Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
File: M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft (raw, json)
Hash identifier: 1VnHcYY/Cu4swQZB7THcO/1/1ApRW3dgt615AnN/8es=
Subject key identifier: 22:A5:19:3B:F3:36:CD:2E:E6:48:EF:8A:EE:FF:A8:CE:D5:2C:C2:2C
Authority key identifier: 33:A9:24:AD:59:B4:59:35:7A:19:EE:0A:47:F3:79:53:0E:2D:24:4C
Certificate issuer: /CN=33a924ad59b459357a19ee0a47f379530e2d244c
Certificate serial: 0194BCA9E0F2A21AD0F4440567B4F86572EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
Manifest number: 089F
Signing time: Fri 31 Jan 2025 14:00:37 +0000
Manifest this update: Fri 31 Jan 2025 14:00:37 +0000
Manifest next update: Sat 01 Feb 2025 14:00:37 +0000
Files and hashes: 1: M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl (hash: rn6I6a7LMVasHc9m//UTzIkYVdmEaHucHshD3OpjsSU=)
2: _khA_VnUk6WIR9HzLzBYy21gjiY.roa (hash: zYMvT2aBQ62Uw/oOkoXmLb0oW9+P5GMgEJxD27Pzif4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e0:f2:a2:1a:d0:f4:44:05:67:b4:f8:65:72:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a924ad59b459357a19ee0a47f379530e2d244c
Validity
Not Before: Jan 31 14:00:37 2025 GMT
Not After : Feb 1 14:00:37 2025 GMT
Subject: CN=22a5193bf336cd2ee648ef8aeeffa8ced52cc22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ba:81:f8:b1:55:a0:0a:66:d2:44:be:e2:da:
40:ab:6a:31:88:10:c2:21:85:98:48:c7:a2:ca:da:
f9:b1:6c:06:3c:c7:e6:8d:14:63:48:05:e9:2a:c8:
95:47:d2:6f:a8:14:9f:d9:c9:d7:14:f0:df:99:67:
68:6e:a0:e1:54:e8:fa:af:2f:b4:ed:fd:58:7a:d5:
85:27:e5:6c:3e:49:3b:73:e4:cd:57:87:fe:da:1d:
95:16:c6:ae:0b:78:82:72:33:43:a5:de:3e:24:5a:
12:c2:94:be:12:8c:1e:68:52:26:f6:12:d7:58:8c:
04:e5:23:21:1d:66:8c:ab:e3:1d:0d:8c:4c:d0:e0:
03:da:ea:7b:81:22:7e:3e:e6:0b:ee:72:0b:6d:cf:
2f:25:30:d8:7f:69:dd:f6:44:3b:c8:83:29:a4:1f:
b1:c9:56:aa:c6:b3:58:d0:60:a3:12:a0:f8:ff:d0:
7b:eb:f0:da:c4:94:22:c1:d3:eb:88:54:da:27:d4:
e0:c0:68:0c:1f:59:35:60:58:c8:cf:12:c3:80:35:
60:da:22:d4:1b:64:bc:37:ee:5c:66:4b:1c:3e:6a:
b2:19:1e:3a:53:e5:f7:41:5e:af:cb:f5:89:cb:21:
a0:78:81:80:c6:0f:12:99:ca:63:00:1e:b9:ca:dc:
ff:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A5:19:3B:F3:36:CD:2E:E6:48:EF:8A:EE:FF:A8:CE:D5:2C:C2:2C
X509v3 Authority Key Identifier:
keyid:33:A9:24:AD:59:B4:59:35:7A:19:EE:0A:47:F3:79:53:0E:2D:24:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c3:a4:86:44:52:ed:cd:c3:1d:25:db:4e:f1:df:e9:c0:5c:
c4:ee:0a:d5:04:1e:c3:4e:e8:aa:79:28:e2:37:f5:b6:c7:9a:
0a:31:83:01:40:6f:2b:ac:80:24:66:69:89:9e:e8:1b:a5:52:
42:fa:8e:74:fc:18:78:65:8c:cb:33:c1:24:13:8f:c0:c0:20:
f8:66:8f:d4:bb:f4:e5:fa:b2:f3:f7:32:53:7a:4d:d5:5a:8e:
3e:d2:ab:e9:99:6e:93:dc:b2:9b:65:ca:3e:11:32:af:ec:10:
1c:a9:ea:a3:40:d1:02:60:f8:58:45:d4:05:2e:4c:6b:a8:79:
86:17:5c:57:c7:08:52:f8:b8:1b:d5:b5:f1:f1:07:12:4b:8b:
3b:68:56:c5:a0:ee:10:6d:86:a8:e4:c2:47:26:65:6e:61:7f:
87:77:89:fd:8c:6c:2d:cf:d0:c6:9d:0c:8b:5e:54:94:47:13:
79:24:65:de:e8:c6:66:1a:4e:4e:23:60:8f:aa:75:cc:01:af:
2d:f3:59:2e:00:5a:25:b8:6b:0d:38:79:20:fb:d2:0f:bc:36:
7a:4c:b7:35:9e:05:15:7d:6b:aa:57:ad:5b:47:fb:cf:01:47:
93:0b:5d:ff:53:4e:b4:a7:4c:62:9b:1b:f3:7f:17:a6:5b:13:
29:b0:22:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qeDyohrQ9EQFZ7T4ZXLvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYTkyNGFkNTliNDU5MzU3YTE5ZWUwYTQ3ZjM3OTUzMGUy
ZDI0NGMwHhcNMjUwMTMxMTQwMDM3WhcNMjUwMjAxMTQwMDM3WjAzMTEwLwYDVQQD
EygyMmE1MTkzYmYzMzZjZDJlZTY0OGVmOGFlZWZmYThjZWQ1MmNjMjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bqB+LFVoApm0kS+4tpAq2oxiBDC
IYWYSMeiytr5sWwGPMfmjRRjSAXpKsiVR9JvqBSf2cnXFPDfmWdobqDhVOj6ry+0
7f1YetWFJ+VsPkk7c+TNV4f+2h2VFsauC3iCcjNDpd4+JFoSwpS+EoweaFIm9hLX
WIwE5SMhHWaMq+MdDYxM0OAD2up7gSJ+PuYL7nILbc8vJTDYf2nd9kQ7yIMppB+x
yVaqxrNY0GCjEqD4/9B76/DaxJQiwdPriFTaJ9TgwGgMH1k1YFjIzxLDgDVg2iLU
G2S8N+5cZkscPmqyGR46U+X3QV6vy/WJyyGgeIGAxg8SmcpjAB65ytz/wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKlGTvzNs0u5kjviu7/qM7VLMIsMB8GA1UdIwQY
MBaAFDOpJK1ZtFk1ehnuCkfzeVMOLSRMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTZra3JWbTBXVFY2R2U0S1JfTjVVdzR0SkV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wOTgzMGUtMGZmZS00NjgyLWJjNGQt
ZWI3N2U5NTcxMTUyLzEvTTZra3JWbTBXVFY2R2U0S1JfTjVVdzR0SkV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8wOTgzMGUtMGZmZS00NjgyLWJjNGQtZWI3N2U5NTcxMTUy
LzEvTTZra3JWbTBXVFY2R2U0S1JfTjVVdzR0SkV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScOkhkRS
7c3DHSXbTvHf6cBcxO4K1QQew07oqnko4jf1tseaCjGDAUBvK6yAJGZpiZ7oG6VS
QvqOdPwYeGWMyzPBJBOPwMAg+GaP1Lv05fqy8/cyU3pN1VqOPtKr6Zluk9yym2XK
PhEyr+wQHKnqo0DRAmD4WEXUBS5Ma6h5hhdcV8cIUvi4G9W18fEHEkuLO2hWxaDu
EG2GqOTCRyZlbmF/h3eJ/YxsLc/Qxp0Mi15UlEcTeSRl3ujGZhpOTiNgj6p1zAGv
LfNZLgBaJbhrDTh5IPvSD7w2eky3NZ4FFX1rqletW0f7zwFHkwtd/1NOtKdMYpsb
838XplsTKbAi1w==
-----END CERTIFICATE-----
Generated at Thu May 1 06:14:18 2025 by rpki-client