Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
File: B8nKHieDB7riQFpINK9EfAZBRwE.mft (raw, json)
Hash identifier: jqVDo1/QT3pw/CyrVCRNLre3HCfPX2bL3fPfbAnnTNI=
Subject key identifier: 54:D8:10:6E:BB:20:AE:90:FD:06:1A:86:DD:BB:BC:8E:CE:20:58:26
Authority key identifier: 07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
Certificate issuer: /CN=07c9ca1e278307bae2405a4834af447c06414701
Certificate serial: 0194BC72A5AB867A1D72640FD8ABD24A9D0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
Manifest number: 04B3
Signing time: Fri 31 Jan 2025 13:00:17 +0000
Manifest this update: Fri 31 Jan 2025 13:00:17 +0000
Manifest next update: Sat 01 Feb 2025 13:00:17 +0000
Files and hashes: 1: B8nKHieDB7riQFpINK9EfAZBRwE.crl (hash: 5yKJJVB4HCQmBhzMeG1hCsCPXHKWSXs6issyBgsEokg=)
2: F9Q0Mg_SdChrVPmjRELNfy5ikeQ.roa (hash: D+oypEIJiZTBGT95av8yorKEZBq5uNCWOIeANOZvJiA=)
3: gpb4-1Pa8jheX2ShBqmDY1Oz_uE.roa (hash: ouq0lXCMNkqwSYjgnbFoNQVBaOceZaj3Z0yPlQ2cSos=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a5:ab:86:7a:1d:72:64:0f:d8:ab:d2:4a:9d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c9ca1e278307bae2405a4834af447c06414701
Validity
Not Before: Jan 31 13:00:17 2025 GMT
Not After : Feb 1 13:00:17 2025 GMT
Subject: CN=54d8106ebb20ae90fd061a86ddbbbc8ece205826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:59:a0:c5:57:4a:17:08:1a:a8:26:86:46:16:
da:a7:cf:1f:8c:f6:34:26:4b:66:5a:0a:3b:53:04:
6b:0e:bb:f5:89:e6:07:65:42:67:62:a8:b0:27:89:
8a:75:42:37:86:32:75:55:f7:50:ce:6b:3b:4c:d6:
ce:b7:a7:7b:43:e2:80:25:9a:74:35:9d:c6:77:79:
c2:89:c2:dd:eb:36:84:9f:34:85:88:5b:3a:cd:ab:
38:54:7d:eb:b5:9b:92:8d:05:61:b9:05:35:46:ce:
0c:ed:0f:23:14:a1:ca:b1:40:f0:ab:08:32:73:52:
ea:ae:71:12:77:d9:63:db:a8:55:e2:7b:82:e7:e2:
3e:ca:4d:6d:db:99:31:a8:c7:fb:52:85:7a:50:3d:
31:20:df:03:79:34:44:38:4a:4f:b1:ff:b3:1a:68:
06:f9:bc:b6:75:a6:89:3a:37:37:50:70:b0:2f:6a:
8c:ea:82:28:eb:e5:d8:47:4a:7c:33:12:cc:fb:f0:
e0:a0:11:f7:fd:39:c5:81:f7:83:54:a1:f1:5c:52:
7d:43:a3:ec:fe:79:5d:07:02:54:85:2c:3c:3c:ae:
76:ab:12:73:2f:ec:bf:e5:52:e0:ec:ec:14:26:ae:
db:0e:af:41:aa:f6:c1:1f:a4:e4:60:2b:78:30:08:
cf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D8:10:6E:BB:20:AE:90:FD:06:1A:86:DD:BB:BC:8E:CE:20:58:26
X509v3 Authority Key Identifier:
keyid:07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:3e:76:1d:8f:4f:1f:31:f8:68:07:8a:c9:fe:10:ae:e5:f5:
4d:d8:53:5d:f6:34:55:d6:76:ae:64:8d:3d:c5:e4:89:60:6a:
dd:88:cb:18:fa:b2:22:94:10:c8:d0:82:d9:ba:b1:9a:c2:ef:
ca:3c:de:bc:f0:c9:c2:2b:f6:fd:44:05:15:64:66:1a:9d:28:
7c:3f:b7:90:da:8e:d4:08:1a:da:c2:85:3f:22:73:e5:b8:cc:
a7:38:6b:52:d4:f2:03:02:fa:94:d5:a5:bd:d7:56:cf:ad:48:
f0:3a:4f:95:7c:90:7a:04:b0:01:d3:47:e4:a6:fe:48:44:c8:
fb:a8:d9:76:dd:6d:2e:83:01:64:b5:fd:1e:fa:8a:7b:5e:fe:
66:fe:86:6a:fc:d1:f9:a9:59:67:1a:7a:79:1c:6e:11:a2:c1:
4c:d9:ee:f8:82:86:81:bf:d9:fb:c1:24:df:41:a5:8a:cb:6c:
70:e4:09:38:24:76:76:bb:f3:e9:fd:a7:25:05:c0:9a:b2:28:
7c:00:87:af:79:e5:b4:76:2b:39:01:6d:5a:1e:36:2d:ab:4c:
0b:aa:a3:87:29:91:f0:01:17:89:29:40:30:9b:f9:19:bd:4c:
9b:37:d8:de:5d:51:e9:e8:b1:1a:4f:39:f0:66:dc:c7:fc:41:
44:af:d1:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cqWrhnodcmQP2KvSSp0LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YzljYTFlMjc4MzA3YmFlMjQwNWE0ODM0YWY0NDdjMDY0
MTQ3MDEwHhcNMjUwMTMxMTMwMDE3WhcNMjUwMjAxMTMwMDE3WjAzMTEwLwYDVQQD
Eyg1NGQ4MTA2ZWJiMjBhZTkwZmQwNjFhODZkZGJiYmM4ZWNlMjA1ODI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlmgxVdKFwgaqCaGRhbap88fjPY0
JktmWgo7UwRrDrv1ieYHZUJnYqiwJ4mKdUI3hjJ1VfdQzms7TNbOt6d7Q+KAJZp0
NZ3Gd3nCicLd6zaEnzSFiFs6zas4VH3rtZuSjQVhuQU1Rs4M7Q8jFKHKsUDwqwgy
c1LqrnESd9lj26hV4nuC5+I+yk1t25kxqMf7UoV6UD0xIN8DeTREOEpPsf+zGmgG
+by2daaJOjc3UHCwL2qM6oIo6+XYR0p8MxLM+/DgoBH3/TnFgfeDVKHxXFJ9Q6Ps
/nldBwJUhSw8PK52qxJzL+y/5VLg7OwUJq7bDq9BqvbBH6TkYCt4MAjPWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFTYEG67IK6Q/QYaht27vI7OIFgmMB8GA1UdIwQY
MBaAFAfJyh4ngwe64kBaSDSvRHwGQUcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjhuS0hpZURCN3JpUUZwSU5LOUVmQVpCUndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8yNjNjMjYtN2RjYS00NTEyLTgzNGYt
MDA1ZWRmYjc2MWM2LzEvQjhuS0hpZURCN3JpUUZwSU5LOUVmQVpCUndFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8yNjNjMjYtN2RjYS00NTEyLTgzNGYtMDA1ZWRmYjc2MWM2
LzEvQjhuS0hpZURCN3JpUUZwSU5LOUVmQVpCUndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaz52HY9P
HzH4aAeKyf4QruX1TdhTXfY0VdZ2rmSNPcXkiWBq3YjLGPqyIpQQyNCC2bqxmsLv
yjzevPDJwiv2/UQFFWRmGp0ofD+3kNqO1Aga2sKFPyJz5bjMpzhrUtTyAwL6lNWl
vddWz61I8DpPlXyQegSwAdNH5Kb+SETI+6jZdt1tLoMBZLX9HvqKe17+Zv6GavzR
+alZZxp6eRxuEaLBTNnu+IKGgb/Z+8Ek30GlistscOQJOCR2drvz6f2nJQXAmrIo
fACHr3nltHYrOQFtWh42LatMC6qjhymR8AEXiSlAMJv5Gb1MmzfY3l1R6eixGk85
8Gbcx/xBRK/R/A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:39 2025 by rpki-client