Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
File: CPy8NByHQz0D5N1hW380UxZDRLM.mft (raw, json)
Hash identifier: ajAdUzwqC/mPaNCPqCeRaXd6NorhUVeNVbhq/Wn5S58=
Subject key identifier: 18:FD:4B:15:D9:C9:3F:E0:76:DC:F6:BC:52:4A:D8:DA:9A:B8:4D:CB
Authority key identifier: 08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
Certificate issuer: /CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Certificate serial: 0194BBCE23A3B91CA317D730BE99769B7C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: 5eRiGQx5boAqRAuznUmYz2xfqMQ.roa (hash: zDFWtpJ7+CfToiZs8AAMHmyitJykUodCcfEyyz3iDfc=)
2: CPy8NByHQz0D5N1hW380UxZDRLM.crl (hash: 727WoYsVCDr/vqpU4rkH7xKGc2Xd+aOBUsHax569njo=)
3: FuRu0xLu2HvckUxx6CKawcRdyGM.roa (hash: X0KwYGhpxludEjFHlw9/03BXtRT7Yd1fekWuVBjCvVo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:23:a3:b9:1c:a3:17:d7:30:be:99:76:9b:7c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=18fd4b15d9c93fe076dcf6bc524ad8da9ab84dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:46:ac:7e:5d:c1:7a:db:ed:1a:f6:05:97:
69:d0:4b:ed:04:2c:4f:ad:f8:4e:81:a5:b0:25:a9:
b0:0f:23:9e:f9:b5:41:4b:56:c8:7f:19:f7:69:a7:
e7:63:7c:87:71:24:13:31:e3:21:76:ad:c5:4c:b6:
72:70:90:c6:8e:4b:68:bc:bf:7e:64:44:9b:e9:83:
11:2c:b7:c1:1d:e9:77:1a:ef:ce:ab:a9:93:ca:00:
25:a0:2e:12:cf:0c:73:46:f8:7b:9b:0f:af:ef:8a:
23:4f:56:e7:ca:9c:0d:95:a7:da:08:30:a2:6d:62:
fa:b8:96:af:7c:80:6d:dc:ec:22:53:90:67:37:fd:
e7:bf:8f:11:92:88:98:cd:7b:a4:fe:9b:55:07:1b:
78:f6:0d:86:59:4c:48:d8:52:72:57:49:80:3c:f1:
37:40:60:66:3b:77:43:91:e5:e3:37:f6:ba:a8:56:
77:2d:74:79:14:5f:c5:3a:5c:be:d9:96:0e:ba:fa:
6a:47:1e:3c:3a:d2:c4:29:a9:15:67:30:41:84:39:
ac:3e:f6:2f:25:47:c4:45:9b:f0:97:50:d4:d8:23:
76:28:30:46:90:4b:65:7e:2a:00:13:b8:c8:54:f9:
4c:aa:84:d6:ba:55:41:38:6e:2e:11:2c:3b:ee:86:
9f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FD:4B:15:D9:C9:3F:E0:76:DC:F6:BC:52:4A:D8:DA:9A:B8:4D:CB
X509v3 Authority Key Identifier:
keyid:08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:bf:d7:dc:1a:14:90:ad:0d:fc:4a:96:60:86:2c:55:ab:cd:
2d:46:72:73:51:c4:6b:a5:2d:f8:67:a8:f5:18:01:be:b7:da:
a1:c6:b9:ee:ef:5c:87:a7:c5:d1:d8:ac:dc:88:20:8b:ad:90:
3d:f1:d4:7b:8e:76:78:a2:e1:e0:2c:a6:4f:6f:0a:7a:6b:f2:
bb:cb:12:df:28:ca:2f:25:38:6e:dd:85:08:c1:60:eb:0e:4e:
ed:b6:19:3f:c1:30:8f:75:86:02:28:3f:1e:e2:9c:0c:f0:b5:
ad:80:d8:9e:19:e9:a2:8c:b9:cc:a2:c7:bb:5f:56:6c:f6:0d:
9e:f5:76:30:b0:a1:be:41:e3:bf:af:fa:2e:cf:b5:8f:a2:27:
d3:55:4f:02:f2:bf:7c:30:cb:75:e7:de:b8:c0:00:eb:9d:08:
fd:17:f8:92:91:1a:b8:b1:a7:9a:dc:10:32:18:e5:1e:87:ea:
89:df:91:db:1d:94:72:ce:53:e0:a9:b7:04:36:b6:d7:51:5d:
b6:37:77:69:0b:a0:24:42:ab:0e:64:2d:1f:5e:ad:27:69:fb:
9e:51:5b:d5:75:bc:25:97:2f:8c:51:d6:f2:b1:51:e7:d3:9c:
b3:2e:4d:08:90:24:5e:88:9d:af:e9:fc:49:ca:cc:14:ee:cb:
ff:c0:b1:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ziOjuRyjF9cwvpl2m3wRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZmNiYzM0MWM4NzQzM2QwM2U0ZGQ2MTViN2YzNDUzMTY0
MzQ0YjMwHhcNMjUwMTMxMTAwMDM2WhcNMjUwMjAxMTAwMDM2WjAzMTEwLwYDVQQD
EygxOGZkNGIxNWQ5YzkzZmUwNzZkY2Y2YmM1MjRhZDhkYTlhYjg0ZGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvVGrH5dwXrb7Rr2BZdp0EvtBCxP
rfhOgaWwJamwDyOe+bVBS1bIfxn3aafnY3yHcSQTMeMhdq3FTLZycJDGjktovL9+
ZESb6YMRLLfBHel3Gu/Oq6mTygAloC4SzwxzRvh7mw+v74ojT1bnypwNlafaCDCi
bWL6uJavfIBt3OwiU5BnN/3nv48RkoiYzXuk/ptVBxt49g2GWUxI2FJyV0mAPPE3
QGBmO3dDkeXjN/a6qFZ3LXR5FF/FOly+2ZYOuvpqRx48OtLEKakVZzBBhDmsPvYv
JUfERZvwl1DU2CN2KDBGkEtlfioAE7jIVPlMqoTWulVBOG4uESw77oafrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBj9SxXZyT/gdtz2vFJK2NqauE3LMB8GA1UdIwQY
MBaAFAj8vDQch0M9A+TdYVt/NFMWQ0SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1B5OE5CeUhRejBENU4xaFczODBVeFpEUkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xYWU3YmUtMzQ4NC00YjEyLThiZjQt
YzEwMGE5ODZiYzVjLzEvQ1B5OE5CeUhRejBENU4xaFczODBVeFpEUkxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xYWU3YmUtMzQ4NC00YjEyLThiZjQtYzEwMGE5ODZiYzVj
LzEvQ1B5OE5CeUhRejBENU4xaFczODBVeFpEUkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7/X3BoU
kK0N/EqWYIYsVavNLUZyc1HEa6Ut+Geo9RgBvrfaoca57u9ch6fF0dis3Iggi62Q
PfHUe452eKLh4CymT28Kemvyu8sS3yjKLyU4bt2FCMFg6w5O7bYZP8Ewj3WGAig/
HuKcDPC1rYDYnhnpooy5zKLHu19WbPYNnvV2MLChvkHjv6/6Ls+1j6In01VPAvK/
fDDLdefeuMAA650I/Rf4kpEauLGnmtwQMhjlHofqid+R2x2Ucs5T4Km3BDa211Fd
tjd3aQugJEKrDmQtH16tJ2n7nlFb1XW8JZcvjFHW8rFR59Ocsy5NCJAkXoidr+n8
ScrMFO7L/8CxQw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:11:42 2025 by rpki-client