Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
File: 6N8-nLacyliscCotXpE1w7yrcgA.mft (raw, json)
Hash identifier: NGiyi/WFFOC40dop0Id7BOZja5hj9zxlIrmTIruk0UM=
Subject key identifier: 76:A2:0C:A9:46:69:5C:10:00:94:0F:F0:95:04:08:C6:CC:ED:E2:DF
Authority key identifier: E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
Certificate issuer: /CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Certificate serial: 0194BCE0A59EA6762D76172AB476EBDB3F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 15:00:26 +0000
Manifest this update: Fri 31 Jan 2025 15:00:26 +0000
Manifest next update: Sat 01 Feb 2025 15:00:26 +0000
Files and hashes: 1: 6N8-nLacyliscCotXpE1w7yrcgA.crl (hash: gt8xjN1orPaKOYmwj44X52VFef3XR6aN5Ls6jXCa6rg=)
2: 9EUnRRjK1DPEOpCFHKLbj6DnnwE.roa (hash: 5pOnqwDunio8ibNAPUzfXIZHCC6lmUXt91wi8md1CvM=)
3: gU67SonlohhDi8lWe_MYl6yJJsI.roa (hash: FLpgUzbj974ZgJCetR7gymMI2OHT8rOTBcexSYhxtZw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a5:9e:a6:76:2d:76:17:2a:b4:76:eb:db:3f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Validity
Not Before: Jan 31 15:00:26 2025 GMT
Not After : Feb 1 15:00:26 2025 GMT
Subject: CN=76a20ca946695c1000940ff0950408c6ccede2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bd:6c:dc:6e:0a:51:7a:90:da:2d:bc:5c:e6:
c5:56:ed:ba:1b:78:0e:f0:cd:1d:3e:e0:82:07:04:
96:ac:24:46:f1:06:73:8a:32:dc:fa:3a:3b:74:b1:
c5:aa:70:e6:85:de:1e:d1:26:9b:44:c8:78:e0:73:
d4:f8:75:a6:8e:0c:a4:47:7d:ed:37:30:c2:49:ca:
3f:c3:31:fa:23:03:7e:a7:f1:02:72:17:76:56:9f:
7e:ac:4e:9a:02:5b:85:da:85:80:eb:05:ed:3e:e5:
76:93:ef:2c:f8:1b:cf:c9:57:36:29:a8:52:04:70:
ae:b7:e3:73:6b:30:52:dd:51:a6:97:9d:30:71:4d:
f6:0b:30:b5:8d:c0:e4:ad:91:f9:5b:2b:60:f9:c7:
4e:fe:18:85:46:14:42:ab:72:49:5d:d4:9b:d8:17:
f8:2c:f8:c6:24:2d:a8:b9:2f:9e:63:57:c1:a1:4e:
d0:04:c7:db:5c:27:3d:fc:9d:77:57:69:ce:96:b3:
fd:98:9e:30:ee:3c:42:7a:c6:6d:4d:62:2b:4f:b7:
a1:be:94:01:9e:6a:6c:de:5a:2b:e5:21:66:76:f9:
f9:68:7d:be:46:e4:d8:23:f1:0b:00:77:17:13:1e:
e0:71:8f:37:0a:8b:87:bf:e8:85:96:4e:7a:b2:e3:
df:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A2:0C:A9:46:69:5C:10:00:94:0F:F0:95:04:08:C6:CC:ED:E2:DF
X509v3 Authority Key Identifier:
keyid:E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:80:50:f5:da:78:08:0e:38:4c:09:8e:45:c0:06:8b:de:ba:
1d:73:e3:d2:44:18:17:92:d4:c8:74:b8:80:d4:6a:bd:93:1f:
98:e7:01:28:de:34:20:64:d3:21:71:66:5f:d9:d1:a6:92:f5:
32:7e:42:dd:1b:ed:55:5e:4f:80:b3:b2:74:e2:13:e2:32:e0:
15:43:26:13:9b:55:df:b4:2d:9f:ce:e3:e0:a5:38:53:82:15:
09:6b:4e:a4:d0:53:8c:a1:13:98:99:03:88:6e:ae:ca:a7:73:
7b:27:4f:10:3c:33:be:e1:87:54:86:b1:90:a2:d1:f0:da:b4:
a9:64:08:6d:66:27:3e:a2:10:89:fe:60:59:cf:7c:93:ee:6e:
f8:27:c7:b4:a5:d0:ac:7d:ba:2b:f6:63:39:8a:f5:ab:4c:e6:
c4:c5:c1:07:0b:6b:43:e8:f5:2b:90:8b:33:cc:1a:6f:2b:48:
85:74:81:ca:87:31:13:1e:1c:ad:ee:38:60:0d:b1:70:ea:54:
b4:fa:23:86:7f:91:91:17:f3:c6:ef:95:d3:3d:ae:5b:29:5b:
02:d8:0f:bc:8a:13:ca:84:f2:97:d6:80:ad:38:61:e3:91:89:
d5:8b:ef:30:f0:96:08:bf:bf:60:72:d9:59:70:4c:90:95:80:
41:48:e8:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84KWepnYtdhcqtHbr2z+NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZGYzZTljYjY5Y2NhNThhYzcwMmEyZDVlOTEzNWMzYmNh
YjcyMDAwHhcNMjUwMTMxMTUwMDI2WhcNMjUwMjAxMTUwMDI2WjAzMTEwLwYDVQQD
Eyg3NmEyMGNhOTQ2Njk1YzEwMDA5NDBmZjA5NTA0MDhjNmNjZWRlMmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArb1s3G4KUXqQ2i28XObFVu26G3gO
8M0dPuCCBwSWrCRG8QZzijLc+jo7dLHFqnDmhd4e0SabRMh44HPU+HWmjgykR33t
NzDCSco/wzH6IwN+p/ECchd2Vp9+rE6aAluF2oWA6wXtPuV2k+8s+BvPyVc2KahS
BHCut+NzazBS3VGml50wcU32CzC1jcDkrZH5Wytg+cdO/hiFRhRCq3JJXdSb2Bf4
LPjGJC2ouS+eY1fBoU7QBMfbXCc9/J13V2nOlrP9mJ4w7jxCesZtTWIrT7ehvpQB
nmps3lor5SFmdvn5aH2+RuTYI/ELAHcXEx7gcY83CouHv+iFlk56suPfJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaiDKlGaVwQAJQP8JUECMbM7eLfMB8GA1UdIwQY
MBaAFOjfPpy2nMpYrHAqLV6RNcO8q3IAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk44LW5MYWN5bGlzY0NvdFhwRTF3N3lyY2dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lNWRmZTItYTk2Ny00NzEyLWJlZTYt
MzIxODdlMjQ4ODlmLzEvNk44LW5MYWN5bGlzY0NvdFhwRTF3N3lyY2dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9lNWRmZTItYTk2Ny00NzEyLWJlZTYtMzIxODdlMjQ4ODlm
LzEvNk44LW5MYWN5bGlzY0NvdFhwRTF3N3lyY2dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA4BQ9dp4
CA44TAmORcAGi966HXPj0kQYF5LUyHS4gNRqvZMfmOcBKN40IGTTIXFmX9nRppL1
Mn5C3RvtVV5PgLOydOIT4jLgFUMmE5tV37Qtn87j4KU4U4IVCWtOpNBTjKETmJkD
iG6uyqdzeydPEDwzvuGHVIaxkKLR8Nq0qWQIbWYnPqIQif5gWc98k+5u+CfHtKXQ
rH26K/ZjOYr1q0zmxMXBBwtrQ+j1K5CLM8wabytIhXSByocxEx4cre44YA2xcOpU
tPojhn+RkRfzxu+V0z2uWylbAtgPvIoTyoTyl9aArThh45GJ1YvvMPCWCL+/YHLZ
WXBMkJWAQUjoKw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:36 2025 by rpki-client