18:4d:73:17:15:24:8c:02:4e:
d2:cc:29:22:5e:5a:46:39:4d:ce:fd:54:d5:c1:24:
fb:5a:be:1b:7d:e4:cf:bf:c0:26:88:41:0f:f9:e7:
a7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3E:AE:79:A6:79:D6:C7:B2:57:9B:A2:31:C6:18:CC:35:F6:CA:80
X509v3 Authority Key Identifier:
keyid:AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6a:b6:b3:d3:a9:cf:c9:6d:e8:dc:68:d8:c9:74:49:14:a9:
c1:2c:b0:c5:42:7a:73:00:50:71:e3:f8:9a:83:2f:b6:87:86:
0c:04:07:5d:73:c1:c3:ee:38:13:ee:cf:4a:a9:26:8b:bb:bd:
a4:b1:b8:42:43:8b:c6:d0:e7:23:d5:e9:79:9c:d5:dc:77:50:
fd:40:0b:6c:f3:ec:0b:dc:ab:89:aa:42:83:d6:39:ca:fd:9c:
19:8a:93:04:f5:0f:d9:c1:3e:e3:ba:ac:08:20:09:cd:b1:20:
b9:2b:d9:57:ca:95:a0:78:07:20:1c:ac:fd:cb:47:e8:70:cb:
5c:10:39:cb:4d:1c:84:58:d4:db:c5:2a:4e:54:e4:53:26:52:
62:bb:74:d3:71:b2:a6:47:4e:f6:66:c0:24:b8:1e:50:b6:ec:
36:ef:65:1a:92:61:a7:5b:a9:8f:3b:ea:41:a4:59:86:34:18:
6c:7d:78:15:93:5a:68:0e:eb:a0:ef:db:3d:5e:00:d8:53:2e:
8d:79:fe:0c:14:44:38:04:12:e0:db:56:1a:35:b8:dc:4a:33:
14:c3:ab:28:ff:c5:0b:2b:0a:75:eb:4b:0f:bf:91:09:10:9d:
8f:db:d9:d9:a2:d7:14:c4:9c:cf:52:3c:ec:20:ca:a6:12:6d:
7c:b0:24:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PAlDQ1mRo4xbdveCgMCgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYTVkNTJiM2NhODc0NTQ1NzViNjViNzIwZWVmODFhMjYy
YTVmM2EwHhcNMjUwMTMxMTIwMDM4WhcNMjUwMjAxMTIwMDM4WjAzMTEwLwYDVQQD
Eyg5ZDNlYWU3OWE2NzlkNmM3YjI1NzliYTIzMWM2MThjYzM1ZjZjYTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKhWhRc83qE5PhQg7Cc8IrZWpUVH
3ReFzNAa4jAuL3umidM4+ilNZsbZ0FTA6X63Y0PtxNE5svuHPkpiScD5zua0BNlD
yC6k8ey4Cg9Pzfh2Utgqo02JOwyTHPSLp9vC8VTAUxN1x62F3NCC0wQcBM/8Qn7C
wB1Zsyj9WImOW7lJTfRDXDXry1QcWwuYcMZwObSVK3X6GQdIa6m98lu0V/N7SjW3
1j6xtN+0wKp7A3hHv/YlCtIYx0aYzkQ2qiHcYcO4D7yreLJ5ZPWFneAqHN62Y8cM
3lUYTXMXFSSMAk7SzCkiXlpGOU3O/VTVwST7Wr4bfeTPv8AmiEEP+eenWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0+rnmmedbHslebojHGGMw19sqAMB8GA1UdIwQY
MBaAFK2l1Ss8qHRUV1tltyDu+BomKl86MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmFYVkt6eW9kRlJYVzJXM0lPNzRHaVlxWHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81ZDg0NTMtMDM4MC00NzVlLTllZGMt
ZDE4YWI0ZjdmNWRmLzEvcmFYVkt6eW9kRlJYVzJXM0lPNzRHaVlxWHpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81ZDg0NTMtMDM4MC00NzVlLTllZGMtZDE4YWI0ZjdmNWRm
LzEvcmFYVkt6eW9kRlJYVzJXM0lPNzRHaVlxWHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkWq2s9Op
z8lt6Nxo2Ml0SRSpwSywxUJ6cwBQceP4moMvtoeGDAQHXXPBw+44E+7PSqkmi7u9
pLG4QkOLxtDnI9XpeZzV3HdQ/UALbPPsC9yriapCg9Y5yv2cGYqTBPUP2cE+47qs
CCAJzbEguSvZV8qVoHgHIBys/ctH6HDLXBA5y00chFjU28UqTlTkUyZSYrt003Gy
pkdO9mbAJLgeULbsNu9lGpJhp1upjzvqQaRZhjQYbH14FZNaaA7roO/bPV4A2FMu
jXn+DBREOAQS4NtWGjW43EozFMOrKP/FCysKdetLD7+RCRCdj9vZ2aLXFMScz1I8
7CDKphJtfLAkXg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:56:11 2025 by rpki-client