Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
File: mpdRVlcXWpRsyNthlsobIVTjgRQ.mft (raw, json)
Hash identifier: 2PYW0cyhJrSO3vSVObxHP8I1f/EUOr4PYV4puBGm+8U=
Subject key identifier: B5:E5:00:20:95:F7:63:37:B3:18:1F:56:C2:3C:3E:38:4B:67:60:3A
Authority key identifier: 9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
Certificate issuer: /CN=9a97515657175a946cc8db6196ca1b2154e38114
Certificate serial: 0194BD174F65EACB64FBC7D278FF193904B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
Manifest number: 0358
Signing time: Fri 31 Jan 2025 16:00:08 +0000
Manifest this update: Fri 31 Jan 2025 16:00:08 +0000
Manifest next update: Sat 01 Feb 2025 16:00:08 +0000
Files and hashes: 1: WPYKhYBx_0YjrlD531nkz5OoDB8.roa (hash: 8lq77z4120Ei3YTGCXsXJwbPy3DaoXpzADVeOT5P0UM=)
2: mpdRVlcXWpRsyNthlsobIVTjgRQ.crl (hash: 2/Fh61Ztt8rHpYtUJe9GBfZK1I4Hb9Y5vdPyaxJ20Dk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4f:65:ea:cb:64:fb:c7:d2:78:ff:19:39:04:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a97515657175a946cc8db6196ca1b2154e38114
Validity
Not Before: Jan 31 16:00:08 2025 GMT
Not After : Feb 1 16:00:08 2025 GMT
Subject: CN=b5e5002095f76337b3181f56c23c3e384b67603a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:21:58:cd:0c:68:e0:27:bd:b4:a7:bc:e3:bb:
25:12:53:47:75:27:80:97:b8:a2:c9:93:e0:18:1a:
39:f0:55:2d:6b:5c:ed:49:57:15:d5:9e:76:75:1a:
6a:50:fc:2c:6c:0e:41:09:a2:f7:f8:2a:51:fa:0e:
46:5f:0b:ef:5d:e5:02:86:82:5e:ff:70:80:1b:27:
4e:40:e0:d1:fa:03:9b:35:0b:0c:00:28:2d:96:f3:
1d:12:8e:09:64:49:7b:96:b7:41:fd:84:b7:16:45:
0b:32:ef:a2:50:07:42:06:68:0d:c8:4d:0c:3d:91:
0c:25:c7:02:5f:ab:38:ad:93:d7:85:eb:b4:d2:c5:
60:d0:77:3e:15:fa:fa:10:f9:81:63:a0:df:58:24:
5b:ef:80:79:c3:bd:07:0e:d7:4a:6d:bd:a8:a2:69:
0e:cb:b9:79:71:05:7f:8b:68:c3:ae:58:23:fa:12:
44:eb:90:a2:d3:b2:89:15:8d:56:30:d9:ae:b2:67:
c3:54:5d:2d:3e:a6:43:6e:ac:e2:71:f9:5f:c8:49:
8c:53:82:ab:7c:9c:ca:8d:e3:d8:42:c0:1a:d7:9b:
06:94:e6:06:2f:a0:bb:df:4f:75:11:8f:b0:43:d0:
33:90:3a:10:9a:6c:1b:56:d1:fe:60:c1:2c:aa:81:
62:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E5:00:20:95:F7:63:37:B3:18:1F:56:C2:3C:3E:38:4B:67:60:3A
X509v3 Authority Key Identifier:
keyid:9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f9:0e:39:ae:35:84:86:83:22:85:83:e9:f9:ac:16:e7:a6:
4b:3b:45:b0:4c:69:a4:04:b9:76:77:13:ed:1f:c9:17:3c:91:
e4:9f:8a:6b:4b:ec:6d:a4:df:4f:08:9d:b5:76:47:73:47:9b:
27:09:f8:d2:dc:2b:a1:e1:75:22:fb:17:98:00:0e:ef:33:0b:
7d:1a:67:d4:73:2a:30:63:24:9a:4a:b9:e9:80:93:2d:46:2a:
c6:5f:ac:6c:c0:69:87:64:95:47:ba:71:62:bb:c3:cf:8a:36:
4a:d2:77:14:fd:72:80:13:8b:2e:82:8a:c3:c4:87:b3:b9:f8:
81:91:6f:17:43:84:36:93:1c:52:24:27:6a:90:32:54:df:c5:
4e:46:82:b3:1f:ef:4f:87:b2:b7:c7:66:82:9a:10:ec:b5:9a:
a1:30:b1:65:1e:ef:12:33:71:b9:63:eb:f2:0b:1c:4c:62:c8:
e8:d0:b2:07:16:6a:f7:2e:ab:eb:65:ca:f5:11:48:81:a4:a7:
80:d3:fb:4c:ed:f4:03:a2:a6:54:27:0e:40:cf:e2:79:63:47:
8e:78:a7:26:eb:28:74:22:75:2e:db:1a:e9:c8:69:81:af:08:
a6:ad:42:87:24:a7:70:61:40:90:07:dc:d2:84:44:f4:1c:0c:
d2:45:13:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F09l6stk+8fSeP8ZOQS0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOTc1MTU2NTcxNzVhOTQ2Y2M4ZGI2MTk2Y2ExYjIxNTRl
MzgxMTQwHhcNMjUwMTMxMTYwMDA4WhcNMjUwMjAxMTYwMDA4WjAzMTEwLwYDVQQD
EyhiNWU1MDAyMDk1Zjc2MzM3YjMxODFmNTZjMjNjM2UzODRiNjc2MDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiFYzQxo4Ce9tKe847slElNHdSeA
l7iiyZPgGBo58FUta1ztSVcV1Z52dRpqUPwsbA5BCaL3+CpR+g5GXwvvXeUChoJe
/3CAGydOQODR+gObNQsMACgtlvMdEo4JZEl7lrdB/YS3FkULMu+iUAdCBmgNyE0M
PZEMJccCX6s4rZPXheu00sVg0Hc+Ffr6EPmBY6DfWCRb74B5w70HDtdKbb2oomkO
y7l5cQV/i2jDrlgj+hJE65Ci07KJFY1WMNmusmfDVF0tPqZDbqzicflfyEmMU4Kr
fJzKjePYQsAa15sGlOYGL6C73091EY+wQ9AzkDoQmmwbVtH+YMEsqoFiqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXlACCV92M3sxgfVsI8PjhLZ2A6MB8GA1UdIwQY
MBaAFJqXUVZXF1qUbMjbYZbKGyFU44EUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXBkUlZsY1hXcFJzeU50aGxzb2JJVlRqZ1JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9iMDlmNzQtMTc5Yi00ZWQyLWFjZjgt
NTZlNmUyZGM4ODg1LzEvbXBkUlZsY1hXcFJzeU50aGxzb2JJVlRqZ1JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9iMDlmNzQtMTc5Yi00ZWQyLWFjZjgtNTZlNmUyZGM4ODg1
LzEvbXBkUlZsY1hXcFJzeU50aGxzb2JJVlRqZ1JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEvkOOa41
hIaDIoWD6fmsFuemSztFsExppAS5dncT7R/JFzyR5J+Ka0vsbaTfTwidtXZHc0eb
Jwn40twroeF1IvsXmAAO7zMLfRpn1HMqMGMkmkq56YCTLUYqxl+sbMBph2SVR7px
YrvDz4o2StJ3FP1ygBOLLoKKw8SHs7n4gZFvF0OENpMcUiQnapAyVN/FTkaCsx/v
T4eyt8dmgpoQ7LWaoTCxZR7vEjNxuWPr8gscTGLI6NCyBxZq9y6r62XK9RFIgaSn
gNP7TO30A6KmVCcOQM/ieWNHjninJusodCJ1Ltsa6chpga8Ipq1ChySncGFAkAfc
0oRE9BwM0kUTBA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:18:56 2025 by rpki-client