Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
File: m4FRrhZKW3grED3n98iolIkyrr8.mft (raw, json)
Hash identifier: FS6uO3roGOl+JFphQVRcVfj/vINSqxg9chKejiuSjN8=
Subject key identifier: 28:6A:85:D1:9C:1C:69:F2:85:F7:D3:10:37:E8:46:15:F2:FC:A6:17
Authority key identifier: 9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
Certificate issuer: /CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Certificate serial: 0195E00FAE9BFA63B471C788A4A1D7A8BAC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
Manifest number: 14C3
Signing time: Sat 29 Mar 2025 04:01:18 +0000
Manifest this update: Sat 29 Mar 2025 04:01:18 +0000
Manifest next update: Sun 30 Mar 2025 04:01:18 +0000
Files and hashes: 1: PCeyRcCnkd2jcpnfX_81z2NuiQU.roa (hash: qmuti4n5B4J7jLSHkHP5UysCAPRSd8cLYAhdX4sBlkA=)
2: c483fv6CCn7GnQMtAIF35ot4fxg.roa (hash: FWbPpQL/jtT7J1p5u5ozd8W0n2+YVhQ7GpqajXnuKcE=)
3: m4FRrhZKW3grED3n98iolIkyrr8.crl (hash: ylULsvEbESkhy6bYmcmsSdxFaFtiYCETpx67edkzVnc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:ae:9b:fa:63:b4:71:c7:88:a4:a1:d7:a8:ba:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Validity
Not Before: Mar 29 04:01:18 2025 GMT
Not After : Mar 30 04:01:18 2025 GMT
Subject: CN=286a85d19c1c69f285f7d31037e84615f2fca617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8a:22:7b:3d:9a:af:15:0e:e5:ff:00:c7:7a:
53:8d:63:e9:ae:1a:23:11:55:a6:99:be:c0:5e:21:
57:77:82:51:85:c7:14:65:da:01:50:cf:95:66:d9:
28:63:72:25:9f:95:ee:73:60:3b:ad:f0:f2:c4:ef:
0e:24:82:d9:e1:8d:a7:25:31:45:ca:54:48:04:8e:
f6:83:97:bd:37:82:6f:66:22:ed:20:ab:e9:f6:a6:
a2:4a:13:ef:71:de:c5:32:a3:7b:bf:c9:7e:54:c5:
e0:bb:03:89:d6:73:9a:f2:a6:95:8e:99:1c:4d:df:
16:87:2a:15:8d:86:a0:bf:45:6f:d8:00:9c:42:4a:
2f:fc:e2:80:1d:3e:26:3f:da:65:19:7c:d1:84:41:
1e:5c:93:d9:8c:57:b1:6f:17:d1:68:7d:6e:37:93:
f0:5f:c1:57:3a:b6:70:a9:90:aa:08:f7:77:fb:1d:
00:09:d7:3b:6a:48:65:81:2a:b0:b3:8a:fe:b7:68:
29:26:d0:68:de:c6:77:c0:1d:52:4a:95:fb:a3:21:
fa:e4:44:5b:fa:f3:b2:1d:17:6d:a6:83:84:75:16:
12:9a:3a:de:e7:4b:f9:6a:94:ba:25:f5:f2:41:1f:
c2:25:77:7c:10:8a:bb:4f:ac:46:2d:d4:bd:db:c8:
7c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6A:85:D1:9C:1C:69:F2:85:F7:D3:10:37:E8:46:15:F2:FC:A6:17
X509v3 Authority Key Identifier:
keyid:9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a0:7c:7d:d5:e2:dd:eb:59:9f:53:2b:33:fb:79:ac:56:85:
46:b2:ff:4e:e3:d1:2f:8a:62:21:49:eb:cd:9d:ff:e9:89:0b:
bc:0d:8e:52:be:e6:d3:f1:af:c9:29:56:83:53:ed:50:aa:d5:
2b:78:77:ed:66:fb:a5:ff:b6:22:1b:67:cb:2b:45:81:6b:5b:
fe:2f:7a:1e:d2:69:9b:c1:83:0e:ca:9a:e3:b9:91:dd:56:cb:
4b:11:4a:9f:fe:62:ae:40:43:db:05:20:f9:bd:f5:4d:09:5b:
d8:bb:dd:76:1c:da:3c:52:94:f1:3b:9f:db:1f:5c:ce:f1:95:
9c:b2:25:4c:c4:79:83:fd:22:9f:f7:c0:c2:70:2f:a5:29:c9:
6e:da:f3:a1:8c:c4:bb:41:07:2d:a7:17:c5:99:f2:0a:e0:f9:
36:85:a4:f5:61:bd:ad:02:ab:3c:2c:7f:ec:71:da:51:b0:df:
21:3b:2b:f6:06:03:3b:37:bd:64:29:04:4a:31:81:2c:d8:dd:
bc:a8:80:9c:5a:8e:ca:c3:94:d3:4d:d6:3c:0b:28:e6:bb:4c:
2e:12:c1:d7:e9:f2:ae:7f:2d:31:45:68:1d:f0:ae:05:5f:a4:
38:7c:5b:94:3b:c0:df:5c:f3:c6:81:7d:20:f5:6c:c7:c9:83:
d4:7d:db:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD66b+mO0cceIpKHXqLrHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliODE1MWFlMTY0YTViNzgyYjEwM2RlN2Y3YzhhODk0ODkz
MmFlYmYwHhcNMjUwMzI5MDQwMTE4WhcNMjUwMzMwMDQwMTE4WjAzMTEwLwYDVQQD
EygyODZhODVkMTljMWM2OWYyODVmN2QzMTAzN2U4NDYxNWYyZmNhNjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmooiez2arxUO5f8Ax3pTjWPprhoj
EVWmmb7AXiFXd4JRhccUZdoBUM+VZtkoY3Iln5Xuc2A7rfDyxO8OJILZ4Y2nJTFF
ylRIBI72g5e9N4JvZiLtIKvp9qaiShPvcd7FMqN7v8l+VMXguwOJ1nOa8qaVjpkc
Td8WhyoVjYagv0Vv2ACcQkov/OKAHT4mP9plGXzRhEEeXJPZjFexbxfRaH1uN5Pw
X8FXOrZwqZCqCPd3+x0ACdc7akhlgSqws4r+t2gpJtBo3sZ3wB1SSpX7oyH65ERb
+vOyHRdtpoOEdRYSmjre50v5apS6JfXyQR/CJXd8EIq7T6xGLdS928h8CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChqhdGcHGnyhffTEDfoRhXy/KYXMB8GA1UdIwQY
MBaAFJuBUa4WSlt4KxA95/fIqJSJMq6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTRGUnJoWktXM2dyRUQzbjk4aW9sSWt5cnI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC82YjZkMWYtNTQyMS00OGI5LWI3ZWIt
ZGExZmU5ZWJlZThlLzEvbTRGUnJoWktXM2dyRUQzbjk4aW9sSWt5cnI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC82YjZkMWYtNTQyMS00OGI5LWI3ZWItZGExZmU5ZWJlZThl
LzEvbTRGUnJoWktXM2dyRUQzbjk4aW9sSWt5cnI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFqB8fdXi
3etZn1MrM/t5rFaFRrL/TuPRL4piIUnrzZ3/6YkLvA2OUr7m0/GvySlWg1PtUKrV
K3h37Wb7pf+2IhtnyytFgWtb/i96HtJpm8GDDsqa47mR3VbLSxFKn/5irkBD2wUg
+b31TQlb2LvddhzaPFKU8Tuf2x9czvGVnLIlTMR5g/0in/fAwnAvpSnJbtrzoYzE
u0EHLacXxZnyCuD5NoWk9WG9rQKrPCx/7HHaUbDfITsr9gYDOze9ZCkESjGBLNjd
vKiAnFqOysOU003WPAso5rtMLhLB1+nyrn8tMUVoHfCuBV+kOHxblDvA31zzxoF9
IPVsx8mD1H3bWA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:36:35 2025 by rpki-client