Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
File: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft (raw, json)
Hash identifier: qt7ugz5TA2u74WI6yKJDRSzpYea++mvbGvPVy7FB3mA=
Subject key identifier: 40:91:9F:F0:71:55:72:0A:CD:18:70:20:DA:A0:25:09:26:95:3F:8B
Authority key identifier: 0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
Certificate issuer: /CN=0f784ebe35e41b610be154473bc219d0ad25278f
Certificate serial: 0194BD85B6C8F4C72CA8BD2949E9B75412AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
Manifest number: 0343
Signing time: Fri 31 Jan 2025 18:00:44 +0000
Manifest this update: Fri 31 Jan 2025 18:00:44 +0000
Manifest next update: Sat 01 Feb 2025 18:00:44 +0000
Files and hashes: 1: 6Ws74y6Nwf78AVosGHIH3KZShUI.roa (hash: HtNFOxzPI0ZbD22siO8UeJbW1HbOmrNLXjn5ZOwIrAs=)
2: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl (hash: 58PhjsaIdKt+sje3+F2QvQ7BzR/OTHRP00IsC7VsUb8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b6:c8:f4:c7:2c:a8:bd:29:49:e9:b7:54:12:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f784ebe35e41b610be154473bc219d0ad25278f
Validity
Not Before: Jan 31 18:00:44 2025 GMT
Not After : Feb 1 18:00:44 2025 GMT
Subject: CN=40919ff07155720acd187020daa0250926953f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a4:2b:c0:b2:16:e8:5e:86:2e:40:88:bf:1c:
94:a1:ce:a8:2d:9a:be:f1:7d:46:fc:90:02:22:27:
ff:bd:ae:0d:55:03:51:47:a6:a6:a2:f5:2b:6f:19:
72:63:6b:e7:e2:7e:b7:78:11:e0:6a:21:c7:64:33:
0f:7f:2b:78:fc:80:b7:cc:0a:5e:69:15:66:ea:07:
08:a6:76:b9:aa:7b:61:b7:e4:61:cb:69:6c:e0:15:
ca:d0:65:94:6b:95:d8:b9:36:08:e3:b5:1d:06:b9:
68:19:ae:ca:e9:e8:a0:c8:b9:2a:43:a7:82:9c:eb:
c5:b9:cb:32:4e:f5:cc:95:c6:86:59:2c:99:a1:c5:
8c:eb:42:74:3f:82:4d:81:fb:c5:3e:cc:80:94:fa:
34:93:ca:0f:c2:f6:06:52:bf:aa:16:52:9a:30:8c:
3c:71:12:af:97:fe:9e:8e:95:ac:73:57:63:49:29:
8b:4e:b3:01:57:3e:29:ff:25:51:9a:c3:f2:fc:3e:
f6:41:18:d0:9a:34:bf:24:b3:89:5d:26:03:f7:b0:
42:67:18:f6:5b:ac:d3:30:0f:7f:01:d8:51:56:55:
b5:69:c9:dc:f7:7e:4f:61:0c:06:26:2d:15:81:21:
77:d4:c1:f5:ad:5b:98:77:14:60:5c:53:aa:c7:ba:
90:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:91:9F:F0:71:55:72:0A:CD:18:70:20:DA:A0:25:09:26:95:3F:8B
X509v3 Authority Key Identifier:
keyid:0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3e:6e:6b:9e:ef:6b:08:b2:c6:fa:c4:dc:7b:f9:7a:d2:b6:
50:6f:d3:1e:10:d8:6f:f0:a3:45:5a:56:f5:36:22:43:c7:51:
dd:f8:19:b2:95:28:8b:66:86:07:4f:a9:09:a1:88:ec:64:81:
7c:3a:da:c4:12:dc:f5:6c:66:c0:16:58:81:64:52:5c:5c:bd:
6b:2f:cf:e5:da:5d:4c:8a:94:57:71:fb:e1:1e:e6:5f:9b:af:
a1:1b:57:dd:21:5b:6a:e7:c3:54:f3:da:11:56:d8:4e:b7:68:
3a:e3:54:3c:b6:dd:c1:69:bb:a5:c4:57:8d:92:1f:b1:5f:4b:
43:ab:48:94:29:52:fc:23:40:cb:1f:ff:c5:54:4c:fd:5f:9f:
ea:d5:00:a4:90:66:4c:13:df:5d:41:45:ea:4b:d1:e7:c0:31:
67:65:73:6f:f0:aa:b8:62:02:45:18:de:c8:27:25:0e:fc:57:
6f:b5:7f:33:f9:bb:7e:33:1e:d1:0e:0c:15:7e:e3:d3:4a:e3:
b9:90:21:0f:56:85:d6:7d:91:1e:8e:d3:cc:3b:f7:02:b9:aa:
a3:2f:d6:62:30:a3:28:b3:ff:42:03:c8:2a:ea:e4:ef:65:76:
96:07:4b:d7:22:e0:06:90:8c:be:1f:dc:f8:8a:ae:aa:b5:06:
1b:37:4b:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hbbI9McsqL0pSem3VBKrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNzg0ZWJlMzVlNDFiNjEwYmUxNTQ0NzNiYzIxOWQwYWQy
NTI3OGYwHhcNMjUwMTMxMTgwMDQ0WhcNMjUwMjAxMTgwMDQ0WjAzMTEwLwYDVQQD
Eyg0MDkxOWZmMDcxNTU3MjBhY2QxODcwMjBkYWEwMjUwOTI2OTUzZjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaQrwLIW6F6GLkCIvxyUoc6oLZq+
8X1G/JACIif/va4NVQNRR6amovUrbxlyY2vn4n63eBHgaiHHZDMPfyt4/IC3zApe
aRVm6gcIpna5qntht+Rhy2ls4BXK0GWUa5XYuTYI47UdBrloGa7K6eigyLkqQ6eC
nOvFucsyTvXMlcaGWSyZocWM60J0P4JNgfvFPsyAlPo0k8oPwvYGUr+qFlKaMIw8
cRKvl/6ejpWsc1djSSmLTrMBVz4p/yVRmsPy/D72QRjQmjS/JLOJXSYD97BCZxj2
W6zTMA9/AdhRVlW1acnc935PYQwGJi0VgSF31MH1rVuYdxRgXFOqx7qQOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECRn/BxVXIKzRhwINqgJQkmlT+LMB8GA1UdIwQY
MBaAFA94Tr415BthC+FURzvCGdCtJSePMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4Zjct
OTEyZTc4YzJmMmViLzEvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4ZjctOTEyZTc4YzJmMmVi
LzEvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKj5ua57v
awiyxvrE3Hv5etK2UG/THhDYb/CjRVpW9TYiQ8dR3fgZspUoi2aGB0+pCaGI7GSB
fDraxBLc9WxmwBZYgWRSXFy9ay/P5dpdTIqUV3H74R7mX5uvoRtX3SFbaufDVPPa
EVbYTrdoOuNUPLbdwWm7pcRXjZIfsV9LQ6tIlClS/CNAyx//xVRM/V+f6tUApJBm
TBPfXUFF6kvR58AxZ2Vzb/CquGICRRjeyCclDvxXb7V/M/m7fjMe0Q4MFX7j00rj
uZAhD1aF1n2RHo7TzDv3Armqoy/WYjCjKLP/QgPIKurk72V2lgdL1yLgBpCMvh/c
+IquqrUGGzdLLg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:43 2025 by rpki-client