Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
File: josQcRMXY6rasfKU43zVCtrAk5w.mft (raw, json)
Hash identifier: AzL68fQC+dVvghro7Sz6Bbasmiaetow8HLkYeDcO4NU=
Subject key identifier: 52:12:08:3C:4F:92:AF:B8:07:64:CD:79:52:3B:40:33:11:5A:1B:7B
Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c
Certificate serial: 0194BD17C0FE8D42842C64DF998A7B27DC12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
Manifest number: 11A1
Signing time: Fri 31 Jan 2025 16:00:37 +0000
Manifest this update: Fri 31 Jan 2025 16:00:37 +0000
Manifest next update: Sat 01 Feb 2025 16:00:37 +0000
Files and hashes: 1: 3H7i_vFx5kv1rmREwXCmTM5oMqw.roa (hash: hMtleRQFOxKLJtL4y1szjPfSERJkDY1m3qfGe4WIw2I=)
2: RsZOcDmkBIUPjHAIBtXdE1isEIo.roa (hash: YV+XRYidOStCwFSLI7pqeek9g91t1Wq016mp7gDOMSA=)
3: josQcRMXY6rasfKU43zVCtrAk5w.crl (hash: T0L/cTTFJ6nVOhkFTJfz4/HzmgXHMABVVzGSsPbKRGc=)
4: oelP10O0hKN0MJjmizXtRBBnIm0.roa (hash: Kv4VxSnM51++YGnfrGOwbQ9f/51H5VRCwP22x4tg44M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c0:fe:8d:42:84:2c:64:df:99:8a:7b:27:dc:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c
Validity
Not Before: Jan 31 16:00:37 2025 GMT
Not After : Feb 1 16:00:37 2025 GMT
Subject: CN=5212083c4f92afb80764cd79523b4033115a1b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b0:f1:49:32:90:fc:52:21:b4:6e:5e:5c:2e:
5c:b7:69:a6:3f:e9:b4:6c:ba:d6:ab:51:34:8c:56:
56:86:02:7b:4f:aa:32:96:4c:46:7a:5b:84:d6:f4:
1c:69:8b:a8:64:86:b1:a4:d8:99:a2:3d:9b:1f:b4:
56:e4:b6:63:58:ce:c8:7a:51:da:97:bb:81:5a:a9:
82:6f:6e:54:7b:14:9b:54:c4:02:c7:0c:87:5d:18:
a6:dc:49:7c:88:7a:bd:51:eb:c8:a4:e3:b6:21:73:
e3:ea:42:98:12:61:15:78:74:d3:8b:bc:eb:5c:98:
5c:1e:91:36:c2:e4:25:ce:0b:91:85:3c:84:5d:1c:
e0:fc:17:e8:a4:7e:e8:ea:77:b7:9b:bd:9c:f8:a6:
2a:68:85:b7:e2:4b:e7:5c:b6:27:35:a4:ef:c9:35:
a8:ec:db:5d:48:72:76:6d:09:3a:8b:ee:c6:5f:98:
92:94:c2:da:74:3c:dc:c3:b4:de:dc:ae:3c:8b:64:
e8:8f:05:7e:67:44:e2:f2:00:89:b6:ee:08:b1:bf:
fd:25:60:b8:a0:c2:10:92:9f:3f:6c:b3:71:85:03:
be:46:2d:43:dc:5b:ad:b7:fa:20:8a:68:c1:1b:95:
e6:d5:f8:80:2d:7e:bb:d7:30:a0:c2:f7:04:bf:6f:
0c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:12:08:3C:4F:92:AF:B8:07:64:CD:79:52:3B:40:33:11:5A:1B:7B
X509v3 Authority Key Identifier:
keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:83:1f:7b:43:25:e1:72:c1:63:e4:b1:12:4a:d4:ce:90:97:
16:d8:82:73:9d:50:1e:91:e4:92:a6:cf:5b:35:76:e6:31:ee:
dc:fa:e8:61:83:a2:94:f3:f9:35:ff:e5:87:c8:1e:b9:a8:c7:
e2:c5:54:98:76:06:c8:99:f2:9d:b1:6b:99:a9:4e:13:64:3b:
13:4e:dc:9c:21:6b:2e:a8:c0:34:f6:da:2e:cd:2b:0d:9a:34:
1b:41:07:ab:05:c0:e9:07:66:c0:10:2c:e4:bd:ee:05:db:b3:
86:78:7c:cb:b6:4c:19:5c:33:43:a6:7e:04:07:16:37:ea:fb:
2a:15:13:bd:4d:ce:61:27:64:3f:ff:02:b0:c8:b7:bb:27:47:
24:43:28:d7:00:5b:ca:85:a8:2f:22:ba:8b:e0:0a:6d:06:7e:
4d:be:bb:3b:7f:fc:51:fe:df:92:6d:a8:0d:b8:88:92:f6:8f:
70:a1:6a:46:5d:e8:bd:ee:54:3d:66:9c:04:4e:da:27:0f:69:
66:b3:5c:10:f4:75:bf:66:3c:2f:3c:03:73:28:12:cc:22:ce:
f7:fa:60:59:5d:93:b9:d3:58:9f:31:7b:62:12:a6:9d:66:0b:
7c:36:f1:7f:21:98:ea:07:0a:9d:1f:db:84:60:ea:66:b4:c8:
69:3a:e4:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F8D+jUKELGTfmYp7J9wSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlOGIxMDcxMTMxNzYzYWFkYWIxZjI5NGUzN2NkNTBhZGFj
MDkzOWMwHhcNMjUwMTMxMTYwMDM3WhcNMjUwMjAxMTYwMDM3WjAzMTEwLwYDVQQD
Eyg1MjEyMDgzYzRmOTJhZmI4MDc2NGNkNzk1MjNiNDAzMzExNWExYjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7DxSTKQ/FIhtG5eXC5ct2mmP+m0
bLrWq1E0jFZWhgJ7T6oylkxGeluE1vQcaYuoZIaxpNiZoj2bH7RW5LZjWM7IelHa
l7uBWqmCb25UexSbVMQCxwyHXRim3El8iHq9UevIpOO2IXPj6kKYEmEVeHTTi7zr
XJhcHpE2wuQlzguRhTyEXRzg/BfopH7o6ne3m72c+KYqaIW34kvnXLYnNaTvyTWo
7NtdSHJ2bQk6i+7GX5iSlMLadDzcw7Te3K48i2TojwV+Z0Ti8gCJtu4Isb/9JWC4
oMIQkp8/bLNxhQO+Ri1D3Futt/ogimjBG5Xm1fiALX671zCgwvcEv28MhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFISCDxPkq+4B2TNeVI7QDMRWht7MB8GA1UdIwQY
MBaAFI6LEHETF2Oq2rHylON81QrawJOcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam9zUWNSTVhZNnJhc2ZLVTQzelZDdHJBazV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8zMzMzOWYtNmQ5OC00YjVmLWFiNjAt
MWM5NGNiN2RmZWIzLzEvam9zUWNSTVhZNnJhc2ZLVTQzelZDdHJBazV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8zMzMzOWYtNmQ5OC00YjVmLWFiNjAtMWM5NGNiN2RmZWIz
LzEvam9zUWNSTVhZNnJhc2ZLVTQzelZDdHJBazV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYMfe0Ml
4XLBY+SxEkrUzpCXFtiCc51QHpHkkqbPWzV25jHu3ProYYOilPP5Nf/lh8geuajH
4sVUmHYGyJnynbFrmalOE2Q7E07cnCFrLqjANPbaLs0rDZo0G0EHqwXA6QdmwBAs
5L3uBduzhnh8y7ZMGVwzQ6Z+BAcWN+r7KhUTvU3OYSdkP/8CsMi3uydHJEMo1wBb
yoWoLyK6i+AKbQZ+Tb67O3/8Uf7fkm2oDbiIkvaPcKFqRl3ove5UPWacBE7aJw9p
ZrNcEPR1v2Y8LzwDcygSzCLO9/pgWV2TudNYnzF7YhKmnWYLfDbxfyGY6gcKnR/b
hGDqZrTIaTrkQw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:06 2025 by rpki-client