Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
File: A-wIrmqTJShb3UpK3pwgfX-hBFk.mft (raw, json)
Hash identifier: aEodE9368lsl+VBM+xcHWaO7ZLCXjQ8gFFyYrLlWPXA=
Subject key identifier: FF:8B:08:60:7B:37:D0:BE:44:2B:B0:13:84:9E:E3:93:A5:38:93:6E
Authority key identifier: 03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
Certificate issuer: /CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Certificate serial: 0194BD17EAB85DF2CCA30C8B3BCFAD4CB3F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
Manifest number: 0110
Signing time: Fri 31 Jan 2025 16:00:48 +0000
Manifest this update: Fri 31 Jan 2025 16:00:48 +0000
Manifest next update: Sat 01 Feb 2025 16:00:48 +0000
Files and hashes: 1: A-wIrmqTJShb3UpK3pwgfX-hBFk.crl (hash: WrLY+7ckuP+XjlEGypEUvczMWM5D1WQ6lharc+ocLW0=)
2: muuJi1VdiXZZEsVnfkSMCgo8AdA.roa (hash: RV8C8rfSq70k09HRUmJ6d7w5nFgphIHDRVJYbJs+zIQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ea:b8:5d:f2:cc:a3:0c:8b:3b:cf:ad:4c:b3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Validity
Not Before: Jan 31 16:00:48 2025 GMT
Not After : Feb 1 16:00:48 2025 GMT
Subject: CN=ff8b08607b37d0be442bb013849ee393a538936e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ca:8b:8f:02:98:d4:bd:50:7c:ce:f9:a3:8e:
72:95:20:6d:bf:e5:62:e1:99:12:22:59:98:7a:88:
8b:d2:0f:87:2a:f5:28:40:f5:9b:f1:8f:a2:3d:42:
3c:c1:71:a2:28:23:03:65:ab:b9:09:ab:a7:44:52:
68:16:a6:b9:11:24:65:a7:9a:16:1d:9e:98:9c:da:
59:6d:51:74:9d:84:1e:f2:52:df:ff:9c:4f:11:e7:
9c:d3:3d:f4:dc:73:88:bb:1e:83:f6:ca:15:7d:b3:
64:ee:87:be:39:d4:4a:10:0f:3b:45:a9:89:f7:0a:
b6:90:df:79:41:f1:69:08:f4:75:c3:ef:d9:be:b4:
c2:df:32:2c:59:f2:0f:4e:01:1f:79:c5:67:2a:a4:
da:3d:67:ae:64:49:3e:61:32:a1:33:38:56:dc:ce:
06:f8:6e:16:98:e0:7e:af:39:2b:91:d2:45:d4:f7:
fe:e1:08:66:ef:8e:ab:2c:7e:4f:fc:7e:ff:45:f1:
f8:cc:f6:de:a6:5e:70:97:3c:90:73:2c:58:26:0b:
59:61:f7:83:3a:49:ae:1c:a7:84:7c:4a:a1:21:2e:
5d:45:79:21:8f:85:32:be:3d:23:87:d9:2d:b9:d6:
f9:6b:69:70:03:c1:57:91:19:5d:80:ab:bb:ee:0e:
f1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8B:08:60:7B:37:D0:BE:44:2B:B0:13:84:9E:E3:93:A5:38:93:6E
X509v3 Authority Key Identifier:
keyid:03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:2d:6f:63:38:a4:ca:6d:b8:58:88:ac:61:51:85:ab:12:98:
8c:27:3b:6f:0d:7c:41:f9:12:80:6a:df:a1:de:09:d6:21:dc:
2d:33:1b:2b:59:3b:de:26:a3:3e:63:b5:ad:d6:1a:77:bf:90:
38:0f:ab:a0:13:99:6e:ff:f7:60:79:3e:44:57:2e:f8:36:bb:
a0:14:a8:7b:b9:02:4f:5e:19:a8:5c:0e:a7:66:ac:35:9b:2a:
a3:03:36:6b:76:e9:33:85:44:ce:37:37:f0:14:a0:48:2c:ae:
76:3a:00:b1:98:9e:6e:b5:b5:68:98:0a:9e:c5:e9:d9:1c:6e:
9f:78:f9:23:ff:22:7d:95:8a:7a:ed:29:d4:a2:f3:b5:fd:33:
3c:b1:37:95:6f:75:f7:c8:ca:f4:73:83:82:37:1f:09:f5:51:
cd:bb:a5:7f:b7:e9:6a:73:61:8f:2e:7b:62:71:36:c6:98:c1:
6c:a1:36:9d:81:31:66:0b:09:4b:d2:6b:77:08:d2:09:ef:16:
81:1d:5d:a4:da:c6:4b:e8:5f:03:c1:f8:f7:03:c5:f9:ec:b2:
d5:1a:47:38:74:9f:c4:34:a2:cf:da:c3:2e:98:3d:87:2e:e3:
37:14:dc:2e:c7:26:12:02:f5:95:f5:f9:07:73:11:32:66:8b:
43:a5:ad:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F+q4XfLMowyLO8+tTLP5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZWMwOGFlNmE5MzI1Mjg1YmRkNGE0YWRlOWMyMDdkN2Zh
MTA0NTkwHhcNMjUwMTMxMTYwMDQ4WhcNMjUwMjAxMTYwMDQ4WjAzMTEwLwYDVQQD
EyhmZjhiMDg2MDdiMzdkMGJlNDQyYmIwMTM4NDllZTM5M2E1Mzg5MzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMqLjwKY1L1QfM75o45ylSBtv+Vi
4ZkSIlmYeoiL0g+HKvUoQPWb8Y+iPUI8wXGiKCMDZau5CaunRFJoFqa5ESRlp5oW
HZ6YnNpZbVF0nYQe8lLf/5xPEeec0z303HOIux6D9soVfbNk7oe+OdRKEA87RamJ
9wq2kN95QfFpCPR1w+/ZvrTC3zIsWfIPTgEfecVnKqTaPWeuZEk+YTKhMzhW3M4G
+G4WmOB+rzkrkdJF1Pf+4Qhm746rLH5P/H7/RfH4zPbepl5wlzyQcyxYJgtZYfeD
OkmuHKeEfEqhIS5dRXkhj4Uyvj0jh9ktudb5a2lwA8FXkRldgKu77g7x2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+LCGB7N9C+RCuwE4Se45OlOJNuMB8GA1UdIwQY
MBaAFAPsCK5qkyUoW91KSt6cIH1/oQRZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQS13SXJtcVRKU2hiM1VwSzNwd2dmWC1oQkZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mMzE5ODItY2Q4Yy00NWY2LWEzMDIt
M2Q3NWM0ZjQ4OWU3LzEvQS13SXJtcVRKU2hiM1VwSzNwd2dmWC1oQkZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9mMzE5ODItY2Q4Yy00NWY2LWEzMDItM2Q3NWM0ZjQ4OWU3
LzEvQS13SXJtcVRKU2hiM1VwSzNwd2dmWC1oQkZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAni1vYzik
ym24WIisYVGFqxKYjCc7bw18QfkSgGrfod4J1iHcLTMbK1k73iajPmO1rdYad7+Q
OA+roBOZbv/3YHk+RFcu+Da7oBSoe7kCT14ZqFwOp2asNZsqowM2a3bpM4VEzjc3
8BSgSCyudjoAsZiebrW1aJgKnsXp2Rxun3j5I/8ifZWKeu0p1KLztf0zPLE3lW91
98jK9HODgjcfCfVRzbulf7fpanNhjy57YnE2xpjBbKE2nYExZgsJS9JrdwjSCe8W
gR1dpNrGS+hfA8H49wPF+eyy1RpHOHSfxDSiz9rDLpg9hy7jNxTcLscmEgL1lfX5
B3MRMmaLQ6WtIA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:19:48 2025 by rpki-client