Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft
File: idXRKIo8KuF_mcuxiRdwAYm9RyA.mft (raw, json)
Hash identifier: r8sx456syuokb8JJev1s8kUlVV5LOxiARvE+vje9PZ4=
Subject key identifier: EF:C6:FA:B3:04:3C:81:04:AB:C4:91:23:E7:8A:7D:82:03:36:CA:C0
Authority key identifier: 89:D5:D1:28:8A:3C:2A:E1:7F:99:CB:B1:89:17:70:01:89:BD:47:20
Certificate issuer: /CN=89d5d1288a3c2ae17f99cbb18917700189bd4720
Certificate serial: 0194BC3BD91E5D5868F6582A699373FAF0CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idXRKIo8KuF_mcuxiRdwAYm9RyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft
Manifest number: 0E7A
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: gwRD-CUv4Moz1c2qUa7Zo1pklEM.roa (hash: vodpaiMKlIvw6G8nNRchVW+W6aV/lUBQbi3WYFYFY0Y=)
2: idXRKIo8KuF_mcuxiRdwAYm9RyA.crl (hash: QUViQDzkSFM+GHpsjjWqMAzqqSuUa9Zu6ajj7+HFGHY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d9:1e:5d:58:68:f6:58:2a:69:93:73:fa:f0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d5d1288a3c2ae17f99cbb18917700189bd4720
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=efc6fab3043c8104abc49123e78a7d820336cac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:69:15:85:d2:4c:04:9a:f2:32:6a:b4:58:89:
05:89:75:ea:c1:a7:49:5c:3a:fb:22:00:33:4d:b1:
c1:47:d6:31:5b:bc:20:f1:ed:1f:02:8b:8c:54:04:
be:51:c0:ff:4b:aa:d6:ca:d3:c7:9c:3b:57:3a:97:
a2:80:46:8d:dc:5e:85:a1:a9:f9:ed:c5:1f:ca:e2:
ef:15:6b:f9:ca:3c:57:e4:4d:bb:72:fc:4e:e1:a4:
5a:d7:c5:1a:0c:cf:fd:97:0a:51:6f:f0:3f:47:4e:
c8:9b:d0:4e:44:c4:d4:23:14:62:4d:de:76:46:76:
56:b1:84:72:a6:3e:da:04:92:05:2a:14:61:7a:23:
26:5b:b4:68:0a:fb:77:44:40:e3:72:cc:16:7e:82:
e4:ad:1c:14:26:8c:16:53:e6:b2:cd:43:9f:07:5e:
98:4f:fe:70:cc:b6:d8:b1:ff:5e:95:9e:df:46:d1:
b4:2c:5b:61:da:ce:fa:80:00:18:22:62:6d:ed:12:
62:17:d1:12:7a:39:e8:b8:4b:a8:7d:48:18:4c:6e:
5f:b0:35:d2:02:83:b7:5d:30:9b:25:9b:c8:37:e2:
ac:2a:ee:c2:7d:85:99:74:c5:9b:5d:fe:fe:e1:e5:
13:c3:98:78:bc:36:c9:7c:e8:dc:b9:df:6e:06:83:
62:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C6:FA:B3:04:3C:81:04:AB:C4:91:23:E7:8A:7D:82:03:36:CA:C0
X509v3 Authority Key Identifier:
keyid:89:D5:D1:28:8A:3C:2A:E1:7F:99:CB:B1:89:17:70:01:89:BD:47:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idXRKIo8KuF_mcuxiRdwAYm9RyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9b:9a:0d:70:7f:ab:63:e7:4b:0f:c5:cc:20:9d:01:dc:18:
82:ab:7e:82:80:24:c9:60:1c:d1:43:ee:41:b2:17:6d:28:63:
c3:51:15:a2:98:c1:84:d2:d5:e8:eb:a7:06:ac:b9:21:c6:84:
df:ef:c0:a3:5a:a0:a2:b8:5e:c9:04:fe:a7:4d:ea:1b:03:60:
ed:1a:c3:fb:ee:5f:e9:56:a2:fc:f4:5c:00:1c:cb:05:6d:04:
b0:f4:c9:2a:30:7d:4d:3f:1a:ad:4a:60:11:29:8f:42:80:54:
87:fa:ac:90:b6:fa:51:25:cb:4a:9b:2f:15:fa:6a:00:56:5d:
ae:fc:00:f9:c5:82:58:48:49:27:50:56:95:be:8d:7f:ec:56:
ce:00:2e:40:d9:21:49:56:73:3a:3c:d5:62:8c:f5:91:f9:25:
4d:b1:c0:9d:bf:81:f2:13:9e:36:82:de:c8:e7:da:23:3d:c2:
83:47:49:32:f5:d2:91:45:5c:3b:59:00:40:f9:e9:d0:42:f4:
13:3a:0f:1b:b3:bd:5a:ec:f3:a8:cb:85:c8:77:37:82:12:d0:
2a:6c:d7:bd:01:e5:7a:fc:cb:e0:94:4b:34:45:ab:73:fc:32:
bd:6d:85:6e:cf:90:80:57:c7:d1:8d:1f:57:5a:f1:31:a4:7d:
4d:cd:8c:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9keXVho9lgqaZNz+vDNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZDVkMTI4OGEzYzJhZTE3Zjk5Y2JiMTg5MTc3MDAxODli
ZDQ3MjAwHhcNMjUwMTMxMTIwMDI2WhcNMjUwMjAxMTIwMDI2WjAzMTEwLwYDVQQD
EyhlZmM2ZmFiMzA0M2M4MTA0YWJjNDkxMjNlNzhhN2Q4MjAzMzZjYWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2kVhdJMBJryMmq0WIkFiXXqwadJ
XDr7IgAzTbHBR9YxW7wg8e0fAouMVAS+UcD/S6rWytPHnDtXOpeigEaN3F6Foan5
7cUfyuLvFWv5yjxX5E27cvxO4aRa18UaDM/9lwpRb/A/R07Im9BORMTUIxRiTd52
RnZWsYRypj7aBJIFKhRheiMmW7RoCvt3REDjcswWfoLkrRwUJowWU+ayzUOfB16Y
T/5wzLbYsf9elZ7fRtG0LFth2s76gAAYImJt7RJiF9ESejnouEuofUgYTG5fsDXS
AoO3XTCbJZvIN+KsKu7CfYWZdMWbXf7+4eUTw5h4vDbJfOjcud9uBoNiHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/G+rMEPIEEq8SRI+eKfYIDNsrAMB8GA1UdIwQY
MBaAFInV0SiKPCrhf5nLsYkXcAGJvUcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWRYUktJbzhLdUZfbWN1eGlSZHdBWW05UnlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZDE3NTYtMjI1Zi00NTc5LWIxZTYt
OWQ2MDk3NzBhOWVhLzEvaWRYUktJbzhLdUZfbWN1eGlSZHdBWW05UnlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84ZDE3NTYtMjI1Zi00NTc5LWIxZTYtOWQ2MDk3NzBhOWVh
LzEvaWRYUktJbzhLdUZfbWN1eGlSZHdBWW05UnlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJuaDXB/
q2PnSw/FzCCdAdwYgqt+goAkyWAc0UPuQbIXbShjw1EVopjBhNLV6OunBqy5IcaE
3+/Ao1qgorheyQT+p03qGwNg7RrD++5f6Vai/PRcABzLBW0EsPTJKjB9TT8arUpg
ESmPQoBUh/qskLb6USXLSpsvFfpqAFZdrvwA+cWCWEhJJ1BWlb6Nf+xWzgAuQNkh
SVZzOjzVYoz1kfklTbHAnb+B8hOeNoLeyOfaIz3Cg0dJMvXSkUVcO1kAQPnp0EL0
EzoPG7O9WuzzqMuFyHc3ghLQKmzXvQHlevzL4JRLNEWrc/wyvW2Fbs+QgFfH0Y0f
V1rxMaR9Tc2MQA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:36 2025 by rpki-client