Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
File: 0d9IA-VLCEqZy3uwRL95EydZS3M.mft (raw, json)
Hash identifier: 6ja6rm5P8yWWcMB4cmH0EVw2kmWOc3bOZbRmq1C+8iU=
Subject key identifier: F6:69:95:80:7C:E6:50:1E:E7:76:13:13:5E:8F:63:04:77:B4:E6:2A
Authority key identifier: D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
Certificate issuer: /CN=d1df4803e54b084a99cb7bb044bf791327594b73
Certificate serial: 0194BD859622F6AE7DE3C4C112A63A100611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:36 +0000
Manifest this update: Fri 31 Jan 2025 18:00:36 +0000
Manifest next update: Sat 01 Feb 2025 18:00:36 +0000
Files and hashes: 1: 0d9IA-VLCEqZy3uwRL95EydZS3M.crl (hash: FqZfdlsR8zRIQ/HT0tpUnD15ED8yY/ISVkG5JgCZD7U=)
2: TOONOy5Q_RT0Xdkv1KFKuSIfrvU.roa (hash: TXGZC4gRCS30Z/KLMEQnuIwYUvM4xeHM8tIdbYo8vlk=)
3: XHMaLFAePq5JA6OnHRNtHIpFVio.roa (hash: D2PLJ8qBf8PPcZXfN8bgCyLTx+3FXCbn/4NCY4tEha8=)
4: uruDYSjJsQHtgQsmkfxJYvrLAmA.roa (hash: ugK90f7lpLYbl+ftnhcqa/fEdcHq1apLzUka+OcYLBc=)
5: xhEX51qp0YGYG_1Xjcz1FIDptho.roa (hash: S68nwmQ0GGVwMdWpSzCa8wmg/ndTObvviSDOIpAfn2U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:96:22:f6:ae:7d:e3:c4:c1:12:a6:3a:10:06:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1df4803e54b084a99cb7bb044bf791327594b73
Validity
Not Before: Jan 31 18:00:36 2025 GMT
Not After : Feb 1 18:00:36 2025 GMT
Subject: CN=f66995807ce6501ee77613135e8f630477b4e62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:57:f8:14:87:62:33:69:9f:39:ae:67:12:9d:
cb:ba:d7:01:fa:d8:a5:91:24:4b:9c:b4:1d:8c:42:
19:9e:38:71:11:88:cd:41:86:b3:85:22:9f:4c:31:
71:87:b2:85:7b:1b:51:8a:08:87:d5:10:38:37:ca:
3b:a4:6f:b9:43:0d:54:78:d9:38:1e:12:92:23:da:
70:9b:54:86:f6:ed:07:10:f9:9f:0a:ad:fd:2a:57:
d3:17:40:d7:9b:5c:1d:ca:65:6d:d1:7f:29:8f:39:
bd:4a:05:ef:4f:71:54:57:c9:7c:c6:f4:cb:73:38:
df:03:df:5d:f5:9f:9c:79:fa:c1:0f:20:5e:b0:ab:
c7:89:25:b6:a6:b4:cf:22:d3:7f:7f:49:c5:be:6d:
f3:77:76:a9:ff:1b:17:ac:f9:b1:41:d5:82:ea:ef:
b6:c5:29:03:64:31:86:fd:14:aa:50:bd:3f:f6:a4:
14:dd:ae:5e:86:7a:a5:d9:43:a7:89:74:2e:0f:33:
b1:e2:cc:a4:03:42:cc:a7:74:dc:33:5b:40:39:ad:
f8:95:ee:23:01:7d:43:2d:1c:c2:94:ac:46:f6:ed:
2e:74:e1:f0:78:bf:c7:d1:2c:76:a1:d3:d7:c0:c4:
a3:4d:45:f7:d3:e2:e7:49:5f:ac:6d:dd:cf:19:16:
bc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:69:95:80:7C:E6:50:1E:E7:76:13:13:5E:8F:63:04:77:B4:E6:2A
X509v3 Authority Key Identifier:
keyid:D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d9:1a:a5:67:72:10:7e:21:d7:b2:c4:d6:50:ec:b7:55:ae:
3a:31:a7:b7:12:37:87:e9:1d:59:98:c5:74:d6:83:71:c7:ed:
d6:66:46:61:49:1d:64:c7:68:02:b5:d5:cf:69:65:f4:01:35:
a7:79:e1:50:96:ac:27:20:2b:a4:6a:90:02:71:12:8a:ff:c3:
32:a0:d9:69:bd:a3:2d:a5:08:63:c4:d9:ed:75:a3:de:d9:21:
12:1c:4e:47:1d:d4:e8:36:c4:f9:9c:c7:09:cb:04:3a:c8:40:
14:1e:c4:07:45:62:06:07:19:7d:76:91:9b:6b:b0:ed:ab:f0:
e4:99:53:a8:3f:bd:13:4e:65:4b:63:ba:1d:b4:2e:4b:b5:58:
b3:e9:1b:3f:20:89:b2:a5:fb:61:fe:e5:ce:fd:ff:76:80:46:
e2:7c:1d:ea:70:db:cb:24:7d:cc:38:e4:aa:fa:48:d2:ce:e8:
8a:af:9f:df:f7:cf:71:d7:cf:fa:11:56:38:86:a5:4d:c7:b4:
9e:06:22:23:8d:bc:6e:e9:2b:58:94:6f:20:65:8d:6c:d7:c4:
ae:d6:1d:10:06:fc:34:08:5c:68:be:35:e9:35:bb:ca:07:c3:
ff:53:fd:e7:8d:b9:1b:1a:aa:2e:a7:f9:57:d6:f2:fd:94:64:
98:7d:56:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hZYi9q5948TBEqY6EAYRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGY0ODAzZTU0YjA4NGE5OWNiN2JiMDQ0YmY3OTEzMjc1
OTRiNzMwHhcNMjUwMTMxMTgwMDM2WhcNMjUwMjAxMTgwMDM2WjAzMTEwLwYDVQQD
EyhmNjY5OTU4MDdjZTY1MDFlZTc3NjEzMTM1ZThmNjMwNDc3YjRlNjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVf4FIdiM2mfOa5nEp3LutcB+til
kSRLnLQdjEIZnjhxEYjNQYazhSKfTDFxh7KFextRigiH1RA4N8o7pG+5Qw1UeNk4
HhKSI9pwm1SG9u0HEPmfCq39KlfTF0DXm1wdymVt0X8pjzm9SgXvT3FUV8l8xvTL
czjfA99d9Z+cefrBDyBesKvHiSW2prTPItN/f0nFvm3zd3ap/xsXrPmxQdWC6u+2
xSkDZDGG/RSqUL0/9qQU3a5ehnql2UOniXQuDzOx4sykA0LMp3TcM1tAOa34le4j
AX1DLRzClKxG9u0udOHweL/H0Sx2odPXwMSjTUX30+LnSV+sbd3PGRa8tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZplYB85lAe53YTE16PYwR3tOYqMB8GA1UdIwQY
MBaAFNHfSAPlSwhKmct7sES/eRMnWUtzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGQ5SUEtVkxDRXFaeTN1d1JMOTVFeWRaUzNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8wZDVmNTMtOTY1My00N2ZiLWE5Nzct
NDhmNWU4NzY3ZDAyLzEvMGQ5SUEtVkxDRXFaeTN1d1JMOTVFeWRaUzNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8wZDVmNTMtOTY1My00N2ZiLWE5NzctNDhmNWU4NzY3ZDAy
LzEvMGQ5SUEtVkxDRXFaeTN1d1JMOTVFeWRaUzNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtkapWdy
EH4h17LE1lDst1WuOjGntxI3h+kdWZjFdNaDccft1mZGYUkdZMdoArXVz2ll9AE1
p3nhUJasJyArpGqQAnESiv/DMqDZab2jLaUIY8TZ7XWj3tkhEhxORx3U6DbE+ZzH
CcsEOshAFB7EB0ViBgcZfXaRm2uw7avw5JlTqD+9E05lS2O6HbQuS7VYs+kbPyCJ
sqX7Yf7lzv3/doBG4nwd6nDbyyR9zDjkqvpI0s7oiq+f3/fPcdfP+hFWOIalTce0
ngYiI428bukrWJRvIGWNbNfErtYdEAb8NAhcaL416TW7ygfD/1P95425GxqqLqf5
V9by/ZRkmH1WFg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:44 2025 by rpki-client