Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
File: 8ppplYAYXWUQAV4dLKGe_0NkHtw.mft (raw, json)
Hash identifier: wKjiZmN+Sx1yQhnuQVoQHHO1H72M0zsiU0Ny7yLW5F4=
Subject key identifier: 77:C1:7E:C5:38:8C:21:0F:81:10:CD:F3:47:56:52:EB:D1:DC:8B:D0
Authority key identifier: F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC
Certificate issuer: /CN=f29a699580185d6510015e1d2ca19eff43641edc
Certificate serial: 0194BBCE4DAC49C5A69C052F0418DF25FAF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
Manifest number: 0666
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: 8ppplYAYXWUQAV4dLKGe_0NkHtw.crl (hash: E9fzv1vB7dbvRDRgNpcBTLsQnlI08GIgBQpwihvUSkQ=)
2: nTEco9mT1eULi7_9dIxqABgskB8.roa (hash: yHq4DLSIuBnBv74/JgQY/5bfqTpB6DfkqhhtGE6kqjE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4d:ac:49:c5:a6:9c:05:2f:04:18:df:25:fa:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29a699580185d6510015e1d2ca19eff43641edc
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=77c17ec5388c210f8110cdf3475652ebd1dc8bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:2c:20:79:cf:9a:45:a3:01:3c:ab:25:e3:
f5:20:48:dc:1a:41:70:22:17:2b:be:1d:ec:1f:55:
3e:75:72:8d:b1:88:26:1a:6b:15:83:69:51:0a:24:
a6:29:b6:eb:77:71:eb:ef:f1:c2:27:0c:aa:55:d1:
91:a5:7d:f6:39:a6:08:19:5f:24:55:2b:1d:12:e3:
ee:62:0e:dd:89:c4:4e:c9:08:f5:fe:dc:ac:3d:62:
9f:ae:db:0e:22:58:9f:61:33:65:5b:9e:fb:02:80:
bb:b3:99:2e:d7:0d:d5:9b:c3:c7:43:e5:7e:89:28:
cf:75:05:4d:99:68:02:bf:fb:99:7e:78:e0:8a:47:
38:be:2e:3c:d3:8a:a4:c5:a6:40:2d:2d:de:29:94:
3c:78:92:cf:ce:46:dc:58:fd:2c:be:f6:fe:0d:17:
88:dd:d7:2d:53:68:fe:43:32:6c:9c:7e:83:40:96:
e2:7c:70:32:d7:43:8e:99:fa:31:c4:13:72:d6:74:
3b:0c:0e:2c:97:d4:33:cc:6c:65:f7:ee:f1:a4:7a:
20:9e:26:6a:bd:6c:9c:6a:d7:45:90:bc:79:22:d0:
cb:db:2f:0c:06:2f:d7:04:9d:35:bf:c0:45:cc:76:
ac:52:3d:b1:7d:23:24:a4:f0:65:e9:0c:14:58:4e:
67:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C1:7E:C5:38:8C:21:0F:81:10:CD:F3:47:56:52:EB:D1:DC:8B:D0
X509v3 Authority Key Identifier:
keyid:F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:94:6f:c4:d4:d3:89:3d:a3:c6:97:38:26:0b:e8:b3:56:6e:
89:6d:a7:ff:6f:18:14:57:44:5b:e9:d0:93:a8:c6:d5:67:d7:
76:4f:7e:e9:4a:c4:61:b2:25:d4:c1:15:f5:2e:55:54:f4:39:
e5:12:b2:e4:1a:7a:9d:84:8b:bd:4f:0b:c1:78:ee:dc:9d:e2:
bf:c6:cc:71:4c:bb:dd:bf:08:49:65:77:63:d3:44:a3:39:28:
73:72:ba:e7:61:f0:47:69:a2:4e:67:82:62:c0:69:d5:9a:af:
01:71:38:9d:d1:96:64:82:d7:13:c6:9c:88:87:45:81:2e:61:
83:45:90:cf:1d:cf:63:1a:95:10:fe:4f:24:12:96:54:db:ab:
9d:02:5e:ad:17:a3:9d:c3:08:e0:2c:bd:f9:eb:b1:a8:ba:62:
b2:39:cf:d6:60:e9:29:c2:02:ce:bc:fa:44:7a:cb:f3:ca:85:
d0:b4:a3:ee:03:29:85:b3:ef:81:35:40:a6:fe:ab:00:b6:aa:
d5:f6:26:35:b5:7c:13:f7:a0:45:14:b9:9c:4d:68:54:50:9a:
1a:ca:d3:71:83:25:0f:37:59:94:b3:2e:bc:13:74:77:2a:83:
b7:57:61:fb:dc:01:fe:d7:3f:c1:9f:29:fb:de:59:f3:bd:31:
88:65:6c:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zk2sScWmnAUvBBjfJfrxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyOWE2OTk1ODAxODVkNjUxMDAxNWUxZDJjYTE5ZWZmNDM2
NDFlZGMwHhcNMjUwMTMxMTAwMDQ3WhcNMjUwMjAxMTAwMDQ3WjAzMTEwLwYDVQQD
Eyg3N2MxN2VjNTM4OGMyMTBmODExMGNkZjM0NzU2NTJlYmQxZGM4YmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1UsIHnPmkWjATyrJeP1IEjcGkFw
Ihcrvh3sH1U+dXKNsYgmGmsVg2lRCiSmKbbrd3Hr7/HCJwyqVdGRpX32OaYIGV8k
VSsdEuPuYg7dicROyQj1/tysPWKfrtsOIlifYTNlW577AoC7s5ku1w3Vm8PHQ+V+
iSjPdQVNmWgCv/uZfnjgikc4vi4804qkxaZALS3eKZQ8eJLPzkbcWP0svvb+DReI
3dctU2j+QzJsnH6DQJbifHAy10OOmfoxxBNy1nQ7DA4sl9QzzGxl9+7xpHogniZq
vWycatdFkLx5ItDL2y8MBi/XBJ01v8BFzHasUj2xfSMkpPBl6QwUWE5nQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfBfsU4jCEPgRDN80dWUuvR3IvQMB8GA1UdIwQY
MBaAFPKaaZWAGF1lEAFeHSyhnv9DZB7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHBwcGxZQVlYV1VRQVY0ZExLR2VfME5rSHR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lMDhlNDEtZDYwOS00MWQ4LTg2YTIt
OGU2YTI5NWY4MDZmLzEvOHBwcGxZQVlYV1VRQVY0ZExLR2VfME5rSHR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9lMDhlNDEtZDYwOS00MWQ4LTg2YTItOGU2YTI5NWY4MDZm
LzEvOHBwcGxZQVlYV1VRQVY0ZExLR2VfME5rSHR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5RvxNTT
iT2jxpc4Jgvos1ZuiW2n/28YFFdEW+nQk6jG1WfXdk9+6UrEYbIl1MEV9S5VVPQ5
5RKy5Bp6nYSLvU8LwXju3J3iv8bMcUy73b8ISWV3Y9NEozkoc3K652HwR2miTmeC
YsBp1ZqvAXE4ndGWZILXE8aciIdFgS5hg0WQzx3PYxqVEP5PJBKWVNurnQJerRej
ncMI4Cy9+euxqLpisjnP1mDpKcICzrz6RHrL88qF0LSj7gMphbPvgTVApv6rALaq
1fYmNbV8E/egRRS5nE1oVFCaGsrTcYMlDzdZlLMuvBN0dyqDt1dh+9wB/tc/wZ8p
+95Z870xiGVsvQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:09 2025 by rpki-client