Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
File: isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft (raw, json)
Hash identifier: TGzIeM/vEyi1sGRK2nWPDx0DreeOA589pDKpPEaxj2I=
Subject key identifier: 83:8F:30:E6:B7:DD:34:EB:7E:47:EE:16:E7:70:1E:5D:A2:02:92:14
Authority key identifier: 8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
Certificate issuer: /CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Certificate serial: 0194BC3CA303F86330A7993FC72DB2A00D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
Manifest number: 1111
Signing time: Fri 31 Jan 2025 12:01:17 +0000
Manifest this update: Fri 31 Jan 2025 12:01:17 +0000
Manifest next update: Sat 01 Feb 2025 12:01:17 +0000
Files and hashes: 1: MXjGchA1tthe9hBaCTy34XWuIys.roa (hash: m9xSPEOr8P6pGopF9XMr9mPGzbIw3wWqJY/1QxjlC64=)
2: isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl (hash: 4eE24JT0rSz+CWjt0uKzvgc/wK+a8Hy0GuGszxW5NOA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a3:03:f8:63:30:a7:99:3f:c7:2d:b2:a0:0d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Validity
Not Before: Jan 31 12:01:17 2025 GMT
Not After : Feb 1 12:01:17 2025 GMT
Subject: CN=838f30e6b7dd34eb7e47ee16e7701e5da2029214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d5:f3:c7:d5:a7:ab:4f:aa:ea:74:55:48:3a:
97:5e:b0:59:74:da:7c:cf:6a:3c:4b:cb:51:78:d1:
e7:b2:99:96:6f:cb:e9:eb:2d:11:d7:27:3f:cc:10:
9a:00:79:92:13:4d:79:6f:e5:f3:67:ce:47:66:a0:
ed:fc:ab:ca:a5:1c:85:9d:91:a9:be:e8:83:3d:ef:
7f:c0:94:23:27:bf:f3:e6:3c:44:e8:22:13:16:56:
fa:5f:e8:ba:c3:0b:21:29:66:34:c8:84:f8:6c:4d:
af:e8:e4:65:d5:63:2e:7d:2a:45:97:e2:51:d1:6b:
c2:26:93:6d:05:94:46:82:b5:7e:94:84:b2:a5:15:
0d:67:f5:67:31:76:90:5e:96:3b:02:40:09:78:a1:
d6:c8:7d:3e:6d:14:4b:a7:04:a0:1f:2f:43:b9:04:
8f:be:cb:03:9a:63:d0:46:1a:9b:4a:6f:43:96:71:
c6:2e:19:6a:e1:f2:a0:ff:58:64:96:05:c4:1c:68:
99:3e:b0:22:eb:dd:37:86:fa:89:f5:80:2c:8e:4b:
ee:1b:17:a2:fa:4a:18:80:74:0a:48:12:ed:ec:a9:
69:f4:b0:02:33:30:2e:90:de:22:b7:c9:b3:c7:5a:
41:dc:5d:9c:c2:95:dc:f2:47:dc:98:bd:ce:4b:a8:
d3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8F:30:E6:B7:DD:34:EB:7E:47:EE:16:E7:70:1E:5D:A2:02:92:14
X509v3 Authority Key Identifier:
keyid:8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:88:6c:9b:f9:cc:e7:f9:c8:82:44:85:95:05:74:39:60:2e:
54:46:81:32:28:0d:9d:3d:3c:61:80:6c:a0:16:6e:fc:1c:d9:
eb:72:4d:fc:1e:b1:f2:06:12:c8:70:4b:5e:8d:05:ea:0f:e1:
a3:74:6e:cc:d8:91:bc:c5:8a:69:59:6b:51:6a:14:ac:23:8d:
12:20:9a:24:3a:ef:5b:08:40:24:ed:f1:91:4c:ab:a2:bf:f5:
d3:0b:10:25:02:3f:1b:49:81:3c:eb:5d:27:c8:2c:3d:a4:01:
1a:29:49:e6:43:6d:2d:19:55:a4:b5:63:f8:ce:bb:e1:bd:01:
10:95:72:e3:d5:1a:b2:d6:08:11:93:4d:fd:54:ed:36:9b:1a:
0e:9f:a2:87:7f:51:40:cf:51:ff:6d:46:05:c0:db:de:c4:08:
df:76:d4:df:45:db:26:5c:ce:76:0a:0d:43:85:9c:69:55:49:
f1:8a:92:c6:a9:74:12:47:44:15:67:cd:7c:fb:d7:9b:ba:bf:
16:3b:23:e2:bb:c9:61:92:bc:3a:24:28:a4:d3:c1:44:54:6f:
6e:d8:77:8f:6d:a5:9a:37:0a:d8:6a:3a:ef:3b:f9:74:e5:33:
65:22:8e:b2:aa:3b:d5:74:2f:84:3e:f3:8f:4c:1e:90:f1:5e:
01:e8:de:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PKMD+GMwp5k/xy2yoA1KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYzE0OTg1Y2I1NDRjNmQyM2QxOWJiNDNhYzkzNzExYWZl
OTFmMTgwHhcNMjUwMTMxMTIwMTE3WhcNMjUwMjAxMTIwMTE3WjAzMTEwLwYDVQQD
Eyg4MzhmMzBlNmI3ZGQzNGViN2U0N2VlMTZlNzcwMWU1ZGEyMDI5MjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NXzx9Wnq0+q6nRVSDqXXrBZdNp8
z2o8S8tReNHnspmWb8vp6y0R1yc/zBCaAHmSE015b+XzZ85HZqDt/KvKpRyFnZGp
vuiDPe9/wJQjJ7/z5jxE6CITFlb6X+i6wwshKWY0yIT4bE2v6ORl1WMufSpFl+JR
0WvCJpNtBZRGgrV+lISypRUNZ/VnMXaQXpY7AkAJeKHWyH0+bRRLpwSgHy9DuQSP
vssDmmPQRhqbSm9DlnHGLhlq4fKg/1hklgXEHGiZPrAi6903hvqJ9YAsjkvuGxei
+koYgHQKSBLt7Klp9LACMzAukN4it8mzx1pB3F2cwpXc8kfcmL3OS6jTWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOPMOa33TTrfkfuFudwHl2iApIUMB8GA1UdIwQY
MBaAFIrBSYXLVExtI9GbtDrJNxGv6R8YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXNGSmhjdFVURzBqMFp1ME9zazNFYV9wSHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS81ODZmNzctNmYzMi00Yjk2LTk4Mzgt
YTU4OTQ2OTNhZjEwLzEvaXNGSmhjdFVURzBqMFp1ME9zazNFYV9wSHhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS81ODZmNzctNmYzMi00Yjk2LTk4MzgtYTU4OTQ2OTNhZjEw
LzEvaXNGSmhjdFVURzBqMFp1ME9zazNFYV9wSHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt4hsm/nM
5/nIgkSFlQV0OWAuVEaBMigNnT08YYBsoBZu/BzZ63JN/B6x8gYSyHBLXo0F6g/h
o3RuzNiRvMWKaVlrUWoUrCONEiCaJDrvWwhAJO3xkUyror/10wsQJQI/G0mBPOtd
J8gsPaQBGilJ5kNtLRlVpLVj+M674b0BEJVy49UastYIEZNN/VTtNpsaDp+ih39R
QM9R/21GBcDb3sQI33bU30XbJlzOdgoNQ4WcaVVJ8YqSxql0EkdEFWfNfPvXm7q/
Fjsj4rvJYZK8OiQopNPBRFRvbth3j22lmjcK2Go67zv5dOUzZSKOsqo71XQvhD7z
j0wekPFeAejeNg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:33 2025 by rpki-client