Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
File: mHKOiifTDIOu5fSWJAmF7kDLN4s.mft (raw, json)
Hash identifier: MHCdLPMh8h/DC1p0VCroKNLZH68/kKR3YV5ciSJnFas=
Subject key identifier: D0:86:A9:03:55:87:5E:1A:E4:88:E2:7E:74:18:35:7A:5F:92:A5:90
Authority key identifier: 98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B
Certificate issuer: /CN=98728e8a27d30c83aee5f496240985ee40cb378b
Certificate serial: 0194BBCE2882EAB5A5B4A44F83CA6AEA7500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:37 +0000
Manifest this update: Fri 31 Jan 2025 10:00:37 +0000
Manifest next update: Sat 01 Feb 2025 10:00:37 +0000
Files and hashes: 1: XJGd09AEEzsFIIfYDpNGSfAbhTA.roa (hash: SsnSMVtUQ+oIoqX7ckVqdgKbPcggygUf/qAmLg/UAmY=)
2: YQBMItgYzXgvtsJZr9Y-cbi0JwI.roa (hash: AkAfo5mQ4fkk6X0GxvhEwCam5E0S5qDCnTw0oq+a9Dk=)
3: mHKOiifTDIOu5fSWJAmF7kDLN4s.crl (hash: wUh9/th4oQ+kr4XtFiR3kHTA/zTFN/VqUCZzQrC+p/U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:28:82:ea:b5:a5:b4:a4:4f:83:ca:6a:ea:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98728e8a27d30c83aee5f496240985ee40cb378b
Validity
Not Before: Jan 31 10:00:37 2025 GMT
Not After : Feb 1 10:00:37 2025 GMT
Subject: CN=d086a90355875e1ae488e27e7418357a5f92a590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8d:ba:08:44:82:c9:cd:3f:93:17:8b:31:c2:
55:ed:a5:8f:58:14:2a:f8:27:e3:8d:65:33:53:d2:
ee:cf:c7:e3:51:87:c9:c8:5d:e7:7a:fa:ec:83:15:
78:6c:28:79:ef:ee:04:80:24:7b:a2:44:6f:5b:49:
d4:f4:d0:b5:a2:da:d1:5b:cb:fd:15:ba:de:e1:d9:
25:6e:80:97:0f:68:42:f7:25:46:fc:ee:aa:78:b9:
46:8c:40:5e:9c:29:00:9f:0d:7f:77:36:c5:e5:2a:
d8:73:5d:4e:fb:3b:1c:11:ea:79:d0:7b:be:c9:60:
17:36:05:55:71:21:bc:ba:65:56:22:d1:96:7b:51:
64:56:e4:37:1b:83:da:22:31:55:cc:f8:30:eb:c9:
0d:17:17:26:8e:88:e1:a5:2f:22:9f:34:31:dc:87:
4b:ef:65:15:ba:fa:42:bd:16:78:6b:54:7d:50:fb:
78:8f:40:42:f8:c0:6f:ef:d5:ec:9e:a0:4e:48:73:
a5:d1:f8:22:2d:1a:e4:25:30:53:a5:81:2f:c3:52:
5d:df:17:97:5e:ad:1b:9a:84:cd:96:60:6f:0f:9a:
eb:9a:23:8c:e1:cb:76:12:fc:9d:66:ab:af:fd:e4:
89:f4:b9:ca:d6:8c:0e:85:f4:0a:5f:28:b5:b8:c5:
a1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:86:A9:03:55:87:5E:1A:E4:88:E2:7E:74:18:35:7A:5F:92:A5:90
X509v3 Authority Key Identifier:
keyid:98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:4c:63:be:4d:47:5d:28:45:f6:2c:59:f4:d5:ea:78:86:bd:
b9:46:72:95:4c:f7:ba:b5:de:ad:bc:71:a2:12:50:a4:ea:36:
16:7d:28:77:23:6b:df:76:ca:ac:7c:38:de:78:48:1b:98:77:
f8:c5:a8:4a:ae:80:49:3a:66:0b:1e:bb:a5:e8:81:87:fb:d5:
ca:0e:9d:09:29:cc:64:bb:db:b6:77:65:6c:0e:ad:61:57:6c:
46:d3:55:5a:0c:d6:d1:cf:fe:0c:4a:bb:2a:63:89:ad:1a:b2:
12:17:f4:e9:42:e5:88:1c:e5:6c:84:e9:98:76:e1:7e:32:d0:
f0:5a:98:d6:71:3a:1c:62:db:a8:0d:a0:f8:22:b4:57:33:ed:
99:22:13:3e:0c:fe:fa:e0:38:c4:f7:a6:07:21:2b:01:58:a1:
cf:8c:8a:1e:02:5f:8e:7f:11:9c:58:05:ec:18:53:ae:d8:fc:
17:d9:e8:ac:cd:a7:9b:fb:95:89:e9:a3:c6:4f:6b:eb:eb:d1:
d2:0c:f8:13:12:0a:ea:8a:60:c1:8e:d9:e2:0b:0d:a7:08:2d:
b3:65:05:57:b1:b2:69:f6:70:e3:45:94:57:5b:c6:a6:69:f5:
25:1d:d0:7b:ef:17:89:df:7e:3a:8d:a2:a8:27:3b:f2:43:f5:
d0:e5:b5:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ziiC6rWltKRPg8pq6nUAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NzI4ZThhMjdkMzBjODNhZWU1ZjQ5NjI0MDk4NWVlNDBj
YjM3OGIwHhcNMjUwMTMxMTAwMDM3WhcNMjUwMjAxMTAwMDM3WjAzMTEwLwYDVQQD
EyhkMDg2YTkwMzU1ODc1ZTFhZTQ4OGUyN2U3NDE4MzU3YTVmOTJhNTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt426CESCyc0/kxeLMcJV7aWPWBQq
+CfjjWUzU9Luz8fjUYfJyF3nevrsgxV4bCh57+4EgCR7okRvW0nU9NC1otrRW8v9
Fbre4dklboCXD2hC9yVG/O6qeLlGjEBenCkAnw1/dzbF5SrYc11O+zscEep50Hu+
yWAXNgVVcSG8umVWItGWe1FkVuQ3G4PaIjFVzPgw68kNFxcmjojhpS8inzQx3IdL
72UVuvpCvRZ4a1R9UPt4j0BC+MBv79XsnqBOSHOl0fgiLRrkJTBTpYEvw1Jd3xeX
Xq0bmoTNlmBvD5rrmiOM4ct2EvydZquv/eSJ9LnK1owOhfQKXyi1uMWhrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCGqQNVh14a5IjifnQYNXpfkqWQMB8GA1UdIwQY
MBaAFJhyjoon0wyDruX0liQJhe5AyzeLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUhLT2lpZlRESU91NWZTV0pBbUY3a0RMTjRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8wM2NhMjMtYTE0My00ZGYwLWFmYjkt
YTI0ZTNhMGEzMWVmLzEvbUhLT2lpZlRESU91NWZTV0pBbUY3a0RMTjRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8wM2NhMjMtYTE0My00ZGYwLWFmYjktYTI0ZTNhMGEzMWVm
LzEvbUhLT2lpZlRESU91NWZTV0pBbUY3a0RMTjRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsUxjvk1H
XShF9ixZ9NXqeIa9uUZylUz3urXerbxxohJQpOo2Fn0odyNr33bKrHw43nhIG5h3
+MWoSq6ASTpmCx67peiBh/vVyg6dCSnMZLvbtndlbA6tYVdsRtNVWgzW0c/+DEq7
KmOJrRqyEhf06ULliBzlbITpmHbhfjLQ8FqY1nE6HGLbqA2g+CK0VzPtmSITPgz+
+uA4xPemByErAVihz4yKHgJfjn8RnFgF7BhTrtj8F9norM2nm/uViemjxk9r6+vR
0gz4ExIK6opgwY7Z4gsNpwgts2UFV7GyafZw40WUV1vGpmn1JR3Qe+8Xid9+Oo2i
qCc78kP10OW1Lw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:28:18 2025 by rpki-client