Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/5a5b74-cab9-4220-b45e-87e8cbd80b4e/1/_9122XOig24gFSaHn0CuO2X1ZPQ.mft
File: _9122XOig24gFSaHn0CuO2X1ZPQ.mft (raw, json)
Hash identifier: UK9ILbBhQ5CZjo0gjA0043HMTCy5HK0VsUToyNFj32Y=
Subject key identifier: DE:0B:0A:A4:0E:6C:93:E1:23:51:08:05:1D:72:64:03:81:69:8F:A4
Authority key identifier: FF:DD:76:D9:73:A2:83:6E:20:15:26:87:9F:40:AE:3B:65:F5:64:F4
Certificate issuer: /CN=ffdd76d973a2836e201526879f40ae3b65f564f4
Certificate serial: 019414DD68ECE79C0B4B33523EB3E69BFBD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9122XOig24gFSaHn0CuO2X1ZPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/5a5b74-cab9-4220-b45e-87e8cbd80b4e/1/_9122XOig24gFSaHn0CuO2X1ZPQ.mft
Manifest number: 1110
Signing time: Mon 30 Dec 2024 00:00:42 +0000
Manifest this update: Mon 30 Dec 2024 00:00:42 +0000
Manifest next update: Tue 31 Dec 2024 00:00:42 +0000
Files and hashes: 1: 3YB2Zlq6cQGL_zvdlsW5o8Obass.roa (hash: P9rzBe/z0wojX8Dyh55Aa+TPSh7ayxbyBOt6o93lnxE=)
2: _9122XOig24gFSaHn0CuO2X1ZPQ.crl (hash: QIPwM5FwKPp18+x9tcQQplQbTHoThB2VGw+2QlG/Vu8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:14:dd:68:ec:e7:9c:0b:4b:33:52:3e:b3:e6:9b:fb:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdd76d973a2836e201526879f40ae3b65f564f4
Validity
Not Before: Dec 30 00:00:42 2024 GMT
Not After : Dec 31 00:00:42 2024 GMT
Subject: CN=de0b0aa40e6c93e1235108051d72640381698fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:23:69:20:df:2f:a5:8d:8a:23:ff:58:dd:b1:
d9:5c:6f:01:2b:36:34:bb:ef:e0:a8:8f:40:da:bb:
4e:d9:d1:21:dc:29:2f:60:07:7c:27:9e:3c:98:53:
bd:0e:58:77:82:42:65:e8:46:5a:34:d2:e7:69:67:
a7:14:9a:29:77:29:a2:e2:ef:98:41:0b:0f:48:3e:
a5:95:90:aa:59:a0:4e:1e:59:c1:45:4d:13:d8:32:
62:62:c8:48:c3:b9:0e:80:07:4f:ae:0f:7c:0a:8f:
3a:b5:a8:17:0f:bb:55:70:c1:da:96:97:a9:1b:ef:
a7:f3:9b:8d:04:5e:50:be:51:03:26:e7:1d:46:40:
20:69:aa:96:de:32:0e:9f:5a:aa:1a:e7:e1:4f:c0:
cf:a7:a9:bb:b4:ea:ea:cb:4a:47:04:2e:2a:6f:51:
24:1b:5e:c6:3f:d9:a4:5e:04:fc:6b:f9:74:fc:33:
3d:55:92:67:ac:80:b5:8f:af:bb:ab:c6:ee:c9:03:
01:bf:ed:51:cc:64:3a:c6:66:00:c4:ae:17:aa:ff:
b2:4a:29:ad:b8:57:b5:19:d2:ad:05:58:b3:22:75:
96:ed:0d:14:68:90:64:0f:e0:c9:18:c9:ac:70:71:
45:c3:52:0c:1e:9b:f7:a1:f9:83:24:6c:82:4d:27:
e1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0B:0A:A4:0E:6C:93:E1:23:51:08:05:1D:72:64:03:81:69:8F:A4
X509v3 Authority Key Identifier:
keyid:FF:DD:76:D9:73:A2:83:6E:20:15:26:87:9F:40:AE:3B:65:F5:64:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9122XOig24gFSaHn0CuO2X1ZPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5a5b74-cab9-4220-b45e-87e8cbd80b4e/1/_9122XOig24gFSaHn0CuO2X1ZPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5a5b74-cab9-4220-b45e-87e8cbd80b4e/1/_9122XOig24gFSaHn0CuO2X1ZPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:9e:06:19:05:a2:23:c0:fb:b5:f7:2a:11:98:3e:43:e3:1c:
9f:d2:59:22:04:ae:88:5a:ce:f4:a6:ea:96:77:a0:68:fe:4c:
da:3a:01:c9:66:0f:bf:5a:40:ae:80:e5:9c:28:4d:b1:c6:11:
bc:0e:36:59:27:c0:e5:5f:7f:b2:7c:2a:0a:66:93:14:31:eb:
2f:21:a1:ae:f8:db:29:09:c7:86:25:92:c7:ad:ef:08:fd:68:
ca:2c:89:2c:b9:33:bd:5a:8e:8f:5d:b6:2f:a2:c0:0c:c2:50:
a8:e1:61:25:2d:8c:8a:a9:e4:90:c3:b7:2d:92:8c:c8:22:4c:
86:43:ab:31:36:87:19:44:4e:e6:2e:b8:cc:2b:c8:cd:29:74:
cc:5a:72:4c:62:69:fd:ab:28:9f:45:69:06:ed:3c:ed:06:4f:
5f:3a:3d:8a:2d:aa:10:d4:1c:a8:53:e5:12:82:03:2f:c6:0f:
6c:8e:e5:71:78:76:47:73:70:48:4e:51:3c:13:6b:7a:0f:ff:
60:b5:3f:b2:27:ab:da:97:cd:68:ae:a7:37:1b:5d:24:6e:56:
e0:ec:cb:90:4b:bb:96:b5:88:c9:55:f8:50:c9:74:9a:d3:bc:
11:72:99:5b:70:9d:67:6b:c7:c1:ca:bf:e2:65:04:20:77:b5:
0c:59:ee:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQU3Wjs55wLSzNSPrPmm/vZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZGQ3NmQ5NzNhMjgzNmUyMDE1MjY4NzlmNDBhZTNiNjVm
NTY0ZjQwHhcNMjQxMjMwMDAwMDQyWhcNMjQxMjMxMDAwMDQyWjAzMTEwLwYDVQQD
EyhkZTBiMGFhNDBlNmM5M2UxMjM1MTA4MDUxZDcyNjQwMzgxNjk4ZmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyNpIN8vpY2KI/9Y3bHZXG8BKzY0
u+/gqI9A2rtO2dEh3CkvYAd8J548mFO9Dlh3gkJl6EZaNNLnaWenFJopdymi4u+Y
QQsPSD6llZCqWaBOHlnBRU0T2DJiYshIw7kOgAdPrg98Co86tagXD7tVcMHalpep
G++n85uNBF5QvlEDJucdRkAgaaqW3jIOn1qqGufhT8DPp6m7tOrqy0pHBC4qb1Ek
G17GP9mkXgT8a/l0/DM9VZJnrIC1j6+7q8buyQMBv+1RzGQ6xmYAxK4Xqv+ySimt
uFe1GdKtBVizInWW7Q0UaJBkD+DJGMmscHFFw1IMHpv3ofmDJGyCTSfhkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4LCqQObJPhI1EIBR1yZAOBaY+kMB8GA1UdIwQY
MBaAFP/ddtlzooNuIBUmh59Arjtl9WT0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzkxMjJYT2lnMjRnRlNhSG4wQ3VPMlgxWlBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi81YTViNzQtY2FiOS00MjIwLWI0NWUt
ODdlOGNiZDgwYjRlLzEvXzkxMjJYT2lnMjRnRlNhSG4wQ3VPMlgxWlBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi81YTViNzQtY2FiOS00MjIwLWI0NWUtODdlOGNiZDgwYjRl
LzEvXzkxMjJYT2lnMjRnRlNhSG4wQ3VPMlgxWlBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZ4GGQWi
I8D7tfcqEZg+Q+Mcn9JZIgSuiFrO9KbqlnegaP5M2joByWYPv1pAroDlnChNscYR
vA42WSfA5V9/snwqCmaTFDHrLyGhrvjbKQnHhiWSx63vCP1oyiyJLLkzvVqOj122
L6LADMJQqOFhJS2MiqnkkMO3LZKMyCJMhkOrMTaHGURO5i64zCvIzSl0zFpyTGJp
/ason0VpBu087QZPXzo9ii2qENQcqFPlEoIDL8YPbI7lcXh2R3NwSE5RPBNreg//
YLU/sier2pfNaK6nNxtdJG5W4OzLkEu7lrWIyVX4UMl0mtO8EXKZW3CdZ2vHwcq/
4mUEIHe1DFnuFA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:37:08 2025 by rpki-client