Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
File: arQ3nhGecQAczf7r9PKvLPXwego.mft (raw, json)
Hash identifier: HijEkQF2sWyuo1L4Qq90c/7aycGkRu4B0QD6kZVL0zE=
Subject key identifier: E0:9D:68:D8:F2:42:A9:28:16:F2:CC:0C:36:88:22:03:EF:00:2D:5F
Authority key identifier: 6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
Certificate issuer: /CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Certificate serial: 0194BC3C1DE1F545FEE62C56BD152567D277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
Manifest number: 0298
Signing time: Fri 31 Jan 2025 12:00:43 +0000
Manifest this update: Fri 31 Jan 2025 12:00:43 +0000
Manifest next update: Sat 01 Feb 2025 12:00:43 +0000
Files and hashes: 1: I6IGWwtvcwjpv5OcYefwbQc8Dac.roa (hash: XsrwhU20IGp39xs49VqrIKTfmkeTvzqhqNOw6J/CaTU=)
2: arQ3nhGecQAczf7r9PKvLPXwego.crl (hash: ylW+QBH5QSQu0SfooOkkAMKZolIkzXJUGbJPP25DNW0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1d:e1:f5:45:fe:e6:2c:56:bd:15:25:67:d2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Validity
Not Before: Jan 31 12:00:43 2025 GMT
Not After : Feb 1 12:00:43 2025 GMT
Subject: CN=e09d68d8f242a92816f2cc0c36882203ef002d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:f8:8d:ee:8b:a3:fa:28:76:d4:5a:e6:f1:
90:ba:37:75:6f:f0:1d:8c:fc:99:84:78:4b:c7:4a:
68:e1:05:b6:8c:72:91:d6:13:0d:54:5e:a1:9f:3d:
62:8d:e7:be:39:65:8a:d1:73:37:12:77:70:c9:eb:
61:ef:14:56:78:65:86:45:3a:97:71:32:cd:0e:dc:
67:8d:da:ee:d6:e3:8d:42:ec:ed:a3:ca:b7:a5:ed:
68:42:f6:65:b2:4d:06:aa:3f:93:37:7c:2c:39:1e:
10:42:bb:8b:28:90:bf:5e:58:da:6a:e3:a6:65:66:
73:c4:3e:6a:28:d8:0a:1c:2e:59:ea:f6:56:60:ce:
a8:1e:d8:e7:87:f5:20:07:1f:20:6a:92:3d:4a:bc:
c7:18:0f:2e:07:0e:41:a9:6b:72:f9:09:1c:6b:5f:
62:5e:ad:df:fe:68:88:ae:c4:47:19:a9:73:2f:16:
7c:57:1e:a3:c6:af:52:36:76:ca:61:4d:5c:6b:25:
c8:e1:2f:9e:f0:38:2a:38:0c:9e:a4:93:41:d1:eb:
cd:12:b3:65:3b:1e:b9:01:61:cb:49:63:7a:45:c5:
59:31:8d:a7:87:f5:92:6d:9a:d0:77:ac:9f:d5:9d:
36:27:77:81:e3:d6:e2:52:fa:08:a8:c3:c8:12:94:
85:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9D:68:D8:F2:42:A9:28:16:F2:CC:0C:36:88:22:03:EF:00:2D:5F
X509v3 Authority Key Identifier:
keyid:6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:80:a2:6f:05:52:09:a9:8f:0e:07:24:33:22:10:f8:cf:2f:
ae:03:27:f6:c7:fa:1a:07:d2:ed:77:d9:f5:7f:08:d6:4d:ce:
0c:66:1e:df:9b:5a:40:87:e5:d9:39:0f:68:bb:f8:42:b7:8b:
b1:e7:4b:33:bf:38:62:99:e3:90:56:2a:66:35:0c:c8:0b:e3:
21:7c:61:b3:f6:06:02:5c:e7:f1:8f:4c:ef:ac:bf:78:90:24:
b7:56:0d:58:46:2e:28:f0:5f:be:45:90:18:bf:ef:42:a5:29:
63:64:76:ee:53:f8:82:db:9f:32:0f:9d:f3:e1:6e:13:cf:f7:
e1:20:15:b7:25:4e:0f:01:b1:ad:83:13:b8:77:9e:ba:2c:fe:
0e:40:ed:85:38:c4:93:43:44:df:ef:55:f4:6a:68:91:9c:2d:
00:54:be:0b:c5:5f:14:97:c2:b2:62:47:f5:8f:8f:d7:58:6d:
73:0b:02:42:8c:74:ec:d7:1f:ed:e7:65:17:21:14:30:18:67:
71:eb:38:5a:b7:08:6c:58:0f:bf:95:61:8a:34:d8:69:f7:68:
2a:ad:af:2d:76:53:0c:f0:ac:39:99:fe:2f:17:d8:4e:91:b5:
d4:6a:a4:61:37:03:4c:0e:3f:a6:36:b7:70:c9:5b:bf:c3:0f:
d2:11:ba:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PB3h9UX+5ixWvRUlZ9J3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYjQzNzllMTE5ZTcxMDAxY2NkZmVlYmY0ZjJhZjJjZjVm
MDdhMGEwHhcNMjUwMTMxMTIwMDQzWhcNMjUwMjAxMTIwMDQzWjAzMTEwLwYDVQQD
EyhlMDlkNjhkOGYyNDJhOTI4MTZmMmNjMGMzNjg4MjIwM2VmMDAyZDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiz4je6Lo/oodtRa5vGQujd1b/Ad
jPyZhHhLx0po4QW2jHKR1hMNVF6hnz1ijee+OWWK0XM3Endwyeth7xRWeGWGRTqX
cTLNDtxnjdru1uONQuzto8q3pe1oQvZlsk0Gqj+TN3wsOR4QQruLKJC/XljaauOm
ZWZzxD5qKNgKHC5Z6vZWYM6oHtjnh/UgBx8gapI9SrzHGA8uBw5BqWty+Qkca19i
Xq3f/miIrsRHGalzLxZ8Vx6jxq9SNnbKYU1cayXI4S+e8DgqOAyepJNB0evNErNl
Ox65AWHLSWN6RcVZMY2nh/WSbZrQd6yf1Z02J3eB49biUvoIqMPIEpSF1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCdaNjyQqkoFvLMDDaIIgPvAC1fMB8GA1UdIwQY
MBaAFGq0N54RnnEAHM3+6/Tyryz18HoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXJRM25oR2VjUUFjemY3cjlQS3ZMUFh3ZWdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84OWE0YmYtMzI1YS00Njc1LWJiMDAt
MGE0MzM4Y2RmOTdiLzEvYXJRM25oR2VjUUFjemY3cjlQS3ZMUFh3ZWdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC84OWE0YmYtMzI1YS00Njc1LWJiMDAtMGE0MzM4Y2RmOTdi
LzEvYXJRM25oR2VjUUFjemY3cjlQS3ZMUFh3ZWdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARYCibwVS
CamPDgckMyIQ+M8vrgMn9sf6GgfS7XfZ9X8I1k3ODGYe35taQIfl2TkPaLv4QreL
sedLM784YpnjkFYqZjUMyAvjIXxhs/YGAlzn8Y9M76y/eJAkt1YNWEYuKPBfvkWQ
GL/vQqUpY2R27lP4gtufMg+d8+FuE8/34SAVtyVODwGxrYMTuHeeuiz+DkDthTjE
k0NE3+9V9GpokZwtAFS+C8VfFJfCsmJH9Y+P11htcwsCQox07Ncf7edlFyEUMBhn
ces4WrcIbFgPv5VhijTYafdoKq2vLXZTDPCsOZn+LxfYTpG11GqkYTcDTA4/pja3
cMlbv8MP0hG6Sg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:27 2025 by rpki-client