Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
File: A9aopjn4iq8fQ21qILQXezjTkPw.mft (raw, json)
Hash identifier: YHUhRITkenteX73IdHkvZDiImo1ve1XL8zfBTvr1GC4=
Subject key identifier: CB:EA:D0:8B:6A:FA:71:C3:6B:67:09:15:DE:74:E4:F9:A7:C3:00:86
Authority key identifier: 03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
Certificate issuer: /CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Certificate serial: 0195E122598BDABF6FCADACB930CE9BBF807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
Manifest number: 01A5
Signing time: Sat 29 Mar 2025 09:01:19 +0000
Manifest this update: Sat 29 Mar 2025 09:01:19 +0000
Manifest next update: Sun 30 Mar 2025 09:01:19 +0000
Files and hashes: 1: 9EiTee9k8nFjET11hPatStF9nkM.roa (hash: rKaveA0rfCcy5/zhxw6q4cAzgO9tcO/IcjE7cyeyoGI=)
2: A9aopjn4iq8fQ21qILQXezjTkPw.crl (hash: T7ZY4pxjQPIEY0v1v63AX4MTHMkOsADoX02M0NQxFdE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:59:8b:da:bf:6f:ca:da:cb:93:0c:e9:bb:f8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Validity
Not Before: Mar 29 09:01:19 2025 GMT
Not After : Mar 30 09:01:19 2025 GMT
Subject: CN=cbead08b6afa71c36b670915de74e4f9a7c30086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:39:43:8c:7c:d3:1d:2f:94:5d:b9:c1:d7:60:
b7:78:dd:dc:ae:f1:fb:dc:28:b6:34:e2:4d:37:9e:
a8:16:30:77:a8:06:31:9d:f6:c6:2a:98:64:e7:98:
e0:16:ae:2c:fd:08:bc:9b:ff:3c:61:63:de:53:f5:
cc:e9:1d:5a:03:02:ac:64:c0:fc:5f:ba:b6:42:5f:
06:8f:fa:49:33:f9:28:1f:9d:33:68:3f:b6:b4:b0:
26:67:c3:16:90:f5:7a:07:15:4d:e3:b5:dd:11:3e:
51:cd:57:25:b2:7e:89:16:a5:4d:2f:1a:09:b3:ee:
8a:9b:ca:fb:8a:be:79:2b:28:1f:18:a3:04:94:13:
fe:66:5e:ec:46:c9:f6:d2:d8:bc:34:54:a3:94:72:
cb:4e:b2:5f:e5:9e:45:7e:75:05:8e:49:2a:60:b3:
d2:88:be:b6:68:16:fb:68:ee:1b:17:84:04:4a:47:
57:22:89:6a:a5:a5:2a:f8:ab:ef:fd:80:99:71:52:
35:41:b9:fb:01:f2:bd:3e:fd:fa:bb:85:d6:6c:fb:
69:3d:8f:b6:6d:88:f4:7f:6e:61:5a:c7:ed:73:27:
27:f1:ed:ec:54:19:f2:8d:f0:5b:c3:eb:30:d9:1b:
ed:6c:10:d4:9f:70:81:00:e9:bf:ae:9c:cb:ea:5b:
3a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EA:D0:8B:6A:FA:71:C3:6B:67:09:15:DE:74:E4:F9:A7:C3:00:86
X509v3 Authority Key Identifier:
keyid:03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:04:97:13:f6:53:0a:d1:bf:9b:5d:cd:0c:89:27:9e:8a:02:
a5:8f:88:bc:04:01:8b:80:98:48:40:3f:09:30:c7:ad:f2:5f:
e3:dd:ac:0a:24:4f:25:b5:4c:81:63:65:d9:58:34:79:5d:66:
42:b3:8d:5d:5f:0a:20:1c:66:22:9a:14:0c:8a:85:09:7e:e1:
af:dc:49:ed:58:ec:1f:db:c1:d3:df:a8:d9:47:cb:68:b6:72:
d9:3e:fb:c6:68:37:ad:cf:9d:61:6b:b0:60:07:5a:91:0e:0c:
bc:62:59:f7:57:3e:e6:8d:0f:47:df:d9:58:2d:91:82:25:bf:
c4:9e:21:c3:06:7e:68:c8:e3:ad:48:e3:d1:92:94:7b:54:51:
aa:e5:9d:7a:0a:e0:55:99:6b:11:3f:1d:1a:4d:39:1c:b5:f2:
d7:1a:73:86:89:53:04:09:e6:41:b1:10:30:71:9f:36:c8:f7:
43:97:25:a1:05:b9:a1:b1:f8:fa:07:5d:18:9b:d5:ce:f0:57:
7d:2b:79:c9:96:b3:86:f8:fc:6d:0d:26:df:1c:f0:77:5d:93:
4b:66:25:f0:2d:a1:dd:38:fa:1d:fc:14:c4:ec:49:1b:44:b4:
74:62:3d:24:c3:ae:5b:3a:77:4e:16:2e:e7:b7:ff:59:b8:4e:
b8:56:e2:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhIlmL2r9vytrLkwzpu/gHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZDZhOGE2MzlmODhhYWYxZjQzNmQ2YTIwYjQxNzdiMzhk
MzkwZmMwHhcNMjUwMzI5MDkwMTE5WhcNMjUwMzMwMDkwMTE5WjAzMTEwLwYDVQQD
EyhjYmVhZDA4YjZhZmE3MWMzNmI2NzA5MTVkZTc0ZTRmOWE3YzMwMDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjlDjHzTHS+UXbnB12C3eN3crvH7
3Ci2NOJNN56oFjB3qAYxnfbGKphk55jgFq4s/Qi8m/88YWPeU/XM6R1aAwKsZMD8
X7q2Ql8Gj/pJM/koH50zaD+2tLAmZ8MWkPV6BxVN47XdET5RzVclsn6JFqVNLxoJ
s+6Km8r7ir55KygfGKMElBP+Zl7sRsn20ti8NFSjlHLLTrJf5Z5FfnUFjkkqYLPS
iL62aBb7aO4bF4QESkdXIolqpaUq+Kvv/YCZcVI1Qbn7AfK9Pv36u4XWbPtpPY+2
bYj0f25hWsftcycn8e3sVBnyjfBbw+sw2RvtbBDUn3CBAOm/rpzL6ls6hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvq0Itq+nHDa2cJFd505PmnwwCGMB8GA1UdIwQY
MBaAFAPWqKY5+IqvH0NtaiC0F3s405D8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jMTgxMDUtZDkwZi00NDJmLThiMWQt
YzIwZGU1NDNjMGRmLzEvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9jMTgxMDUtZDkwZi00NDJmLThiMWQtYzIwZGU1NDNjMGRm
LzEvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArgSXE/ZT
CtG/m13NDIknnooCpY+IvAQBi4CYSEA/CTDHrfJf492sCiRPJbVMgWNl2Vg0eV1m
QrONXV8KIBxmIpoUDIqFCX7hr9xJ7VjsH9vB09+o2UfLaLZy2T77xmg3rc+dYWuw
YAdakQ4MvGJZ91c+5o0PR9/ZWC2RgiW/xJ4hwwZ+aMjjrUjj0ZKUe1RRquWdegrg
VZlrET8dGk05HLXy1xpzholTBAnmQbEQMHGfNsj3Q5cloQW5obH4+gddGJvVzvBX
fSt5yZazhvj8bQ0m3xzwd12TS2Yl8C2h3Tj6HfwUxOxJG0S0dGI9JMOuWzp3ThYu
57f/WbhOuFbiFA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:58:34 2025 by rpki-client