Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
File: 8bmuyqN97cDywE9RvJY_zS5KrMw.mft (raw, json)
Hash identifier: nr8QlfyKavJUUWVHrYGX+bQrQ+oi2Iz3RyCOvxxUk4A=
Subject key identifier: 23:FC:62:B6:C4:AC:A4:75:A5:A8:B0:65:46:D2:D6:96:A2:4B:56:7B
Authority key identifier: F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
Certificate issuer: /CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Certificate serial: 0194BD85A77378D304BB866C1B4A5939FB84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
Manifest number: 022C
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: 8bmuyqN97cDywE9RvJY_zS5KrMw.crl (hash: k+Bn04bG+F9x/hONppNMV/bPOvz+zOzJN8YDqM779Y8=)
2: wN3I7D42_Scvh3kTX6wbZgc3STg.roa (hash: +5WZ8eZml5reiYd5KuhYrJcZjNCC9ofGPFNFq+2Hrx4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a7:73:78:d3:04:bb:86:6c:1b:4a:59:39:fb:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=23fc62b6c4aca475a5a8b06546d2d696a24b567b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0d:73:1d:ff:b5:fe:84:3b:db:0e:73:e2:fd:
08:e1:50:07:52:7f:f8:00:ae:17:d1:82:6d:a4:b6:
22:a9:4a:c9:84:3e:30:a0:f5:49:03:00:81:a5:02:
58:90:17:76:7c:89:46:04:89:90:0f:8e:8d:ad:37:
3c:d4:df:93:3c:51:13:84:c6:d2:f1:74:c9:b4:f0:
44:b0:4c:27:6c:2c:74:b5:b8:82:46:f8:fd:87:4a:
da:fc:13:3b:ca:9d:49:69:b4:74:72:aa:0e:fd:66:
17:cf:43:aa:55:45:5e:03:5f:b9:83:87:66:02:13:
5e:9b:7b:90:ab:ad:c7:2b:2e:65:5a:9d:b3:c5:22:
3a:e8:2c:52:0d:af:c7:d2:44:20:cb:0a:46:8c:ca:
85:18:e0:07:e1:5e:8a:c7:02:cf:14:f5:81:a1:da:
2d:f4:c4:b2:2a:6a:e1:7b:dd:91:15:b4:a3:61:fa:
01:db:6d:8c:38:4b:ef:7a:20:06:5c:c1:1e:2d:cf:
77:ee:30:f8:f9:c9:bf:b0:4f:17:e9:40:8f:13:25:
3c:29:11:3f:06:6c:91:3d:4a:77:ee:4c:6c:58:32:
ec:76:d0:d0:f9:11:18:fc:7b:11:6e:b6:8c:3d:79:
43:e8:1d:0b:e8:72:f5:62:2d:d5:f6:0c:26:32:6c:
a4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FC:62:B6:C4:AC:A4:75:A5:A8:B0:65:46:D2:D6:96:A2:4B:56:7B
X509v3 Authority Key Identifier:
keyid:F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:dd:5f:84:4a:c3:d6:55:14:e8:a8:e8:ba:4e:32:b9:75:97:
1d:09:35:a3:fa:a1:a9:a5:f7:6b:14:b0:f5:49:36:7c:40:4a:
9b:2a:36:80:62:2b:e0:20:ea:10:94:2c:60:f6:90:6c:82:58:
68:08:ba:28:d6:81:9b:63:64:16:9b:a1:4c:0c:a3:3e:18:5e:
e0:c3:19:73:6d:bb:ef:48:fb:42:58:07:86:af:48:6f:ac:7a:
c6:89:e0:ec:04:18:fb:2d:95:ec:76:70:e6:c5:1e:f5:46:53:
85:3e:16:94:28:1c:d5:9b:88:3a:b0:6e:a6:01:d4:f8:a7:2c:
5e:04:93:9e:ec:eb:bd:e5:a1:f6:f5:ea:c0:68:14:37:ce:81:
24:a3:1b:e8:b3:98:0e:67:15:1f:98:fd:86:e1:61:25:d5:69:
4a:ee:d1:db:ea:0a:1f:4f:1e:cf:4c:3f:26:3d:d1:ac:0c:cf:
b1:df:8c:0b:a9:13:b3:e0:b8:bf:e9:93:c1:83:32:90:4d:94:
7f:fe:62:ab:85:6b:de:5f:1c:34:7b:7c:49:91:26:77:6b:a7:
cc:38:09:55:32:54:e4:3d:1f:84:7f:e8:35:48:a7:14:bc:03:
e5:cf:ed:02:bb:f3:13:5d:0e:cb:8f:68:5b:14:d5:e5:cf:08:
5e:8a:a1:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hadzeNMEu4ZsG0pZOfuEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYjlhZWNhYTM3ZGVkYzBmMmMwNGY1MWJjOTYzZmNkMmU0
YWFjY2MwHhcNMjUwMTMxMTgwMDQwWhcNMjUwMjAxMTgwMDQwWjAzMTEwLwYDVQQD
EygyM2ZjNjJiNmM0YWNhNDc1YTVhOGIwNjU0NmQyZDY5NmEyNGI1NjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Q1zHf+1/oQ72w5z4v0I4VAHUn/4
AK4X0YJtpLYiqUrJhD4woPVJAwCBpQJYkBd2fIlGBImQD46NrTc81N+TPFEThMbS
8XTJtPBEsEwnbCx0tbiCRvj9h0ra/BM7yp1JabR0cqoO/WYXz0OqVUVeA1+5g4dm
AhNem3uQq63HKy5lWp2zxSI66CxSDa/H0kQgywpGjMqFGOAH4V6KxwLPFPWBodot
9MSyKmrhe92RFbSjYfoB222MOEvveiAGXMEeLc937jD4+cm/sE8X6UCPEyU8KRE/
BmyRPUp37kxsWDLsdtDQ+REY/HsRbraMPXlD6B0L6HL1Yi3V9gwmMmykUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCP8YrbErKR1paiwZUbS1paiS1Z7MB8GA1UdIwQY
MBaAFPG5rsqjfe3A8sBPUbyWP80uSqzMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGJtdXlxTjk3Y0R5d0U5UnZKWV96UzVLck13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80YmQ3MGMtMDk0YS00M2QwLWFkZGEt
MDRmYmQ2ODE4OTZhLzEvOGJtdXlxTjk3Y0R5d0U5UnZKWV96UzVLck13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC80YmQ3MGMtMDk0YS00M2QwLWFkZGEtMDRmYmQ2ODE4OTZh
LzEvOGJtdXlxTjk3Y0R5d0U5UnZKWV96UzVLck13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqN1fhErD
1lUU6Kjouk4yuXWXHQk1o/qhqaX3axSw9Uk2fEBKmyo2gGIr4CDqEJQsYPaQbIJY
aAi6KNaBm2NkFpuhTAyjPhhe4MMZc22770j7QlgHhq9Ib6x6xong7AQY+y2V7HZw
5sUe9UZThT4WlCgc1ZuIOrBupgHU+KcsXgSTnuzrveWh9vXqwGgUN86BJKMb6LOY
DmcVH5j9huFhJdVpSu7R2+oKH08ez0w/Jj3RrAzPsd+MC6kTs+C4v+mTwYMykE2U
f/5iq4Vr3l8cNHt8SZEmd2unzDgJVTJU5D0fhH/oNUinFLwD5c/tArvzE10Oy49o
WxTV5c8IXoqhRw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:55:26 2025 by rpki-client