Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
File: rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft (raw, json)
Hash identifier: in+Z4ELObULoXvkuDgNBntaXvU+P/DpSsOAWeGb/Pms=
Subject key identifier: 96:0E:CE:DC:E9:86:8D:D5:DC:32:69:7C:86:43:AF:9B:59:1A:66:AA
Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
Certificate issuer: /CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Certificate serial: 0194BCE07F1F357B7B0B9D008B123CFABAA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
Manifest number: 1435
Signing time: Fri 31 Jan 2025 15:00:16 +0000
Manifest this update: Fri 31 Jan 2025 15:00:16 +0000
Manifest next update: Sat 01 Feb 2025 15:00:16 +0000
Files and hashes: 1: dBMJpVLGRQoTKZQpQqDPu3BVMTw.roa (hash: y7lqJ7uW4lmOcL9eEyRfqx2SbaFMyQX43zjAsjfpk98=)
2: mcMHEymZGw9jkEfC-9PcW3mIneI.roa (hash: /dFP7YTwFn9ji/ejhSzsIX92L4mciyrM8KiL3dxIMMo=)
3: q9V7Xus9JaAOVqWDDUO8V0frUJg.roa (hash: BOqisVRqsjZEstDgk3UUu1R2Uohg8LTPrkUF2hoHl7o=)
4: rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl (hash: aH7n1q43EJoRYQ8LuoYbGQ4tvZJb5uHyq486oPUIDh4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7f:1f:35:7b:7b:0b:9d:00:8b:12:3c:fa:ba:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Validity
Not Before: Jan 31 15:00:16 2025 GMT
Not After : Feb 1 15:00:16 2025 GMT
Subject: CN=960ecedce9868dd5dc32697c8643af9b591a66aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b7:88:4e:09:4f:74:24:77:79:df:c8:fd:5d:
62:ce:41:2c:5c:cd:83:2d:ec:56:49:9b:db:82:e4:
55:f3:90:96:b1:7c:f3:f8:c5:7a:7f:8f:42:ba:a5:
b5:96:1c:45:d3:f9:64:4f:bd:25:d7:44:ba:8e:0a:
f7:49:1b:f3:f8:f5:42:5a:34:cd:3b:f9:fc:61:59:
48:0a:64:5c:f2:90:11:4c:78:ce:ae:04:0f:6b:f2:
b1:a0:d1:a5:ca:09:d1:8f:e7:61:eb:51:0f:27:d5:
1b:30:01:b6:2a:6d:99:c3:1c:8a:b6:3c:a5:d9:28:
d8:8a:f2:e2:19:7f:3b:58:b5:42:1f:fd:58:77:33:
38:66:06:ad:3e:58:1f:4c:cb:a7:98:18:bb:a2:29:
05:ee:45:44:01:ec:d4:19:a5:54:9a:1e:6f:f6:4f:
d0:17:e1:60:2c:a4:9f:ba:f0:12:bc:e7:de:39:0e:
3f:dc:ae:aa:6b:5d:db:0a:93:48:8f:4f:83:aa:94:
ab:cb:a9:50:03:03:87:d4:c1:17:c7:4b:28:5a:38:
be:7b:39:8f:ac:05:ba:71:7c:79:05:db:5d:52:54:
e5:5c:a4:74:88:c6:cc:2c:92:1e:c7:5b:53:7b:6d:
1d:59:cc:0e:80:22:d3:3e:65:f5:25:87:3c:20:0d:
49:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0E:CE:DC:E9:86:8D:D5:DC:32:69:7C:86:43:AF:9B:59:1A:66:AA
X509v3 Authority Key Identifier:
keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:72:10:75:32:00:04:4b:15:55:f4:4e:78:86:c3:86:0d:63:
06:d9:b7:83:db:cf:c9:ca:83:73:75:38:2e:18:cf:59:78:f2:
07:74:ee:17:27:da:ee:c6:ef:9c:71:ed:fa:c0:da:ce:ac:16:
c1:27:94:4e:ca:76:bc:02:d7:05:db:3d:53:bd:5b:0d:50:0a:
5d:d8:ab:0d:8a:a5:bd:c3:df:53:2a:cb:85:21:fd:93:97:6c:
5d:40:5b:cc:cc:60:01:fa:72:6e:37:37:d2:7a:7d:02:b1:f9:
c2:f5:c6:7e:f5:df:b4:b6:5c:14:45:fb:e4:d8:e3:e7:d0:f7:
4b:3a:37:52:67:14:99:7a:49:8a:ef:ae:17:69:75:f6:31:e1:
0c:57:4b:b3:d5:4f:aa:3e:28:42:b3:48:c5:69:1d:84:d7:43:
ca:81:4f:0d:b2:90:21:f4:89:66:36:49:3b:e7:f1:17:a1:7f:
5a:a3:92:b1:6a:0b:c2:e0:ef:9c:ae:ac:71:67:ff:25:61:4f:
0e:b4:76:01:4f:fe:53:4a:8c:e3:55:5e:46:71:6e:8b:fa:44:
87:3e:6f:42:fc:6b:71:2c:21:1b:94:ec:e7:75:13:4f:09:c2:
e4:01:25:f5:ef:12:8a:f3:dc:3b:fa:37:da:96:8b:45:40:f5:
fd:98:8f:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84H8fNXt7C50AixI8+rqjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNjdjOTNiODIyNWQwNGMzNzYxYzEzY2VmZWU1ZjgzMjkz
NThlMjMwHhcNMjUwMTMxMTUwMDE2WhcNMjUwMjAxMTUwMDE2WjAzMTEwLwYDVQQD
Eyg5NjBlY2VkY2U5ODY4ZGQ1ZGMzMjY5N2M4NjQzYWY5YjU5MWE2NmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubeITglPdCR3ed/I/V1izkEsXM2D
LexWSZvbguRV85CWsXzz+MV6f49CuqW1lhxF0/lkT70l10S6jgr3SRvz+PVCWjTN
O/n8YVlICmRc8pARTHjOrgQPa/KxoNGlygnRj+dh61EPJ9UbMAG2Km2ZwxyKtjyl
2SjYivLiGX87WLVCH/1YdzM4ZgatPlgfTMunmBi7oikF7kVEAezUGaVUmh5v9k/Q
F+FgLKSfuvASvOfeOQ4/3K6qa13bCpNIj0+DqpSry6lQAwOH1MEXx0soWji+ezmP
rAW6cXx5BdtdUlTlXKR0iMbMLJIex1tTe20dWcwOgCLTPmX1JYc8IA1JvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYOztzpho3V3DJpfIZDr5tZGmaqMB8GA1UdIwQY
MBaAFKxnyTuCJdBMN2HBPO/uX4MpNY4jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckdmSk80SWwwRXczWWNFODctNWZneWsxamlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hYzhlNmYtNWY4My00NDliLThjOWQt
NzdjMTA0ODQyMmQ4LzEvckdmSk80SWwwRXczWWNFODctNWZneWsxamlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9hYzhlNmYtNWY4My00NDliLThjOWQtNzdjMTA0ODQyMmQ4
LzEvckdmSk80SWwwRXczWWNFODctNWZneWsxamlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnIQdTIA
BEsVVfROeIbDhg1jBtm3g9vPycqDc3U4LhjPWXjyB3TuFyfa7sbvnHHt+sDazqwW
wSeUTsp2vALXBds9U71bDVAKXdirDYqlvcPfUyrLhSH9k5dsXUBbzMxgAfpybjc3
0np9ArH5wvXGfvXftLZcFEX75Njj59D3Szo3UmcUmXpJiu+uF2l19jHhDFdLs9VP
qj4oQrNIxWkdhNdDyoFPDbKQIfSJZjZJO+fxF6F/WqOSsWoLwuDvnK6scWf/JWFP
DrR2AU/+U0qM41VeRnFui/pEhz5vQvxrcSwhG5Ts53UTTwnC5AEl9e8SivPcO/o3
2paLRUD1/ZiPHw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:26 2025 by rpki-client