Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft
File: 2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft (raw, json)
Hash identifier: Kt+ee6U2FY+43zwHW6aSsvg7yU6I0zcCQv5jlWWDGi8=
Subject key identifier: 4E:82:5F:F6:80:E5:CF:7D:5F:B7:65:52:71:D3:20:92:C1:CE:4A:AF
Authority key identifier: D9:AD:0D:73:8C:7A:F0:35:9A:06:30:36:54:16:44:0D:01:98:5B:A2
Certificate issuer: /CN=d9ad0d738c7af0359a0630365416440d01985ba2
Certificate serial: 01961922FC92F49C3C9E18E216CA322F09A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2a0Nc4x68DWaBjA2VBZEDQGYW6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft
Manifest number: 07FD
Signing time: Wed 09 Apr 2025 06:00:45 +0000
Manifest this update: Wed 09 Apr 2025 06:00:45 +0000
Manifest next update: Thu 10 Apr 2025 06:00:45 +0000
Files and hashes: 1: 2a0Nc4x68DWaBjA2VBZEDQGYW6I.crl (hash: qPyipcfXNXoySVJQZADmsTqltX+CZ3uwD3W8EqcYj90=)
2: bhwBYoazvA5A_Z_cE9R34ToOWGg.roa (hash: sma7MnYwGc+h3WkyXXW6543+L5js/BDpTSkKMtbWDZw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:22:fc:92:f4:9c:3c:9e:18:e2:16:ca:32:2f:09:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ad0d738c7af0359a0630365416440d01985ba2
Validity
Not Before: Apr 9 06:00:45 2025 GMT
Not After : Apr 10 06:00:45 2025 GMT
Subject: CN=4e825ff680e5cf7d5fb7655271d32092c1ce4aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:33:29:31:bf:82:c8:eb:40:e3:a3:c7:ab:24:
ef:ee:2c:d8:0a:dd:b1:f3:8e:06:07:9c:2a:14:cc:
12:c3:80:ce:74:1b:97:06:43:2c:76:de:7f:6b:e0:
ce:a9:c2:72:95:84:3f:d7:5c:ce:a2:3d:19:fd:4d:
50:d1:3b:fa:5b:8d:51:99:94:e0:cd:b3:8e:eb:05:
01:cf:ee:eb:a9:7e:3a:5f:d2:65:e2:ea:cd:68:9a:
c7:ff:0f:32:80:ff:db:0a:06:33:49:9e:60:0d:cd:
67:70:a2:ff:00:ea:b0:78:98:dc:8e:1d:99:0c:45:
43:fa:af:0b:63:aa:e3:8b:89:be:dc:dd:88:cd:14:
77:3b:c5:7e:28:22:98:bb:3a:60:29:15:95:f3:58:
1c:de:ad:7c:35:e2:91:5a:43:2c:39:19:44:c2:31:
2e:c8:cc:f1:a5:74:1e:b0:15:cf:45:dd:f7:74:b9:
58:3f:ef:74:b9:16:89:5b:3c:58:39:f3:b8:41:62:
ba:f9:25:8e:80:b1:19:74:10:50:a6:43:8e:6e:bc:
de:1a:8f:a1:46:bb:40:29:a4:e2:f8:99:9a:30:33:
ad:02:57:c6:53:bd:49:8e:fe:3d:20:c8:11:f7:57:
6d:e6:73:ad:de:2a:cc:80:98:75:b6:94:14:50:05:
a2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:82:5F:F6:80:E5:CF:7D:5F:B7:65:52:71:D3:20:92:C1:CE:4A:AF
X509v3 Authority Key Identifier:
keyid:D9:AD:0D:73:8C:7A:F0:35:9A:06:30:36:54:16:44:0D:01:98:5B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a0Nc4x68DWaBjA2VBZEDQGYW6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a3:da:f1:22:cb:34:5f:2e:82:18:47:bb:85:25:ae:6d:a1:
c1:29:f3:b1:bd:ad:f6:85:b1:db:44:1f:b6:38:fb:82:d2:ea:
7d:44:6a:f5:c3:e4:79:34:cd:90:17:d7:d6:b9:5f:33:f5:42:
12:05:58:06:8c:cb:21:c4:79:2c:12:5c:d1:92:13:a0:6f:ec:
6f:8d:01:f3:c0:2a:a8:a3:f2:7b:ca:40:af:55:b1:87:2c:78:
c1:93:74:a9:53:ff:62:22:32:41:8d:3e:24:9f:76:30:71:a9:
3a:43:dc:55:01:03:67:d8:6e:d5:8d:09:c4:4e:97:d7:9c:2e:
46:48:d8:49:73:45:75:2f:7e:a8:30:f8:72:0b:3f:21:24:60:
b0:47:05:d6:d0:07:65:f8:14:86:51:cb:0e:52:2a:d6:4d:a0:
19:7d:b7:83:e9:e0:1f:6e:57:0d:51:fd:ea:a1:9f:36:8b:17:
08:22:09:fa:95:33:4a:b9:45:f7:23:e8:61:c0:71:6d:ab:cb:
36:d1:8f:90:4c:c6:d2:50:dc:cd:77:87:d0:7a:4c:17:91:3d:
f0:cd:88:e1:ff:c1:a7:d1:d3:1a:bd:85:a0:b4:7e:59:c8:5c:
07:1c:54:cf:2c:71:94:f3:e2:85:41:91:b7:71:c3:f7:e3:b0:
be:f8:bc:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYZIvyS9Jw8nhjiFsoyLwmkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YWQwZDczOGM3YWYwMzU5YTA2MzAzNjU0MTY0NDBkMDE5
ODViYTIwHhcNMjUwNDA5MDYwMDQ1WhcNMjUwNDEwMDYwMDQ1WjAzMTEwLwYDVQQD
Eyg0ZTgyNWZmNjgwZTVjZjdkNWZiNzY1NTI3MWQzMjA5MmMxY2U0YWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jMpMb+CyOtA46PHqyTv7izYCt2x
844GB5wqFMwSw4DOdBuXBkMsdt5/a+DOqcJylYQ/11zOoj0Z/U1Q0Tv6W41RmZTg
zbOO6wUBz+7rqX46X9Jl4urNaJrH/w8ygP/bCgYzSZ5gDc1ncKL/AOqweJjcjh2Z
DEVD+q8LY6rji4m+3N2IzRR3O8V+KCKYuzpgKRWV81gc3q18NeKRWkMsORlEwjEu
yMzxpXQesBXPRd33dLlYP+90uRaJWzxYOfO4QWK6+SWOgLEZdBBQpkOObrzeGo+h
RrtAKaTi+JmaMDOtAlfGU71Jjv49IMgR91dt5nOt3irMgJh1tpQUUAWirQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6CX/aA5c99X7dlUnHTIJLBzkqvMB8GA1UdIwQY
MBaAFNmtDXOMevA1mgYwNlQWRA0BmFuiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmEwTmM0eDY4RFdhQmpBMlZCWkVEUUdZVzZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZGQ4MGItYzViNC00ZTZjLWJhMmUt
YjEzN2NmYjM3NDYzLzEvMmEwTmM0eDY4RFdhQmpBMlZCWkVEUUdZVzZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wZGQ4MGItYzViNC00ZTZjLWJhMmUtYjEzN2NmYjM3NDYz
LzEvMmEwTmM0eDY4RFdhQmpBMlZCWkVEUUdZVzZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqPa8SLL
NF8ughhHu4Ulrm2hwSnzsb2t9oWx20Qftjj7gtLqfURq9cPkeTTNkBfX1rlfM/VC
EgVYBozLIcR5LBJc0ZIToG/sb40B88AqqKPye8pAr1Wxhyx4wZN0qVP/YiIyQY0+
JJ92MHGpOkPcVQEDZ9hu1Y0JxE6X15wuRkjYSXNFdS9+qDD4cgs/ISRgsEcF1tAH
ZfgUhlHLDlIq1k2gGX23g+ngH25XDVH96qGfNosXCCIJ+pUzSrlF9yPoYcBxbavL
NtGPkEzG0lDczXeH0HpMF5E98M2I4f/Bp9HTGr2FoLR+WchcBxxUzyxxlPPihUGR
t3HD9+Owvvi8GA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:13:47 2025 by rpki-client