Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
File: 2VSrlORZUZTSw5sdP-aokfHrkrw.mft (raw, json)
Hash identifier: uSZOc2iejTXSzrpMnV1JhaDEkKh/wOau+7Uy1DnfyfE=
Subject key identifier: 1B:87:35:85:ED:E0:CC:F5:FC:23:84:DB:6D:72:F7:F5:2E:74:35:D7
Authority key identifier: D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
Certificate issuer: /CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Certificate serial: 0195DFD950A18A4BEC88D96379E26885DF28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
Manifest number: 0620
Signing time: Sat 29 Mar 2025 03:01:55 +0000
Manifest this update: Sat 29 Mar 2025 03:01:55 +0000
Manifest next update: Sun 30 Mar 2025 03:01:55 +0000
Files and hashes: 1: 2VSrlORZUZTSw5sdP-aokfHrkrw.crl (hash: R1TibdAvjJEOQTwXzr0mvTOdSsLr2ZWOSY9BBtLIp5A=)
2: ExuO0wU2-ClJDZRwWSRuAs7W0gk.roa (hash: 2j3+sZIfGB/S0w3o+OLoSghT+pM132gfjkW2EjpJ9JQ=)
3: aedVSgDzPN8NSNc0AWT5LWxB0ME.roa (hash: dpDe6aIbJvexkIC5o0dZBz+eF8xcPh7l66sRiS3ImZY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:50:a1:8a:4b:ec:88:d9:63:79:e2:68:85:df:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Validity
Not Before: Mar 29 03:01:55 2025 GMT
Not After : Mar 30 03:01:55 2025 GMT
Subject: CN=1b873585ede0ccf5fc2384db6d72f7f52e7435d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f1:0c:b8:2c:4a:b3:88:2e:2d:18:15:57:c6:
a2:fb:1a:05:37:31:cf:18:88:ca:7b:95:f1:8f:5f:
95:34:34:fc:c0:40:47:70:21:57:b7:7e:a0:44:0a:
78:ce:77:61:0d:72:0a:fc:49:bc:96:eb:b3:71:33:
42:b0:f1:80:6c:11:2b:f3:20:37:85:07:83:a8:38:
22:d8:25:74:fb:bc:fb:83:6f:fc:0a:5d:06:7e:72:
2f:f2:13:29:9e:d3:eb:8b:c8:bd:9e:28:d7:98:24:
b0:a5:0f:59:be:f9:af:f2:f9:a4:63:98:04:c4:b7:
cd:23:14:ca:ca:87:a2:05:50:3b:18:d9:0f:a2:53:
69:91:b5:c2:fe:ec:d5:fc:ec:20:6b:cd:c2:65:32:
45:e1:bc:43:c3:0f:df:ca:67:67:a6:f0:67:be:cd:
ca:74:ae:c2:a5:98:0c:a8:d0:26:36:0d:d6:79:54:
38:f9:03:40:c1:eb:8d:97:70:fa:26:85:5e:6d:54:
07:0f:a2:de:60:fc:d7:da:42:89:32:79:ef:b2:f5:
93:c5:d5:da:b4:95:bd:3b:b1:f3:f8:ae:6a:0e:a8:
65:d9:d6:14:b4:1a:f4:0b:7c:b1:96:09:65:50:c2:
22:a3:87:42:25:91:56:40:3e:69:19:4b:68:f7:4c:
94:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:87:35:85:ED:E0:CC:F5:FC:23:84:DB:6D:72:F7:F5:2E:74:35:D7
X509v3 Authority Key Identifier:
keyid:D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4f:67:ba:e4:a9:1a:da:bc:1c:31:85:51:31:e3:ff:2c:5f:
5f:49:de:12:36:cb:18:e4:30:08:65:85:1e:51:a7:a2:53:cf:
56:1d:0e:c9:cf:1e:c0:01:6c:7f:c2:27:f3:d7:f2:18:6d:91:
41:96:13:c0:e1:98:7b:31:6a:f1:7d:a8:c6:cd:30:91:5e:f5:
a3:1c:44:7e:8a:df:32:22:ef:45:d7:f4:5e:92:13:44:c6:30:
01:a5:80:66:92:e4:e0:12:24:5b:f6:55:79:44:9c:20:85:25:
ca:60:f8:ef:79:96:12:d3:21:6a:d7:a7:96:b7:2a:31:8f:2d:
6a:f8:d7:85:a8:86:51:89:14:7f:77:8a:60:90:6d:6e:9d:3c:
58:35:e6:8d:92:df:41:03:2f:af:68:69:3a:8e:d3:5d:1b:84:
fa:a6:2f:ef:2b:a6:02:cb:27:f7:0f:29:f7:c8:1e:d4:1f:9b:
0f:f3:8f:2a:f2:02:4a:20:40:8f:74:35:c1:71:31:e3:89:d3:
7d:2a:b2:54:70:63:8a:3f:df:77:5b:00:5b:88:eb:30:ad:af:
01:fa:93:02:4b:2c:0c:69:c1:0c:9b:54:5c:18:10:50:01:55:
1f:8c:71:97:a5:dc:80:0e:8c:94:99:b5:e7:fe:03:fa:6a:32:
b0:1b:c6:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXf2VChikvsiNljeeJohd8oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NTRhYjk0ZTQ1OTUxOTRkMmMzOWIxZDNmZTZhODkxZjFl
YjkyYmMwHhcNMjUwMzI5MDMwMTU1WhcNMjUwMzMwMDMwMTU1WjAzMTEwLwYDVQQD
EygxYjg3MzU4NWVkZTBjY2Y1ZmMyMzg0ZGI2ZDcyZjdmNTJlNzQzNWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfEMuCxKs4guLRgVV8ai+xoFNzHP
GIjKe5Xxj1+VNDT8wEBHcCFXt36gRAp4zndhDXIK/Em8luuzcTNCsPGAbBEr8yA3
hQeDqDgi2CV0+7z7g2/8Cl0GfnIv8hMpntPri8i9nijXmCSwpQ9Zvvmv8vmkY5gE
xLfNIxTKyoeiBVA7GNkPolNpkbXC/uzV/Owga83CZTJF4bxDww/fymdnpvBnvs3K
dK7CpZgMqNAmNg3WeVQ4+QNAweuNl3D6JoVebVQHD6LeYPzX2kKJMnnvsvWTxdXa
tJW9O7Hz+K5qDqhl2dYUtBr0C3yxlgllUMIio4dCJZFWQD5pGUto90yUVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuHNYXt4Mz1/COE221y9/UudDXXMB8GA1UdIwQY
MBaAFNlUq5TkWVGU0sObHT/mqJHx65K8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlZTcmxPUlpVWlRTdzVzZFAtYW9rZkhya3J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82NDc0ODUtNjM1ZS00YWM2LWIwYjkt
MzM1MWM1NzdiNDMyLzEvMlZTcmxPUlpVWlRTdzVzZFAtYW9rZkhya3J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC82NDc0ODUtNjM1ZS00YWM2LWIwYjktMzM1MWM1NzdiNDMy
LzEvMlZTcmxPUlpVWlRTdzVzZFAtYW9rZkhya3J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj09nuuSp
Gtq8HDGFUTHj/yxfX0neEjbLGOQwCGWFHlGnolPPVh0Oyc8ewAFsf8In89fyGG2R
QZYTwOGYezFq8X2oxs0wkV71oxxEforfMiLvRdf0XpITRMYwAaWAZpLk4BIkW/ZV
eUScIIUlymD473mWEtMhatenlrcqMY8tavjXhaiGUYkUf3eKYJBtbp08WDXmjZLf
QQMvr2hpOo7TXRuE+qYv7yumAssn9w8p98ge1B+bD/OPKvICSiBAj3Q1wXEx44nT
fSqyVHBjij/fd1sAW4jrMK2vAfqTAkssDGnBDJtUXBgQUAFVH4xxl6XcgA6MlJm1
5/4D+moysBvGXw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:36:35 2025 by rpki-client