Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
File: CWv35rMqViP1S7nHN9uPgU6TrTk.mft (raw, json)
Hash identifier: QflJLKuOJw572r9sBQl7i1IVZ7wz+yzJxWMKFA+ZLgc=
Subject key identifier: 41:27:38:AD:69:16:22:63:8F:AB:EE:26:A5:DF:9C:24:BA:53:05:95
Authority key identifier: 09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
Certificate issuer: /CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Certificate serial: 0195DFD886665E3964D7630218DE61488B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
Manifest number: 0FE9
Signing time: Sat 29 Mar 2025 03:01:04 +0000
Manifest this update: Sat 29 Mar 2025 03:01:04 +0000
Manifest next update: Sun 30 Mar 2025 03:01:04 +0000
Files and hashes: 1: 30FXUVnarbL0GjkvKeRwjePJ-94.roa (hash: w3ArHa2Xe04OwAG/G7XOfvacJT+uwVTSzzeS8Z01wes=)
2: CWv35rMqViP1S7nHN9uPgU6TrTk.crl (hash: msP0k5nk6r+Pg6xLBw3ihIAk/MQu4MpeQFD1Ab6pYlY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:86:66:5e:39:64:d7:63:02:18:de:61:48:8b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Validity
Not Before: Mar 29 03:01:04 2025 GMT
Not After : Mar 30 03:01:04 2025 GMT
Subject: CN=412738ad691622638fabee26a5df9c24ba530595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1b:d9:6d:0d:58:a2:2f:bb:37:55:c7:70:36:
0a:0c:2b:68:2f:03:78:2c:28:64:bf:2d:39:38:bd:
59:a8:b5:f1:42:25:ee:45:24:6b:21:19:44:cd:10:
46:19:48:88:3f:42:81:b5:4e:64:ab:e0:97:dc:b7:
4b:8f:33:19:4d:1c:34:22:c8:8f:9f:56:98:af:a2:
a9:63:b9:78:97:8d:ee:e0:fd:08:b5:ed:bd:b2:b0:
04:cf:9c:b5:82:4a:c3:96:89:49:cf:63:f8:88:8d:
fc:d5:a6:9e:2c:b1:a6:b6:ba:a9:5c:21:5f:f9:5a:
8a:94:42:32:53:1a:8c:ca:06:a5:fe:7a:b6:04:fc:
55:2a:f9:dd:c5:fc:eb:6b:1a:ac:d5:97:9f:f9:bb:
fb:68:bb:33:9d:37:8f:94:db:49:e1:a7:ab:fd:56:
73:e4:46:07:53:4c:bf:6e:08:63:31:dc:c6:87:1f:
7a:85:15:e1:8c:b2:49:ea:0a:ca:3a:09:ff:ca:79:
88:d1:b9:5a:d8:4e:da:cd:96:9c:f4:53:59:63:12:
30:b3:3b:80:dc:f0:fd:e3:89:62:16:a7:12:2f:e5:
45:0c:61:4f:2f:ff:f8:33:cc:45:88:11:b2:61:94:
8d:96:04:f4:71:0b:8c:f2:f0:ce:a6:2a:c1:07:03:
85:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:27:38:AD:69:16:22:63:8F:AB:EE:26:A5:DF:9C:24:BA:53:05:95
X509v3 Authority Key Identifier:
keyid:09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:30:99:77:b4:6a:d0:05:75:75:b8:60:78:0f:fd:7d:cb:df:
a7:06:2c:6c:9c:a4:0c:ce:04:b1:6f:e0:d2:1a:24:36:df:5a:
ba:ef:df:67:97:42:3a:79:fe:ec:69:f9:44:59:01:0d:43:86:
7f:9f:25:f7:02:ab:c9:9c:8f:52:10:f4:eb:ba:1c:ed:f4:8d:
dc:5a:ce:9c:66:4d:e8:47:72:f8:3f:27:9b:15:e1:3e:a2:dd:
e9:42:7e:d3:67:ae:71:fc:ec:e0:6b:83:98:8a:aa:82:f3:2d:
44:6a:8e:77:2e:9a:92:98:2a:c1:fa:6d:08:ad:25:fd:4f:de:
59:b6:6b:ec:8f:82:c0:3e:a5:ac:a2:0b:e4:05:1b:0e:53:9b:
eb:30:51:7e:8d:c4:eb:8f:8e:93:59:26:6a:77:ef:c0:e1:28:
73:e8:4f:61:e5:0b:c5:53:91:df:34:f1:ef:32:25:12:9c:79:
cd:c3:17:08:62:39:f4:27:48:c2:b8:42:b0:df:ef:49:89:20:
52:83:4b:91:36:bf:90:85:53:d0:61:6f:76:64:f9:57:24:57:
de:f8:d7:57:16:78:d2:b3:aa:29:b3:e1:d7:b6:aa:53:7a:e3:
18:2c:ff:c5:10:e2:f1:d2:2b:a1:fe:10:b2:2f:5d:f4:c5:31:
9c:c5:9c:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXf2IZmXjlk12MCGN5hSIuLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NmJmN2U2YjMyYTU2MjNmNTRiYjljNzM3ZGI4ZjgxNGU5
M2FkMzkwHhcNMjUwMzI5MDMwMTA0WhcNMjUwMzMwMDMwMTA0WjAzMTEwLwYDVQQD
Eyg0MTI3MzhhZDY5MTYyMjYzOGZhYmVlMjZhNWRmOWMyNGJhNTMwNTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRvZbQ1Yoi+7N1XHcDYKDCtoLwN4
LChkvy05OL1ZqLXxQiXuRSRrIRlEzRBGGUiIP0KBtU5kq+CX3LdLjzMZTRw0IsiP
n1aYr6KpY7l4l43u4P0Ite29srAEz5y1gkrDlolJz2P4iI381aaeLLGmtrqpXCFf
+VqKlEIyUxqMygal/nq2BPxVKvndxfzraxqs1Zef+bv7aLsznTePlNtJ4aer/VZz
5EYHU0y/bghjMdzGhx96hRXhjLJJ6grKOgn/ynmI0bla2E7azZac9FNZYxIwszuA
3PD944liFqcSL+VFDGFPL//4M8xFiBGyYZSNlgT0cQuM8vDOpirBBwOF+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEnOK1pFiJjj6vuJqXfnCS6UwWVMB8GA1UdIwQY
MBaAFAlr9+azKlYj9Uu5xzfbj4FOk605MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1d2MzVyTXFWaVAxUzduSE45dVBnVTZUclRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iNTZiMDEtMjkyZi00YTFkLWJhYTIt
YmNkNmFkYTFiOWRhLzEvQ1d2MzVyTXFWaVAxUzduSE45dVBnVTZUclRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9iNTZiMDEtMjkyZi00YTFkLWJhYTItYmNkNmFkYTFiOWRh
LzEvQ1d2MzVyTXFWaVAxUzduSE45dVBnVTZUclRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVzCZd7Rq
0AV1dbhgeA/9fcvfpwYsbJykDM4EsW/g0hokNt9auu/fZ5dCOnn+7Gn5RFkBDUOG
f58l9wKryZyPUhD067oc7fSN3FrOnGZN6Edy+D8nmxXhPqLd6UJ+02eucfzs4GuD
mIqqgvMtRGqOdy6akpgqwfptCK0l/U/eWbZr7I+CwD6lrKIL5AUbDlOb6zBRfo3E
64+Ok1kmanfvwOEoc+hPYeULxVOR3zTx7zIlEpx5zcMXCGI59CdIwrhCsN/vSYkg
UoNLkTa/kIVT0GFvdmT5VyRX3vjXVxZ40rOqKbPh17aqU3rjGCz/xRDi8dIrof4Q
si9d9MUxnMWcAw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:58:13 2025 by rpki-client