Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
File: 59aKnrhqgmTp3cMSKEm4DMNC9dw.mft (raw, json)
Hash identifier: HdfaZyKtrEDCG1ssrjcvh4V47eCp/w+V7vjAjDQB1wY=
Subject key identifier: 8A:6E:6A:A3:85:5F:69:53:23:65:0F:AD:72:1B:11:0C:6F:6D:78:DD
Authority key identifier: E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
Certificate issuer: /CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Certificate serial: 01962FAB44F910CDE1E6CE02F4FA911ED01A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
Manifest number: 1204
Signing time: Sun 13 Apr 2025 15:01:15 +0000
Manifest this update: Sun 13 Apr 2025 15:01:15 +0000
Manifest next update: Mon 14 Apr 2025 15:01:15 +0000
Files and hashes: 1: 59aKnrhqgmTp3cMSKEm4DMNC9dw.crl (hash: eRm3p8fTAGn9t3IqvayVJkhJUmG0qftsyPjrAkLoX/4=)
2: qetS73-OE2CSttiMvug0TDfkr54.roa (hash: f7CQ5AXCS66V7YOxpVoih8o6XmqrwIeswAWr26eRNls=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:ab:44:f9:10:cd:e1:e6:ce:02:f4:fa:91:1e:d0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Validity
Not Before: Apr 13 15:01:15 2025 GMT
Not After : Apr 14 15:01:15 2025 GMT
Subject: CN=8a6e6aa3855f695323650fad721b110c6f6d78dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a6:80:e2:90:86:a3:12:87:36:14:1a:4f:63:
27:58:25:6a:83:3b:ac:e0:ed:fd:9b:95:5b:fd:ee:
3b:cf:77:f0:de:3c:1e:76:11:15:4f:f0:58:c9:81:
5b:40:23:6a:94:47:19:4d:7a:06:5f:10:fe:c2:7b:
26:80:fa:40:ac:6e:ad:7f:f4:6e:80:be:b4:92:44:
7b:a2:51:63:1b:fc:42:71:4a:d4:26:d0:8f:cc:12:
2c:6a:c1:ee:f7:b5:e6:08:7e:d1:5b:04:a6:87:8d:
75:f8:37:94:72:a1:ea:1e:34:01:f7:a3:62:71:de:
83:95:2d:a4:d3:48:0d:a2:7e:ac:b8:87:a4:7c:70:
24:e9:b9:f6:b3:71:b2:d1:33:f6:60:02:3c:69:1e:
9c:bd:b4:a8:ac:f9:53:44:b9:e6:85:02:dd:4e:90:
9b:7e:3d:ce:9c:0f:50:11:92:51:0f:da:54:20:00:
41:26:c2:36:5d:22:f2:dc:e0:41:19:d0:c3:7c:a6:
af:3f:40:62:50:03:28:1b:fc:4d:86:28:27:20:28:
28:d7:95:d1:38:21:a2:c1:42:e0:03:4e:51:49:30:
a0:12:e3:5e:11:5b:19:c1:aa:33:d1:c9:ed:6d:3f:
64:7a:06:d8:d7:97:cc:f9:19:06:0f:11:b2:8c:c4:
34:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6E:6A:A3:85:5F:69:53:23:65:0F:AD:72:1B:11:0C:6F:6D:78:DD
X509v3 Authority Key Identifier:
keyid:E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:05:b4:af:f3:ae:04:e0:80:67:28:38:f8:17:4d:b2:1a:7e:
9e:cd:d6:0b:f5:4f:cc:b4:2c:9a:f0:c3:4c:18:50:72:76:b9:
91:d3:d5:ea:d6:a4:7b:52:ad:1d:4f:0d:95:32:0b:da:b3:94:
47:83:80:85:e4:6e:bb:12:81:fe:a1:c5:85:b7:0a:97:b9:4a:
8a:27:79:aa:0d:a8:78:de:4e:10:57:c1:21:75:31:51:1a:17:
d5:85:87:48:0e:54:14:12:96:5d:cc:81:34:55:e2:e1:eb:7e:
c9:86:be:d6:d6:da:98:c6:d5:64:60:78:2a:76:a0:d8:d6:db:
f2:a4:6f:db:21:fc:ef:85:b6:4d:30:58:3e:d0:e0:b3:f3:1f:
8d:0e:72:15:81:b4:26:da:7f:d0:51:99:b6:ae:68:38:ce:5d:
df:ce:94:c8:7b:64:44:9f:2f:42:95:c0:e9:21:d6:da:90:f9:
f5:1e:5c:fc:f8:3c:6c:89:aa:21:ca:3e:1c:b4:a7:8e:2c:3e:
ca:76:a9:53:5c:2d:5f:68:81:e9:78:ff:72:1f:35:bc:a0:b4:
6a:d3:69:73:6d:37:0b:76:be:ed:e2:4b:94:ec:93:ff:e0:df:
32:d7:30:b0:fa:b6:ee:ad:82:c9:b9:8c:9a:11:9c:98:f5:e8:
5a:15:7d:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq0T5EM3h5s4C9PqRHtAaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZDY4YTllYjg2YTgyNjRlOWRkYzMxMjI4NDliODBjYzM0
MmY1ZGMwHhcNMjUwNDEzMTUwMTE1WhcNMjUwNDE0MTUwMTE1WjAzMTEwLwYDVQQD
Eyg4YTZlNmFhMzg1NWY2OTUzMjM2NTBmYWQ3MjFiMTEwYzZmNmQ3OGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9KaA4pCGoxKHNhQaT2MnWCVqgzus
4O39m5Vb/e47z3fw3jwedhEVT/BYyYFbQCNqlEcZTXoGXxD+wnsmgPpArG6tf/Ru
gL60kkR7olFjG/xCcUrUJtCPzBIsasHu97XmCH7RWwSmh411+DeUcqHqHjQB96Ni
cd6DlS2k00gNon6suIekfHAk6bn2s3Gy0TP2YAI8aR6cvbSorPlTRLnmhQLdTpCb
fj3OnA9QEZJRD9pUIABBJsI2XSLy3OBBGdDDfKavP0BiUAMoG/xNhignICgo15XR
OCGiwULgA05RSTCgEuNeEVsZwaoz0cntbT9kegbY15fM+RkGDxGyjMQ0SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpuaqOFX2lTI2UPrXIbEQxvbXjdMB8GA1UdIwQY
MBaAFOfWip64aoJk6d3DEihJuAzDQvXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTlhS25yaHFnbVRwM2NNU0tFbTRETU5DOWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81NjVlYTEtMmEzNi00NDAzLTk0MWUt
ZjBkNDBmMDI5NjczLzEvNTlhS25yaHFnbVRwM2NNU0tFbTRETU5DOWR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy81NjVlYTEtMmEzNi00NDAzLTk0MWUtZjBkNDBmMDI5Njcz
LzEvNTlhS25yaHFnbVRwM2NNU0tFbTRETU5DOWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQW0r/Ou
BOCAZyg4+BdNshp+ns3WC/VPzLQsmvDDTBhQcna5kdPV6take1KtHU8NlTIL2rOU
R4OAheRuuxKB/qHFhbcKl7lKiid5qg2oeN5OEFfBIXUxURoX1YWHSA5UFBKWXcyB
NFXi4et+yYa+1tbamMbVZGB4Knag2Nbb8qRv2yH874W2TTBYPtDgs/MfjQ5yFYG0
Jtp/0FGZtq5oOM5d386UyHtkRJ8vQpXA6SHW2pD59R5c/Pg8bImqIco+HLSnjiw+
ynapU1wtX2iB6Xj/ch81vKC0atNpc203C3a+7eJLlOyT/+DfMtcwsPq27q2CybmM
mhGcmPXoWhV9lQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:25 2025 by rpki-client on console.sobornost.net