Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
File: 8NWfEh_H76DBC33WFNlah1bVNgY.mft (raw, json)
Hash identifier: BnxJRsBU4a4W7HzHLCDoh82JXtsFCO9Rq5NQV99moLk=
Subject key identifier: 92:0E:44:1C:5E:1F:A0:EB:50:11:87:B4:8C:FE:DD:A3:B3:B8:60:F5
Authority key identifier: F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
Certificate issuer: /CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Certificate serial: 0194BD4E8650752D8C78CC2D602B630B6BAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: 8NWfEh_H76DBC33WFNlah1bVNgY.crl (hash: 90Bk1fSIIZKUMM67CrFU/jfRmo6Yyq63v20WUR85fjE=)
2: bExl4A_tLBAbX-OeFCCRrL9Dsyk.roa (hash: MMmRyVv8bOvPQ4JoDHNxbF0lksG8UDkMZAPsWlNfgRM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:86:50:75:2d:8c:78:cc:2d:60:2b:63:0b:6b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=920e441c5e1fa0eb501187b48cfedda3b3b860f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:ec:75:8a:a3:f5:62:0d:02:25:73:bc:97:
aa:9e:5c:40:b0:ac:36:6d:8c:48:04:7e:ed:b2:53:
1d:73:58:3e:dc:b2:27:c4:b6:ac:5a:7a:a6:86:2d:
f3:0f:3d:94:f5:78:e9:28:2b:4a:51:97:24:67:fd:
93:90:31:27:a7:79:23:38:c5:f8:df:7f:3e:5b:be:
76:55:81:b4:95:64:7e:03:ec:03:8e:9e:c3:24:fa:
c5:9e:7c:9c:90:ab:54:19:6b:3d:61:8a:21:30:5d:
07:93:21:d2:8d:c1:a2:04:94:f8:c1:52:5b:da:ec:
31:ef:0d:d0:ad:ff:a1:e2:a8:a2:80:d7:c5:c2:8e:
21:db:2e:86:8b:30:df:19:ac:6c:77:b1:3b:7d:e6:
6a:b7:ed:98:49:da:c6:d0:0b:d5:4d:e7:b5:66:4b:
22:e1:04:c3:19:83:32:b6:66:36:5c:f8:4d:a4:7e:
13:05:27:6b:8d:42:93:67:b6:70:4a:c3:f4:5e:30:
c5:3e:7a:99:ef:8a:72:8d:26:d2:f3:ba:65:93:32:
6f:e4:9c:90:71:1f:c6:33:34:45:e4:59:e5:63:31:
95:82:b3:eb:17:53:7b:97:c6:5f:66:30:e2:92:0a:
4f:f3:60:01:29:83:4f:1f:00:ff:d8:94:61:84:e3:
ae:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0E:44:1C:5E:1F:A0:EB:50:11:87:B4:8C:FE:DD:A3:B3:B8:60:F5
X509v3 Authority Key Identifier:
keyid:F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:cf:78:a1:7f:51:32:01:a2:8d:c6:a2:09:00:25:d9:62:5a:
c9:03:64:a5:87:e0:41:e6:69:1a:1d:8f:91:7a:97:3c:67:bb:
ea:9d:40:be:95:4f:9c:89:2d:4b:40:8f:59:9c:96:2d:50:52:
2a:f3:cc:c8:a9:a7:a9:4e:89:15:d1:a2:72:b6:fb:46:5e:42:
13:17:63:c0:fc:1b:e6:71:05:7f:62:03:4c:da:c7:ec:1a:f7:
93:f3:29:b1:75:11:92:ea:26:6e:64:b2:88:ea:27:20:fd:68:
b8:38:52:d5:28:9a:e5:d9:26:59:fa:d3:00:0a:ec:a9:f9:96:
0d:ac:f3:2d:84:64:65:eb:b7:88:49:3e:e0:cd:84:c9:40:32:
65:c0:b6:15:09:5d:16:43:3b:00:d0:20:86:76:99:6c:02:49:
55:f5:e6:b1:0b:0a:8b:71:4c:73:dd:32:1e:27:87:68:c3:a9:
4f:c4:fe:bb:27:e2:73:e6:47:19:df:2f:f7:f6:15:a9:c4:69:
ae:39:b9:f9:46:36:a9:68:2d:04:2c:14:2a:3c:60:ed:f6:87:
72:6b:76:82:2a:0c:40:ae:3e:ec:46:1f:8a:b8:53:11:1a:c6:
08:7e:20:6b:f9:e4:8e:5f:b4:a1:23:c8:61:36:d2:a7:54:a1:
6a:15:5e:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9ToZQdS2MeMwtYCtjC2uuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZDU5ZjEyMWZjN2VmYTBjMTBiN2RkNjE0ZDk1YTg3NTZk
NTM2MDYwHhcNMjUwMTMxMTcwMDI3WhcNMjUwMjAxMTcwMDI3WjAzMTEwLwYDVQQD
Eyg5MjBlNDQxYzVlMWZhMGViNTAxMTg3YjQ4Y2ZlZGRhM2IzYjg2MGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOzsdYqj9WINAiVzvJeqnlxAsKw2
bYxIBH7tslMdc1g+3LInxLasWnqmhi3zDz2U9XjpKCtKUZckZ/2TkDEnp3kjOMX4
338+W752VYG0lWR+A+wDjp7DJPrFnnyckKtUGWs9YYohMF0HkyHSjcGiBJT4wVJb
2uwx7w3Qrf+h4qiigNfFwo4h2y6GizDfGaxsd7E7feZqt+2YSdrG0AvVTee1Zksi
4QTDGYMytmY2XPhNpH4TBSdrjUKTZ7ZwSsP0XjDFPnqZ74pyjSbS87plkzJv5JyQ
cR/GMzRF5FnlYzGVgrPrF1N7l8ZfZjDikgpP82ABKYNPHwD/2JRhhOOuNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIORBxeH6DrUBGHtIz+3aOzuGD1MB8GA1UdIwQY
MBaAFPDVnxIfx++gwQt91hTZWodW1TYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE5XZkVoX0g3NkRCQzMzV0ZObGFoMWJWTmdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lNjk4YzctMGIxZi00MTA2LWJhNjct
NmVlZmU1YjMzNWFhLzEvOE5XZkVoX0g3NkRCQzMzV0ZObGFoMWJWTmdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lNjk4YzctMGIxZi00MTA2LWJhNjctNmVlZmU1YjMzNWFh
LzEvOE5XZkVoX0g3NkRCQzMzV0ZObGFoMWJWTmdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeM94oX9R
MgGijcaiCQAl2WJayQNkpYfgQeZpGh2PkXqXPGe76p1AvpVPnIktS0CPWZyWLVBS
KvPMyKmnqU6JFdGicrb7Rl5CExdjwPwb5nEFf2IDTNrH7Br3k/MpsXURkuombmSy
iOonIP1ouDhS1Sia5dkmWfrTAArsqfmWDazzLYRkZeu3iEk+4M2EyUAyZcC2FQld
FkM7ANAghnaZbAJJVfXmsQsKi3FMc90yHieHaMOpT8T+uyfic+ZHGd8v9/YVqcRp
rjm5+UY2qWgtBCwUKjxg7faHcmt2gioMQK4+7EYfirhTERrGCH4ga/nkjl+0oSPI
YTbSp1ShahVetw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:12 2025 by rpki-client