Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
File: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft (raw, json)
Hash identifier: iMEakoUk3bLtVXvxQeno1YwNeOBO4esZ5o4pDEg/NVU=
Subject key identifier: 84:9A:FD:72:E5:EE:CD:A9:15:6A:7B:9E:70:FD:34:4F:83:B3:20:2E
Authority key identifier: D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
Certificate issuer: /CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Certificate serial: 0195E19004B5A8E3A9B6AE8EBDAD2A882E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
Manifest number: 11E8
Signing time: Sat 29 Mar 2025 11:01:06 +0000
Manifest this update: Sat 29 Mar 2025 11:01:06 +0000
Manifest next update: Sun 30 Mar 2025 11:01:06 +0000
Files and hashes: 1: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl (hash: 19TXFwrz5ymSvYvr7Y3bcFJHhcVSbO82meHhsE/x0p0=)
2: KqC_P0HJkM92_lcS0Jpa0USOEVs.roa (hash: KV6dI03WkVzxAgFRttiw4LQ06BXsoXy1LKrixgsu660=)
3: qufcdPSdEtDaFtrISHEdLWv3S2M.roa (hash: T2dPM9R1QKb1KXwCc1Gtxp+rTdBsb2KAhbC/WGxf99k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:04:b5:a8:e3:a9:b6:ae:8e:bd:ad:2a:88:2e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Validity
Not Before: Mar 29 11:01:06 2025 GMT
Not After : Mar 30 11:01:06 2025 GMT
Subject: CN=849afd72e5eecda9156a7b9e70fd344f83b3202e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c1:d8:5e:3c:f3:4b:a0:12:2f:66:a0:b0:27:
5e:7d:4f:fd:44:69:be:c4:8d:a4:d8:be:14:5e:e2:
c8:34:44:b0:d9:52:2e:d4:64:fb:e7:17:f8:3f:9a:
ec:70:ee:36:80:51:8b:d8:e4:2d:b4:6d:06:6f:58:
01:87:f7:5c:cb:42:99:6a:8b:5d:31:e6:3b:62:d4:
b0:db:97:ee:db:4e:6c:8c:47:5f:97:ca:75:33:a6:
2f:a1:92:c4:16:c2:68:c0:10:5b:d4:0b:6b:ae:64:
c8:21:da:9f:b3:30:c5:58:24:44:d0:cc:7d:c4:4b:
aa:b7:c8:f1:36:6d:3f:f6:a2:a7:32:fd:41:6b:8d:
83:b8:28:d1:8e:43:c7:68:e5:06:95:f2:79:18:a0:
73:86:0d:c6:54:a0:77:d2:68:c8:c3:71:57:b7:42:
fd:a1:b2:1b:ee:f0:65:fe:8a:3e:30:dd:01:72:e6:
8b:8a:74:6a:65:8d:b4:45:24:0e:3b:55:95:7a:85:
af:93:82:3e:8a:b8:89:67:fb:40:e9:23:9a:64:ab:
8d:f6:a4:00:70:db:80:a8:1d:76:38:4a:b6:6e:d3:
bc:b6:d2:b2:f2:19:2f:c8:74:1e:50:0a:9d:74:7f:
ad:3e:f2:54:19:c3:d1:9e:6e:55:89:64:7a:43:d8:
85:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9A:FD:72:E5:EE:CD:A9:15:6A:7B:9E:70:FD:34:4F:83:B3:20:2E
X509v3 Authority Key Identifier:
keyid:D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:94:80:fc:97:d5:dd:20:3f:1b:df:c0:a9:c6:50:f1:b5:f5:
d7:6b:5f:59:81:5e:28:ed:aa:4a:2b:b8:1e:1a:31:bf:93:34:
e5:80:80:db:39:96:0d:98:4d:52:19:4d:55:86:1d:90:2f:5f:
89:fb:6c:5d:1d:67:67:66:b3:a3:ff:c8:fe:7c:0f:1a:ed:23:
bf:0d:27:d4:87:78:9f:61:59:7b:47:c9:4a:8e:33:d3:f9:95:
5d:2c:84:7a:dd:11:3c:af:5f:6f:8b:bf:10:86:7f:f7:d0:0b:
60:94:35:a5:25:0c:c4:ee:3e:16:ca:17:a8:0a:03:bc:0e:ac:
0c:6c:6b:e6:66:32:1a:5c:62:a3:32:6d:69:3c:d9:a2:b6:5e:
2c:7d:39:49:d2:e8:56:25:60:05:fd:4a:e7:dd:a9:25:99:69:
fd:44:f2:bc:21:7a:e7:58:f2:dc:89:98:82:f7:80:e4:fb:c7:
c2:dc:54:f8:e0:e2:76:0e:52:af:e4:6e:12:c8:4c:98:b9:5f:
e8:87:d2:95:ad:43:fe:d7:95:59:7c:a0:3a:e3:89:9d:10:7c:
b5:a8:7a:a6:ab:fc:b4:bb:42:2f:5f:f7:58:fc:12:31:7e:34:
10:77:e0:31:ee:2c:25:70:6e:b9:70:2c:bd:2f:80:4a:1f:8c:
97:a1:f2:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhkAS1qOOptq6Ova0qiC6MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMmQ0ZDJmYjc1YTc1NTlhMjBmNzk1NDhjNDU4NTQyZmQw
YTlhNGMwHhcNMjUwMzI5MTEwMTA2WhcNMjUwMzMwMTEwMTA2WjAzMTEwLwYDVQQD
Eyg4NDlhZmQ3MmU1ZWVjZGE5MTU2YTdiOWU3MGZkMzQ0ZjgzYjMyMDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsHYXjzzS6ASL2agsCdefU/9RGm+
xI2k2L4UXuLINESw2VIu1GT75xf4P5rscO42gFGL2OQttG0Gb1gBh/dcy0KZaotd
MeY7YtSw25fu205sjEdfl8p1M6YvoZLEFsJowBBb1AtrrmTIIdqfszDFWCRE0Mx9
xEuqt8jxNm0/9qKnMv1Ba42DuCjRjkPHaOUGlfJ5GKBzhg3GVKB30mjIw3FXt0L9
obIb7vBl/oo+MN0BcuaLinRqZY20RSQOO1WVeoWvk4I+iriJZ/tA6SOaZKuN9qQA
cNuAqB12OEq2btO8ttKy8hkvyHQeUAqddH+tPvJUGcPRnm5ViWR6Q9iFPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISa/XLl7s2pFWp7nnD9NE+DsyAuMB8GA1UdIwQY
MBaAFNEtTS+3WnVZog95VIxFhUL9CppMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81NzViZWYtOTcwYS00YjM3LWIxMmUt
MWVlY2Q1ODVkYjhjLzEvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi81NzViZWYtOTcwYS00YjM3LWIxMmUtMWVlY2Q1ODVkYjhj
LzEvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZSA/JfV
3SA/G9/AqcZQ8bX112tfWYFeKO2qSiu4Hhoxv5M05YCA2zmWDZhNUhlNVYYdkC9f
iftsXR1nZ2azo//I/nwPGu0jvw0n1Id4n2FZe0fJSo4z0/mVXSyEet0RPK9fb4u/
EIZ/99ALYJQ1pSUMxO4+FsoXqAoDvA6sDGxr5mYyGlxiozJtaTzZorZeLH05SdLo
ViVgBf1K592pJZlp/UTyvCF651jy3ImYgveA5PvHwtxU+ODidg5Sr+RuEshMmLlf
6IfSla1D/teVWXygOuOJnRB8tah6pqv8tLtCL1/3WPwSMX40EHfgMe4sJXBuuXAs
vS+ASh+Ml6Hycg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:05:41 2025 by rpki-client