Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
File: 8TM6Z1TACO27rF8y69AZ6mRzrqg.mft (raw, json)
Hash identifier: VL3se8hUm8P63z27+ZOQbrf5YA0Mlh8rdpAQT2Uk344=
Subject key identifier: C1:CC:1E:C9:F9:39:43:17:C7:4E:B9:0F:FD:F8:60:1D:24:81:AD:69
Authority key identifier: F1:33:3A:67:54:C0:08:ED:BB:AC:5F:32:EB:D0:19:EA:64:73:AE:A8
Certificate issuer: /CN=f1333a6754c008edbbac5f32ebd019ea6473aea8
Certificate serial: 0194BD17748EB0C914A46FAF17D4CF93D84D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
Manifest number: 0CA0
Signing time: Fri 31 Jan 2025 16:00:18 +0000
Manifest this update: Fri 31 Jan 2025 16:00:18 +0000
Manifest next update: Sat 01 Feb 2025 16:00:18 +0000
Files and hashes: 1: 8TM6Z1TACO27rF8y69AZ6mRzrqg.crl (hash: wcdugisU3XH3q1nWVcKbxVtzs6ids5Zy05GtixIpl1w=)
2: G1CMU250DLNf-oup7Q0hOPQNrZw.roa (hash: 0pwKFn2zlhCRBk1YacOr41wGcqVSw2Yno4Qxh/muNvo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:74:8e:b0:c9:14:a4:6f:af:17:d4:cf:93:d8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1333a6754c008edbbac5f32ebd019ea6473aea8
Validity
Not Before: Jan 31 16:00:18 2025 GMT
Not After : Feb 1 16:00:18 2025 GMT
Subject: CN=c1cc1ec9f9394317c74eb90ffdf8601d2481ad69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ae:a7:9b:92:c7:75:a2:a3:63:a9:a4:04:74:
74:c7:11:2d:f1:02:33:d3:ba:1c:65:73:62:f6:5f:
be:e3:13:b3:95:4d:94:8f:c5:44:73:86:02:a0:29:
fe:a4:78:41:ed:61:1d:2e:a8:8d:5b:06:b2:d0:62:
c9:ca:4b:0a:b5:ba:98:cc:7b:e6:f1:db:fd:b0:bf:
79:5c:ad:06:d4:38:af:04:35:c2:96:2d:fb:44:0a:
de:df:67:e6:6f:d9:83:3b:cb:55:f5:9f:44:3f:64:
81:c6:58:dc:5f:c1:70:cc:e2:96:96:ac:85:2f:e0:
d6:e2:00:a3:e7:43:e3:01:6e:60:04:1e:bd:1e:c3:
7c:c5:6b:29:4f:c2:e5:fa:04:62:85:4e:57:63:9e:
89:03:a1:dc:1d:27:37:cc:8f:d3:78:8d:12:af:80:
61:fc:20:86:cd:74:ef:71:26:36:e4:2d:b9:66:4b:
7f:bb:47:81:cb:93:1a:b1:51:f4:39:da:3d:77:24:
f5:59:f9:36:ee:26:96:76:28:3c:fd:c2:55:06:0e:
8e:a8:c4:a1:02:fc:bf:3c:99:6a:2d:18:1a:32:6d:
65:ad:be:a2:4a:4e:3b:a1:9d:5a:98:c3:5f:72:73:
6a:30:11:e1:c3:33:5f:c1:49:ac:56:66:ef:c2:b4:
80:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CC:1E:C9:F9:39:43:17:C7:4E:B9:0F:FD:F8:60:1D:24:81:AD:69
X509v3 Authority Key Identifier:
keyid:F1:33:3A:67:54:C0:08:ED:BB:AC:5F:32:EB:D0:19:EA:64:73:AE:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e2:9b:94:35:a8:01:ea:55:58:74:30:c9:a8:01:4c:cf:ac:
64:80:5e:b6:ca:15:a5:05:a2:6e:b1:c7:8b:6d:ea:8a:6c:c7:
26:a8:ea:78:4f:38:b0:70:24:aa:c3:c8:dc:62:9f:34:c1:f7:
f2:99:b2:cd:81:b2:11:0e:68:b0:a5:53:58:70:43:3e:9f:be:
b3:32:2e:11:f6:05:34:52:fe:c0:94:43:94:aa:4d:9e:6b:3e:
92:a4:85:89:93:f3:06:e2:10:16:80:92:9b:4c:d7:4d:68:04:
bc:d3:49:5c:96:cb:cd:cb:42:de:38:d6:43:48:3c:f2:69:3f:
f4:84:35:f8:00:1d:8c:d7:94:4c:3e:91:69:a1:db:fb:28:7d:
64:89:1b:9e:c3:4e:a5:79:8c:07:59:60:c2:66:dc:66:61:b1:
2a:e1:ff:36:41:55:6b:37:46:c4:57:67:95:06:75:7d:0d:b0:
85:21:ec:e6:9a:68:a5:5d:f8:20:72:22:f1:46:3f:2f:a9:d5:
18:bb:2b:f3:e0:92:20:ac:21:e7:50:3e:aa:99:71:bb:93:c5:
8f:23:b4:4e:39:3d:f8:a7:2e:d7:49:74:8a:04:33:d8:3a:40:
9d:f2:a2:e7:75:8f:92:0d:5b:4c:b7:f4:26:a7:ae:b6:cd:77:
46:bb:4a:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F3SOsMkUpG+vF9TPk9hNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzMzYTY3NTRjMDA4ZWRiYmFjNWYzMmViZDAxOWVhNjQ3
M2FlYTgwHhcNMjUwMTMxMTYwMDE4WhcNMjUwMjAxMTYwMDE4WjAzMTEwLwYDVQQD
EyhjMWNjMWVjOWY5Mzk0MzE3Yzc0ZWI5MGZmZGY4NjAxZDI0ODFhZDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA566nm5LHdaKjY6mkBHR0xxEt8QIz
07ocZXNi9l++4xOzlU2Uj8VEc4YCoCn+pHhB7WEdLqiNWway0GLJyksKtbqYzHvm
8dv9sL95XK0G1DivBDXCli37RAre32fmb9mDO8tV9Z9EP2SBxljcX8FwzOKWlqyF
L+DW4gCj50PjAW5gBB69HsN8xWspT8Ll+gRihU5XY56JA6HcHSc3zI/TeI0Sr4Bh
/CCGzXTvcSY25C25Zkt/u0eBy5MasVH0Odo9dyT1Wfk27iaWdig8/cJVBg6OqMSh
Avy/PJlqLRgaMm1lrb6iSk47oZ1amMNfcnNqMBHhwzNfwUmsVmbvwrSARQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHMHsn5OUMXx065D/34YB0kga1pMB8GA1UdIwQY
MBaAFPEzOmdUwAjtu6xfMuvQGepkc66oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRNNloxVEFDTzI3ckY4eTY5QVo2bVJ6cnFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS84NDlkZmQtOTM5ZC00YzVkLThlYjYt
ZjA1OTY3MGRhZjNkLzEvOFRNNloxVEFDTzI3ckY4eTY5QVo2bVJ6cnFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS84NDlkZmQtOTM5ZC00YzVkLThlYjYtZjA1OTY3MGRhZjNk
LzEvOFRNNloxVEFDTzI3ckY4eTY5QVo2bVJ6cnFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOKblDWo
AepVWHQwyagBTM+sZIBetsoVpQWibrHHi23qimzHJqjqeE84sHAkqsPI3GKfNMH3
8pmyzYGyEQ5osKVTWHBDPp++szIuEfYFNFL+wJRDlKpNnms+kqSFiZPzBuIQFoCS
m0zXTWgEvNNJXJbLzctC3jjWQ0g88mk/9IQ1+AAdjNeUTD6RaaHb+yh9ZIkbnsNO
pXmMB1lgwmbcZmGxKuH/NkFVazdGxFdnlQZ1fQ2whSHs5ppopV34IHIi8UY/L6nV
GLsr8+CSIKwh51A+qplxu5PFjyO0Tjk9+Kcu10l0igQz2DpAnfKi53WPkg1bTLf0
Jqeuts13RrtK7g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:11 2025 by rpki-client