Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
File: mZ333A7VGPHsaZdM-YzsqtoahoA.mft (raw, json)
Hash identifier: Vqe6j23MgBd/jTcueQqza3BtztJxJieCB2rpPwM9O7g=
Subject key identifier: E7:A4:B3:56:8C:6B:F8:12:9F:5D:36:A4:79:76:5F:D1:0C:0E:2D:29
Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
Certificate issuer: /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Certificate serial: 0194BCA985E65211982D6DCD2E68F9F14F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
Manifest number: 143A
Signing time: Fri 31 Jan 2025 14:00:13 +0000
Manifest this update: Fri 31 Jan 2025 14:00:13 +0000
Manifest next update: Sat 01 Feb 2025 14:00:13 +0000
Files and hashes: 1: 1Lqm7Z3ZvF5pC9_HDRj5UNkhd7A.roa (hash: kWMYsrVZaVYfP4Ct5LwW7USETz9giRgVCzYAo1+XF/g=)
2: QAnENOV7C6lzH_x8jNRvH6GLqjc.roa (hash: 9SXWdd7rJD88L+XO12WxPTCi0XtVW7lKw0msZqZnedw=)
3: VDSC__kYP5_4kXHu2u3139bBQnM.roa (hash: ZCOyTsAtgAk5HLmIWIyYiY4LjMxxRnLlXw4wf8pNdoU=)
4: mZ333A7VGPHsaZdM-YzsqtoahoA.crl (hash: rM7O+UPm+MwEfYxuLJQ/IVMgnRlKoC2j51U7vcpQEtU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:85:e6:52:11:98:2d:6d:cd:2e:68:f9:f1:4f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Validity
Not Before: Jan 31 14:00:13 2025 GMT
Not After : Feb 1 14:00:13 2025 GMT
Subject: CN=e7a4b3568c6bf8129f5d36a479765fd10c0e2d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bc:02:e4:96:a2:22:6f:79:1e:24:3a:7a:34:
b4:64:89:03:6f:2c:26:c8:d9:ed:60:bb:35:11:76:
ed:13:a3:93:d0:42:37:f8:52:d0:d5:2a:29:84:9d:
d5:64:4a:03:f7:79:f9:8f:da:54:35:65:f2:84:02:
4b:28:bf:11:c7:70:99:c9:5e:74:48:4e:76:2a:67:
3a:eb:ab:ea:bd:df:23:f5:aa:b9:a2:e6:c0:b9:a4:
55:03:ca:82:f9:d1:6f:cc:39:d3:37:25:06:cd:eb:
fa:db:a2:7b:d2:30:bd:7e:40:e2:4d:a2:67:c2:7f:
d5:e5:2b:61:0b:4c:b2:1a:f4:d0:3a:c8:7d:3b:1e:
14:48:26:ec:60:b5:64:8d:99:ad:09:39:26:c0:68:
dc:a9:d0:93:f3:4e:ce:7c:1e:82:86:ff:e1:54:41:
7c:e6:27:85:c5:d0:d4:7f:0d:3b:26:05:86:4f:66:
af:4b:57:9a:ef:52:18:81:8c:35:95:23:71:e0:38:
44:3b:da:22:59:6d:43:f1:3a:6e:09:f1:bc:93:5d:
a9:7f:dc:7f:dd:19:d1:d9:2f:95:05:6c:53:4d:b6:
e8:5f:e3:f5:18:f5:50:65:77:bd:99:72:a9:15:ed:
36:b3:3d:81:f0:d5:b4:2a:67:53:97:ee:84:11:0b:
b1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A4:B3:56:8C:6B:F8:12:9F:5D:36:A4:79:76:5F:D1:0C:0E:2D:29
X509v3 Authority Key Identifier:
keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:80:9c:6d:67:a8:d0:b2:f3:18:2b:11:33:5a:51:0f:3e:4c:
15:72:be:50:1a:ae:85:28:24:78:bb:b2:48:b9:9b:ec:58:32:
c7:24:a4:c2:1c:f5:3e:46:41:e8:80:23:25:34:30:7c:bf:c1:
19:7c:54:d1:4b:e4:88:69:31:18:a8:50:f9:83:e3:42:d8:23:
ff:70:e7:97:a4:b0:04:c7:13:63:ae:c5:94:a4:21:69:cf:e6:
60:ca:75:4b:f2:31:7c:76:55:39:c2:e8:26:1a:64:e7:af:54:
66:f0:f8:5b:e4:ca:a2:c1:0f:5e:4f:3b:c6:fb:8f:37:a8:6d:
7d:e1:07:bc:9d:ae:bc:c4:61:7c:55:34:5a:8a:d1:46:37:de:
57:7c:48:c5:3c:7b:f7:7e:46:dd:b8:b8:73:bf:f1:5c:78:35:
f4:59:e2:2b:27:5e:ac:ab:74:ca:46:35:8a:21:d9:6d:66:78:
75:60:d2:0c:35:95:a1:ef:65:2a:06:b5:0f:bb:7e:86:63:66:
eb:bb:97:e2:aa:a2:ae:28:73:92:a8:3e:64:02:9e:9a:40:5d:
d5:7c:3b:d0:d8:d3:3c:df:91:98:f5:6a:40:f2:e7:34:38:38:
db:97:34:f8:fa:15:f8:04:a5:2e:39:91:b5:df:6b:b1:fd:03:
13:a6:97:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qYXmUhGYLW3NLmj58U+bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5OWRmN2RjMGVkNTE4ZjFlYzY5OTc0Y2Y5OGNlY2FhZGEx
YTg2ODAwHhcNMjUwMTMxMTQwMDEzWhcNMjUwMjAxMTQwMDEzWjAzMTEwLwYDVQQD
EyhlN2E0YjM1NjhjNmJmODEyOWY1ZDM2YTQ3OTc2NWZkMTBjMGUyZDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLwC5JaiIm95HiQ6ejS0ZIkDbywm
yNntYLs1EXbtE6OT0EI3+FLQ1SophJ3VZEoD93n5j9pUNWXyhAJLKL8Rx3CZyV50
SE52Kmc666vqvd8j9aq5oubAuaRVA8qC+dFvzDnTNyUGzev626J70jC9fkDiTaJn
wn/V5SthC0yyGvTQOsh9Ox4USCbsYLVkjZmtCTkmwGjcqdCT807OfB6Chv/hVEF8
5ieFxdDUfw07JgWGT2avS1ea71IYgYw1lSNx4DhEO9oiWW1D8TpuCfG8k12pf9x/
3RnR2S+VBWxTTbboX+P1GPVQZXe9mXKpFe02sz2B8NW0KmdTl+6EEQuxXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOeks1aMa/gSn102pHl2X9EMDi0pMB8GA1UdIwQY
MBaAFJmd99wO1Rjx7GmXTPmM7KraGoaAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iYTg4ZjItMjE1Zi00Zjg5LWEzYWYt
MTM4Yjc4N2RlM2UzLzEvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9iYTg4ZjItMjE1Zi00Zjg5LWEzYWYtMTM4Yjc4N2RlM2Uz
LzEvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoCcbWeo
0LLzGCsRM1pRDz5MFXK+UBquhSgkeLuySLmb7FgyxySkwhz1PkZB6IAjJTQwfL/B
GXxU0UvkiGkxGKhQ+YPjQtgj/3Dnl6SwBMcTY67FlKQhac/mYMp1S/IxfHZVOcLo
Jhpk569UZvD4W+TKosEPXk87xvuPN6htfeEHvJ2uvMRhfFU0WorRRjfeV3xIxTx7
935G3bi4c7/xXHg19FniKyderKt0ykY1iiHZbWZ4dWDSDDWVoe9lKga1D7t+hmNm
67uX4qqirihzkqg+ZAKemkBd1Xw70NjTPN+RmPVqQPLnNDg425c0+PoV+ASlLjmR
td9rsf0DE6aXiA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:57 2025 by rpki-client