Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
File: 86GUB-2m2whjzcnxhXNILWrRIJg.mft (raw, json)
Hash identifier: iwq0ob40sL4G82EadJTMSkdN0evmOvRwy75KjpEeC0I=
Subject key identifier: 93:30:DA:D9:7F:0F:7C:A2:DF:C7:75:B9:2D:B4:01:CC:B1:C1:CA:F8
Authority key identifier: F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
Certificate issuer: /CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Certificate serial: 0194BCA9FEDCC48743A7E30BA8DB38BFAE03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
Manifest number: 0280
Signing time: Fri 31 Jan 2025 14:00:44 +0000
Manifest this update: Fri 31 Jan 2025 14:00:44 +0000
Manifest next update: Sat 01 Feb 2025 14:00:44 +0000
Files and hashes: 1: 5EWBzdepm8m1-Fw5ggkBVnYeo3Q.roa (hash: VXD9eDnJ0GXpX+c0YUcqrxEzhI7okMcsDXHvru13uGI=)
2: 86GUB-2m2whjzcnxhXNILWrRIJg.crl (hash: 4NOx8q4Nyp4eT9kzX9APH5PleprwF7GWtPGuIVRFGNA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fe:dc:c4:87:43:a7:e3:0b:a8:db:38:bf:ae:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Validity
Not Before: Jan 31 14:00:44 2025 GMT
Not After : Feb 1 14:00:44 2025 GMT
Subject: CN=9330dad97f0f7ca2dfc775b92db401ccb1c1caf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ca:01:29:3d:5f:13:22:36:54:48:39:50:af:
47:08:9b:a0:72:b3:af:2c:ec:f3:61:2b:20:a8:e2:
7c:a9:3f:62:a3:b7:25:bc:d7:b8:21:b0:8b:1f:ff:
07:80:06:e6:1e:86:b9:cf:76:b6:96:b6:1a:38:12:
4e:a9:e1:99:8a:f8:4f:e3:1b:45:e9:38:4c:5b:aa:
46:d4:bd:8b:2f:55:1e:24:5f:00:31:d9:9d:a1:d9:
0b:9b:ac:f0:38:93:6a:c3:a9:2e:c1:ac:8d:a7:f7:
89:82:d2:de:d3:5a:8d:14:fd:49:16:41:18:78:73:
92:65:f4:bd:cc:b4:ea:30:23:36:0f:62:74:d2:b2:
18:76:49:4f:fb:c0:40:8e:88:1a:83:64:78:8a:8a:
bb:ed:d3:d0:e8:1d:b0:79:6b:1a:78:3e:bb:a8:39:
d3:28:44:ce:54:39:0e:56:08:62:6d:f7:c7:d1:75:
94:db:57:3e:20:b6:bf:60:48:17:45:fd:66:8c:74:
b7:cc:e8:44:10:7b:32:a0:e9:79:b6:6b:ff:d5:2e:
09:bb:95:26:65:12:f7:6a:82:0b:6f:59:28:1a:6b:
c3:af:ae:61:cd:3c:54:97:8a:1e:db:13:5f:ad:d1:
ed:67:ed:9b:d2:c4:28:7f:a3:1d:29:7e:14:b5:aa:
3b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:30:DA:D9:7F:0F:7C:A2:DF:C7:75:B9:2D:B4:01:CC:B1:C1:CA:F8
X509v3 Authority Key Identifier:
keyid:F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:43:9e:86:18:91:19:37:5a:fd:71:e2:8f:87:75:bf:61:20:
79:11:4a:cf:32:52:ca:30:20:68:12:52:9e:1f:37:54:46:7e:
fe:98:5d:57:4d:ca:a4:15:67:87:52:68:4e:08:52:e6:4d:f4:
1a:e3:ca:1f:80:ae:42:d2:ad:f7:97:dd:a9:47:9d:28:ab:cd:
da:45:3b:b4:f4:fe:c9:14:aa:a7:9f:02:43:d5:ae:a1:d9:ce:
6d:97:e6:aa:30:8a:84:f1:1a:ed:0d:61:a3:e2:27:87:be:89:
53:3e:c3:bc:58:18:9a:b9:f6:9a:8f:1e:e1:03:51:2d:e3:e9:
f4:23:e5:3c:35:93:d6:6c:6f:0d:be:5a:eb:30:fc:87:c7:17:
ce:1b:40:fb:34:99:47:6b:32:d0:b2:36:d7:39:ae:e2:24:c1:
75:23:1f:de:af:6c:ce:66:f4:f0:c7:e1:b6:e6:d8:43:43:4e:
86:1a:8a:5a:15:ae:2b:8d:7b:26:ac:19:59:bf:61:11:9c:34:
ea:20:f1:00:f7:97:9d:ff:60:09:bf:ab:3a:4b:a4:c5:eb:d4:
c7:3a:76:3d:14:cb:e4:1a:12:98:69:fa:7b:e3:e2:74:da:0d:
44:39:2f:f3:e3:b6:46:ee:12:b2:ad:8f:96:76:d5:4a:de:7b:
4d:62:b7:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qf7cxIdDp+MLqNs4v64DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYTE5NDA3ZWRhNmRiMDg2M2NkYzlmMTg1NzM0ODJkNmFk
MTIwOTgwHhcNMjUwMTMxMTQwMDQ0WhcNMjUwMjAxMTQwMDQ0WjAzMTEwLwYDVQQD
Eyg5MzMwZGFkOTdmMGY3Y2EyZGZjNzc1YjkyZGI0MDFjY2IxYzFjYWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8oBKT1fEyI2VEg5UK9HCJugcrOv
LOzzYSsgqOJ8qT9io7clvNe4IbCLH/8HgAbmHoa5z3a2lrYaOBJOqeGZivhP4xtF
6ThMW6pG1L2LL1UeJF8AMdmdodkLm6zwOJNqw6kuwayNp/eJgtLe01qNFP1JFkEY
eHOSZfS9zLTqMCM2D2J00rIYdklP+8BAjogag2R4ioq77dPQ6B2weWsaeD67qDnT
KETOVDkOVghibffH0XWU21c+ILa/YEgXRf1mjHS3zOhEEHsyoOl5tmv/1S4Ju5Um
ZRL3aoILb1koGmvDr65hzTxUl4oe2xNfrdHtZ+2b0sQof6MdKX4Utao7dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMw2tl/D3yi38d1uS20Acyxwcr4MB8GA1UdIwQY
MBaAFPOhlAftptsIY83J8YVzSC1q0SCYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODZHVUItMm0yd2hqemNueGhYTklMV3JSSUpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi85ZGZkMTEtYWE1MS00N2FmLWExYzgt
ZmFjOTA0YTRhYWI1LzEvODZHVUItMm0yd2hqemNueGhYTklMV3JSSUpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi85ZGZkMTEtYWE1MS00N2FmLWExYzgtZmFjOTA0YTRhYWI1
LzEvODZHVUItMm0yd2hqemNueGhYTklMV3JSSUpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUUOehhiR
GTda/XHij4d1v2EgeRFKzzJSyjAgaBJSnh83VEZ+/phdV03KpBVnh1JoTghS5k30
GuPKH4CuQtKt95fdqUedKKvN2kU7tPT+yRSqp58CQ9WuodnObZfmqjCKhPEa7Q1h
o+Inh76JUz7DvFgYmrn2mo8e4QNRLePp9CPlPDWT1mxvDb5a6zD8h8cXzhtA+zSZ
R2sy0LI21zmu4iTBdSMf3q9szmb08MfhtubYQ0NOhhqKWhWuK417JqwZWb9hEZw0
6iDxAPeXnf9gCb+rOkukxevUxzp2PRTL5BoSmGn6e+PidNoNRDkv8+O2Ru4Ssq2P
lnbVSt57TWK3TA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:43 2025 by rpki-client