Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
File: 8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft (raw, json)
Hash identifier: CTkSBcemK8jo7ATscKaPn3RlvUQHYHjmPOf+fw+ZLhw=
Subject key identifier: 5B:23:3E:37:4D:FA:36:FA:07:03:76:52:88:BA:EA:30:6B:DC:57:8B
Authority key identifier: F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F
Certificate issuer: /CN=f2d4116975d3e87bd8a28e643c69a3081de0019f
Certificate serial: 0194BBCEBE730C8F3D1D22802CF2FBC726C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
Manifest number: 0837
Signing time: Fri 31 Jan 2025 10:01:16 +0000
Manifest this update: Fri 31 Jan 2025 10:01:16 +0000
Manifest next update: Sat 01 Feb 2025 10:01:16 +0000
Files and hashes: 1: 8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl (hash: ebi1uX05H+eMq5e5Osy3OjcRQoqRO7jutZsGK1EKHJM=)
2: SeOuDtHpMnNedoWWR3YCwAFSo6Q.roa (hash: KKrsIQvSnuAAjrYFyC+00nKT3QiU4KGPAaz0PYrqnb4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:be:73:0c:8f:3d:1d:22:80:2c:f2:fb:c7:26:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d4116975d3e87bd8a28e643c69a3081de0019f
Validity
Not Before: Jan 31 10:01:16 2025 GMT
Not After : Feb 1 10:01:16 2025 GMT
Subject: CN=5b233e374dfa36fa0703765288baea306bdc578b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:3e:91:53:d7:b6:2e:a4:27:ea:ee:9e:0a:
61:ec:27:7a:67:14:cf:f4:cd:a7:3c:58:58:ef:ab:
81:bc:f6:28:68:95:a0:aa:0d:92:e5:a6:0e:2c:35:
00:dd:dc:ce:6c:6d:5a:46:98:3a:a7:96:21:fa:fc:
31:b8:a8:94:2c:a7:f2:e0:3d:7a:dc:45:b6:18:48:
19:fa:16:08:db:63:18:b0:8f:85:1e:34:14:26:a6:
5e:44:7f:91:b1:52:50:e7:90:fe:d7:ff:2b:68:4d:
2a:95:29:3b:9d:39:9f:9b:92:0f:0c:db:30:2d:1f:
33:36:10:9c:18:48:96:e6:2c:29:8d:72:5a:af:1e:
36:97:83:5f:8d:e8:4f:89:9b:c6:15:27:da:e5:04:
3e:d7:2d:8a:3d:e9:b4:be:df:57:fe:91:f2:e6:8c:
c4:5e:9a:2e:65:10:ab:00:cd:d2:b5:b2:f0:04:9b:
9c:41:b4:e8:93:10:53:0a:bb:6c:e5:eb:11:56:d9:
82:51:5f:59:ba:1c:37:35:e2:01:e6:ad:c5:bd:16:
9f:3d:13:4f:88:44:41:02:a0:52:79:34:41:ca:ab:
ea:69:50:86:24:88:bf:d0:15:4b:80:61:3e:12:f8:
95:a1:c2:38:62:c0:c1:af:44:ea:c5:57:63:ee:de:
a5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:23:3E:37:4D:FA:36:FA:07:03:76:52:88:BA:EA:30:6B:DC:57:8B
X509v3 Authority Key Identifier:
keyid:F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:66:7c:15:6f:c9:e2:49:ff:53:64:fb:1b:da:9c:1c:70:78:
29:50:ca:03:7b:8d:57:b0:b7:f5:37:eb:29:8e:c1:1c:65:ef:
1f:52:ac:c4:fd:0c:63:ca:54:91:0d:6f:41:3c:95:6d:ff:8c:
ef:f1:2a:28:aa:46:0e:f8:d6:fe:de:a0:3d:c4:b0:e5:bb:93:
cf:75:a2:31:bd:65:c7:15:41:22:09:7c:71:7b:7f:39:e7:04:
60:e6:03:36:2e:d4:7a:02:aa:6e:f6:68:bf:9b:f9:ec:28:09:
4f:89:37:d0:12:80:99:e6:41:7b:ba:42:51:fb:2b:29:52:46:
c5:d0:2e:80:37:d4:68:58:59:8e:10:85:c1:d2:f7:e5:85:36:
ab:72:14:e6:11:ef:e3:fd:33:29:9a:7c:0d:04:1c:aa:7c:92:
e6:77:7f:79:8c:bd:3d:9a:73:25:cb:a6:65:b2:ee:d5:f4:28:
f3:dd:4a:7a:f7:1b:24:6c:1a:5a:35:55:83:84:b6:0d:f4:b9:
89:2e:a9:fa:c4:3b:5b:11:4b:7f:e2:bc:dd:fc:32:80:7e:71:
0d:b1:88:0f:3d:c7:c6:19:91:b8:1d:a6:e6:69:5b:0e:d1:81:
40:49:09:85:fc:2a:5e:67:9f:3a:41:75:bc:8f:f7:36:c8:3d:
b1:90:8c:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zr5zDI89HSKALPL7xybJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZDQxMTY5NzVkM2U4N2JkOGEyOGU2NDNjNjlhMzA4MWRl
MDAxOWYwHhcNMjUwMTMxMTAwMTE2WhcNMjUwMjAxMTAwMTE2WjAzMTEwLwYDVQQD
Eyg1YjIzM2UzNzRkZmEzNmZhMDcwMzc2NTI4OGJhZWEzMDZiZGM1NzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTQ+kVPXti6kJ+rungph7Cd6ZxTP
9M2nPFhY76uBvPYoaJWgqg2S5aYOLDUA3dzObG1aRpg6p5Yh+vwxuKiULKfy4D16
3EW2GEgZ+hYI22MYsI+FHjQUJqZeRH+RsVJQ55D+1/8raE0qlSk7nTmfm5IPDNsw
LR8zNhCcGEiW5iwpjXJarx42l4NfjehPiZvGFSfa5QQ+1y2KPem0vt9X/pHy5ozE
XpouZRCrAM3StbLwBJucQbTokxBTCrts5esRVtmCUV9Zuhw3NeIB5q3FvRafPRNP
iERBAqBSeTRByqvqaVCGJIi/0BVLgGE+EviVocI4YsDBr0TqxVdj7t6lSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsjPjdN+jb6BwN2Uoi66jBr3FeLMB8GA1UdIwQY
MBaAFPLUEWl10+h72KKOZDxpowgd4AGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHRRUmFYWFQ2SHZZb281a1BHbWpDQjNnQVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi81OTk2ZTEtMmZmMC00YmI3LWE4ODAt
ZmFhYjljYWUxZTgxLzEvOHRRUmFYWFQ2SHZZb281a1BHbWpDQjNnQVo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi81OTk2ZTEtMmZmMC00YmI3LWE4ODAtZmFhYjljYWUxZTgx
LzEvOHRRUmFYWFQ2SHZZb281a1BHbWpDQjNnQVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWZ8FW/J
4kn/U2T7G9qcHHB4KVDKA3uNV7C39TfrKY7BHGXvH1KsxP0MY8pUkQ1vQTyVbf+M
7/EqKKpGDvjW/t6gPcSw5buTz3WiMb1lxxVBIgl8cXt/OecEYOYDNi7UegKqbvZo
v5v57CgJT4k30BKAmeZBe7pCUfsrKVJGxdAugDfUaFhZjhCFwdL35YU2q3IU5hHv
4/0zKZp8DQQcqnyS5nd/eYy9PZpzJcumZbLu1fQo891KevcbJGwaWjVVg4S2DfS5
iS6p+sQ7WxFLf+K83fwygH5xDbGIDz3HxhmRuB2m5mlbDtGBQEkJhfwqXmefOkF1
vI/3Nsg9sZCMnw==
-----END CERTIFICATE-----
Generated at Thu May 1 14:43:25 2025 by rpki-client