Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
File: l8AN4AfUqkpAMdR2ELObd0kIv0k.mft (raw, json)
Hash identifier: QyMAYMPA2o2fIXNmEHunbHE4kR1aRUxUTjryjIt5wFk=
Subject key identifier: 52:E0:77:BD:DD:1C:86:C4:6A:A7:83:AF:2B:5B:E8:06:0D:5E:9E:8A
Authority key identifier: 97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
Certificate issuer: /CN=97c00de007d4aa4a4031d47610b39b774908bf49
Certificate serial: 0194BBCEE7E4FC49C86FE57799126267D957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
Manifest number: 0F
Signing time: Fri 31 Jan 2025 10:01:26 +0000
Manifest this update: Fri 31 Jan 2025 10:01:26 +0000
Manifest next update: Sat 01 Feb 2025 10:01:26 +0000
Files and hashes: 1: 6v3xaZ7YrvMvQdKxxjWwKZ-HZN4.roa (hash: hWUPq5N6t+RwJdEvOikw63sUGiZaD6rAh+UZM/+TLZM=)
2: l8AN4AfUqkpAMdR2ELObd0kIv0k.crl (hash: Cf1bgxiRbXSuqgLJpxqdMLUQLSE6Bqi3qb3vMh5ZDZE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e7:e4:fc:49:c8:6f:e5:77:99:12:62:67:d9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c00de007d4aa4a4031d47610b39b774908bf49
Validity
Not Before: Jan 31 10:01:26 2025 GMT
Not After : Feb 1 10:01:26 2025 GMT
Subject: CN=52e077bddd1c86c46aa783af2b5be8060d5e9e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:9e:80:b4:7c:8f:ef:3f:a7:8f:24:2c:3c:
85:29:3f:1a:bb:5a:56:58:19:16:b0:51:3b:ef:18:
20:9c:63:75:bc:df:c5:a6:af:9d:54:ab:74:f3:74:
95:0a:ca:75:07:6a:81:d8:3d:bf:aa:af:98:f7:6c:
44:03:2a:87:95:ff:12:e9:7d:91:fc:48:c5:e5:bf:
c5:b8:91:cd:22:8a:c5:42:16:d4:44:5b:79:22:03:
45:ab:d8:14:2a:e6:11:ba:d7:56:24:cc:f9:01:a7:
f5:25:2c:f3:41:75:84:3b:75:0d:e9:1d:9a:66:35:
59:f5:c8:bf:88:cc:00:7b:c6:a1:ca:6b:82:62:e7:
0d:a8:32:fc:a9:b1:64:18:65:a9:85:92:74:31:8a:
06:a4:17:a5:d8:96:17:00:53:bf:7d:3a:c6:ba:4b:
c7:a5:5f:9c:02:85:da:4e:a3:4e:18:96:2e:48:f4:
3f:7a:1b:4e:66:91:a3:ea:fa:c6:2c:d8:9b:2b:8b:
ab:9a:ad:33:67:0b:0f:8d:a9:8b:6c:93:7e:c4:be:
c6:d8:bd:1f:12:1c:5c:69:71:a7:40:f8:68:0c:d9:
fd:5d:4f:1f:db:24:05:69:0d:b9:90:b7:2b:80:46:
77:c5:c8:ca:ee:60:77:a6:45:98:8c:5a:51:ed:a5:
16:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E0:77:BD:DD:1C:86:C4:6A:A7:83:AF:2B:5B:E8:06:0D:5E:9E:8A
X509v3 Authority Key Identifier:
keyid:97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f7:fe:ad:fb:ad:3b:a3:c9:6f:3f:52:4d:88:fa:de:27:4e:
e0:93:e7:1f:12:87:fd:d0:2a:80:ce:e9:53:d0:38:78:1f:d4:
02:95:07:c1:82:56:ef:a6:79:8b:19:ad:43:99:8d:e1:a4:2f:
d5:b7:75:7b:82:f0:d0:f4:07:a2:f1:be:f2:69:57:9f:e5:96:
a4:f1:76:82:1f:f2:bb:88:f6:f1:90:6b:08:a9:37:8a:e0:65:
67:c1:06:87:c7:ef:f2:7a:b3:cb:28:b7:9c:a7:35:39:05:74:
11:72:99:6e:b1:9b:17:6d:e6:57:73:89:80:c1:e8:90:a0:d1:
34:ca:0e:56:1e:fb:70:cb:21:94:b1:da:77:40:09:83:e7:1b:
4c:df:37:81:32:af:9b:16:4e:a7:92:d0:ce:10:dd:46:42:42:
0a:da:82:6f:da:a1:d4:bf:4a:86:4a:c5:86:4e:de:ae:9a:7b:
92:79:d9:14:84:77:ec:f0:4f:2e:e4:e7:99:02:e8:ca:d9:aa:
fe:43:6a:aa:f9:5a:ff:6d:7b:24:ad:17:7c:2c:9e:b4:fc:47:
96:9f:5b:e2:9f:0d:ca:67:7a:7c:79:c4:14:c3:17:76:ae:30:
e1:f0:71:7e:3d:c5:bb:9c:a3:e1:4e:d4:f5:fe:ff:9d:f5:e4:
9c:eb:64:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zufk/EnIb+V3mRJiZ9lXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YzAwZGUwMDdkNGFhNGE0MDMxZDQ3NjEwYjM5Yjc3NDkw
OGJmNDkwHhcNMjUwMTMxMTAwMTI2WhcNMjUwMjAxMTAwMTI2WjAzMTEwLwYDVQQD
Eyg1MmUwNzdiZGRkMWM4NmM0NmFhNzgzYWYyYjViZTgwNjBkNWU5ZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyheegLR8j+8/p48kLDyFKT8au1pW
WBkWsFE77xggnGN1vN/Fpq+dVKt083SVCsp1B2qB2D2/qq+Y92xEAyqHlf8S6X2R
/EjF5b/FuJHNIorFQhbURFt5IgNFq9gUKuYRutdWJMz5Aaf1JSzzQXWEO3UN6R2a
ZjVZ9ci/iMwAe8ahymuCYucNqDL8qbFkGGWphZJ0MYoGpBel2JYXAFO/fTrGukvH
pV+cAoXaTqNOGJYuSPQ/ehtOZpGj6vrGLNibK4urmq0zZwsPjamLbJN+xL7G2L0f
EhxcaXGnQPhoDNn9XU8f2yQFaQ25kLcrgEZ3xcjK7mB3pkWYjFpR7aUWGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLgd73dHIbEaqeDrytb6AYNXp6KMB8GA1UdIwQY
MBaAFJfADeAH1KpKQDHUdhCzm3dJCL9JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDhBTjRBZlVxa3BBTWRSMkVMT2JkMGtJdjBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wMDc3YzUtZjBiZS00NjNmLWFiNzUt
OGMzZGNjNDU5MDI2LzEvbDhBTjRBZlVxa3BBTWRSMkVMT2JkMGtJdjBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8wMDc3YzUtZjBiZS00NjNmLWFiNzUtOGMzZGNjNDU5MDI2
LzEvbDhBTjRBZlVxa3BBTWRSMkVMT2JkMGtJdjBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQff+rfut
O6PJbz9STYj63idO4JPnHxKH/dAqgM7pU9A4eB/UApUHwYJW76Z5ixmtQ5mN4aQv
1bd1e4Lw0PQHovG+8mlXn+WWpPF2gh/yu4j28ZBrCKk3iuBlZ8EGh8fv8nqzyyi3
nKc1OQV0EXKZbrGbF23mV3OJgMHokKDRNMoOVh77cMshlLHad0AJg+cbTN83gTKv
mxZOp5LQzhDdRkJCCtqCb9qh1L9KhkrFhk7erpp7knnZFIR37PBPLuTnmQLoytmq
/kNqqvla/217JK0XfCyetPxHlp9b4p8Nymd6fHnEFMMXdq4w4fBxfj3Fu5yj4U7U
9f7/nfXknOtkpQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:39 2025 by rpki-client