Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
File: t8jfPaM5OL8bJF8cRHn9JN2flPA.mft (raw, json)
Hash identifier: QDgeHo8DjwXKATNWNspirz/M2CklnUQtFWzDasaaT0E=
Subject key identifier: 24:08:49:D0:BC:7A:63:5B:3F:07:13:53:AA:60:02:1E:87:57:87:DD
Authority key identifier: B7:C8:DF:3D:A3:39:38:BF:1B:24:5F:1C:44:79:FD:24:DD:9F:94:F0
Certificate issuer: /CN=b7c8df3da33938bf1b245f1c4479fd24dd9f94f0
Certificate serial: 0194BD17B6C156E15E76AC101111B72F6CE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8jfPaM5OL8bJF8cRHn9JN2flPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
Manifest number: 13F7
Signing time: Fri 31 Jan 2025 16:00:35 +0000
Manifest this update: Fri 31 Jan 2025 16:00:35 +0000
Manifest next update: Sat 01 Feb 2025 16:00:35 +0000
Files and hashes: 1: rnBvIUiPG215g2G4TvJ3vJPLCJg.roa (hash: QymikogB0QXOb1awGtB0gQkLWC08JbHRqFZVMECKiDM=)
2: t8jfPaM5OL8bJF8cRHn9JN2flPA.crl (hash: NYFfb62YA7g2oS3UmHKkX1juBTh7fTcXGEE4L7i+ynQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b6:c1:56:e1:5e:76:ac:10:11:11:b7:2f:6c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c8df3da33938bf1b245f1c4479fd24dd9f94f0
Validity
Not Before: Jan 31 16:00:35 2025 GMT
Not After : Feb 1 16:00:35 2025 GMT
Subject: CN=240849d0bc7a635b3f071353aa60021e875787dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e1:3c:64:d4:a4:d0:4c:ad:db:7b:f2:a1:11:
7b:f0:5b:ec:11:f2:bf:a3:fb:48:4e:4f:e9:ba:5b:
a0:7e:67:9d:7b:2f:a1:ad:54:9c:6a:e3:d5:cf:2c:
f0:4a:ec:a6:d8:f8:58:e2:14:c1:90:b4:6c:c0:6b:
fe:29:59:42:20:d2:2a:d9:90:80:af:58:0a:5a:8b:
73:a0:37:85:70:86:ba:df:78:b7:e3:cc:7c:a3:ca:
91:d3:66:c5:ae:e3:41:6a:53:ba:ba:81:82:86:65:
ee:1e:30:a0:da:53:0d:44:c7:0f:95:6d:e0:14:38:
86:f7:13:53:39:37:3e:b5:37:a1:44:cc:10:3d:83:
09:da:6f:53:5a:87:8b:6c:18:3d:fa:c8:4c:60:3c:
99:da:19:74:7d:dc:83:b2:a6:a2:e0:47:ec:e5:94:
a9:76:43:47:bb:bd:bb:f9:dd:3e:b5:87:9b:2c:0c:
d5:78:d9:b4:9a:a0:7e:ac:01:9d:a1:ff:3f:b6:82:
0f:2c:94:69:31:08:59:bf:61:f1:e9:4b:2f:e4:8c:
29:63:fd:ca:c3:68:91:60:ee:89:d9:1c:29:a5:e3:
45:0e:57:bd:9c:f1:8f:f6:7b:ae:3b:03:a2:09:4e:
8a:dc:b8:25:97:3e:1b:d1:16:70:84:73:c9:c7:5b:
d0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:08:49:D0:BC:7A:63:5B:3F:07:13:53:AA:60:02:1E:87:57:87:DD
X509v3 Authority Key Identifier:
keyid:B7:C8:DF:3D:A3:39:38:BF:1B:24:5F:1C:44:79:FD:24:DD:9F:94:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8jfPaM5OL8bJF8cRHn9JN2flPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:76:7f:c5:0a:41:76:8b:97:0f:fa:c8:81:c5:59:c7:88:10:
d3:21:34:1c:43:f3:9f:9a:fb:8c:12:62:af:51:0d:da:3d:5c:
f8:b5:67:7f:5e:95:f0:5b:1d:88:1c:80:c1:40:8b:27:35:3d:
02:92:fe:ed:69:fc:30:61:e2:43:4f:02:da:50:c0:25:14:da:
28:48:54:9a:c2:5e:e6:4d:33:03:cf:66:e1:ed:e9:47:79:4a:
4a:e2:c3:b4:af:61:ea:20:00:97:fe:dc:e6:e0:a4:fe:0d:9c:
de:31:e7:87:c0:7c:1c:9b:51:37:6b:0c:3c:84:81:a3:32:1c:
75:75:b9:25:46:c0:06:b4:59:58:b8:9e:71:d7:e6:88:3d:99:
f5:73:f8:0d:e1:60:c6:67:e1:ac:04:4c:84:37:d8:ec:63:02:
d8:32:8f:c6:58:49:da:6e:b2:01:a6:33:7d:2a:b1:aa:e2:90:
4a:ce:2e:24:6e:e8:bb:1f:d3:3a:69:eb:aa:d8:37:48:ec:99:
3d:69:79:3e:0d:81:c3:89:fa:2c:22:0e:8b:a7:57:88:f4:e2:
b3:9a:4f:6d:7f:d0:82:05:58:60:72:12:a1:c2:03:33:06:cc:
49:9e:af:78:01:20:c3:ad:88:ec:93:0c:92:e4:46:6f:19:d6:
dd:be:b0:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F7bBVuFedqwQERG3L2znMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YzhkZjNkYTMzOTM4YmYxYjI0NWYxYzQ0NzlmZDI0ZGQ5
Zjk0ZjAwHhcNMjUwMTMxMTYwMDM1WhcNMjUwMjAxMTYwMDM1WjAzMTEwLwYDVQQD
EygyNDA4NDlkMGJjN2E2MzViM2YwNzEzNTNhYTYwMDIxZTg3NTc4N2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOE8ZNSk0Eyt23vyoRF78FvsEfK/
o/tITk/pulugfmedey+hrVScauPVzyzwSuym2PhY4hTBkLRswGv+KVlCINIq2ZCA
r1gKWotzoDeFcIa633i348x8o8qR02bFruNBalO6uoGChmXuHjCg2lMNRMcPlW3g
FDiG9xNTOTc+tTehRMwQPYMJ2m9TWoeLbBg9+shMYDyZ2hl0fdyDsqai4Efs5ZSp
dkNHu727+d0+tYebLAzVeNm0mqB+rAGdof8/toIPLJRpMQhZv2Hx6Usv5IwpY/3K
w2iRYO6J2RwppeNFDle9nPGP9nuuOwOiCU6K3Lgllz4b0RZwhHPJx1vQXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQISdC8emNbPwcTU6pgAh6HV4fdMB8GA1UdIwQY
MBaAFLfI3z2jOTi/GyRfHER5/STdn5TwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDhqZlBhTTVPTDhiSkY4Y1JIbjlKTjJmbFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny80ZGQxOTgtOTNjYi00NTljLWJlZTIt
MmQxZGFhMjk5ZTgzLzEvdDhqZlBhTTVPTDhiSkY4Y1JIbjlKTjJmbFBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny80ZGQxOTgtOTNjYi00NTljLWJlZTItMmQxZGFhMjk5ZTgz
LzEvdDhqZlBhTTVPTDhiSkY4Y1JIbjlKTjJmbFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3Z/xQpB
douXD/rIgcVZx4gQ0yE0HEPzn5r7jBJir1EN2j1c+LVnf16V8FsdiByAwUCLJzU9
ApL+7Wn8MGHiQ08C2lDAJRTaKEhUmsJe5k0zA89m4e3pR3lKSuLDtK9h6iAAl/7c
5uCk/g2c3jHnh8B8HJtRN2sMPISBozIcdXW5JUbABrRZWLiecdfmiD2Z9XP4DeFg
xmfhrARMhDfY7GMC2DKPxlhJ2m6yAaYzfSqxquKQSs4uJG7oux/TOmnrqtg3SOyZ
PWl5Pg2Bw4n6LCIOi6dXiPTis5pPbX/QggVYYHISocIDMwbMSZ6veAEgw62I7JMM
kuRGbxnW3b6wfA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:21 2025 by rpki-client