Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
File: 8MScIXjoL9wfQZ9afFFyHfU9ekg.mft (raw, json)
Hash identifier: yKAYzh2yTzbW+r/oeMkRrzBoQuio8fJAjqEQhyi4ueE=
Subject key identifier: 14:4C:06:88:CE:56:F3:18:F9:1C:D9:E9:44:A0:5A:56:8B:9A:10:B2
Authority key identifier: F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
Certificate issuer: /CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Certificate serial: 0194BC04A9D2EEC234B64B4D7CB7E926E86A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
Manifest number: 1314
Signing time: Fri 31 Jan 2025 11:00:09 +0000
Manifest this update: Fri 31 Jan 2025 11:00:09 +0000
Manifest next update: Sat 01 Feb 2025 11:00:09 +0000
Files and hashes: 1: 8MScIXjoL9wfQZ9afFFyHfU9ekg.crl (hash: NT9SftSmU1qkQ728f96W6ktKnbianwcZYOLP9t2a5Sg=)
2: E1bqejAdTN3uYMBTKCwH33KmoEE.roa (hash: /XRVb9kLwHV21UKOVZ0MM6evc9apWkwvTlQRZL1Tohg=)
3: gAbWpwUUphvqV25CUB0maQ_pAx0.roa (hash: BLsk+LJxA+WagSmLj3Bzfhh4p3QvCZDF/XVfmTYGdec=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a9:d2:ee:c2:34:b6:4b:4d:7c:b7:e9:26:e8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Validity
Not Before: Jan 31 11:00:09 2025 GMT
Not After : Feb 1 11:00:09 2025 GMT
Subject: CN=144c0688ce56f318f91cd9e944a05a568b9a10b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:24:42:9f:c0:bb:57:e8:0c:69:90:f5:a1:f6:
96:45:92:58:a7:3e:74:04:14:bb:b8:ed:81:f6:31:
6b:45:6d:26:d0:c1:03:3b:3f:80:f0:6c:d0:42:55:
e5:12:07:59:9c:50:8d:50:ba:b3:2c:1e:1a:c2:22:
60:e2:ed:d2:68:12:75:a2:8c:2c:78:c2:0c:5a:4f:
ea:6b:88:6f:15:f9:49:3d:e2:15:c4:61:c4:38:3b:
31:9f:85:d9:ad:c7:0f:a0:a0:d0:4e:f5:a1:bc:ee:
e1:00:0d:3e:b5:af:dd:24:2c:5a:4c:17:bb:83:2f:
40:12:97:fc:cb:66:6c:a4:82:e7:55:80:a1:91:76:
be:9a:37:bc:e1:67:b2:46:8c:79:09:3c:2e:e1:03:
8f:a5:af:07:15:ec:70:55:da:58:8f:4f:15:97:3b:
57:bd:d7:df:85:39:80:57:53:00:11:7c:66:88:54:
24:ce:29:54:a4:94:b3:54:b0:50:a4:01:b5:f6:ad:
0a:74:aa:aa:71:d8:5a:5d:a6:1d:af:be:be:51:86:
21:d6:86:6b:c7:2c:09:2a:d4:52:f5:5a:c1:c6:1a:
02:75:e7:1d:52:3d:43:82:d6:72:b2:77:20:95:cb:
a5:da:72:2b:c6:d1:5a:db:fb:0b:4d:02:a1:e9:6d:
5f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4C:06:88:CE:56:F3:18:F9:1C:D9:E9:44:A0:5A:56:8B:9A:10:B2
X509v3 Authority Key Identifier:
keyid:F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ba:0d:2b:18:7f:81:6c:c1:4f:24:64:00:de:72:35:23:af:
25:ba:cb:d8:a3:96:0b:7c:a1:75:9e:49:2f:86:6b:62:33:d7:
4e:33:3a:e2:da:23:8c:54:d1:9c:8e:c5:61:86:48:37:86:28:
3f:9d:c3:f7:a9:2a:18:5c:ca:e6:26:7d:98:29:c9:93:b9:6e:
cc:3a:a4:d9:da:60:e5:00:a6:1b:b2:8a:33:2b:81:0f:93:64:
97:5b:8b:22:6d:03:9b:69:06:49:03:07:64:a9:6f:ae:fb:4b:
fa:5f:4d:aa:4f:2c:22:15:05:7b:78:51:41:50:19:a6:63:0d:
d7:63:4b:ba:4c:f4:e2:64:a9:e4:2d:00:34:5f:82:fa:40:c8:
5a:b5:32:38:b5:d4:c7:ae:88:76:22:df:67:3f:d7:01:16:0c:
3d:25:9a:35:e0:06:59:78:0d:b3:76:cb:0c:93:0c:74:08:4d:
84:25:90:99:85:d1:58:83:22:4d:0f:ed:3c:d6:e0:14:e6:5e:
de:b1:dc:6b:52:f9:f4:44:a4:a3:0a:b3:0c:05:c4:2b:91:21:
63:a3:34:22:c4:db:3a:8f:20:e8:c6:3d:cb:ce:7f:a6:24:36:
b5:15:94:9f:d7:f4:d7:53:1a:17:e3:38:e2:0f:9f:89:b5:0e:
5c:39:77:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BKnS7sI0tktNfLfpJuhqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYzQ5YzIxNzhlODJmZGMxZjQxOWY1YTdjNTE3MjFkZjUz
ZDdhNDgwHhcNMjUwMTMxMTEwMDA5WhcNMjUwMjAxMTEwMDA5WjAzMTEwLwYDVQQD
EygxNDRjMDY4OGNlNTZmMzE4ZjkxY2Q5ZTk0NGEwNWE1NjhiOWExMGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyRCn8C7V+gMaZD1ofaWRZJYpz50
BBS7uO2B9jFrRW0m0MEDOz+A8GzQQlXlEgdZnFCNULqzLB4awiJg4u3SaBJ1oows
eMIMWk/qa4hvFflJPeIVxGHEODsxn4XZrccPoKDQTvWhvO7hAA0+ta/dJCxaTBe7
gy9AEpf8y2ZspILnVYChkXa+mje84WeyRox5CTwu4QOPpa8HFexwVdpYj08VlztX
vdffhTmAV1MAEXxmiFQkzilUpJSzVLBQpAG19q0KdKqqcdhaXaYdr76+UYYh1oZr
xywJKtRS9VrBxhoCdecdUj1DgtZysncglcul2nIrxtFa2/sLTQKh6W1fXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRMBojOVvMY+RzZ6USgWlaLmhCyMB8GA1UdIwQY
MBaAFPDEnCF46C/cH0GfWnxRch31PXpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE1TY0lYam9MOXdmUVo5YWZGRnlIZlU5ZWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9lMjJmZWEtODRkMC00MDZhLThhNmYt
NDZmNWZhMmM5MzAzLzEvOE1TY0lYam9MOXdmUVo5YWZGRnlIZlU5ZWtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9lMjJmZWEtODRkMC00MDZhLThhNmYtNDZmNWZhMmM5MzAz
LzEvOE1TY0lYam9MOXdmUVo5YWZGRnlIZlU5ZWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANboNKxh/
gWzBTyRkAN5yNSOvJbrL2KOWC3yhdZ5JL4ZrYjPXTjM64tojjFTRnI7FYYZIN4Yo
P53D96kqGFzK5iZ9mCnJk7luzDqk2dpg5QCmG7KKMyuBD5Nkl1uLIm0Dm2kGSQMH
ZKlvrvtL+l9Nqk8sIhUFe3hRQVAZpmMN12NLukz04mSp5C0ANF+C+kDIWrUyOLXU
x66IdiLfZz/XARYMPSWaNeAGWXgNs3bLDJMMdAhNhCWQmYXRWIMiTQ/tPNbgFOZe
3rHca1L59ESkowqzDAXEK5EhY6M0IsTbOo8g6MY9y85/piQ2tRWUn9f011MaF+M4
4g+fibUOXDl3Xw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:10 2025 by rpki-client