Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
File: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft (raw, json)
Hash identifier: ZfWJ3UXNYyymyWctx3rtZIf2z/ZlbqJkew1cTwQtXcY=
Subject key identifier: 2A:59:22:5B:11:22:E1:7D:66:C5:BE:FE:1F:09:8E:3D:89:41:B7:DF
Authority key identifier: B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
Certificate issuer: /CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Certificate serial: 0194BD85B182BEA17B4CCAFCD31B7D342C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 18:00:43 +0000
Manifest this update: Fri 31 Jan 2025 18:00:43 +0000
Manifest next update: Sat 01 Feb 2025 18:00:43 +0000
Files and hashes: 1: 1-OIAlKZkamjD55UMqzWQx8P8ujA.roa (hash: 60FXDRY9jVOvfNl6JHlrniUKuc6zQEI45l9Gv0k62G4=)
2: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl (hash: r7IuU7CV1ymtmn/i4nk0dQS0mzQBB60OyW9r9mhJEC4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b1:82:be:a1:7b:4c:ca:fc:d3:1b:7d:34:2c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Validity
Not Before: Jan 31 18:00:43 2025 GMT
Not After : Feb 1 18:00:43 2025 GMT
Subject: CN=2a59225b1122e17d66c5befe1f098e3d8941b7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:e9:2b:72:4f:68:b2:59:19:f5:e3:03:fd:
56:19:6c:cf:c5:59:23:7b:be:22:5b:0f:8a:2f:61:
82:3a:74:23:76:bd:2b:58:6f:f0:93:1e:14:47:8d:
1e:e4:e7:73:54:5d:70:86:01:59:c9:65:5b:ff:41:
45:80:da:00:9b:a4:a9:54:c4:58:d0:28:0e:f9:c0:
ac:5f:42:a2:5f:fa:59:e8:04:66:0a:52:66:e1:f6:
3d:1d:c5:20:55:7e:e6:70:3a:9f:7f:bd:7d:d4:82:
d7:9f:50:07:14:d2:f1:58:18:4d:ff:9c:7b:66:7c:
ee:f2:7d:ea:73:ba:32:56:36:fa:2f:da:e5:f9:e7:
1b:16:9b:c9:e5:b7:90:e5:42:19:b7:4c:89:af:78:
35:c5:67:c9:55:ea:3e:38:31:b0:76:16:2a:8e:16:
39:f5:82:19:39:77:fc:27:f5:63:b8:7a:d9:32:67:
66:81:49:84:99:0c:7f:13:c7:af:0b:6b:6d:d3:e1:
df:bd:d1:90:76:d8:86:6d:11:23:6e:75:52:0a:da:
3a:c9:4f:48:9e:89:56:d2:20:cc:3f:1e:ce:8d:04:
5c:9d:28:c2:61:de:d3:f0:e0:17:c8:c7:9b:79:8f:
7b:2d:e4:c4:d0:5b:d6:54:a6:79:26:a4:36:7f:78:
58:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:59:22:5B:11:22:E1:7D:66:C5:BE:FE:1F:09:8E:3D:89:41:B7:DF
X509v3 Authority Key Identifier:
keyid:B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:89:d0:a8:de:50:27:50:f4:b2:de:7c:34:d2:40:90:41:67:
c6:7e:c1:74:f3:9f:54:8c:75:de:c6:45:30:1e:da:9c:a5:0c:
a3:5e:6c:45:23:fb:35:45:5e:a5:68:91:15:a8:26:54:4e:e3:
4e:ec:f7:55:cb:e8:95:8d:c2:e0:c6:e4:cc:af:15:ff:47:70:
99:1c:73:d5:77:6b:1d:bd:c4:3b:63:1a:57:2c:17:3f:63:e5:
e5:8c:fc:2b:7a:74:ea:d3:18:f9:b8:ad:3b:ca:93:76:d8:82:
2b:83:d6:54:8f:c3:51:06:11:8f:b6:ba:d9:b7:1d:82:02:24:
a3:2b:b3:da:ac:2d:ea:e1:24:70:b7:66:2e:ea:a9:5a:21:e0:
15:09:ee:79:f8:28:94:33:14:13:99:47:fe:3b:60:2d:1c:ab:
6f:55:5d:ff:11:13:1c:25:99:1a:e8:9c:94:b9:22:ba:64:f8:
f2:1b:9d:62:82:5a:10:05:0b:ae:90:67:ef:a6:15:64:cf:fe:
95:57:71:58:ab:e9:71:fc:9a:8f:08:dd:e4:25:e3:8d:65:8e:
2b:6f:38:37:d2:a5:a8:66:a7:c1:aa:86:72:7b:43:ec:94:4d:
46:17:f9:de:b6:88:5a:9a:3c:8a:72:aa:2a:78:68:9c:34:ac:
72:72:29:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hbGCvqF7TMr80xt9NCxIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMWYwNjcxZjM5OWU0ZGEyMGE0OGJkMzI3YzQ3YWZhNGE0
MWZmYzMwHhcNMjUwMTMxMTgwMDQzWhcNMjUwMjAxMTgwMDQzWjAzMTEwLwYDVQQD
EygyYTU5MjI1YjExMjJlMTdkNjZjNWJlZmUxZjA5OGUzZDg5NDFiN2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslnpK3JPaLJZGfXjA/1WGWzPxVkj
e74iWw+KL2GCOnQjdr0rWG/wkx4UR40e5OdzVF1whgFZyWVb/0FFgNoAm6SpVMRY
0CgO+cCsX0KiX/pZ6ARmClJm4fY9HcUgVX7mcDqff7191ILXn1AHFNLxWBhN/5x7
Znzu8n3qc7oyVjb6L9rl+ecbFpvJ5beQ5UIZt0yJr3g1xWfJVeo+ODGwdhYqjhY5
9YIZOXf8J/VjuHrZMmdmgUmEmQx/E8evC2tt0+HfvdGQdtiGbREjbnVSCto6yU9I
nolW0iDMPx7OjQRcnSjCYd7T8OAXyMebeY97LeTE0FvWVKZ5JqQ2f3hYBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpZIlsRIuF9ZsW+/h8Jjj2JQbffMB8GA1UdIwQY
MBaAFLMfBnHzmeTaIKSL0yfEevpKQf/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3g4R2NmT1o1Tm9ncEl2VEo4UjYta3BCXzhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC84NzhhMWMtYTdhMC00ZmQxLTk4YTAt
MzNlNDQ2MjFkYjA3LzEvc3g4R2NmT1o1Tm9ncEl2VEo4UjYta3BCXzhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC84NzhhMWMtYTdhMC00ZmQxLTk4YTAtMzNlNDQ2MjFkYjA3
LzEvc3g4R2NmT1o1Tm9ncEl2VEo4UjYta3BCXzhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeInQqN5Q
J1D0st58NNJAkEFnxn7BdPOfVIx13sZFMB7anKUMo15sRSP7NUVepWiRFagmVE7j
Tuz3VcvolY3C4MbkzK8V/0dwmRxz1XdrHb3EO2MaVywXP2Pl5Yz8K3p06tMY+bit
O8qTdtiCK4PWVI/DUQYRj7a62bcdggIkoyuz2qwt6uEkcLdmLuqpWiHgFQnuefgo
lDMUE5lH/jtgLRyrb1Vd/xETHCWZGuiclLkiumT48hudYoJaEAULrpBn76YVZM/+
lVdxWKvpcfyajwjd5CXjjWWOK284N9KlqGanwaqGcntD7JRNRhf53raIWpo8inKq
KnhonDSscnIpdA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:57 2025 by rpki-client