Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
File: c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft (raw, json)
Hash identifier: WDw5cxj+gBmi6fkio//wiwl7tScUSV74FccJHuXq3to=
Subject key identifier: C9:45:A9:30:3C:CB:B4:F5:02:79:E8:50:AC:02:B6:E7:B9:C8:6F:B7
Authority key identifier: 73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
Certificate issuer: /CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Certificate serial: 0194BD17B4972DFA93973E62FA0DFC547278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:34 +0000
Manifest this update: Fri 31 Jan 2025 16:00:34 +0000
Manifest next update: Sat 01 Feb 2025 16:00:34 +0000
Files and hashes: 1: YlBw5zZMyGmVSKcyUcis3LeoBu4.roa (hash: FNW2TVY99VnemA7lyfpV1rEplwNPKCZ+roIw6UfcWJE=)
2: c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl (hash: yuTL60KnatA7oQRfnftzd9w4mJCHeZJykq59CNnVKv0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b4:97:2d:fa:93:97:3e:62:fa:0d:fc:54:72:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Validity
Not Before: Jan 31 16:00:34 2025 GMT
Not After : Feb 1 16:00:34 2025 GMT
Subject: CN=c945a9303ccbb4f50279e850ac02b6e7b9c86fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:40:a8:68:60:d8:4f:ce:0e:73:22:71:88:cc:
42:24:b1:91:df:8f:22:d6:10:43:b7:b1:7f:4c:1a:
a3:5e:c4:6a:3a:f5:73:5b:a5:db:fe:0b:fb:89:b1:
70:4f:e5:d3:5e:a0:3f:51:bc:10:b4:d1:85:94:01:
9b:43:bc:32:50:d6:d1:f8:e6:3b:1f:2c:0c:f8:95:
12:1c:ab:1e:29:27:5b:73:6a:e1:49:e2:84:f7:8a:
02:98:6f:93:27:e4:87:38:58:67:75:73:5e:75:15:
77:33:7d:7c:b3:70:97:9d:d0:03:08:fe:fc:8b:0a:
90:8b:08:b9:8d:da:72:e7:77:11:c4:51:03:d1:42:
3b:f2:3b:cc:9c:2d:db:f1:37:a1:3a:42:63:12:6a:
cc:5e:8d:64:9b:6b:5b:12:79:19:a6:0d:64:b7:14:
e1:69:00:db:45:98:75:b5:4f:f9:50:7c:f7:ab:a7:
a6:a6:a1:9d:55:b6:10:b8:1e:fa:3c:51:dd:dc:c1:
bc:1e:e0:f7:83:ea:a8:8f:49:25:5a:a8:e7:92:73:
7c:a0:bd:29:02:71:37:ba:77:88:17:26:64:50:1b:
93:32:b8:02:ad:98:59:2c:89:05:0f:e2:24:2b:fa:
c6:d7:ff:b6:e4:e1:ef:9c:83:97:9f:65:ea:c8:dc:
95:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:45:A9:30:3C:CB:B4:F5:02:79:E8:50:AC:02:B6:E7:B9:C8:6F:B7
X509v3 Authority Key Identifier:
keyid:73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ab:c0:4c:1d:31:8d:89:97:9b:af:74:5d:a6:42:91:82:50:
9c:2c:4f:0b:fa:ad:65:da:e7:40:cb:3d:e6:ba:bd:fa:6f:13:
32:a0:3f:d1:09:ff:e7:f2:d6:27:99:26:02:b6:e8:2d:06:6d:
bd:ae:4f:6b:da:ec:53:0c:b0:ad:ed:ee:f6:88:bd:6d:06:c3:
0e:e9:c3:73:c2:df:a5:c1:66:a9:50:93:78:25:6a:d0:71:7a:
42:d1:72:1c:c0:8d:68:fa:e8:aa:c9:1d:1f:50:ff:d9:1e:79:
90:5e:06:09:10:cb:52:33:f9:3b:ff:cd:81:8c:0f:1b:ae:8e:
0e:93:88:8d:5a:d4:b6:3f:b1:a3:cd:ec:c0:cd:39:19:0b:a6:
f0:46:95:42:72:49:9d:29:ee:7e:83:5c:86:14:c7:aa:d4:aa:
c3:c0:0b:1c:3d:e0:b3:1d:03:98:69:ba:1b:f1:48:9d:b3:22:
cd:43:89:4a:2c:85:90:d7:0e:d2:a7:98:37:5f:a4:61:05:7a:
a8:83:a9:09:38:bf:9f:6a:3e:89:2a:56:17:38:17:b1:cb:46:
0c:f9:c9:4e:17:ec:a7:e3:96:d4:94:de:9f:e3:f3:fd:b3:8d:
c8:be:2a:e4:72:f7:be:7c:bb:49:57:78:1d:3f:8d:e3:a9:49:
e3:4f:83:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F7SXLfqTlz5i+g38VHJ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczY2JjMTQ3ZWFkZDgxNTQ4MTUxZjM1MTBlMmRlMDlkODY4
YWM2Y2MwHhcNMjUwMTMxMTYwMDM0WhcNMjUwMjAxMTYwMDM0WjAzMTEwLwYDVQQD
EyhjOTQ1YTkzMDNjY2JiNGY1MDI3OWU4NTBhYzAyYjZlN2I5Yzg2ZmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkCoaGDYT84OcyJxiMxCJLGR348i
1hBDt7F/TBqjXsRqOvVzW6Xb/gv7ibFwT+XTXqA/UbwQtNGFlAGbQ7wyUNbR+OY7
HywM+JUSHKseKSdbc2rhSeKE94oCmG+TJ+SHOFhndXNedRV3M318s3CXndADCP78
iwqQiwi5jdpy53cRxFED0UI78jvMnC3b8TehOkJjEmrMXo1km2tbEnkZpg1ktxTh
aQDbRZh1tU/5UHz3q6empqGdVbYQuB76PFHd3MG8HuD3g+qoj0klWqjnknN8oL0p
AnE3uneIFyZkUBuTMrgCrZhZLIkFD+IkK/rG1/+25OHvnIOXn2XqyNyVtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlFqTA8y7T1AnnoUKwCtue5yG+3MB8GA1UdIwQY
MBaAFHPLwUfq3YFUgVHzUQ4t4J2GisbMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzh2QlItcmRnVlNCVWZOUkRpM2duWWFLeHN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hNjMwNGItNmM1OS00ZjVmLWI2NDYt
NWYwZDkxZjRmOTA4LzEvYzh2QlItcmRnVlNCVWZOUkRpM2duWWFLeHN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hNjMwNGItNmM1OS00ZjVmLWI2NDYtNWYwZDkxZjRmOTA4
LzEvYzh2QlItcmRnVlNCVWZOUkRpM2duWWFLeHN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6vATB0x
jYmXm690XaZCkYJQnCxPC/qtZdrnQMs95rq9+m8TMqA/0Qn/5/LWJ5kmArboLQZt
va5Pa9rsUwywre3u9oi9bQbDDunDc8LfpcFmqVCTeCVq0HF6QtFyHMCNaProqskd
H1D/2R55kF4GCRDLUjP5O//NgYwPG66ODpOIjVrUtj+xo83swM05GQum8EaVQnJJ
nSnufoNchhTHqtSqw8ALHD3gsx0DmGm6G/FInbMizUOJSiyFkNcO0qeYN1+kYQV6
qIOpCTi/n2o+iSpWFzgXsctGDPnJThfsp+OW1JTen+Pz/bONyL4q5HL3vny7SVd4
HT+N46lJ40+D3Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:24 2025 by rpki-client