Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
File: 8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft (raw, json)
Hash identifier: Cm2PoOiXQoOQdqUNQf6Ft6KecZDg9RpnnGQrl5ZBU+8=
Subject key identifier: FE:2C:A4:74:B5:73:08:2D:FA:A6:8C:CE:AB:B6:29:48:DE:17:C4:E8
Authority key identifier: F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4
Certificate issuer: /CN=f1f4609d0d053aec0307da44b0e678c388f641a4
Certificate serial: 0194BCE07D761008D80836660CFAAE54F973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
Manifest number: 0922
Signing time: Fri 31 Jan 2025 15:00:16 +0000
Manifest this update: Fri 31 Jan 2025 15:00:16 +0000
Manifest next update: Sat 01 Feb 2025 15:00:16 +0000
Files and hashes: 1: 8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl (hash: cd+4K/X3oq+pXKR7WWNcZPc01YJ/IuahITCq5CjU2i8=)
2: JlLzYa369BmhHhkMkkOAbFVKIEk.roa (hash: VUooec9+T4XmPm3CalNwGe0fyN77tnkbi4PQVdbwdIo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7d:76:10:08:d8:08:36:66:0c:fa:ae:54:f9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f4609d0d053aec0307da44b0e678c388f641a4
Validity
Not Before: Jan 31 15:00:16 2025 GMT
Not After : Feb 1 15:00:16 2025 GMT
Subject: CN=fe2ca474b573082dfaa68cceabb62948de17c4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:e4:59:cb:33:64:4e:34:fc:b8:2c:9f:24:
29:0a:7a:da:13:8f:fe:43:6d:df:8e:85:5f:03:81:
1e:05:35:72:68:dd:ae:d6:b8:2e:06:07:3b:22:98:
77:77:e9:15:ab:17:2b:50:78:6d:34:4e:3e:dd:d7:
5d:5d:c7:d6:33:80:c2:12:0f:45:51:b5:94:6a:a7:
34:42:49:bd:6a:f0:11:a0:16:3b:f0:c9:9e:0d:3e:
d6:99:14:59:f2:c6:82:b7:7c:2e:12:63:79:c6:7f:
32:f7:43:6e:82:17:2f:dd:84:2a:15:6e:39:80:15:
28:30:57:19:2d:f0:74:9e:32:b1:f0:99:eb:ac:bf:
9a:8d:26:14:78:36:d5:79:5d:6c:2c:92:7c:5c:46:
62:57:3f:86:c1:25:9a:48:fb:78:58:84:1d:9f:40:
e7:b5:c1:66:58:f7:13:11:7d:a3:ce:9e:e5:27:dc:
7e:88:a7:41:b7:03:4d:5c:c1:03:df:a6:93:43:30:
4c:dc:55:14:7d:80:ad:12:fe:3c:c6:99:29:5e:de:
d8:34:f8:76:fc:f7:05:6f:9f:22:1a:85:cf:df:70:
78:1d:57:54:31:dd:15:e9:50:a8:74:3d:3a:83:41:
01:71:8e:50:d3:4b:74:4a:62:fd:25:19:41:9d:6d:
bd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2C:A4:74:B5:73:08:2D:FA:A6:8C:CE:AB:B6:29:48:DE:17:C4:E8
X509v3 Authority Key Identifier:
keyid:F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a0:69:bb:a9:ce:e8:e3:2d:73:72:7b:51:18:8a:c8:30:7b:
6b:27:e2:49:e3:c3:74:7d:6b:3b:af:2d:28:8f:c2:6b:c6:78:
ce:82:03:be:5c:4e:d8:ca:16:03:11:cf:4a:62:d4:55:d5:d6:
63:cd:9e:6d:b6:d5:44:f3:d1:a8:a5:20:d2:33:24:74:03:f2:
f9:da:b2:6e:de:ec:d6:0a:87:79:58:c8:70:35:c0:73:3a:d3:
61:8d:d7:3d:dd:73:73:1b:ac:e3:d9:51:8d:52:18:3e:b4:e3:
5e:9b:32:77:d8:d2:cf:31:82:7f:24:66:20:7f:05:f0:7a:9a:
44:60:6f:6e:f4:5e:a8:9c:31:86:7c:94:79:3a:ec:e1:6f:1e:
a1:fa:45:c1:55:c3:60:13:e3:96:e6:3d:e9:64:1b:76:c0:85:
2a:96:15:03:41:9e:00:8f:11:6e:e8:34:30:6e:52:d3:cc:fb:
67:1a:b8:7e:8f:ed:0e:6d:d6:52:8f:db:ab:62:8e:17:45:b4:
75:1a:85:97:c3:f1:e6:d5:92:58:16:c8:a6:f1:3f:10:64:b7:
ae:a7:bf:09:fb:81:01:42:55:7f:4b:d6:59:52:dc:94:ee:8d:
c6:fd:9c:ff:1e:d6:cc:34:7c:b5:cf:4a:90:90:a8:91:08:4d:
2e:80:ea:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84H12EAjYCDZmDPquVPlzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZjQ2MDlkMGQwNTNhZWMwMzA3ZGE0NGIwZTY3OGMzODhm
NjQxYTQwHhcNMjUwMTMxMTUwMDE2WhcNMjUwMjAxMTUwMDE2WjAzMTEwLwYDVQQD
EyhmZTJjYTQ3NGI1NzMwODJkZmFhNjhjY2VhYmI2Mjk0OGRlMTdjNGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqjkWcszZE40/LgsnyQpCnraE4/+
Q23fjoVfA4EeBTVyaN2u1rguBgc7Iph3d+kVqxcrUHhtNE4+3dddXcfWM4DCEg9F
UbWUaqc0Qkm9avARoBY78MmeDT7WmRRZ8saCt3wuEmN5xn8y90Nughcv3YQqFW45
gBUoMFcZLfB0njKx8JnrrL+ajSYUeDbVeV1sLJJ8XEZiVz+GwSWaSPt4WIQdn0Dn
tcFmWPcTEX2jzp7lJ9x+iKdBtwNNXMED36aTQzBM3FUUfYCtEv48xpkpXt7YNPh2
/PcFb58iGoXP33B4HVdUMd0V6VCodD06g0EBcY5Q00t0SmL9JRlBnW29RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4spHS1cwgt+qaMzqu2KUjeF8ToMB8GA1UdIwQY
MBaAFPH0YJ0NBTrsAwfaRLDmeMOI9kGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGZSZ25RMEZPdXdEQjlwRXNPWjR3NGoyUWFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85YTE4YWQtMDg3Yi00ZDEyLTlmNjkt
OGNiZjkwM2U5MWNkLzEvOGZSZ25RMEZPdXdEQjlwRXNPWjR3NGoyUWFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC85YTE4YWQtMDg3Yi00ZDEyLTlmNjktOGNiZjkwM2U5MWNk
LzEvOGZSZ25RMEZPdXdEQjlwRXNPWjR3NGoyUWFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGKBpu6nO
6OMtc3J7URiKyDB7ayfiSePDdH1rO68tKI/Ca8Z4zoIDvlxO2MoWAxHPSmLUVdXW
Y82ebbbVRPPRqKUg0jMkdAPy+dqybt7s1gqHeVjIcDXAczrTYY3XPd1zcxus49lR
jVIYPrTjXpsyd9jSzzGCfyRmIH8F8HqaRGBvbvReqJwxhnyUeTrs4W8eofpFwVXD
YBPjluY96WQbdsCFKpYVA0GeAI8Rbug0MG5S08z7Zxq4fo/tDm3WUo/bq2KOF0W0
dRqFl8Px5tWSWBbIpvE/EGS3rqe/CfuBAUJVf0vWWVLclO6Nxv2c/x7WzDR8tc9K
kJCokQhNLoDqmA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:07:07 2025 by rpki-client