Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
File: rImvYJhubZWDIvsCbGtlruyUmg0.mft (raw, json)
Hash identifier: J2YPH1+/dPh47GV4Q4qZxUE9golI0ssHW0vAWpj13Yg=
Subject key identifier: 51:38:68:BD:EE:97:DF:FE:90:AD:17:E7:2D:F7:55:9C:F5:41:F5:03
Authority key identifier: AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
Certificate issuer: /CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Certificate serial: 0195E1591A3B94EDC0B5FFA5F097F104D0B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
Manifest number: 060D
Signing time: Sat 29 Mar 2025 10:01:07 +0000
Manifest this update: Sat 29 Mar 2025 10:01:07 +0000
Manifest next update: Sun 30 Mar 2025 10:01:07 +0000
Files and hashes: 1: HWWs6MqFS2nmbLw3ShctihMbNaY.roa (hash: KSXNNa9oIp9r32J4311J0aN03+Peflc2SZu+HPxriyM=)
2: QUH08L51MfImU-aeLB1gViX82cI.roa (hash: YfmDCd25c+HZBRwpm39HGU+G/47jVrQR3XrIyRY2J8U=)
3: b81h_NWwhKjMbH2-sUXyjP4n64s.roa (hash: e3T+4A186w/5PvOch5tYGnvLHtBctNKp6kP6+X8+j/w=)
4: rImvYJhubZWDIvsCbGtlruyUmg0.crl (hash: QnFy/GAIasNnXtgHesjkbIBdPy0xN2BTAoPAQWDgrEs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:1a:3b:94:ed:c0:b5:ff:a5:f0:97:f1:04:d0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Validity
Not Before: Mar 29 10:01:07 2025 GMT
Not After : Mar 30 10:01:07 2025 GMT
Subject: CN=513868bdee97dffe90ad17e72df7559cf541f503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0c:ef:f2:9c:bd:4b:4b:4c:82:4f:d6:97:ea:
94:62:cf:5b:ad:1b:f2:0b:19:ab:9b:5d:00:da:38:
63:2e:69:ee:96:12:8d:1d:a7:51:bd:6d:25:6d:13:
61:66:77:9d:1b:ec:94:76:30:60:4e:0a:63:42:b1:
08:b7:ae:57:54:3c:c7:45:d9:a1:fe:a9:fe:30:9d:
36:31:bb:52:68:47:ba:42:de:0a:b1:bb:cf:c2:cc:
2f:e0:ef:dd:08:d0:a2:1b:a0:49:b6:79:1f:95:71:
00:38:8c:68:f4:f2:17:86:92:7b:64:06:cf:f4:8f:
69:72:40:0d:22:2e:b8:c1:34:56:24:47:2c:fa:9d:
83:b2:19:78:75:41:96:a3:be:02:ae:84:02:7f:92:
05:c6:89:35:b2:d5:32:d7:e9:da:36:e8:2c:11:b8:
60:5c:cd:4c:56:44:a9:70:0b:89:bf:0a:2d:8e:aa:
f4:2d:ee:7e:42:c1:21:93:1a:1f:37:5a:33:e8:5d:
76:53:18:39:49:86:2e:8e:b5:a2:d6:1e:ce:46:5c:
90:40:45:a0:b6:98:61:fc:15:6c:c6:13:13:e5:cf:
08:bc:b1:6b:3f:a9:53:ec:91:cb:8f:07:b5:b8:3a:
1a:36:43:fa:6b:4e:7e:a6:31:ee:86:10:32:1f:07:
17:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:38:68:BD:EE:97:DF:FE:90:AD:17:E7:2D:F7:55:9C:F5:41:F5:03
X509v3 Authority Key Identifier:
keyid:AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:44:66:ac:77:64:1c:2d:22:da:b2:62:b2:ac:65:d7:38:f7:
ba:9b:68:83:d6:06:24:00:c0:8d:73:e6:29:b9:91:3a:f9:73:
17:92:9d:d3:6f:7f:43:c6:a3:70:22:60:a1:a1:ad:bb:ac:c1:
c1:7e:59:6d:2c:8d:fd:8c:66:21:28:fe:03:c5:1b:02:92:66:
25:02:77:bb:9f:77:f7:90:d4:e8:d3:f7:75:10:83:24:de:21:
2c:bb:b1:bb:67:1f:2c:7e:06:aa:f8:bb:36:7c:b0:d6:6b:4e:
75:f2:08:b2:53:df:08:e8:5a:98:7b:88:68:56:63:0f:58:d8:
9f:87:e6:da:3d:31:77:a6:db:78:74:66:9c:c9:06:4b:ab:d3:
88:f0:f7:15:26:e1:ea:2c:ea:65:c2:96:13:e6:5c:a1:08:b1:
b2:6b:22:8c:b0:4a:05:09:60:d3:ec:42:63:ca:a1:6f:3b:72:
80:6e:85:28:e6:2f:8b:3b:59:cf:1a:2f:4d:8a:be:65:8c:8b:
e9:24:b4:32:f6:84:d0:20:ce:aa:52:3a:16:58:e6:f8:75:cd:
76:8f:71:d4:88:74:d7:b5:8a:fc:d1:c3:94:c9:fd:35:2e:66:
ea:70:99:db:f5:fa:a6:52:62:1f:11:e6:51:e4:fd:80:07:c7:
b8:d2:db:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWRo7lO3Atf+l8JfxBNC4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjODlhZjYwOTg2ZTZkOTU4MzIyZmIwMjZjNmI2NWFlZWM5
NDlhMGQwHhcNMjUwMzI5MTAwMTA3WhcNMjUwMzMwMTAwMTA3WjAzMTEwLwYDVQQD
Eyg1MTM4NjhiZGVlOTdkZmZlOTBhZDE3ZTcyZGY3NTU5Y2Y1NDFmNTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wzv8py9S0tMgk/Wl+qUYs9brRvy
Cxmrm10A2jhjLmnulhKNHadRvW0lbRNhZnedG+yUdjBgTgpjQrEIt65XVDzHRdmh
/qn+MJ02MbtSaEe6Qt4KsbvPwswv4O/dCNCiG6BJtnkflXEAOIxo9PIXhpJ7ZAbP
9I9pckANIi64wTRWJEcs+p2Dshl4dUGWo74CroQCf5IFxok1stUy1+naNugsEbhg
XM1MVkSpcAuJvwotjqr0Le5+QsEhkxofN1oz6F12Uxg5SYYujrWi1h7ORlyQQEWg
tphh/BVsxhMT5c8IvLFrP6lT7JHLjwe1uDoaNkP6a05+pjHuhhAyHwcXuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFE4aL3ul9/+kK0X5y33VZz1QfUDMB8GA1UdIwQY
MBaAFKyJr2CYbm2VgyL7AmxrZa7slJoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckltdllKaHViWldESXZzQ2JHdGxydXlVbWcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zY2NiODUtOTE4Yi00ZGU4LWJkYTIt
OWM4YmJhNjY0ZmYwLzEvckltdllKaHViWldESXZzQ2JHdGxydXlVbWcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8zY2NiODUtOTE4Yi00ZGU4LWJkYTItOWM4YmJhNjY0ZmYw
LzEvckltdllKaHViWldESXZzQ2JHdGxydXlVbWcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEERmrHdk
HC0i2rJisqxl1zj3uptog9YGJADAjXPmKbmROvlzF5Kd029/Q8ajcCJgoaGtu6zB
wX5ZbSyN/YxmISj+A8UbApJmJQJ3u59395DU6NP3dRCDJN4hLLuxu2cfLH4Gqvi7
Nnyw1mtOdfIIslPfCOhamHuIaFZjD1jYn4fm2j0xd6bbeHRmnMkGS6vTiPD3FSbh
6izqZcKWE+ZcoQixsmsijLBKBQlg0+xCY8qhbztygG6FKOYviztZzxovTYq+ZYyL
6SS0MvaE0CDOqlI6Fljm+HXNdo9x1Ih017WK/NHDlMn9NS5m6nCZ2/X6plJiHxHm
UeT9gAfHuNLb+Q==
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:18:54 2025 by rpki-client