Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
File: mlVQ6QipuWiMKarJiVNT3qg2xFo.mft (raw, json)
Hash identifier: SA/btOTSTQwkyYp9U22Ue9diiP5tn3vmlgj79CbIbUI=
Subject key identifier: A0:BD:67:B6:BA:C2:FB:09:57:D8:C0:A3:2A:60:F6:85:93:72:39:00
Authority key identifier: 9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
Certificate issuer: /CN=9a5550e908a9b9688c29aac9895353dea836c45a
Certificate serial: 0194BC04B9489234F9BC763DA1B80E3E6E47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: 9Wsyc-JvO9JC7caCozj-SAG1bJs.roa (hash: bKm+mUgzyZClr4J+G/kqKks+sApaN1YwjRFddgUbnbE=)
2: Ja52sUHZmNxWRgmcFqK35S3gf4U.roa (hash: gzJdIYNLI5m1VhTa8D7lky18Y5IJWwZN4llDEnmcK1o=)
3: mlVQ6QipuWiMKarJiVNT3qg2xFo.crl (hash: t2YmstniGkcNXfoKxq+AU/pkcxkPc1TANVMP5QZXIsE=)
4: pvgIN6QNHNBs60IvrUFIahwkpN8.roa (hash: SRb6cmNEXQNaL5JeiDfLUBlTpbbbs7eTPPHe0FchMao=)
5: qVkX5RlHS3sPyQOw3galYp3H46c.roa (hash: o5KCCl+KevQFiSBwzLjv5f5HLVAkS9bSZz+fAqp6nWk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b9:48:92:34:f9:bc:76:3d:a1:b8:0e:3e:6e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5550e908a9b9688c29aac9895353dea836c45a
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=a0bd67b6bac2fb0957d8c0a32a60f68593723900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:05:a2:39:0a:c3:f0:d7:1a:e5:04:63:00:
a1:ad:3d:ab:a1:99:34:0e:ec:2a:2d:f4:9c:ed:66:
6d:20:01:b0:17:6d:2b:7c:e7:7c:b3:33:0f:50:d3:
c9:93:20:36:7a:36:aa:f4:79:ad:ce:f4:44:41:70:
f0:9c:41:7a:74:08:cb:e1:37:37:1a:e1:a3:d6:27:
3d:ae:8f:ae:9c:17:21:03:df:ff:3c:35:c7:97:c8:
8b:8a:d1:e0:7f:6e:e3:c4:3d:7e:1b:dc:ea:8c:ab:
76:0d:ba:10:7c:14:52:0a:3c:fc:85:d3:30:e2:3c:
5e:35:ff:87:19:f5:50:cf:2a:89:40:07:0b:6d:1b:
d1:01:0f:08:88:a2:ce:09:33:4f:98:bb:c7:6d:33:
d5:74:19:ab:69:23:80:58:7a:34:fd:8e:e3:32:6d:
83:de:62:e6:14:59:95:53:0c:b2:8a:76:3e:b9:52:
9d:a1:c6:a1:19:d7:ed:dc:b4:db:29:4e:f4:16:9e:
03:ce:ed:3a:b2:7d:e0:92:de:c0:f8:4a:5f:cf:92:
a1:6c:28:c5:27:ae:d6:72:67:64:45:7b:ac:2a:fd:
45:e9:b4:ea:2f:aa:02:f9:0b:61:2e:a6:91:9e:cd:
f8:3f:d1:c3:27:ed:42:db:88:7e:0b:41:48:73:bc:
2b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BD:67:B6:BA:C2:FB:09:57:D8:C0:A3:2A:60:F6:85:93:72:39:00
X509v3 Authority Key Identifier:
keyid:9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:82:79:27:3f:f7:da:ec:f7:89:26:6f:1b:ba:78:3f:6e:37:
0d:f3:62:c4:ff:f5:86:e5:ac:4f:32:47:be:ce:95:2f:41:54:
e7:5d:c3:31:39:db:16:2b:37:ba:1a:f8:e0:98:0a:44:a9:11:
8f:5b:51:0b:99:df:f6:d5:d1:7b:36:92:3c:da:0e:04:9c:a3:
a4:07:d9:eb:bc:dc:ab:13:e5:08:75:cb:f2:e3:f5:3e:7a:d9:
5a:cc:b4:b4:3a:02:92:de:79:58:f3:af:6a:6c:60:ac:44:e8:
0b:5f:5a:4c:6a:28:6f:d9:0b:36:55:69:5c:8f:99:2b:11:92:
af:53:d8:6f:b4:d3:cc:29:42:c8:fd:96:ac:2b:44:cd:b6:d4:
58:4e:34:47:02:be:d3:8b:22:83:ef:97:01:ea:9c:8f:dd:ac:
a5:d5:b8:03:bf:41:40:0f:c3:59:ca:4c:e7:9c:97:29:b8:7c:
93:6c:15:3d:de:06:ae:71:62:fa:bb:45:a1:c1:b0:58:37:2c:
17:df:20:15:6c:9b:1e:10:c7:ce:5b:47:6e:71:a2:95:d8:92:
a5:05:de:d2:2b:be:12:a5:45:6f:8d:56:ce:17:2c:cd:e5:9d:
17:87:5f:c3:8a:3c:6c:c6:7b:70:25:b6:a7:c4:2a:3a:b4:e1:
10:f8:99:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLlIkjT5vHY9obgOPm5HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNTU1MGU5MDhhOWI5Njg4YzI5YWFjOTg5NTM1M2RlYTgz
NmM0NWEwHhcNMjUwMTMxMTEwMDEzWhcNMjUwMjAxMTEwMDEzWjAzMTEwLwYDVQQD
EyhhMGJkNjdiNmJhYzJmYjA5NTdkOGMwYTMyYTYwZjY4NTkzNzIzOTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdkFojkKw/DXGuUEYwChrT2roZk0
DuwqLfSc7WZtIAGwF20rfOd8szMPUNPJkyA2ejaq9HmtzvREQXDwnEF6dAjL4Tc3
GuGj1ic9ro+unBchA9//PDXHl8iLitHgf27jxD1+G9zqjKt2DboQfBRSCjz8hdMw
4jxeNf+HGfVQzyqJQAcLbRvRAQ8IiKLOCTNPmLvHbTPVdBmraSOAWHo0/Y7jMm2D
3mLmFFmVUwyyinY+uVKdocahGdft3LTbKU70Fp4Dzu06sn3gkt7A+Epfz5KhbCjF
J67WcmdkRXusKv1F6bTqL6oC+QthLqaRns34P9HDJ+1C24h+C0FIc7wrgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKC9Z7a6wvsJV9jAoypg9oWTcjkAMB8GA1UdIwQY
MBaAFJpVUOkIqblojCmqyYlTU96oNsRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWxWUTZRaXB1V2lNS2FySmlWTlQzcWcyeEZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iYmIzMGItMjY4OC00YTZlLWIyYTIt
MTM5OWEyODIyMjdhLzEvbWxWUTZRaXB1V2lNS2FySmlWTlQzcWcyeEZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iYmIzMGItMjY4OC00YTZlLWIyYTItMTM5OWEyODIyMjdh
LzEvbWxWUTZRaXB1V2lNS2FySmlWTlQzcWcyeEZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYJ5Jz/3
2uz3iSZvG7p4P243DfNixP/1huWsTzJHvs6VL0FU513DMTnbFis3uhr44JgKRKkR
j1tRC5nf9tXRezaSPNoOBJyjpAfZ67zcqxPlCHXL8uP1PnrZWsy0tDoCkt55WPOv
amxgrEToC19aTGoob9kLNlVpXI+ZKxGSr1PYb7TTzClCyP2WrCtEzbbUWE40RwK+
04sig++XAeqcj92spdW4A79BQA/DWcpM55yXKbh8k2wVPd4GrnFi+rtFocGwWDcs
F98gFWybHhDHzltHbnGildiSpQXe0iu+EqVFb41WzhcszeWdF4dfw4o8bMZ7cCW2
p8QqOrThEPiZ2Q==
-----END CERTIFICATE-----
Generated at Thu May 1 05:52:36 2025 by rpki-client