Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft
File: AdKI5UcwsQk69JmTgDQvhdgZjQo.mft (raw, json)
Hash identifier: Kx4vqKRPFmWiSBaLbURMEs/XnKx+isDNpG/BIMu0edg=
Subject key identifier: DA:FB:E4:CA:51:FB:43:81:0F:B0:8B:3A:AF:73:54:79:8C:3A:C0:25
Authority key identifier: 01:D2:88:E5:47:30:B1:09:3A:F4:99:93:80:34:2F:85:D8:19:8D:0A
Certificate issuer: /CN=01d288e54730b1093af4999380342f85d8198d0a
Certificate serial: 0194BD8568E7FB68CE3887D411E43A3B1AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft
Manifest number: 0664
Signing time: Fri 31 Jan 2025 18:00:24 +0000
Manifest this update: Fri 31 Jan 2025 18:00:24 +0000
Manifest next update: Sat 01 Feb 2025 18:00:24 +0000
Files and hashes: 1: AdKI5UcwsQk69JmTgDQvhdgZjQo.crl (hash: rQJfI3eMumTonbaDM/44UcgOAcK/H05otL5QgylPhDo=)
2: V9KGH2sZWlf-ei4K08Wqryb6FX4.roa (hash: PfnXDS/nVTJLveEzknIpZmuanztbUs3zZ62ysjKNdqk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:68:e7:fb:68:ce:38:87:d4:11:e4:3a:3b:1a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d288e54730b1093af4999380342f85d8198d0a
Validity
Not Before: Jan 31 18:00:24 2025 GMT
Not After : Feb 1 18:00:24 2025 GMT
Subject: CN=dafbe4ca51fb43810fb08b3aaf7354798c3ac025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b3:62:2f:e8:de:e8:64:20:11:35:a0:ec:50:
f2:0a:31:29:28:28:4b:1f:d4:02:4b:b5:96:24:f9:
e3:16:3f:f1:2c:e5:fb:10:33:31:bc:27:d5:b6:f1:
ad:2f:9f:ba:7b:b8:67:ee:14:b3:88:21:c8:f1:7e:
9e:36:63:7b:f2:be:ff:ff:d2:bf:34:e8:7f:f7:6f:
8d:30:b7:3f:d7:42:8b:98:43:3a:61:83:9d:11:9d:
9a:0c:5a:5c:1a:66:cb:ce:47:22:e4:a8:b7:6e:34:
e9:f5:d8:43:a6:d6:c1:15:22:97:7e:b9:b1:c2:cd:
a8:45:a2:88:c2:8a:78:35:1e:ff:e3:5e:11:d8:5c:
d2:9d:b5:ca:cb:45:04:10:68:64:bf:98:4b:1d:ba:
89:b5:86:5a:fb:82:08:b7:22:73:e0:03:a4:1a:88:
60:5e:c3:5d:13:17:50:ed:82:fc:ff:50:3a:0b:23:
08:29:0b:b1:7b:e4:73:0c:12:b0:f9:6e:3d:f8:ce:
77:81:43:f2:a3:a8:33:9e:50:88:13:76:a3:3e:0c:
0b:88:d1:28:3d:c1:a9:83:fe:4c:9f:a2:20:6e:43:
95:49:56:3b:5c:01:52:87:7d:13:2a:55:17:73:00:
45:f3:3c:08:64:d7:ac:b9:a3:3d:7c:bb:ef:07:61:
c9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FB:E4:CA:51:FB:43:81:0F:B0:8B:3A:AF:73:54:79:8C:3A:C0:25
X509v3 Authority Key Identifier:
keyid:01:D2:88:E5:47:30:B1:09:3A:F4:99:93:80:34:2F:85:D8:19:8D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:98:5d:5e:cd:34:b2:d2:86:f4:d4:c3:a3:d0:d4:fe:b5:e5:
8e:1e:2a:e8:72:d0:5b:19:11:8d:77:22:42:f7:67:be:13:4e:
35:1c:9a:e0:9d:24:9f:83:32:f2:02:7e:eb:49:84:cb:6c:28:
ec:00:55:8a:85:55:7c:3b:3b:13:c9:8d:4b:ec:b4:5f:d7:09:
9c:31:88:74:c6:8e:84:4c:7d:2f:6e:6e:95:cb:fa:56:fd:82:
b6:7a:2f:25:c5:c3:64:74:79:06:be:dd:0e:40:c1:74:84:84:
06:02:d3:a6:ab:3f:f0:f3:53:4c:8b:18:7a:ac:e5:00:ac:97:
2a:fe:89:65:bd:24:4a:7e:64:64:66:64:b9:6e:d3:a8:ea:b3:
6e:51:78:c7:3d:14:df:84:8d:14:55:e2:30:21:20:96:37:e8:
1e:84:bf:c3:d6:bb:9a:9a:63:85:d8:b3:90:01:4f:c4:60:71:
61:e8:06:50:d3:6f:75:77:ce:37:5a:a1:1f:a6:81:a8:58:91:
19:84:4d:85:54:b9:6c:91:93:d1:05:28:b8:23:e3:44:b8:83:
5d:81:44:fa:91:e2:c3:2e:60:6e:81:91:e3:36:f1:55:6d:45:
bf:ca:8f:af:51:5a:f2:fa:0c:42:ab:0b:7f:46:1e:79:3f:da:
97:59:47:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hWjn+2jOOIfUEeQ6OxqqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZDI4OGU1NDczMGIxMDkzYWY0OTk5MzgwMzQyZjg1ZDgx
OThkMGEwHhcNMjUwMTMxMTgwMDI0WhcNMjUwMjAxMTgwMDI0WjAzMTEwLwYDVQQD
EyhkYWZiZTRjYTUxZmI0MzgxMGZiMDhiM2FhZjczNTQ3OThjM2FjMDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybNiL+je6GQgETWg7FDyCjEpKChL
H9QCS7WWJPnjFj/xLOX7EDMxvCfVtvGtL5+6e7hn7hSziCHI8X6eNmN78r7//9K/
NOh/92+NMLc/10KLmEM6YYOdEZ2aDFpcGmbLzkci5Ki3bjTp9dhDptbBFSKXfrmx
ws2oRaKIwop4NR7/414R2FzSnbXKy0UEEGhkv5hLHbqJtYZa+4IItyJz4AOkGohg
XsNdExdQ7YL8/1A6CyMIKQuxe+RzDBKw+W49+M53gUPyo6gznlCIE3ajPgwLiNEo
PcGpg/5Mn6IgbkOVSVY7XAFSh30TKlUXcwBF8zwIZNesuaM9fLvvB2HJnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNr75MpR+0OBD7CLOq9zVHmMOsAlMB8GA1UdIwQY
MBaAFAHSiOVHMLEJOvSZk4A0L4XYGY0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWRLSTVVY3dzUWs2OUptVGdEUXZoZGdaalFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85MmMwYTctMmMwMC00YTBkLWIwZjkt
YmNlM2ViNTc3NWViLzEvQWRLSTVVY3dzUWs2OUptVGdEUXZoZGdaalFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS85MmMwYTctMmMwMC00YTBkLWIwZjktYmNlM2ViNTc3NWVi
LzEvQWRLSTVVY3dzUWs2OUptVGdEUXZoZGdaalFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZhdXs00
stKG9NTDo9DU/rXljh4q6HLQWxkRjXciQvdnvhNONRya4J0kn4My8gJ+60mEy2wo
7ABVioVVfDs7E8mNS+y0X9cJnDGIdMaOhEx9L25ulcv6Vv2CtnovJcXDZHR5Br7d
DkDBdISEBgLTpqs/8PNTTIsYeqzlAKyXKv6JZb0kSn5kZGZkuW7TqOqzblF4xz0U
34SNFFXiMCEgljfoHoS/w9a7mppjhdizkAFPxGBxYegGUNNvdXfON1qhH6aBqFiR
GYRNhVS5bJGT0QUouCPjRLiDXYFE+pHiwy5gboGR4zbxVW1Fv8qPr1Fa8voMQqsL
f0YeeT/al1lHbw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:16 2025 by rpki-client