Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/7e8b2d-38ff-4c4c-96ed-15bae6ad6fa5/1/rvkQ3jktNfyh9WOVbF5zQEny_yM.mft
File: rvkQ3jktNfyh9WOVbF5zQEny_yM.mft (raw, json)
Hash identifier: 1m40vkjBe5GjJTQP1Y+LIktB1XTAeD+hM6HnqkdciI4=
Subject key identifier: 70:E0:1F:9E:DB:B9:E0:12:9D:6F:09:12:A6:6B:72:25:9B:13:2E:59
Authority key identifier: AE:F9:10:DE:39:2D:35:FC:A1:F5:63:95:6C:5E:73:40:49:F2:FF:23
Certificate issuer: /CN=aef910de392d35fca1f563956c5e734049f2ff23
Certificate serial: 018D7BEE881B667A85510DFA290E0C99EEFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvkQ3jktNfyh9WOVbF5zQEny_yM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/7e8b2d-38ff-4c4c-96ed-15bae6ad6fa5/1/rvkQ3jktNfyh9WOVbF5zQEny_yM.mft
Manifest number: 090E
Signing time: Tue 06 Feb 2024 01:00:46 +0000
Manifest this update: Tue 06 Feb 2024 01:00:46 +0000
Manifest next update: Wed 07 Feb 2024 01:00:46 +0000
Files and hashes: 1: YMIfR8c3UoRplXKiAMKjVlVmcLI.roa (hash: ZcUtenv5mGiUut/wFLRQSdovE1n+yWXwZWYN1L7O9i8=)
2: rvkQ3jktNfyh9WOVbF5zQEny_yM.crl (hash: y+FOlTUEdlU+kJuHcfAivIEZshN8fNWpt+vZsaVMNvw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7b:ee:88:1b:66:7a:85:51:0d:fa:29:0e:0c:99:ee:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aef910de392d35fca1f563956c5e734049f2ff23
Validity
Not Before: Feb 6 01:00:46 2024 GMT
Not After : Feb 7 01:00:46 2024 GMT
Subject: CN=70e01f9edbb9e0129d6f0912a66b72259b132e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f3:7c:9f:28:0d:e9:e9:36:77:57:03:aa:ad:
79:a6:25:3a:f1:e4:7f:27:98:60:0f:6f:9a:82:15:
9a:9e:54:18:e0:ad:f8:0a:20:d1:6a:33:e3:3a:9e:
8d:59:29:16:e9:d8:15:c4:a7:3c:3a:89:80:cf:bf:
56:47:84:7e:ad:3a:2b:b0:c3:c3:c6:0b:64:be:d6:
c8:a8:35:18:ca:09:db:4e:d0:74:a3:ae:7e:21:d1:
a4:84:a9:80:d4:51:88:a5:20:ac:6f:60:80:b8:95:
bf:8e:e7:63:d2:40:32:02:83:1d:2e:27:14:aa:84:
60:04:f5:f4:43:fe:a7:83:ac:ba:72:99:c6:5e:81:
51:f2:1f:83:7d:f5:1c:f4:99:56:f4:35:28:9d:19:
48:ea:d3:dd:4e:69:66:8a:2a:b3:ec:c8:d0:32:a3:
05:af:31:83:e8:d9:f3:9f:6e:06:7a:57:5c:8a:5d:
ae:a5:8e:30:fd:6e:fb:67:d7:c5:23:0a:68:d2:79:
a7:55:23:55:d0:26:e1:6e:bb:35:41:47:ed:9c:0e:
84:26:8e:d2:fb:08:d0:70:03:df:4f:7f:75:4f:81:
7a:7f:c4:f7:78:c3:4e:2a:a1:c1:1d:0b:79:e6:31:
41:03:fd:86:f7:fc:aa:05:c9:6d:f7:c8:6e:bb:22:
8c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E0:1F:9E:DB:B9:E0:12:9D:6F:09:12:A6:6B:72:25:9B:13:2E:59
X509v3 Authority Key Identifier:
keyid:AE:F9:10:DE:39:2D:35:FC:A1:F5:63:95:6C:5E:73:40:49:F2:FF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvkQ3jktNfyh9WOVbF5zQEny_yM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/7e8b2d-38ff-4c4c-96ed-15bae6ad6fa5/1/rvkQ3jktNfyh9WOVbF5zQEny_yM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/7e8b2d-38ff-4c4c-96ed-15bae6ad6fa5/1/rvkQ3jktNfyh9WOVbF5zQEny_yM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:18:2a:f2:37:f1:11:56:16:f4:bf:f8:c4:f7:65:5c:2e:7d:
7c:e1:6b:91:f5:0e:43:28:5c:63:8d:1f:8c:bc:f7:41:1a:b7:
31:68:b4:46:9f:27:53:b1:7c:60:4d:df:dd:da:1e:f1:9e:ac:
4b:15:e9:ef:44:7e:3e:b4:3c:fd:9f:cd:59:65:d2:0e:da:e0:
4c:99:1d:53:2b:22:e5:12:64:29:e3:6b:d9:ef:db:13:09:ff:
18:1f:fc:49:ab:4f:a5:8b:0b:63:7f:52:8a:13:55:88:c5:07:
60:96:f7:64:7e:74:fe:77:36:38:93:c1:af:65:ff:33:71:1f:
98:eb:db:70:b9:9a:28:d8:fa:79:bb:79:04:94:0d:aa:51:6f:
3c:1b:e0:ed:44:3e:3e:92:35:00:1f:c2:6b:f6:bf:52:b7:a1:
dc:19:e2:ff:5c:3c:e5:c5:f1:a1:0a:9f:7a:35:b2:38:47:42:
d7:09:0b:9e:7e:35:ba:de:86:bd:94:81:ba:f3:b5:77:3d:6b:
43:d0:f5:6a:23:0f:41:69:fa:88:04:df:0c:9f:15:43:7e:78:
8b:7d:2b:e3:cc:73:53:f5:90:9a:70:52:27:10:33:86:4f:c8:
b3:aa:03:5e:ff:c1:49:dd:e1:cc:bb:73:95:d2:a7:aa:96:a0:
c3:fe:e1:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY177ogbZnqFUQ36KQ4Mme7/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZjkxMGRlMzkyZDM1ZmNhMWY1NjM5NTZjNWU3MzQwNDlm
MmZmMjMwHhcNMjQwMjA2MDEwMDQ2WhcNMjQwMjA3MDEwMDQ2WjAzMTEwLwYDVQQD
Eyg3MGUwMWY5ZWRiYjllMDEyOWQ2ZjA5MTJhNjZiNzIyNTliMTMyZTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/N8nygN6ek2d1cDqq15piU68eR/
J5hgD2+aghWanlQY4K34CiDRajPjOp6NWSkW6dgVxKc8OomAz79WR4R+rTorsMPD
xgtkvtbIqDUYygnbTtB0o65+IdGkhKmA1FGIpSCsb2CAuJW/judj0kAyAoMdLicU
qoRgBPX0Q/6ng6y6cpnGXoFR8h+DffUc9JlW9DUonRlI6tPdTmlmiiqz7MjQMqMF
rzGD6Nnzn24Geldcil2upY4w/W77Z9fFIwpo0nmnVSNV0Cbhbrs1QUftnA6EJo7S
+wjQcAPfT391T4F6f8T3eMNOKqHBHQt55jFBA/2G9/yqBclt98huuyKM8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDgH57bueASnW8JEqZrciWbEy5ZMB8GA1UdIwQY
MBaAFK75EN45LTX8ofVjlWxec0BJ8v8jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnZrUTNqa3ROZnloOVdPVmJGNXpRRW55X3lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS83ZThiMmQtMzhmZi00YzRjLTk2ZWQt
MTViYWU2YWQ2ZmE1LzEvcnZrUTNqa3ROZnloOVdPVmJGNXpRRW55X3lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS83ZThiMmQtMzhmZi00YzRjLTk2ZWQtMTViYWU2YWQ2ZmE1
LzEvcnZrUTNqa3ROZnloOVdPVmJGNXpRRW55X3lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACRgq8jfx
EVYW9L/4xPdlXC59fOFrkfUOQyhcY40fjLz3QRq3MWi0Rp8nU7F8YE3f3doe8Z6s
SxXp70R+PrQ8/Z/NWWXSDtrgTJkdUysi5RJkKeNr2e/bEwn/GB/8SatPpYsLY39S
ihNViMUHYJb3ZH50/nc2OJPBr2X/M3EfmOvbcLmaKNj6ebt5BJQNqlFvPBvg7UQ+
PpI1AB/Ca/a/Ureh3Bni/1w85cXxoQqfejWyOEdC1wkLnn41ut6GvZSBuvO1dz1r
Q9D1aiMPQWn6iATfDJ8VQ354i30r48xzU/WQmnBSJxAzhk/Is6oDXv/BSd3hzLtz
ldKnqpagw/7hqA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:03 2025 by rpki-client