Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
File: s6dYkEx1hW41haRDOuXsV_7xo8c.mft (raw, json)
Hash identifier: vIdCmt13RQ6VIRx1FXdJ+j0U1vwun+VGMIpwgrCCWhg=
Subject key identifier: EC:F3:03:29:5E:14:74:3C:D8:24:51:E2:73:BE:E9:67:8A:6D:F9:0A
Authority key identifier: B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7
Certificate issuer: /CN=b3a758904c75856e3585a4433ae5ec57fef1a3c7
Certificate serial: 0194BC04BB1AC9217514EEF03E425BB939BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: mD7Z7YeNOfK8jp-WeYlQt4uS5Qk.roa (hash: foJEvw+8/1mri1uVePD4Fo8lgGoj9wOcsREdvsruLoI=)
2: s6dYkEx1hW41haRDOuXsV_7xo8c.crl (hash: owwx4NUH4IH6N5vaG3aUG+hZVA0Ce4veJRqTljPaS00=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bb:1a:c9:21:75:14:ee:f0:3e:42:5b:b9:39:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a758904c75856e3585a4433ae5ec57fef1a3c7
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=ecf303295e14743cd82451e273bee9678a6df90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:0e:0c:18:ec:24:9f:f9:a1:8d:93:9e:e5:
20:4f:2f:29:02:9b:66:5a:03:cc:39:f9:15:5e:1e:
4a:67:c0:72:c9:c1:1f:2a:d6:5f:bd:2f:8c:22:82:
ff:10:65:e7:cb:24:bf:08:54:dc:19:f9:0c:7f:90:
d2:ab:2a:a6:59:47:79:14:b6:01:56:fc:a4:3e:41:
3c:2a:05:a3:43:ca:95:29:65:79:ef:1a:a4:de:4d:
d3:f9:ff:b6:22:97:e3:22:ed:c7:7d:42:78:74:8b:
22:f6:67:8a:ad:0a:50:ce:c8:77:a5:1c:b3:43:8c:
87:09:20:52:e7:90:7b:d3:7e:2e:30:c8:2c:63:f3:
16:5f:80:a5:82:5b:15:a9:c4:fc:a0:4d:a0:7b:24:
a0:21:cb:49:a0:b3:d8:1a:15:f5:f7:ae:10:7d:ad:
32:54:2b:34:85:6e:66:87:a5:13:2d:03:74:f1:01:
ab:72:8c:c9:c7:de:a9:a0:6f:5b:43:58:08:06:83:
32:94:30:c4:8e:cc:99:4b:68:eb:c3:e0:87:ba:01:
d9:a1:ec:8f:fb:77:3f:58:fa:24:63:cd:d6:53:b7:
a5:de:8f:c5:25:49:5d:ad:84:3f:2b:ae:56:cb:31:
18:46:be:9b:38:81:e5:4d:6d:ae:d9:c4:e6:85:8c:
57:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F3:03:29:5E:14:74:3C:D8:24:51:E2:73:BE:E9:67:8A:6D:F9:0A
X509v3 Authority Key Identifier:
keyid:B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:56:7b:91:59:95:b8:9b:31:6e:4c:40:03:a1:6b:0f:a0:f2:
82:41:66:b3:87:b8:fb:6e:12:a3:39:c5:e8:57:63:8b:7e:a7:
52:85:df:5e:cc:3e:97:ed:4a:fc:86:4a:3e:cb:cd:18:c6:bf:
4e:f0:ba:c2:be:e2:31:6b:76:9a:cf:a4:3f:cf:dc:ce:2e:57:
34:fc:33:2d:0f:92:f9:f9:e5:1c:5b:d9:04:85:1f:46:82:98:
76:39:a2:03:64:6a:d9:d2:2c:64:15:8e:e1:d2:6c:42:5b:b0:
f4:a3:58:94:62:00:4e:f8:46:29:35:6a:af:6f:87:ec:d9:f9:
ec:06:c7:b4:eb:96:d3:dd:2f:f7:3e:67:65:1a:9c:d2:3c:48:
c9:08:20:f6:7f:4e:63:65:71:91:b4:41:43:6b:d7:9e:b0:bf:
dd:5c:ae:29:1a:51:dd:6c:50:c7:fb:a0:36:d6:69:0c:ab:58:
ff:cf:13:27:b0:6d:89:88:21:88:44:d0:08:6e:76:8b:81:88:
1e:be:fd:18:59:64:9b:10:0d:82:6e:ad:bd:5a:e2:93:ac:d8:
39:3c:17:6f:37:97:c5:2f:2c:54:bf:ff:35:90:e0:d9:f4:29:
7d:2c:3f:02:47:12:4a:66:71:48:d5:3e:5b:05:ef:8a:7e:cd:
e9:8d:5b:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLsaySF1FO7wPkJbuTm9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYTc1ODkwNGM3NTg1NmUzNTg1YTQ0MzNhZTVlYzU3ZmVm
MWEzYzcwHhcNMjUwMTMxMTEwMDE0WhcNMjUwMjAxMTEwMDE0WjAzMTEwLwYDVQQD
EyhlY2YzMDMyOTVlMTQ3NDNjZDgyNDUxZTI3M2JlZTk2NzhhNmRmOTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8AODBjsJJ/5oY2TnuUgTy8pAptm
WgPMOfkVXh5KZ8ByycEfKtZfvS+MIoL/EGXnyyS/CFTcGfkMf5DSqyqmWUd5FLYB
VvykPkE8KgWjQ8qVKWV57xqk3k3T+f+2IpfjIu3HfUJ4dIsi9meKrQpQzsh3pRyz
Q4yHCSBS55B7034uMMgsY/MWX4ClglsVqcT8oE2geySgIctJoLPYGhX1964Qfa0y
VCs0hW5mh6UTLQN08QGrcozJx96poG9bQ1gIBoMylDDEjsyZS2jrw+CHugHZoeyP
+3c/WPokY83WU7el3o/FJUldrYQ/K65WyzEYRr6bOIHlTW2u2cTmhYxXJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzzAyleFHQ82CRR4nO+6WeKbfkKMB8GA1UdIwQY
MBaAFLOnWJBMdYVuNYWkQzrl7Ff+8aPHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczZkWWtFeDFoVzQxaGFSRE91WHNWXzd4bzhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8xNDljMDEtODQwZC00NWY2LTgyM2Yt
ZTJmMGUxYzI2MTA1LzEvczZkWWtFeDFoVzQxaGFSRE91WHNWXzd4bzhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8xNDljMDEtODQwZC00NWY2LTgyM2YtZTJmMGUxYzI2MTA1
LzEvczZkWWtFeDFoVzQxaGFSRE91WHNWXzd4bzhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFZ7kVmV
uJsxbkxAA6FrD6DygkFms4e4+24SoznF6Fdji36nUoXfXsw+l+1K/IZKPsvNGMa/
TvC6wr7iMWt2ms+kP8/czi5XNPwzLQ+S+fnlHFvZBIUfRoKYdjmiA2Rq2dIsZBWO
4dJsQluw9KNYlGIATvhGKTVqr2+H7Nn57AbHtOuW090v9z5nZRqc0jxIyQgg9n9O
Y2VxkbRBQ2vXnrC/3VyuKRpR3WxQx/ugNtZpDKtY/88TJ7BtiYghiETQCG52i4GI
Hr79GFlkmxANgm6tvVrik6zYOTwXbzeXxS8sVL//NZDg2fQpfSw/AkcSSmZxSNU+
WwXvin7N6Y1b4w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:34 2025 by rpki-client