Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
File: K8J94IFvfguHpzPdMZkInlN_Jhw.mft (raw, json)
Hash identifier: MGStQ5ETkxVLwO5aab0lbYZCENfIRU+HFjea/ZS/imY=
Subject key identifier: 3F:9E:9B:6F:3B:B5:9E:8E:86:8F:BA:78:1F:1E:06:A0:FA:C8:B7:E7
Authority key identifier: 2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C
Certificate issuer: /CN=2bc27de0816f7e0b87a733dd3199089e537f261c
Certificate serial: 0194BCA9DE6D076690FE4C5BECA08EEAFE9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
Manifest number: 0A1B
Signing time: Fri 31 Jan 2025 14:00:36 +0000
Manifest this update: Fri 31 Jan 2025 14:00:36 +0000
Manifest next update: Sat 01 Feb 2025 14:00:36 +0000
Files and hashes: 1: 37DCbHhm2sTXZoKnRAO3SOggtQQ.roa (hash: +uLJpv1JAEXe6w9bK9Js8rFmAHbw+aILnxdKvgw5Rzc=)
2: K8J94IFvfguHpzPdMZkInlN_Jhw.crl (hash: JUMJJ+oLaOybhkohXe2zPz1p0I/RsL6FMDQqroaPzgY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:de:6d:07:66:90:fe:4c:5b:ec:a0:8e:ea:fe:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc27de0816f7e0b87a733dd3199089e537f261c
Validity
Not Before: Jan 31 14:00:36 2025 GMT
Not After : Feb 1 14:00:36 2025 GMT
Subject: CN=3f9e9b6f3bb59e8e868fba781f1e06a0fac8b7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:81:94:c0:aa:ed:9f:1c:b2:fc:f6:97:64:c8:
df:3d:d0:47:48:40:54:20:7c:1e:b0:71:d6:1c:40:
4c:21:93:7f:c3:3b:5d:c3:48:b1:f5:cd:1f:bd:a3:
1e:61:11:89:44:9e:34:01:1e:58:7a:c5:88:8a:ee:
e2:4c:7e:eb:dd:03:99:a0:52:b0:c8:60:7b:7a:a6:
4a:e5:08:67:36:a7:90:30:bb:d1:b5:43:36:01:c9:
57:2b:c7:3a:5f:a7:e7:c2:65:12:c6:e4:7e:03:70:
ab:58:79:39:a7:51:8e:ac:7d:a1:21:fb:c1:85:40:
59:0b:fe:33:9e:f7:46:83:50:5f:84:a9:6f:4a:93:
60:6d:72:3d:28:25:ff:7f:b7:e8:6e:30:c3:12:a1:
09:73:69:f0:dc:79:f6:52:9d:f2:a9:90:da:8c:8e:
ad:43:be:bd:af:d3:fd:b8:ef:ac:91:5e:e3:98:df:
ce:51:06:15:24:d1:3d:c0:0a:c4:03:a4:41:cd:e2:
ec:ac:ef:28:55:3b:78:f3:99:7c:b4:4f:20:7b:96:
20:b1:d0:b6:16:88:8e:cd:6c:44:7c:0b:cc:28:d2:
72:ee:f9:71:7a:3d:8c:2b:01:f2:b0:ad:12:7f:ba:
97:f7:96:24:78:19:24:35:f3:36:92:3c:59:26:f9:
41:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9E:9B:6F:3B:B5:9E:8E:86:8F:BA:78:1F:1E:06:A0:FA:C8:B7:E7
X509v3 Authority Key Identifier:
keyid:2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:1a:44:ec:ee:c4:e8:86:e4:c9:5e:49:18:9d:a9:10:9c:27:
1d:ed:dd:d2:7f:6c:6f:74:9c:a7:c0:14:f1:eb:ca:49:55:4d:
18:09:01:c7:9d:2e:4f:36:9f:f5:d5:9e:e4:6e:f1:c9:fe:fc:
ac:96:69:52:f2:31:14:58:60:13:12:7f:66:3b:79:11:75:ae:
0f:99:4f:68:89:1a:a4:c7:02:98:fa:bf:84:d1:7c:fb:d8:15:
23:fb:d4:1b:ba:6a:8a:27:3d:ca:f8:d8:c5:c3:bf:4b:cc:ba:
7e:db:9e:be:c9:3b:16:54:7c:10:1d:15:f6:83:6c:3b:70:ac:
6d:59:90:f5:b8:25:dc:ba:49:c6:e4:26:7a:c6:b7:74:60:e9:
a6:c8:e8:ae:0a:2f:10:4a:fc:a3:ef:9f:3a:98:71:48:59:d9:
9e:18:15:da:36:28:a5:33:34:3e:2a:c9:d5:d2:db:ce:39:c8:
64:5c:94:bd:a5:a1:9c:2a:be:0e:90:64:77:38:85:b5:4e:06:
c3:20:f3:b5:6f:66:cf:bf:7b:fd:a6:19:96:6a:01:de:72:ca:
16:c0:97:d3:05:91:e0:07:5f:fd:9a:e9:b9:5a:3c:a4:ff:7b:
06:61:51:21:8c:6d:83:92:dc:cc:d8:f4:f7:dd:9a:c8:7f:9a:
31:cf:45:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qd5tB2aQ/kxb7KCO6v6fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYzI3ZGUwODE2ZjdlMGI4N2E3MzNkZDMxOTkwODllNTM3
ZjI2MWMwHhcNMjUwMTMxMTQwMDM2WhcNMjUwMjAxMTQwMDM2WjAzMTEwLwYDVQQD
EygzZjllOWI2ZjNiYjU5ZThlODY4ZmJhNzgxZjFlMDZhMGZhYzhiN2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oGUwKrtnxyy/PaXZMjfPdBHSEBU
IHwesHHWHEBMIZN/wztdw0ix9c0fvaMeYRGJRJ40AR5YesWIiu7iTH7r3QOZoFKw
yGB7eqZK5QhnNqeQMLvRtUM2AclXK8c6X6fnwmUSxuR+A3CrWHk5p1GOrH2hIfvB
hUBZC/4znvdGg1BfhKlvSpNgbXI9KCX/f7fobjDDEqEJc2nw3Hn2Up3yqZDajI6t
Q769r9P9uO+skV7jmN/OUQYVJNE9wArEA6RBzeLsrO8oVTt485l8tE8ge5YgsdC2
FoiOzWxEfAvMKNJy7vlxej2MKwHysK0Sf7qX95YkeBkkNfM2kjxZJvlBswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+em287tZ6Oho+6eB8eBqD6yLfnMB8GA1UdIwQY
MBaAFCvCfeCBb34Lh6cz3TGZCJ5TfyYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzhKOTRJRnZmZ3VIcHpQZE1aa0lubE5fSmh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82ZDg1NGMtYzUxMy00MjkwLTk1ZDQt
OTNmOWFlZmVlYjEyLzEvSzhKOTRJRnZmZ3VIcHpQZE1aa0lubE5fSmh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy82ZDg1NGMtYzUxMy00MjkwLTk1ZDQtOTNmOWFlZmVlYjEy
LzEvSzhKOTRJRnZmZ3VIcHpQZE1aa0lubE5fSmh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhpE7O7E
6IbkyV5JGJ2pEJwnHe3d0n9sb3Scp8AU8evKSVVNGAkBx50uTzaf9dWe5G7xyf78
rJZpUvIxFFhgExJ/Zjt5EXWuD5lPaIkapMcCmPq/hNF8+9gVI/vUG7pqiic9yvjY
xcO/S8y6ftuevsk7FlR8EB0V9oNsO3CsbVmQ9bgl3LpJxuQmesa3dGDppsjorgov
EEr8o++fOphxSFnZnhgV2jYopTM0PirJ1dLbzjnIZFyUvaWhnCq+DpBkdziFtU4G
wyDztW9mz797/aYZlmoB3nLKFsCX0wWR4Adf/ZrpuVo8pP97BmFRIYxtg5LczNj0
992ayH+aMc9FrA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:02:43 2025 by rpki-client