Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
File: B8QNcBYPMIZCEpobcq5a5S24g8Q.mft (raw, json)
Hash identifier: ARvH43ITJQiKWOEXZb0vZpPvAFDQ8SjUNIhSww8Ux1M=
Subject key identifier: B5:95:41:09:7C:5B:5C:08:BF:D7:23:06:52:B3:29:76:11:20:4A:95
Authority key identifier: 07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
Certificate issuer: /CN=07c40d70160f308642129a1b72ae5ae52db883c4
Certificate serial: 0194BD178F470D66323E89E929F1813BB979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
Manifest number: 0CE9
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: B8QNcBYPMIZCEpobcq5a5S24g8Q.crl (hash: fzjLFRR7uhFchS1xw28YLLQntbmEOWYMRLZ15F/KNgQ=)
2: FrqlWltvg2IIueyy45ogVbfzXOI.roa (hash: I5FtBNSL1o5XSBQN3V8eqj4CiYkfCwGhk95ch/7f1y0=)
3: w7QCmizrQXeuidochTL3wPaTPwQ.roa (hash: H6wbvBF9uFQ8IN4rm+CScPncC9WaN8oR2hYLVqdaZWA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8f:47:0d:66:32:3e:89:e9:29:f1:81:3b:b9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c40d70160f308642129a1b72ae5ae52db883c4
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=b59541097c5b5c08bfd7230652b3297611204a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:26:81:0e:84:2a:ed:a5:3e:47:d3:f2:a1:71:
e4:eb:ed:cf:a3:1c:46:c3:12:02:fb:b4:6e:57:1e:
8d:11:30:7a:d8:83:74:f2:37:43:2b:d9:8b:15:6b:
72:9b:42:d7:d6:8f:88:fd:14:ac:e5:9d:a1:9a:c1:
9c:02:81:40:9b:33:df:aa:9a:ae:cb:34:b5:4f:8c:
01:85:40:87:b6:e6:8f:cc:21:d5:a7:57:65:ee:b7:
8e:f7:4d:7a:2d:26:11:2d:61:8d:83:cb:a8:84:04:
ec:a4:be:24:41:6c:83:1e:9b:c5:6b:e8:3a:de:bf:
ae:f1:e4:cb:c2:66:63:24:ec:04:af:8c:9d:43:0e:
5b:74:4c:38:41:35:88:ff:72:d9:3a:22:0b:d0:bb:
50:d5:60:c7:7d:7b:15:9d:3b:15:f9:8f:dc:37:46:
0e:cb:6e:0e:0b:53:5a:21:5f:84:eb:b7:af:3f:12:
c3:0c:af:0f:ff:bf:93:d4:f2:83:04:e1:98:c6:8e:
40:2f:67:f8:dd:c2:a2:0e:6f:07:e5:14:f0:5e:8e:
50:2d:98:a7:37:00:74:09:ce:4f:ff:58:6c:60:12:
c9:cf:5f:bb:82:e9:70:9d:00:79:1b:04:b9:4e:4c:
68:d5:10:e1:21:6e:00:4e:0d:c8:f2:cc:2a:35:70:
12:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:95:41:09:7C:5B:5C:08:BF:D7:23:06:52:B3:29:76:11:20:4A:95
X509v3 Authority Key Identifier:
keyid:07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1e:19:5b:dc:a7:f8:8d:20:b8:04:0e:01:8b:89:6b:aa:cd:
d5:74:b3:66:88:38:7c:3f:6c:f2:d8:83:d7:9a:f1:35:96:f3:
f3:08:e3:d4:9c:55:c9:f1:84:00:c7:f9:6d:7f:90:dc:cf:5b:
6b:33:18:53:72:a8:f8:89:af:27:10:10:7c:3c:55:5e:a3:5b:
ce:ef:ca:97:97:51:14:ae:73:3b:33:c5:57:83:8e:da:11:fa:
41:a9:31:c2:3a:2f:0a:0c:f0:28:fa:57:8e:c2:3d:43:71:ef:
e0:c7:68:a8:cb:ec:c0:77:3b:31:15:ee:2c:43:05:b9:8e:6d:
68:8b:87:e9:7f:2b:fd:c8:f1:3c:82:f2:f5:da:4b:79:34:91:
e6:d4:09:c9:5a:b6:34:c6:52:29:e0:65:d0:e3:f6:71:fe:98:
95:98:53:13:e0:16:d8:f2:b6:ab:72:09:e4:c3:4d:66:98:3e:
7c:66:b7:8c:27:e9:16:1d:7f:68:c1:a7:bf:b8:62:4d:64:4e:
02:9e:97:d3:6c:66:4a:59:9a:1a:55:49:ab:cb:ef:84:c8:0d:
62:fa:f9:5f:07:56:26:e6:85:6c:63:c0:24:09:70:3e:e1:e3:
46:23:09:c2:6f:53:c1:98:7c:4b:f4:64:4b:2c:78:93:93:4e:
12:0f:cd:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F49HDWYyPonpKfGBO7l5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YzQwZDcwMTYwZjMwODY0MjEyOWExYjcyYWU1YWU1MmRi
ODgzYzQwHhcNMjUwMTMxMTYwMDI1WhcNMjUwMjAxMTYwMDI1WjAzMTEwLwYDVQQD
EyhiNTk1NDEwOTdjNWI1YzA4YmZkNzIzMDY1MmIzMjk3NjExMjA0YTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiaBDoQq7aU+R9PyoXHk6+3PoxxG
wxIC+7RuVx6NETB62IN08jdDK9mLFWtym0LX1o+I/RSs5Z2hmsGcAoFAmzPfqpqu
yzS1T4wBhUCHtuaPzCHVp1dl7reO9016LSYRLWGNg8uohATspL4kQWyDHpvFa+g6
3r+u8eTLwmZjJOwEr4ydQw5bdEw4QTWI/3LZOiIL0LtQ1WDHfXsVnTsV+Y/cN0YO
y24OC1NaIV+E67evPxLDDK8P/7+T1PKDBOGYxo5AL2f43cKiDm8H5RTwXo5QLZin
NwB0Cc5P/1hsYBLJz1+7gulwnQB5GwS5Tkxo1RDhIW4ATg3I8swqNXASvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWVQQl8W1wIv9cjBlKzKXYRIEqVMB8GA1UdIwQY
MBaAFAfEDXAWDzCGQhKaG3KuWuUtuIPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lMTE2YzItOGY4Mi00Y2JhLWI1YWUt
OTdkY2JiMDA4NmUzLzEvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lMTE2YzItOGY4Mi00Y2JhLWI1YWUtOTdkY2JiMDA4NmUz
LzEvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAch4ZW9yn
+I0guAQOAYuJa6rN1XSzZog4fD9s8tiD15rxNZbz8wjj1JxVyfGEAMf5bX+Q3M9b
azMYU3Ko+ImvJxAQfDxVXqNbzu/Kl5dRFK5zOzPFV4OO2hH6QakxwjovCgzwKPpX
jsI9Q3Hv4MdoqMvswHc7MRXuLEMFuY5taIuH6X8r/cjxPILy9dpLeTSR5tQJyVq2
NMZSKeBl0OP2cf6YlZhTE+AW2PK2q3IJ5MNNZpg+fGa3jCfpFh1/aMGnv7hiTWRO
Ap6X02xmSlmaGlVJq8vvhMgNYvr5XwdWJuaFbGPAJAlwPuHjRiMJwm9TwZh8S/Rk
Syx4k5NOEg/Njw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:01:14 2025 by rpki-client