Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
File: ATTJf7sEhrXGbRPKsaiymEYFIds.mft (raw, json)
Hash identifier: Xvm5W/PSKCifG6noiV38J4IcP35WQhQ4Vl1x9JlnJpc=
Subject key identifier: 3D:9D:68:82:7C:04:46:2F:19:C5:1D:86:8D:CE:6E:05:8A:0A:9B:FC
Authority key identifier: 01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
Certificate issuer: /CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Certificate serial: 0194BC04B0F8E289451DBAAED73F78A65FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
Manifest number: 055E
Signing time: Fri 31 Jan 2025 11:00:11 +0000
Manifest this update: Fri 31 Jan 2025 11:00:11 +0000
Manifest next update: Sat 01 Feb 2025 11:00:11 +0000
Files and hashes: 1: ATTJf7sEhrXGbRPKsaiymEYFIds.crl (hash: C9fUe+QqHkjvEcbIruzYy97j4bwY1kzatK8c+thl2Ik=)
2: OgXWLzQBIYvEON5mUedF6bX5aTo.roa (hash: nqpCSiGASiQpy5G6Vl9R55sQwkNptiylFtL8c3H2opE=)
3: yPU6A9p-LMtjN4Omcmkv4NrsXlo.roa (hash: 0sZjX5MFgI0oqX6xUWy5gWW3/d8I6ijHH576HLysTY4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b0:f8:e2:89:45:1d:ba:ae:d7:3f:78:a6:5f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Validity
Not Before: Jan 31 11:00:11 2025 GMT
Not After : Feb 1 11:00:11 2025 GMT
Subject: CN=3d9d68827c04462f19c51d868dce6e058a0a9bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:27:2a:a1:ce:40:1c:b2:02:b7:5a:33:57:ee:
e6:3b:86:b9:c4:9a:be:2b:7b:1a:9a:20:fa:4d:40:
9c:bb:d2:94:f3:4e:d5:84:fb:ea:51:46:d8:19:8e:
fb:6a:fd:39:58:84:a1:2f:a6:bc:74:c6:a8:c6:96:
77:85:e5:00:7b:2f:79:07:4b:b9:2c:e2:17:80:4d:
1e:83:1d:97:b2:b3:ff:62:28:ff:8b:c1:bd:62:5f:
5d:bc:03:a8:89:a7:33:42:a5:5d:46:c1:2c:40:61:
a8:45:2e:ee:0b:f1:30:f0:73:2c:0d:2a:bc:f1:37:
40:54:e5:36:fd:0f:c5:6a:33:c0:79:aa:ca:86:32:
05:7d:2c:79:a3:1e:68:91:77:d5:c0:9f:75:fb:90:
53:2d:33:60:f5:cd:e9:56:18:7b:73:32:74:52:01:
17:2c:72:5a:83:1c:9e:11:89:cd:67:5e:d6:1d:b8:
dd:c0:e8:9d:bd:8c:0e:77:7f:fd:0b:24:3b:bc:d1:
f7:8b:25:01:11:c2:77:ab:7f:84:14:82:24:f2:24:
71:ac:e9:25:3e:9d:d1:89:5d:2e:cd:7b:f9:45:bc:
ac:51:b6:60:08:40:d6:02:86:bb:52:14:4d:89:03:
e4:ee:13:a3:f6:8c:d3:fa:2a:1e:08:07:63:08:b1:
73:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9D:68:82:7C:04:46:2F:19:C5:1D:86:8D:CE:6E:05:8A:0A:9B:FC
X509v3 Authority Key Identifier:
keyid:01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:88:2b:bd:21:df:b7:62:f7:a0:8f:f9:1a:32:3c:e5:97:55:
32:0d:b1:76:e1:3c:15:ca:ae:b1:0e:4e:c4:1e:10:f8:14:07:
90:40:4b:5d:18:39:1d:c3:f7:d0:c4:4e:6f:fb:ad:c1:94:da:
16:4f:33:17:6f:40:b1:e3:e9:02:86:0b:c5:36:54:35:fe:fa:
d7:28:ef:4e:29:12:f7:15:63:08:a6:a9:be:5f:3e:26:ce:5d:
82:93:89:07:04:d5:5d:98:22:de:0c:0d:42:e9:2b:84:58:00:
f0:d3:23:d8:ca:08:83:e6:32:da:3c:4a:25:8e:1a:b2:85:62:
5f:06:05:d6:7a:f7:5c:d4:d3:cd:39:fc:8a:47:fa:b3:f8:ab:
be:30:c9:59:54:bb:9d:be:04:81:03:a6:61:d0:d3:47:76:1e:
d6:72:72:8f:de:34:7d:3a:70:d0:7d:74:e6:d5:7b:a3:5e:b3:
42:68:11:20:6b:ed:2b:f3:a7:88:ad:66:ed:0d:c8:74:5a:43:
54:fb:50:ec:d9:2b:c5:6c:aa:86:7b:fd:2e:ed:fe:db:8d:b7:
24:c8:d8:b8:9b:28:00:80:a1:12:64:13:28:f8:76:fa:20:cb:
69:3e:fc:90:80:af:e5:77:d0:c3:75:99:f8:d0:c3:28:4a:e9:
e0:52:79:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLD44olFHbqu1z94pl/VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMzRjOTdmYmIwNDg2YjVjNjZkMTNjYWIxYThiMjk4NDYw
NTIxZGIwHhcNMjUwMTMxMTEwMDExWhcNMjUwMjAxMTEwMDExWjAzMTEwLwYDVQQD
EygzZDlkNjg4MjdjMDQ0NjJmMTljNTFkODY4ZGNlNmUwNThhMGE5YmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiicqoc5AHLICt1ozV+7mO4a5xJq+
K3samiD6TUCcu9KU807VhPvqUUbYGY77av05WIShL6a8dMaoxpZ3heUAey95B0u5
LOIXgE0egx2XsrP/Yij/i8G9Yl9dvAOoiaczQqVdRsEsQGGoRS7uC/Ew8HMsDSq8
8TdAVOU2/Q/FajPAearKhjIFfSx5ox5okXfVwJ91+5BTLTNg9c3pVhh7czJ0UgEX
LHJagxyeEYnNZ17WHbjdwOidvYwOd3/9CyQ7vNH3iyUBEcJ3q3+EFIIk8iRxrOkl
Pp3RiV0uzXv5RbysUbZgCEDWAoa7UhRNiQPk7hOj9ozT+ioeCAdjCLFzpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2daIJ8BEYvGcUdho3ObgWKCpv8MB8GA1UdIwQY
MBaAFAE0yX+7BIa1xm0TyrGosphGBSHbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVRUSmY3c0VoclhHYlJQS3NhaXltRVlGSWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8zMGUyYTktMDFmOC00MTI1LTlmZGIt
NThmMjg3NWNhMGJmLzEvQVRUSmY3c0VoclhHYlJQS3NhaXltRVlGSWRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8zMGUyYTktMDFmOC00MTI1LTlmZGItNThmMjg3NWNhMGJm
LzEvQVRUSmY3c0VoclhHYlJQS3NhaXltRVlGSWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWogrvSHf
t2L3oI/5GjI85ZdVMg2xduE8FcqusQ5OxB4Q+BQHkEBLXRg5HcP30MROb/utwZTa
Fk8zF29AsePpAoYLxTZUNf761yjvTikS9xVjCKapvl8+Js5dgpOJBwTVXZgi3gwN
QukrhFgA8NMj2MoIg+Yy2jxKJY4asoViXwYF1nr3XNTTzTn8ikf6s/irvjDJWVS7
nb4EgQOmYdDTR3Ye1nJyj940fTpw0H105tV7o16zQmgRIGvtK/OniK1m7Q3IdFpD
VPtQ7NkrxWyqhnv9Lu3+2423JMjYuJsoAIChEmQTKPh2+iDLaT78kICv5XfQw3WZ
+NDDKErp4FJ5Gg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:56:54 2025 by rpki-client