Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.mft
File: 8l_UfYNvym90HKo4I5N_S7HxspQ.mft (raw, json)
Hash identifier: QeDr8ntshdcC0Uxgu163mPJ5PlHjzKyvAXiRrxzg7Zw=
Subject key identifier: 3F:27:FD:B8:91:F1:A3:C1:80:A5:90:28:F1:0F:CA:00:1B:86:04:16
Authority key identifier: F2:5F:D4:7D:83:6F:CA:6F:74:1C:AA:38:23:93:7F:4B:B1:F1:B2:94
Certificate issuer: /CN=f25fd47d836fca6f741caa3823937f4bb1f1b294
Certificate serial: 0194BC04B157686735714D252B7857D64B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8l_UfYNvym90HKo4I5N_S7HxspQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.mft
Manifest number: 0616
Signing time: Fri 31 Jan 2025 11:00:11 +0000
Manifest this update: Fri 31 Jan 2025 11:00:11 +0000
Manifest next update: Sat 01 Feb 2025 11:00:11 +0000
Files and hashes: 1: 3yojvf8xLy7Wn7IouQzlSqK0wi8.roa (hash: XkJKLziNIIGZCpFPWVC2bt7aic/Y/irC0qgPRJLIevw=)
2: 8l_UfYNvym90HKo4I5N_S7HxspQ.crl (hash: rKWEz7EBAmoAKi51DJOTO9haFDrujoae9twQ+FaQz+E=)
3: zzDFF83rooq9bozHtYL_dATXTDM.roa (hash: MyfSjNe+EtbThUkyyT8a+4fAUtZTRsF/D/cpjHn7JnY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b1:57:68:67:35:71:4d:25:2b:78:57:d6:4b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25fd47d836fca6f741caa3823937f4bb1f1b294
Validity
Not Before: Jan 31 11:00:11 2025 GMT
Not After : Feb 1 11:00:11 2025 GMT
Subject: CN=3f27fdb891f1a3c180a59028f10fca001b860416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:72:80:98:db:72:f6:a6:70:9c:71:e9:74:
bf:cc:00:2a:b2:37:60:38:aa:cb:5d:18:c5:f6:db:
89:9c:99:96:ec:55:cf:a4:21:93:54:f3:79:c1:b4:
95:a8:a2:96:87:3e:b1:4a:22:72:74:7a:f7:33:e1:
71:6d:37:cb:38:76:95:41:74:db:9c:d1:27:ca:06:
bc:d1:de:ce:87:7c:53:af:c0:15:f5:57:33:80:65:
f4:9f:09:b4:32:eb:73:4d:a2:32:34:9d:50:1b:58:
75:59:35:3a:94:78:15:8f:11:86:32:58:a8:56:f4:
1a:1d:c9:f5:d8:7d:64:6f:2d:64:ac:1a:ed:ed:96:
9d:17:90:20:04:73:37:7e:29:0d:cf:55:bb:e8:59:
b0:64:56:31:d9:81:2f:d5:b8:a2:cb:00:4d:d4:66:
1b:3d:e5:4d:85:12:bf:95:7e:7b:47:e2:46:f5:a9:
2d:c0:ce:ad:5a:50:ec:22:47:14:f1:12:37:17:b8:
06:e5:e6:bd:e5:d6:7e:a8:8b:b9:48:64:9d:07:87:
eb:ae:ea:9d:f0:b7:9a:d4:5a:b1:94:e0:0e:4a:5c:
84:c4:62:92:11:11:c5:83:da:7a:fc:f4:0a:20:9b:
e7:2e:45:d5:68:c7:d6:31:c6:31:55:fb:75:dc:5d:
14:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:27:FD:B8:91:F1:A3:C1:80:A5:90:28:F1:0F:CA:00:1B:86:04:16
X509v3 Authority Key Identifier:
keyid:F2:5F:D4:7D:83:6F:CA:6F:74:1C:AA:38:23:93:7F:4B:B1:F1:B2:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l_UfYNvym90HKo4I5N_S7HxspQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:51:4c:13:f2:d2:82:57:37:27:ef:ec:48:ba:7d:a6:d9:5a:
6e:73:91:9d:2d:16:0e:ff:ea:1a:3f:57:d7:27:40:dd:52:23:
16:76:4a:1f:78:3b:b9:77:0f:ff:b0:61:83:43:c6:93:3f:c2:
d4:2f:2a:33:10:e1:8d:cc:bc:85:1f:e8:70:93:f6:33:4d:28:
fc:49:4e:4d:f8:74:de:76:32:99:e1:50:cb:b9:a2:e5:30:ed:
fd:46:9b:8c:e2:fc:33:31:42:b6:6a:67:50:31:35:19:cc:f5:
74:dd:62:ca:ed:c1:5d:c9:1c:40:02:8f:ed:c2:b9:02:6d:ca:
dc:23:80:bd:82:9e:2c:2b:58:6e:2b:26:ae:1c:dd:ab:a1:f7:
b0:d5:2e:f5:49:ad:3a:95:ac:6a:55:49:8f:aa:43:bf:04:fe:
33:bb:db:b3:5e:da:5e:7f:2f:e4:fb:5f:55:ec:82:58:d1:cc:
de:e9:9d:50:6f:fb:4e:21:77:61:e9:93:09:20:9f:3d:77:b6:
aa:2b:3c:f2:04:65:14:0c:2d:ae:df:c0:b0:15:1f:cf:94:77:
e3:21:6a:67:d5:9d:ff:98:d0:a5:52:9d:ce:3c:aa:cb:e8:3f:
56:0a:b2:5d:33:61:63:26:7c:e4:f3:52:76:f4:5d:18:37:1e:
e2:af:65:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLFXaGc1cU0lK3hX1kueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNWZkNDdkODM2ZmNhNmY3NDFjYWEzODIzOTM3ZjRiYjFm
MWIyOTQwHhcNMjUwMTMxMTEwMDExWhcNMjUwMjAxMTEwMDExWjAzMTEwLwYDVQQD
EygzZjI3ZmRiODkxZjFhM2MxODBhNTkwMjhmMTBmY2EwMDFiODYwNDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnopygJjbcvamcJxx6XS/zAAqsjdg
OKrLXRjF9tuJnJmW7FXPpCGTVPN5wbSVqKKWhz6xSiJydHr3M+FxbTfLOHaVQXTb
nNEnyga80d7Oh3xTr8AV9VczgGX0nwm0MutzTaIyNJ1QG1h1WTU6lHgVjxGGMlio
VvQaHcn12H1kby1krBrt7ZadF5AgBHM3fikNz1W76FmwZFYx2YEv1biiywBN1GYb
PeVNhRK/lX57R+JG9aktwM6tWlDsIkcU8RI3F7gG5ea95dZ+qIu5SGSdB4frruqd
8Lea1FqxlOAOSlyExGKSERHFg9p6/PQKIJvnLkXVaMfWMcYxVft13F0UAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8n/biR8aPBgKWQKPEPygAbhgQWMB8GA1UdIwQY
MBaAFPJf1H2Db8pvdByqOCOTf0ux8bKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGxfVWZZTnZ5bTkwSEtvNEk1Tl9TN0h4c3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8yOTZlZWMtNGYwNC00YTI1LWE4NDMt
YmI3YTQzZTU3ZjM4LzEvOGxfVWZZTnZ5bTkwSEtvNEk1Tl9TN0h4c3BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8yOTZlZWMtNGYwNC00YTI1LWE4NDMtYmI3YTQzZTU3ZjM4
LzEvOGxfVWZZTnZ5bTkwSEtvNEk1Tl9TN0h4c3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnFFME/LS
glc3J+/sSLp9ptlabnORnS0WDv/qGj9X1ydA3VIjFnZKH3g7uXcP/7Bhg0PGkz/C
1C8qMxDhjcy8hR/ocJP2M00o/ElOTfh03nYymeFQy7mi5TDt/UabjOL8MzFCtmpn
UDE1Gcz1dN1iyu3BXckcQAKP7cK5Am3K3COAvYKeLCtYbismrhzdq6H3sNUu9Umt
OpWsalVJj6pDvwT+M7vbs17aXn8v5PtfVeyCWNHM3umdUG/7TiF3YemTCSCfPXe2
qis88gRlFAwtrt/AsBUfz5R34yFqZ9Wd/5jQpVKdzjyqy+g/VgqyXTNhYyZ85PNS
dvRdGDce4q9lPQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:15 2025 by rpki-client