Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
File: 8x0cBavXFMZ8MpHgENIccKNd1X4.mft (raw, json)
Hash identifier: eIka8DEdXnnmQTASXpBlXTec70AgN1t1ptXjeHfJHd4=
Subject key identifier: 67:6C:BA:D6:8D:C7:C4:DA:0F:86:9A:D0:02:EE:56:79:98:06:13:93
Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Certificate serial: 0194BC3C2C8B229CA20F8E7A0485480438A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
Manifest number: 04EB
Signing time: Fri 31 Jan 2025 12:00:47 +0000
Manifest this update: Fri 31 Jan 2025 12:00:47 +0000
Manifest next update: Sat 01 Feb 2025 12:00:47 +0000
Files and hashes: 1: 8x0cBavXFMZ8MpHgENIccKNd1X4.crl (hash: /GIPoMPsJW8RwY8X6fXNmCJqlk50uFA4x7nj2FuBIn8=)
2: NoirTMocfMUxRX4SSF3NnN1MXMg.roa (hash: k1dgXUxG201nPT5HWgsPlWuxupL/o/GsnkXTowkj8SY=)
3: kBL0NGTyltK_bUGqu0ZT8FN5oyY.roa (hash: RQ7q9e83VNSzPNBYQofT5w9K3HiXcrFugBatkkxu9/Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2c:8b:22:9c:a2:0f:8e:7a:04:85:48:04:38:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Validity
Not Before: Jan 31 12:00:47 2025 GMT
Not After : Feb 1 12:00:47 2025 GMT
Subject: CN=676cbad68dc7c4da0f869ad002ee567998061393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:66:6f:ed:9a:6d:ab:95:b2:d5:f7:88:af:be:
e9:49:47:eb:2f:6c:1e:f7:3d:f9:d5:f3:10:ae:88:
7a:81:c6:50:98:e1:7f:9c:51:82:5a:cd:9c:f6:f5:
30:cc:41:87:42:dd:46:cd:8c:23:ec:3e:24:85:35:
3f:13:6a:41:bf:af:a5:a4:83:11:5f:b6:4c:f5:57:
78:17:45:17:7d:ef:2f:bf:b8:07:bd:4e:b2:39:ba:
a6:54:11:28:09:b5:9b:9d:fd:4f:68:a6:7a:27:10:
4d:5a:9f:ce:02:09:b6:67:df:52:d6:ca:2b:41:03:
8c:c2:5c:fb:b9:d6:38:19:8f:88:91:19:80:f3:13:
78:24:41:b9:0c:05:04:d3:26:46:e7:28:a1:e3:b8:
2f:2f:42:2c:1c:22:e4:50:fc:a0:cb:fb:51:95:c2:
39:b5:96:b1:af:50:fd:f9:79:f6:88:1a:77:41:58:
7d:50:e5:05:68:ce:b9:74:7e:1d:9f:a0:4d:c9:9a:
37:a1:c1:13:70:63:82:7c:ff:dd:cb:6a:6a:13:bd:
4c:e3:10:1a:3f:d3:56:20:bb:39:68:a9:ac:08:48:
a5:d9:3d:07:72:d1:e8:98:79:33:69:81:1b:a6:c1:
40:87:82:65:b2:d4:a7:a3:eb:27:05:5c:ab:65:ab:
af:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6C:BA:D6:8D:C7:C4:DA:0F:86:9A:D0:02:EE:56:79:98:06:13:93
X509v3 Authority Key Identifier:
keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:0d:ee:6b:9b:db:b0:d3:cf:5e:ea:42:5e:3f:0f:d3:5d:18:
9b:98:f3:07:32:46:b6:61:72:0c:1a:b9:8c:3d:09:56:01:41:
e6:38:8e:85:09:41:8c:5a:9b:63:68:ce:1e:34:48:2b:bd:b0:
f1:61:ca:ee:42:3c:bc:5a:78:0b:97:ba:4b:3d:7b:de:a8:63:
08:ff:58:d6:6d:08:de:f8:19:4b:df:31:67:0d:13:f6:cf:e8:
dd:c2:72:97:3a:e8:2a:43:5d:ee:5d:af:a9:fb:30:56:29:04:
30:2f:13:f5:59:f3:0a:2e:6b:14:73:a0:8a:df:f3:8b:c3:04:
94:74:76:f5:3f:a2:a4:1a:5e:5b:bd:62:fb:7e:d0:e6:12:dd:
16:c4:f1:5d:dc:1b:19:00:00:ab:81:9b:21:89:92:51:a9:fe:
cd:9a:8a:ad:73:fd:61:6a:9e:98:30:13:dd:25:a9:d2:f5:23:
cd:d4:6f:b4:35:d8:99:d1:8a:dc:4a:0d:89:e6:77:e5:b4:32:
1b:2d:f3:f2:56:41:44:0a:d4:71:7b:a5:d6:2b:ce:11:83:0d:
c2:cb:00:02:cd:d4:17:99:be:8b:a0:df:1b:ac:6c:83:68:25:
25:50:c6:a2:83:aa:f6:e7:26:56:b8:4a:4e:8f:fd:46:3c:a4:
b1:b2:11:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PCyLIpyiD456BIVIBDihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMWQxYzA1YWJkNzE0YzY3YzMyOTFlMDEwZDIxYzcwYTM1
ZGQ1N2UwHhcNMjUwMTMxMTIwMDQ3WhcNMjUwMjAxMTIwMDQ3WjAzMTEwLwYDVQQD
Eyg2NzZjYmFkNjhkYzdjNGRhMGY4NjlhZDAwMmVlNTY3OTk4MDYxMzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2Zv7Zptq5Wy1feIr77pSUfrL2we
9z351fMQroh6gcZQmOF/nFGCWs2c9vUwzEGHQt1GzYwj7D4khTU/E2pBv6+lpIMR
X7ZM9Vd4F0UXfe8vv7gHvU6yObqmVBEoCbWbnf1PaKZ6JxBNWp/OAgm2Z99S1sor
QQOMwlz7udY4GY+IkRmA8xN4JEG5DAUE0yZG5yih47gvL0IsHCLkUPygy/tRlcI5
tZaxr1D9+Xn2iBp3QVh9UOUFaM65dH4dn6BNyZo3ocETcGOCfP/dy2pqE71M4xAa
P9NWILs5aKmsCEil2T0HctHomHkzaYEbpsFAh4JlstSno+snBVyrZauvPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdsutaNx8TaD4aa0ALuVnmYBhOTMB8GA1UdIwQY
MBaAFPMdHAWr1xTGfDKR4BDSHHCjXdV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC84ODY2YmItMmViNy00Mjg4LWE4MmMt
NTU1OWFjNDEwYWNlLzEvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC84ODY2YmItMmViNy00Mjg4LWE4MmMtNTU1OWFjNDEwYWNl
LzEvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdg3ua5vb
sNPPXupCXj8P010Ym5jzBzJGtmFyDBq5jD0JVgFB5jiOhQlBjFqbY2jOHjRIK72w
8WHK7kI8vFp4C5e6Sz173qhjCP9Y1m0I3vgZS98xZw0T9s/o3cJylzroKkNd7l2v
qfswVikEMC8T9VnzCi5rFHOgit/zi8MElHR29T+ipBpeW71i+37Q5hLdFsTxXdwb
GQAAq4GbIYmSUan+zZqKrXP9YWqemDAT3SWp0vUjzdRvtDXYmdGK3EoNieZ35bQy
Gy3z8lZBRArUcXul1ivOEYMNwssAAs3UF5m+i6DfG6xsg2glJVDGooOq9ucmVrhK
To/9RjyksbIRjA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:59:28 2025 by rpki-client