Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
File: 8jgjdZZpSOIWiOi6E4OkowngVi8.mft (raw, json)
Hash identifier: 1x7S/s4JJ8z9FV9MRlPTVftiZtuZRC6ug9iTMRX2jGw=
Subject key identifier: F4:FF:AA:E4:D9:E5:7D:94:7B:84:E1:2D:E6:1E:1A:5A:EB:B7:B1:1D
Authority key identifier: F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F
Certificate issuer: /CN=f2382375966948e21688e8ba1383a4a309e0562f
Certificate serial: 0194BD85865C3B7C657520DEBBC39DCE66B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:31 +0000
Manifest this update: Fri 31 Jan 2025 18:00:31 +0000
Manifest next update: Sat 01 Feb 2025 18:00:31 +0000
Files and hashes: 1: 8jgjdZZpSOIWiOi6E4OkowngVi8.crl (hash: sfeXnMM1xyMwEdt3DPi9yVdQUfSfob4XRPjUwYavf44=)
2: K1nEMmqR-bv_HJOMVOAQTlZLbDU.roa (hash: W5Jwdvi7etvP6GxGLNbBoK0ap2sodrYQoCXcswND0as=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:86:5c:3b:7c:65:75:20:de:bb:c3:9d:ce:66:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2382375966948e21688e8ba1383a4a309e0562f
Validity
Not Before: Jan 31 18:00:31 2025 GMT
Not After : Feb 1 18:00:31 2025 GMT
Subject: CN=f4ffaae4d9e57d947b84e12de61e1a5aebb7b11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4a:78:5b:5e:83:ca:9e:7f:19:0c:cb:04:83:
92:51:46:b4:a3:e8:88:39:3a:6b:cf:19:66:b4:07:
5d:1d:5d:20:35:63:68:bb:be:54:cc:50:1f:bb:9f:
37:78:92:58:0b:29:2d:99:4f:3b:e8:85:5e:80:86:
61:56:06:1e:4c:2e:51:f1:4d:db:0b:86:1b:68:73:
55:99:79:92:cd:0b:5c:85:58:51:57:a4:27:42:6b:
cc:ff:1b:7b:d2:0f:be:44:96:f3:7a:20:30:9d:75:
c1:4a:4c:0e:6c:1f:40:85:ab:af:f9:f1:b8:dd:e8:
2d:ca:50:f0:cd:7a:18:2c:03:2d:42:c9:f7:7b:26:
51:c1:c7:5e:4e:a3:7a:30:36:bb:85:17:75:fb:22:
41:b6:96:42:8e:40:a5:4d:a7:b8:93:43:b6:35:85:
5c:02:43:15:86:b7:93:4d:f6:3e:33:65:68:e0:69:
a4:00:6b:ed:02:ad:c4:9b:d3:74:a2:c5:e5:b3:35:
33:e6:b4:4b:44:4e:b6:e8:2e:f6:37:c2:fa:ba:95:
fa:37:55:d0:f7:6b:d5:f4:3e:2f:7b:9a:2a:3f:cf:
95:a3:db:cf:65:50:62:a7:2e:35:16:29:11:bc:7f:
7e:48:b5:e6:c2:5c:57:f9:5a:ed:4c:87:66:92:6a:
bb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FF:AA:E4:D9:E5:7D:94:7B:84:E1:2D:E6:1E:1A:5A:EB:B7:B1:1D
X509v3 Authority Key Identifier:
keyid:F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:fb:ef:1a:4d:0e:84:21:11:bd:16:9b:3e:c4:a3:1b:76:ad:
70:19:75:78:ba:8f:92:00:e7:2e:dd:f7:af:0a:ab:f4:75:e7:
5f:c7:8b:e7:53:65:e3:96:1b:a3:04:ad:21:41:c2:11:af:43:
c2:95:1d:2e:84:bb:17:d7:13:48:85:61:5e:ea:3d:44:b7:53:
28:38:5e:64:3e:a2:fb:e0:b9:81:78:86:2c:0e:0d:14:e0:68:
3b:c6:af:aa:5e:11:1b:82:41:48:fe:19:1c:1e:ef:e1:26:2d:
19:61:c2:02:fe:f8:9d:c0:a9:f3:ad:84:1c:14:7e:5b:67:97:
bd:4d:1c:02:2b:76:ad:f5:eb:56:16:2e:ed:08:a1:14:f7:18:
79:de:b2:af:f3:8b:ee:d4:1c:5d:1b:60:73:72:bc:3c:a2:2a:
34:d0:cd:41:82:44:f7:d2:16:1f:a0:6a:4e:c6:f0:5e:18:7f:
3a:51:5f:92:5f:36:07:b3:13:59:08:cc:9c:aa:b2:3a:de:ed:
97:6f:0f:06:6b:50:f3:a1:ee:c8:bc:fa:a5:22:99:09:64:7f:
c6:f1:e1:b3:17:99:80:1d:90:f7:f4:b0:98:53:e5:df:06:1f:
c6:7b:53:a8:1c:fd:3b:75:b0:69:33:40:6e:bd:59:76:f2:84:
ce:46:5a:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hYZcO3xldSDeu8Odzma5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMzgyMzc1OTY2OTQ4ZTIxNjg4ZThiYTEzODNhNGEzMDll
MDU2MmYwHhcNMjUwMTMxMTgwMDMxWhcNMjUwMjAxMTgwMDMxWjAzMTEwLwYDVQQD
EyhmNGZmYWFlNGQ5ZTU3ZDk0N2I4NGUxMmRlNjFlMWE1YWViYjdiMTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUp4W16Dyp5/GQzLBIOSUUa0o+iI
OTprzxlmtAddHV0gNWNou75UzFAfu583eJJYCyktmU876IVegIZhVgYeTC5R8U3b
C4YbaHNVmXmSzQtchVhRV6QnQmvM/xt70g++RJbzeiAwnXXBSkwObB9Ahauv+fG4
3egtylDwzXoYLAMtQsn3eyZRwcdeTqN6MDa7hRd1+yJBtpZCjkClTae4k0O2NYVc
AkMVhreTTfY+M2Vo4GmkAGvtAq3Em9N0osXlszUz5rRLRE626C72N8L6upX6N1XQ
92vV9D4ve5oqP8+Vo9vPZVBipy41FikRvH9+SLXmwlxX+VrtTIdmkmq7LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPT/quTZ5X2Ue4ThLeYeGlrrt7EdMB8GA1UdIwQY
MBaAFPI4I3WWaUjiFojouhODpKMJ4FYvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGpnamRaWnBTT0lXaU9pNkU0T2tvd25nVmk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9hZDBmMWEtNmI5NC00ZTBkLThhNGEt
ZDJmZDlmZmMzMWJmLzEvOGpnamRaWnBTT0lXaU9pNkU0T2tvd25nVmk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9hZDBmMWEtNmI5NC00ZTBkLThhNGEtZDJmZDlmZmMzMWJm
LzEvOGpnamRaWnBTT0lXaU9pNkU0T2tvd25nVmk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAfvvGk0O
hCERvRabPsSjG3atcBl1eLqPkgDnLt33rwqr9HXnX8eL51Nl45YbowStIUHCEa9D
wpUdLoS7F9cTSIVhXuo9RLdTKDheZD6i++C5gXiGLA4NFOBoO8avql4RG4JBSP4Z
HB7v4SYtGWHCAv74ncCp862EHBR+W2eXvU0cAit2rfXrVhYu7QihFPcYed6yr/OL
7tQcXRtgc3K8PKIqNNDNQYJE99IWH6BqTsbwXhh/OlFfkl82B7MTWQjMnKqyOt7t
l28PBmtQ86HuyLz6pSKZCWR/xvHhsxeZgB2Q9/SwmFPl3wYfxntTqBz9O3WwaTNA
br1ZdvKEzkZaUg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:10:08 2025 by rpki-client