Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft
File: n8IY9nJDtH2gIf2j_rRBR0s865Q.mft (raw, json)
Hash identifier: PqPzqa2e2HFhSsCEelaY46+xNAmhRT2FpaMs2Oo5C1Q=
Subject key identifier: 01:5D:54:07:48:B1:CE:AA:DF:AD:14:5E:FF:31:AB:44:FC:B3:0D:4A
Authority key identifier: 9F:C2:18:F6:72:43:B4:7D:A0:21:FD:A3:FE:B4:41:47:4B:3C:EB:94
Certificate issuer: /CN=9fc218f67243b47da021fda3feb441474b3ceb94
Certificate serial: 0194BBCEEB77621BA95CF69A426259FE46E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:01:27 +0000
Manifest this update: Fri 31 Jan 2025 10:01:27 +0000
Manifest next update: Sat 01 Feb 2025 10:01:27 +0000
Files and hashes: 1: n8IY9nJDtH2gIf2j_rRBR0s865Q.crl (hash: AsBXwZ5CL1m5d5VylkUc012ZL6AfGIlQJRvIPqV/xfU=)
2: sYA6KeIU16Bd58c84OvJJaCKPKU.roa (hash: tX4ZljxiPaFmNoY3hS/p0i7eqE1TuxWDswzU5ZDhiFg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:eb:77:62:1b:a9:5c:f6:9a:42:62:59:fe:46:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fc218f67243b47da021fda3feb441474b3ceb94
Validity
Not Before: Jan 31 10:01:27 2025 GMT
Not After : Feb 1 10:01:27 2025 GMT
Subject: CN=015d540748b1ceaadfad145eff31ab44fcb30d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:61:23:9b:b5:f6:76:ae:66:3a:2c:62:3b:2f:
28:75:24:80:ef:a4:b5:06:81:aa:d6:10:e0:83:3e:
f4:bb:64:fc:85:9b:30:b1:4c:2a:57:80:95:d0:68:
0d:f8:85:24:fb:35:c3:80:39:58:67:56:a3:ad:96:
38:78:b1:52:26:ce:3d:8a:9c:d5:17:4e:d7:0a:88:
91:41:10:cc:ce:83:80:77:a0:bc:0d:07:45:9b:3a:
10:67:27:0d:73:94:1a:9e:04:e7:d0:8c:ce:37:84:
ff:53:ba:1f:89:09:4c:e4:d9:ba:33:03:ec:a3:9f:
bd:9d:b5:f4:2c:ee:1a:14:49:47:8a:85:ca:9b:8e:
a5:0a:ea:4b:b2:0b:76:a3:9a:ab:d3:23:ae:ab:89:
df:9b:82:75:af:7a:57:59:f7:8c:d8:f2:66:0e:5f:
0a:22:d4:44:da:f2:c5:da:8f:a2:e5:c0:30:76:dc:
f9:a6:27:e5:2d:05:49:d2:53:c1:a1:9b:6e:06:1d:
f0:01:f3:47:00:b1:21:98:68:a8:a5:7d:3e:32:88:
50:b2:fa:1d:1c:8e:53:f5:b7:ff:7a:ca:15:97:8b:
49:b5:98:0b:19:e1:c2:88:44:6d:7c:f3:d4:d3:57:
bf:31:ae:61:b1:fe:50:79:5f:72:01:2a:d9:32:e1:
df:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5D:54:07:48:B1:CE:AA:DF:AD:14:5E:FF:31:AB:44:FC:B3:0D:4A
X509v3 Authority Key Identifier:
keyid:9F:C2:18:F6:72:43:B4:7D:A0:21:FD:A3:FE:B4:41:47:4B:3C:EB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:48:1c:c9:d7:3b:1d:d7:bc:95:ec:99:29:3f:04:6b:1f:5e:
89:05:89:4a:6a:47:d3:17:42:19:99:c2:b3:ea:3c:9c:5f:41:
f9:5d:82:15:0c:98:dc:6e:c0:0c:1c:2d:48:ec:01:a9:28:f0:
a7:f0:24:9f:91:0a:af:f4:74:d7:c6:56:7f:65:df:e9:3a:dc:
ab:05:83:8c:96:84:e6:4f:bf:c8:a9:a8:e1:30:b5:2e:d9:03:
22:13:26:bf:74:a2:21:57:c3:3e:c6:15:95:d5:b1:c9:76:94:
3f:13:ad:2f:47:31:82:d1:c4:82:22:93:71:3e:17:24:57:01:
2e:7c:20:a7:c7:72:ac:6c:3b:dd:94:1c:01:1c:02:4c:9c:89:
1a:36:c2:e3:81:8d:7d:5d:58:92:bc:12:48:0b:de:ea:98:11:
95:15:fc:66:de:bf:20:91:93:21:21:fc:67:62:01:7f:dd:4b:
a4:12:af:b3:0c:c2:30:b7:9b:46:5a:58:f1:54:10:21:c3:80:
ce:2e:44:d8:53:a3:22:ba:cb:f4:8d:88:b8:1b:7d:f6:a2:b4:
3c:45:99:27:45:bc:62:c0:cb:d0:04:d5:40:3c:18:ea:8f:5b:
9c:76:fa:1f:b1:a0:3c:97:1c:9c:19:e9:f7:fe:60:8a:4f:56:
95:03:fa:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zut3YhupXPaaQmJZ/kbjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYzIxOGY2NzI0M2I0N2RhMDIxZmRhM2ZlYjQ0MTQ3NGIz
Y2ViOTQwHhcNMjUwMTMxMTAwMTI3WhcNMjUwMjAxMTAwMTI3WjAzMTEwLwYDVQQD
EygwMTVkNTQwNzQ4YjFjZWFhZGZhZDE0NWVmZjMxYWI0NGZjYjMwZDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmEjm7X2dq5mOixiOy8odSSA76S1
BoGq1hDggz70u2T8hZswsUwqV4CV0GgN+IUk+zXDgDlYZ1ajrZY4eLFSJs49ipzV
F07XCoiRQRDMzoOAd6C8DQdFmzoQZycNc5QangTn0IzON4T/U7ofiQlM5Nm6MwPs
o5+9nbX0LO4aFElHioXKm46lCupLsgt2o5qr0yOuq4nfm4J1r3pXWfeM2PJmDl8K
ItRE2vLF2o+i5cAwdtz5piflLQVJ0lPBoZtuBh3wAfNHALEhmGiopX0+MohQsvod
HI5T9bf/esoVl4tJtZgLGeHCiERtfPPU01e/Ma5hsf5QeV9yASrZMuHfEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFdVAdIsc6q360UXv8xq0T8sw1KMB8GA1UdIwQY
MBaAFJ/CGPZyQ7R9oCH9o/60QUdLPOuUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjhJWTluSkR0SDJnSWYyal9yUkJSMHM4NjVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82N2FhZTItYzhmYy00YWQwLWJjNjAt
ZGVmOWIyZTJkZmQzLzEvbjhJWTluSkR0SDJnSWYyal9yUkJSMHM4NjVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy82N2FhZTItYzhmYy00YWQwLWJjNjAtZGVmOWIyZTJkZmQz
LzEvbjhJWTluSkR0SDJnSWYyal9yUkJSMHM4NjVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAikgcydc7
Hde8leyZKT8Eax9eiQWJSmpH0xdCGZnCs+o8nF9B+V2CFQyY3G7ADBwtSOwBqSjw
p/Akn5EKr/R018ZWf2Xf6TrcqwWDjJaE5k+/yKmo4TC1LtkDIhMmv3SiIVfDPsYV
ldWxyXaUPxOtL0cxgtHEgiKTcT4XJFcBLnwgp8dyrGw73ZQcARwCTJyJGjbC44GN
fV1YkrwSSAve6pgRlRX8Zt6/IJGTISH8Z2IBf91LpBKvswzCMLebRlpY8VQQIcOA
zi5E2FOjIrrL9I2IuBt99qK0PEWZJ0W8YsDL0ATVQDwY6o9bnHb6H7GgPJccnBnp
9/5gik9WlQP6fA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:41 2025 by rpki-client