Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
File: o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft (raw, json)
Hash identifier: WuM+xP0GfzsDAJvBa3boETBHgbn7kDHwUy/JzEzRH/Q=
Subject key identifier: 5C:B4:56:8F:D5:CC:C1:BF:05:37:E7:74:3A:AC:4D:40:DF:4F:07:6D
Authority key identifier: A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
Certificate issuer: /CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Certificate serial: 0194BC3BF25185FC6FD77F7EFEF5A3C26744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: HwLcn2tbXfaewoRLUqvEJHtXkUs.roa (hash: W1uC8oFLMGagyUd1+ow2TTRqqrP/F081zqAOESqRLNw=)
2: Mx-fCqDASlNjjbccZ-B5nKyFs1w.roa (hash: 1mo/7uKD2fUUwhxoh/B2HIiYyRaaQnMnmEkbBF+A3yk=)
3: o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl (hash: pXk8x+nGIiv2zjjApM/udTDhCaG+uz4NVkrO1NXyvtA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f2:51:85:fc:6f:d7:7f:7e:fe:f5:a3:c2:67:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=5cb4568fd5ccc1bf0537e7743aac4d40df4f076d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9e:92:8c:ee:d7:ae:ac:7f:34:3b:38:7a:a0:
23:6f:21:5a:fd:1d:15:cb:4e:72:26:50:85:e9:b5:
7d:fa:69:63:f3:70:52:2d:99:29:7a:5b:07:70:46:
b3:bd:9d:ce:fe:af:c6:63:b8:12:32:5f:4b:9c:ec:
16:e4:7e:7d:75:96:40:76:14:b5:89:ca:e4:29:5f:
7d:12:d6:d9:4a:87:3d:b7:c6:8b:d0:42:d9:d2:b8:
81:47:9a:5c:ba:91:03:9d:b2:5a:c6:5a:ea:46:3a:
7a:93:30:2f:3b:da:0c:c0:c8:96:4a:4a:17:9e:ea:
34:c1:b9:55:85:79:9a:e9:53:59:1b:c8:d1:aa:98:
79:a2:19:81:88:db:70:d2:3a:bb:5a:53:1c:e9:8d:
f3:f5:ad:69:9f:f4:01:5c:fa:42:84:e3:30:52:53:
58:cb:65:79:8a:23:1e:fb:4a:a2:b9:83:59:b7:4f:
28:b1:2a:a4:74:0f:1d:4c:d5:de:40:0c:e4:d4:b1:
59:b3:5c:bd:7c:67:12:26:8f:ed:c6:de:30:1e:84:
02:fc:38:5f:2d:ad:fd:21:ce:76:0e:ab:a6:bb:97:
2f:80:a6:7f:40:2d:32:df:1a:8e:c2:14:44:58:3d:
7c:a0:a9:59:d4:d1:89:f7:ef:e7:4a:ab:b3:96:0e:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B4:56:8F:D5:CC:C1:BF:05:37:E7:74:3A:AC:4D:40:DF:4F:07:6D
X509v3 Authority Key Identifier:
keyid:A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:21:97:bc:db:32:25:0a:b1:c9:92:95:21:41:dd:c3:98:f3:
d4:78:c4:f3:9e:0f:60:c6:28:88:a1:1d:55:11:bb:7d:dc:fa:
da:aa:53:49:e8:56:c8:32:89:1f:48:0b:85:54:a6:5f:50:da:
b2:39:82:db:c7:17:48:10:dc:29:29:b6:e0:cf:8c:4f:cd:21:
d5:39:86:84:07:c2:ce:56:8b:51:1c:06:b5:0c:d2:60:54:9a:
d4:7a:73:cd:6b:46:c6:3b:84:c9:34:5a:62:6d:c9:fb:bf:2c:
24:14:15:8c:81:10:c9:03:40:c6:88:ea:da:c0:1a:1d:4f:17:
7c:7d:27:03:d5:c8:60:1a:f7:ac:3f:3a:44:a5:18:74:1b:26:
e7:8f:8d:04:f2:0e:6f:9e:32:38:f2:c7:a5:ec:98:b9:c2:f6:
f3:c9:5d:54:1e:f1:44:f6:ad:c6:97:f0:12:9c:d8:4d:b9:3d:
7b:f6:2d:b3:8a:44:bf:53:0e:06:bf:fd:fa:76:55:27:08:8e:
e7:d3:2c:c1:40:1d:ae:eb:a7:a3:bd:24:ba:86:dd:46:f6:48:
2f:9e:dd:8b:df:f6:60:ae:27:fd:34:fa:55:f8:dc:90:76:6d:
67:45:b0:4e:0f:ff:29:6f:d1:06:60:d0:fc:7d:88:76:69:32:
2b:a6:2d:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O/JRhfxv139+/vWjwmdEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYWE4ZGQxMTg3NjZhZWQzYjA5ZWQ2OWYyZTQ3ZGMxZDJj
MTYxNTkwHhcNMjUwMTMxMTIwMDMyWhcNMjUwMjAxMTIwMDMyWjAzMTEwLwYDVQQD
Eyg1Y2I0NTY4ZmQ1Y2NjMWJmMDUzN2U3NzQzYWFjNGQ0MGRmNGYwNzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ6SjO7Xrqx/NDs4eqAjbyFa/R0V
y05yJlCF6bV9+mlj83BSLZkpelsHcEazvZ3O/q/GY7gSMl9LnOwW5H59dZZAdhS1
icrkKV99EtbZSoc9t8aL0ELZ0riBR5pcupEDnbJaxlrqRjp6kzAvO9oMwMiWSkoX
nuo0wblVhXma6VNZG8jRqph5ohmBiNtw0jq7WlMc6Y3z9a1pn/QBXPpChOMwUlNY
y2V5iiMe+0qiuYNZt08osSqkdA8dTNXeQAzk1LFZs1y9fGcSJo/txt4wHoQC/Dhf
La39Ic52Dqumu5cvgKZ/QC0y3xqOwhREWD18oKlZ1NGJ9+/nSquzlg4dgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFy0Vo/VzMG/BTfndDqsTUDfTwdtMB8GA1UdIwQY
MBaAFKOqjdEYdmrtOwntafLkfcHSwWFZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZxTjBSaDJhdTA3Q2UxcDh1Ujl3ZExCWVZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8zOTFlNTQtYzIxYS00MDVhLTg4YWEt
NjA3OTc4OTEwMGNhLzEvbzZxTjBSaDJhdTA3Q2UxcDh1Ujl3ZExCWVZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8zOTFlNTQtYzIxYS00MDVhLTg4YWEtNjA3OTc4OTEwMGNh
LzEvbzZxTjBSaDJhdTA3Q2UxcDh1Ujl3ZExCWVZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSGXvNsy
JQqxyZKVIUHdw5jz1HjE854PYMYoiKEdVRG7fdz62qpTSehWyDKJH0gLhVSmX1Da
sjmC28cXSBDcKSm24M+MT80h1TmGhAfCzlaLURwGtQzSYFSa1HpzzWtGxjuEyTRa
Ym3J+78sJBQVjIEQyQNAxojq2sAaHU8XfH0nA9XIYBr3rD86RKUYdBsm54+NBPIO
b54yOPLHpeyYucL288ldVB7xRPatxpfwEpzYTbk9e/Yts4pEv1MOBr/9+nZVJwiO
59MswUAdruuno70kuobdRvZIL57di9/2YK4n/TT6VfjckHZtZ0WwTg//KW/RBmDQ
/H2IdmkyK6YtpA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 08:37:27 2025 by rpki-client