Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
File: dOgVmhbXKz1s37qgltaROf3p0pA.mft (raw, json)
Hash identifier: Xp5LaUt4aUHJBH9xSdVVGzqeHK4Yhcl3jmQHgzNH9V0=
Subject key identifier: 85:8C:23:1A:17:3F:D3:65:7C:A7:AB:88:27:C9:EA:09:52:C7:E7:90
Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Certificate serial: 0195E0B4C7FEFE2D9F49B7E02DF645B8715A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
Manifest number: 055F
Signing time: Sat 29 Mar 2025 07:01:38 +0000
Manifest this update: Sat 29 Mar 2025 07:01:38 +0000
Manifest next update: Sun 30 Mar 2025 07:01:38 +0000
Files and hashes: 1: RJIaPfw-lelsSYxBjknFr4Rt7oQ.roa (hash: a99rlpRHuLbwwwhP8DmXyZr4TiQSJ2/sdHfuj/shU7Y=)
2: dOgVmhbXKz1s37qgltaROf3p0pA.crl (hash: P85U2aeJ63tVyuAkrYXl7nkJL8hKuI4QcAT765LKAvQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:c7:fe:fe:2d:9f:49:b7:e0:2d:f6:45:b8:71:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Validity
Not Before: Mar 29 07:01:38 2025 GMT
Not After : Mar 30 07:01:38 2025 GMT
Subject: CN=858c231a173fd3657ca7ab8827c9ea0952c7e790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:51:dc:79:5c:0b:dc:1a:05:85:71:4e:c4:
70:9a:cc:8e:04:cd:cb:54:fb:82:f1:e2:6a:df:cf:
18:a6:05:4c:eb:93:36:fd:32:9b:19:31:e6:61:be:
e9:31:3c:be:ce:5e:a1:6a:45:25:fa:fd:59:d8:bb:
54:ec:01:bc:b9:be:ea:5e:a1:50:3e:1d:35:a6:19:
c9:7e:ff:b8:2e:d9:8c:48:04:2a:31:63:9d:76:a9:
43:b2:1e:20:01:1a:61:d0:7e:c8:a2:17:d6:a4:17:
f8:20:3b:f1:cd:3e:25:54:0d:da:2a:5a:7c:2a:40:
74:2e:c6:ba:3d:ab:a4:01:33:05:2b:4d:ae:80:82:
e6:1e:e2:14:f2:60:5f:39:4d:5b:0e:17:cc:77:a4:
75:99:6d:15:b8:ba:bb:a6:97:20:f0:69:2f:48:cc:
9c:18:9e:4d:f6:cf:f6:2f:82:96:97:5e:68:60:da:
a9:86:c9:e1:d8:70:14:10:36:71:17:37:0b:96:9f:
b6:26:60:43:7e:97:b3:1e:b9:54:58:54:93:4f:3d:
80:4d:1f:74:4b:c3:55:fd:f4:28:0a:95:27:e8:0c:
71:cd:a5:1b:a7:36:49:12:c4:f6:ce:a7:59:76:28:
aa:27:78:19:77:cd:a2:99:fa:5a:6a:55:5e:80:54:
a5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8C:23:1A:17:3F:D3:65:7C:A7:AB:88:27:C9:EA:09:52:C7:E7:90
X509v3 Authority Key Identifier:
keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:df:ec:87:37:68:04:4e:a5:f3:a8:15:0d:04:bb:f7:52:62:
78:a6:6d:69:b4:a0:44:7d:1d:0a:ea:b8:e4:17:0a:73:cf:0d:
55:f1:fa:d1:4a:f0:71:a2:c0:9d:10:f3:5a:2d:49:97:53:31:
57:0a:74:df:fa:fb:f4:89:c1:d2:9f:82:0a:16:07:82:bd:37:
f1:b3:d5:3d:59:39:76:2b:7f:7c:94:ae:ad:9d:37:9f:28:cc:
ed:e2:17:0c:d4:6f:0e:bc:15:04:50:c8:21:c4:60:8a:c2:ee:
7c:b0:43:5e:ed:e1:7b:9b:76:75:52:e1:6a:c6:2d:11:89:a5:
2b:80:71:cf:b8:a1:1c:b7:f9:4f:75:97:47:56:77:da:43:94:
a5:9a:d4:e5:22:80:c9:0e:ad:22:d3:ac:c1:87:96:2e:60:32:
ee:0c:67:ff:72:30:d0:97:1f:1f:f2:29:b8:65:10:a1:12:9d:
25:f1:c2:8e:4a:0a:97:58:eb:19:87:84:e8:dc:e7:e2:33:6b:
53:0a:e4:52:cb:14:65:f4:32:24:53:2a:36:63:70:dc:79:27:
ea:e8:67:34:82:69:4b:99:4e:19:16:81:d5:3e:f5:a1:8a:29:
d7:78:ec:77:e1:3c:a5:16:b3:78:9f:77:d5:4b:2c:5b:cf:d3:
d4:c0:fb:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgtMf+/i2fSbfgLfZFuHFaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZTgxNTlhMTZkNzJiM2Q2Y2RmYmFhMDk2ZDY5MTM5ZmRl
OWQyOTAwHhcNMjUwMzI5MDcwMTM4WhcNMjUwMzMwMDcwMTM4WjAzMTEwLwYDVQQD
Eyg4NThjMjMxYTE3M2ZkMzY1N2NhN2FiODgyN2M5ZWEwOTUyYzdlNzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt65R3HlcC9waBYVxTsRwmsyOBM3L
VPuC8eJq388YpgVM65M2/TKbGTHmYb7pMTy+zl6hakUl+v1Z2LtU7AG8ub7qXqFQ
Ph01phnJfv+4LtmMSAQqMWOddqlDsh4gARph0H7IohfWpBf4IDvxzT4lVA3aKlp8
KkB0Lsa6PaukATMFK02ugILmHuIU8mBfOU1bDhfMd6R1mW0VuLq7ppcg8GkvSMyc
GJ5N9s/2L4KWl15oYNqphsnh2HAUEDZxFzcLlp+2JmBDfpezHrlUWFSTTz2ATR90
S8NV/fQoCpUn6AxxzaUbpzZJEsT2zqdZdiiqJ3gZd82imfpaalVegFSlIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWMIxoXP9NlfKeriCfJ6glSx+eQMB8GA1UdIwQY
MBaAFHToFZoW1ys9bN+6oJbWkTn96dKQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE9nVm1oYlhLejFzMzdxZ2x0YVJPZjNwMHBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85YmUwYTctNDFiMy00OGE1LThhMzgt
ODRjYmM4NWEyMzQzLzEvZE9nVm1oYlhLejFzMzdxZ2x0YVJPZjNwMHBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS85YmUwYTctNDFiMy00OGE1LThhMzgtODRjYmM4NWEyMzQz
LzEvZE9nVm1oYlhLejFzMzdxZ2x0YVJPZjNwMHBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9/shzdo
BE6l86gVDQS791JieKZtabSgRH0dCuq45BcKc88NVfH60UrwcaLAnRDzWi1Jl1Mx
Vwp03/r79InB0p+CChYHgr038bPVPVk5dit/fJSurZ03nyjM7eIXDNRvDrwVBFDI
IcRgisLufLBDXu3he5t2dVLhasYtEYmlK4Bxz7ihHLf5T3WXR1Z32kOUpZrU5SKA
yQ6tItOswYeWLmAy7gxn/3Iw0JcfH/IpuGUQoRKdJfHCjkoKl1jrGYeE6Nzn4jNr
UwrkUssUZfQyJFMqNmNw3Hkn6uhnNIJpS5lOGRaB1T71oYop13jsd+E8pRazeJ93
1UssW8/T1MD79g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:01:07 2025 by rpki-client