Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
File: 8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json)
Hash identifier: AXOjGm431H9/yFy3ZeKKmkJDBSPc3NGjvtUSFNvMuog=
Subject key identifier: 52:1E:4E:00:93:1F:11:12:F5:57:11:4B:0E:56:C5:06:76:C4:28:3A
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial: 0194BCE0AAB4100BD9805AFA6688CEAFAFCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
Manifest number: 0E90
Signing time: Fri 31 Jan 2025 15:00:27 +0000
Manifest this update: Fri 31 Jan 2025 15:00:27 +0000
Manifest next update: Sat 01 Feb 2025 15:00:27 +0000
Files and hashes: 1: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: rIVDtYwkQnQ+AVGTY+KXtDE9HR6Kww6ia81K2kP8RSU=)
2: dPscEX-Zy8evMbxWuU7vJ2Ixhv8.roa (hash: D+72QcpH+TK76A0ijjgkoRMMQ5NsFbRIC95DTaeOIrc=)
3: eKaWRxU48jVjME70Pg-sKw71ysM.roa (hash: Fvcwn/TmHPQrbKfRxQXdczBfOElJLonqigBoxqw+IFk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:aa:b4:10:0b:d9:80:5a:fa:66:88:ce:af:af:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
Validity
Not Before: Jan 31 15:00:27 2025 GMT
Not After : Feb 1 15:00:27 2025 GMT
Subject: CN=521e4e00931f1112f557114b0e56c50676c4283a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:28:a9:29:7a:03:67:dc:02:bd:0e:c7:ab:16:
b2:9a:3a:29:9a:db:db:28:d5:76:89:46:01:21:5b:
61:8f:c1:27:50:3b:43:fb:45:dd:3e:64:07:5d:b9:
70:42:57:45:5d:72:a0:ac:bf:fa:d2:1d:97:52:27:
a8:4f:ac:67:fa:1c:6f:87:07:a9:08:66:e6:a3:30:
c0:68:cd:bd:11:74:a2:9a:a1:9f:bc:56:25:9b:2d:
e9:b8:06:f4:c3:7b:19:f6:e2:36:6f:40:c2:4c:7c:
ff:d9:be:39:e6:cf:5c:f4:3e:f4:9b:91:03:fe:2e:
89:55:73:83:86:1a:ad:f5:73:d7:2f:07:82:ea:bd:
e6:d1:12:9a:7a:99:26:79:78:35:f8:e1:fa:91:f1:
c8:bb:9d:80:5d:8b:a5:34:a0:c9:64:dc:79:35:34:
7b:c0:af:bc:79:66:17:2c:02:0a:c5:ac:7c:21:0c:
df:96:5f:40:71:f9:d7:02:05:f6:07:56:54:47:1c:
f9:2a:f1:7d:0f:2a:7d:1c:e0:e8:d5:ec:78:5d:4f:
e4:b7:98:ed:32:92:22:61:4b:21:d4:f4:60:75:6c:
0d:73:d2:bc:66:18:50:42:3c:28:95:68:78:6c:45:
85:c3:2f:1b:40:29:49:5f:1d:64:d8:a9:94:97:39:
b5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1E:4E:00:93:1F:11:12:F5:57:11:4B:0E:56:C5:06:76:C4:28:3A
X509v3 Authority Key Identifier:
keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:81:4c:4c:02:ea:cf:cc:2e:82:06:7d:f5:1e:f2:13:df:b5:
b2:29:20:c7:62:38:37:95:1c:b3:dd:bd:76:0a:a1:9c:34:63:
f6:11:29:61:56:ef:d5:f8:e2:7e:59:15:1b:78:74:b0:2c:00:
00:d9:63:02:73:ae:40:97:5c:2b:4a:ae:c3:10:5e:0d:63:0e:
61:22:08:97:8f:0b:75:0d:8b:a7:c7:91:45:58:a6:86:15:92:
e7:c5:04:49:15:c3:c7:c1:8c:9e:af:da:da:4b:bd:d6:1e:1a:
e9:aa:85:b8:d9:4c:e0:d1:ed:62:b2:cc:20:ff:26:93:20:82:
94:13:33:df:6e:ec:49:07:0c:89:60:ac:6a:b0:72:76:9c:7d:
2d:a2:62:35:7e:28:ca:94:93:a5:eb:5b:b8:79:28:14:9e:f7:
22:85:56:bf:27:e9:13:00:39:e9:3c:76:50:48:86:cc:9b:5f:
77:66:9c:71:d3:bc:49:ac:f1:7c:e6:bf:6a:b7:0a:5d:b8:10:
22:30:0d:53:6b:06:7e:1a:24:22:d4:fc:52:55:f9:2b:a8:7d:
a8:1f:12:47:22:99:30:f3:cf:e5:96:0c:dc:0b:f7:ac:0f:5c:
f8:9c:06:02:3c:88:2f:61:37:62:13:6c:33:b5:bd:52:11:d1:
31:ac:0b:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84Kq0EAvZgFr6ZojOr6/NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjFkZjQ0YjM0NjgyM2NjZThjNjY0M2I1ZmE2OTE5YWZi
MjMxOTUwHhcNMjUwMTMxMTUwMDI3WhcNMjUwMjAxMTUwMDI3WjAzMTEwLwYDVQQD
Eyg1MjFlNGUwMDkzMWYxMTEyZjU1NzExNGIwZTU2YzUwNjc2YzQyODNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yipKXoDZ9wCvQ7Hqxaymjopmtvb
KNV2iUYBIVthj8EnUDtD+0XdPmQHXblwQldFXXKgrL/60h2XUieoT6xn+hxvhwep
CGbmozDAaM29EXSimqGfvFYlmy3puAb0w3sZ9uI2b0DCTHz/2b455s9c9D70m5ED
/i6JVXODhhqt9XPXLweC6r3m0RKaepkmeXg1+OH6kfHIu52AXYulNKDJZNx5NTR7
wK+8eWYXLAIKxax8IQzfll9AcfnXAgX2B1ZURxz5KvF9Dyp9HODo1ex4XU/kt5jt
MpIiYUsh1PRgdWwNc9K8ZhhQQjwolWh4bEWFwy8bQClJXx1k2KmUlzm1EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIeTgCTHxES9VcRSw5WxQZ2xCg6MB8GA1UdIwQY
MBaAFPJh30SzRoI8zoxmQ7X6aRmvsjGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8zY2I5ZDItNzBmZi00NmQ2LTljNzMt
NTc1ODYxNTYzNTRlLzEvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8zY2I5ZDItNzBmZi00NmQ2LTljNzMtNTc1ODYxNTYzNTRl
LzEvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUoFMTALq
z8wuggZ99R7yE9+1sikgx2I4N5Ucs929dgqhnDRj9hEpYVbv1fjiflkVG3h0sCwA
ANljAnOuQJdcK0quwxBeDWMOYSIIl48LdQ2Lp8eRRVimhhWS58UESRXDx8GMnq/a
2ku91h4a6aqFuNlM4NHtYrLMIP8mkyCClBMz327sSQcMiWCsarBydpx9LaJiNX4o
ypSTpetbuHkoFJ73IoVWvyfpEwA56Tx2UEiGzJtfd2accdO8SazxfOa/arcKXbgQ
IjANU2sGfhokItT8UlX5K6h9qB8SRyKZMPPP5ZYM3Av3rA9c+JwGAjyIL2E3YhNs
M7W9UhHRMawLvA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:16 2025 by rpki-client