Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
File: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft (raw, json)
Hash identifier: z0564hsDV7LD24I30vB9/ez+fohVPMYBjKpCIcZSywA=
Subject key identifier: 25:50:4C:C7:2A:23:50:E5:66:BB:07:39:80:0C:6D:A4:5A:74:A6:22
Authority key identifier: F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
Certificate issuer: /CN=f324d0f47297680535eb2799189db888b4066782
Certificate serial: 0194BC3C61705BC6393CB52A45DE0173600D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
Manifest number: 0A2F
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl (hash: e/9rskw/yPI0tjKq1DikdVgrnEGiSCeTvvWA87JAVMs=)
2: ViytvvvqRpbhZ8khzk-URy1_cok.roa (hash: GO9E5IMUAfx38THMM6EhNHK1/Vpo8T9/VGp4F+NJQF8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:61:70:5b:c6:39:3c:b5:2a:45:de:01:73:60:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324d0f47297680535eb2799189db888b4066782
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=25504cc72a2350e566bb0739800c6da45a74a622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7a:0f:f1:37:97:db:76:f4:43:f0:b4:fa:97:
50:72:09:c3:e7:d8:09:c2:49:e2:b4:e7:2c:d9:7f:
17:b2:f0:5f:31:e4:14:0e:68:ec:31:b9:20:fc:20:
18:61:aa:ec:c8:52:1a:d4:7f:03:64:2c:49:1a:93:
ba:8e:07:88:16:08:21:84:c6:8e:1a:cc:12:75:08:
a1:ce:77:d4:3d:a7:83:31:73:7a:ac:a5:bf:3b:86:
f5:10:83:23:1b:58:ac:09:93:ec:0d:60:26:20:b4:
8e:e0:ef:d2:92:22:25:d5:d4:a4:29:44:b7:c9:62:
73:81:54:0f:1f:14:4f:12:e4:ca:85:60:f3:4f:87:
05:69:dd:c5:9b:09:d8:28:d9:99:b1:49:9c:3f:3d:
fd:1c:46:50:69:bb:7d:97:46:59:62:4a:94:48:85:
97:14:9e:7a:3b:2c:c8:e6:5f:f0:91:db:92:d6:0a:
f7:5e:ec:28:ff:a4:ea:b1:1b:e7:82:9c:70:41:ff:
c3:97:79:fb:7b:ce:d6:72:e4:39:e6:47:0d:20:df:
96:8b:76:58:02:b4:7e:f9:a7:ca:a4:ce:f7:c9:e8:
17:e2:4e:8a:c2:ef:75:06:db:f5:c4:7e:88:39:80:
58:d7:12:8c:2d:7e:7e:76:b1:24:d9:68:3b:87:e5:
96:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:50:4C:C7:2A:23:50:E5:66:BB:07:39:80:0C:6D:A4:5A:74:A6:22
X509v3 Authority Key Identifier:
keyid:F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3c:44:b1:87:03:f9:51:54:cd:3b:12:17:67:98:6a:06:d8:
86:c4:5a:6f:a8:6d:1b:94:66:7e:9d:40:76:4f:47:8a:e5:b8:
30:f0:d0:5e:72:56:23:5e:15:f2:4f:8d:73:f6:d5:7d:02:74:
a6:66:29:54:76:dc:97:37:5a:c9:ed:6c:f8:fd:28:da:74:a6:
bf:46:95:46:d8:e1:56:45:6a:48:54:c9:1c:67:b8:5d:b5:9a:
eb:bb:cf:a5:fa:2f:e4:3a:ad:fc:67:75:df:33:42:47:18:e0:
5c:d6:04:cc:21:36:9b:f5:8e:3e:51:9a:a2:8a:7c:d1:93:d6:
b4:39:dd:45:57:4e:84:c2:7d:85:99:df:76:53:fe:64:70:2e:
ed:2a:50:b9:83:0a:49:cf:4e:79:97:52:3d:ff:38:ed:39:4c:
cb:7a:86:3c:c1:46:17:28:e8:cc:f6:7b:3a:0a:2b:26:f0:2d:
d8:2e:4e:a1:52:bb:63:b3:04:47:42:c5:d7:19:26:05:f5:39:
67:c3:99:2d:4b:82:9d:47:20:06:8c:69:19:e3:06:38:6c:d7:
c4:ee:da:3e:72:08:0e:52:6f:cd:36:08:4a:22:10:b2:71:5e:
74:4d:35:6e:d6:30:23:96:da:39:a0:a5:a2:84:e4:87:f3:1c:
ae:3f:f6:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PGFwW8Y5PLUqRd4Bc2ANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMjRkMGY0NzI5NzY4MDUzNWViMjc5OTE4OWRiODg4YjQw
NjY3ODIwHhcNMjUwMTMxMTIwMTAxWhcNMjUwMjAxMTIwMTAxWjAzMTEwLwYDVQQD
EygyNTUwNGNjNzJhMjM1MGU1NjZiYjA3Mzk4MDBjNmRhNDVhNzRhNjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnoP8TeX23b0Q/C0+pdQcgnD59gJ
wknitOcs2X8XsvBfMeQUDmjsMbkg/CAYYarsyFIa1H8DZCxJGpO6jgeIFgghhMaO
GswSdQihznfUPaeDMXN6rKW/O4b1EIMjG1isCZPsDWAmILSO4O/SkiIl1dSkKUS3
yWJzgVQPHxRPEuTKhWDzT4cFad3FmwnYKNmZsUmcPz39HEZQabt9l0ZZYkqUSIWX
FJ56OyzI5l/wkduS1gr3Xuwo/6TqsRvngpxwQf/Dl3n7e87WcuQ55kcNIN+Wi3ZY
ArR++afKpM73yegX4k6Kwu91Btv1xH6IOYBY1xKMLX5+drEk2Wg7h+WW+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVQTMcqI1DlZrsHOYAMbaRadKYiMB8GA1UdIwQY
MBaAFPMk0PRyl2gFNesnmRiduIi0BmeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHlUUTlIS1hhQVUxNnllWkdKMjRpTFFHWjRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC85MGQzNjYtMmZhYi00N2U1LTkwYjkt
MDI2NWU1Y2Q2OTY2LzEvOHlUUTlIS1hhQVUxNnllWkdKMjRpTFFHWjRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC85MGQzNjYtMmZhYi00N2U1LTkwYjktMDI2NWU1Y2Q2OTY2
LzEvOHlUUTlIS1hhQVUxNnllWkdKMjRpTFFHWjRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOjxEsYcD
+VFUzTsSF2eYagbYhsRab6htG5Rmfp1Adk9HiuW4MPDQXnJWI14V8k+Nc/bVfQJ0
pmYpVHbclzdaye1s+P0o2nSmv0aVRtjhVkVqSFTJHGe4XbWa67vPpfov5Dqt/Gd1
3zNCRxjgXNYEzCE2m/WOPlGaoop80ZPWtDndRVdOhMJ9hZnfdlP+ZHAu7SpQuYMK
Sc9OeZdSPf847TlMy3qGPMFGFyjozPZ7OgorJvAt2C5OoVK7Y7MER0LF1xkmBfU5
Z8OZLUuCnUcgBoxpGeMGOGzXxO7aPnIIDlJvzTYISiIQsnFedE01btYwI5baOaCl
ooTkh/Mcrj/29A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:17 2025 by rpki-client