Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/933ad8-c0bb-4be1-84a7-1a1dc0890678/1/8wxX4bfX1otJUdjEfs9Xmj8O8bc.mft
File: 8wxX4bfX1otJUdjEfs9Xmj8O8bc.mft (raw, json)
Hash identifier: eShOumEgoxs1uIRZuDpdIMf0OSXJWc99qJBZL0ggCww=
Subject key identifier: 98:3E:42:B0:E1:1E:54:E1:BD:E3:FE:CB:91:95:CC:92:EF:57:18:62
Authority key identifier: F3:0C:57:E1:B7:D7:D6:8B:49:51:D8:C4:7E:CF:57:9A:3F:0E:F1:B7
Certificate issuer: /CN=f30c57e1b7d7d68b4951d8c47ecf579a3f0ef1b7
Certificate serial: 0194BD4E74B352698B7B1AD7B0F3044B1B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8wxX4bfX1otJUdjEfs9Xmj8O8bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/933ad8-c0bb-4be1-84a7-1a1dc0890678/1/8wxX4bfX1otJUdjEfs9Xmj8O8bc.mft
Manifest number: 01A1
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: 8wxX4bfX1otJUdjEfs9Xmj8O8bc.crl (hash: C/1lbneZes5ed73jTRqqsLIsCW3ZI4RtL2UPfO5bBK4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:74:b3:52:69:8b:7b:1a:d7:b0:f3:04:4b:1b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30c57e1b7d7d68b4951d8c47ecf579a3f0ef1b7
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=983e42b0e11e54e1bde3fecb9195cc92ef571862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2a:e7:5f:9f:f9:f9:6d:e8:77:c6:9e:96:fc:
e4:9b:c2:f3:06:0d:92:79:d7:29:fe:a1:c9:8f:db:
72:8a:5f:a5:8c:87:96:db:fb:3e:35:0c:fc:0a:09:
55:a8:de:7e:e8:f2:a9:22:92:15:ca:f6:49:ed:39:
0d:41:2e:87:01:cb:44:86:73:18:d2:1c:9a:61:be:
f9:c3:16:7d:9e:40:8b:d5:09:77:71:19:b7:40:71:
87:58:90:26:28:3b:64:1b:c1:6c:ba:b9:d5:6a:50:
3a:49:4c:5d:85:db:25:42:23:4f:89:a9:dd:95:89:
75:5d:46:e3:b3:59:af:1b:be:69:2c:24:a3:25:d9:
2c:cd:5e:8d:f2:97:9a:2e:6f:cc:e6:77:28:9d:36:
6c:7d:04:18:36:7c:5f:e8:66:fe:b5:c0:bd:1e:ba:
37:6c:de:3a:2e:d5:c4:a1:24:0e:f2:45:c6:1d:da:
33:15:ed:b5:c8:30:96:62:3d:2a:ec:1c:2e:ae:06:
c3:03:40:45:53:89:ee:60:c7:46:32:24:86:9c:c0:
c9:21:06:56:8e:3d:64:af:30:18:bf:3c:78:ce:ce:
b5:a5:7b:dc:64:4e:0d:17:6c:de:64:dd:8d:dc:2b:
5f:55:59:3b:31:e1:fd:2f:1f:87:c9:b1:68:f2:d8:
57:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3E:42:B0:E1:1E:54:E1:BD:E3:FE:CB:91:95:CC:92:EF:57:18:62
X509v3 Authority Key Identifier:
keyid:F3:0C:57:E1:B7:D7:D6:8B:49:51:D8:C4:7E:CF:57:9A:3F:0E:F1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wxX4bfX1otJUdjEfs9Xmj8O8bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/933ad8-c0bb-4be1-84a7-1a1dc0890678/1/8wxX4bfX1otJUdjEfs9Xmj8O8bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/933ad8-c0bb-4be1-84a7-1a1dc0890678/1/8wxX4bfX1otJUdjEfs9Xmj8O8bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:64:8e:ed:c1:f6:77:77:69:d7:c7:8f:cd:8a:fa:4c:84:67:
0e:14:3c:fd:98:86:6f:9e:4e:46:f4:b7:44:49:c1:f3:29:54:
f8:9f:ae:f1:4f:72:9a:44:ba:cf:b4:6c:47:4a:73:33:f8:7e:
93:8a:25:e5:65:c9:f9:70:8a:b1:7f:07:94:4e:f2:b0:25:98:
41:7c:36:2e:c7:89:33:2c:1f:94:ed:b9:b2:fd:09:6f:95:9f:
c9:c3:f6:1b:d2:37:bc:c0:28:ce:81:b2:2e:cc:dd:62:f3:be:
2e:6f:d0:47:5d:69:5c:ed:1a:90:64:71:20:cb:f6:6c:84:62:
c9:e4:1a:12:e9:48:8a:1a:97:be:27:c5:6d:b9:2c:5b:c7:ce:
d0:60:dd:e4:15:ae:a3:eb:f2:42:2e:41:ac:c5:b4:35:68:2e:
e5:2a:27:38:f0:77:91:0d:8f:c4:49:69:54:1f:46:46:36:29:
24:57:cd:c4:47:55:f1:81:41:21:85:70:1c:6d:88:56:c3:be:
bd:24:9f:17:f9:18:e2:f4:98:f3:8b:ee:73:52:a4:82:19:3a:
8c:ee:78:89:03:20:f0:d2:fb:d4:58:ef:18:05:76:70:7a:e7:
58:56:58:da:e4:d8:5e:e7:3e:33:a5:55:52:d2:d8:64:2c:cc:
63:eb:29:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TnSzUmmLexrXsPMESxs2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMGM1N2UxYjdkN2Q2OGI0OTUxZDhjNDdlY2Y1NzlhM2Yw
ZWYxYjcwHhcNMjUwMTMxMTcwMDIyWhcNMjUwMjAxMTcwMDIyWjAzMTEwLwYDVQQD
Eyg5ODNlNDJiMGUxMWU1NGUxYmRlM2ZlY2I5MTk1Y2M5MmVmNTcxODYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyrnX5/5+W3od8aelvzkm8LzBg2S
edcp/qHJj9tyil+ljIeW2/s+NQz8CglVqN5+6PKpIpIVyvZJ7TkNQS6HActEhnMY
0hyaYb75wxZ9nkCL1Ql3cRm3QHGHWJAmKDtkG8FsurnValA6SUxdhdslQiNPiand
lYl1XUbjs1mvG75pLCSjJdkszV6N8peaLm/M5nconTZsfQQYNnxf6Gb+tcC9Hro3
bN46LtXEoSQO8kXGHdozFe21yDCWYj0q7BwurgbDA0BFU4nuYMdGMiSGnMDJIQZW
jj1krzAYvzx4zs61pXvcZE4NF2zeZN2N3CtfVVk7MeH9Lx+HybFo8thX7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJg+QrDhHlThveP+y5GVzJLvVxhiMB8GA1UdIwQY
MBaAFPMMV+G319aLSVHYxH7PV5o/DvG3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHd4WDRiZlgxb3RKVWRqRWZzOVhtajhPOGJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy85MzNhZDgtYzBiYi00YmUxLTg0YTct
MWExZGMwODkwNjc4LzEvOHd4WDRiZlgxb3RKVWRqRWZzOVhtajhPOGJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy85MzNhZDgtYzBiYi00YmUxLTg0YTctMWExZGMwODkwNjc4
LzEvOHd4WDRiZlgxb3RKVWRqRWZzOVhtajhPOGJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2SO7cH2
d3dp18ePzYr6TIRnDhQ8/ZiGb55ORvS3REnB8ylU+J+u8U9ymkS6z7RsR0pzM/h+
k4ol5WXJ+XCKsX8HlE7ysCWYQXw2LseJMywflO25sv0Jb5WfycP2G9I3vMAozoGy
LszdYvO+Lm/QR11pXO0akGRxIMv2bIRiyeQaEulIihqXvifFbbksW8fO0GDd5BWu
o+vyQi5BrMW0NWgu5SonOPB3kQ2PxElpVB9GRjYpJFfNxEdV8YFBIYVwHG2IVsO+
vSSfF/kY4vSY84vuc1Kkghk6jO54iQMg8NL71FjvGAV2cHrnWFZY2uTYXuc+M6VV
UtLYZCzMY+spxQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:05:45 2025 by rpki-client