Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
File: 71CC03-8gZmL_PlIpbvdpj7f3uA.mft (raw, json)
Hash identifier: +ZHJFBlEFw+Oi0mdS99ctLsPMG0A6H3uXDnx0DJe1lA=
Subject key identifier: F7:C7:59:F9:7D:C0:31:E5:4A:22:A3:4B:1E:8F:E1:D3:06:3F:4A:26
Authority key identifier: EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
Certificate issuer: /CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Certificate serial: 0194BC73113817CC8368F252C900DB9968C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:45 +0000
Manifest this update: Fri 31 Jan 2025 13:00:45 +0000
Manifest next update: Sat 01 Feb 2025 13:00:45 +0000
Files and hashes: 1: 71CC03-8gZmL_PlIpbvdpj7f3uA.crl (hash: lbl+IxgxmCPL86KzNzTUYhbQUZtPG7yYpLWjRYVbRLw=)
2: Kbx3_7oGbgCwS5Hs4oY9uV32ucc.roa (hash: LAVz+eXpY1hxXAk84MXSOTjvvsZinRJwSkGnPzVHurQ=)
3: g7m9yx1NW8SRIFbI1YMp1R07s_U.roa (hash: j5HohraLr+uvJe+BKNjv5aVmggl6w9ivQvztm8iHfjI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:11:38:17:cc:83:68:f2:52:c9:00:db:99:68:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Validity
Not Before: Jan 31 13:00:45 2025 GMT
Not After : Feb 1 13:00:45 2025 GMT
Subject: CN=f7c759f97dc031e54a22a34b1e8fe1d3063f4a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4e:d5:c2:50:a9:da:2b:04:0e:43:22:16:15:
55:60:74:41:85:20:94:cd:ff:0c:52:5c:c9:2d:81:
76:4b:9f:14:44:6a:d8:9c:d5:a5:66:2e:00:fc:fa:
de:9d:90:8c:e6:30:05:f7:30:97:42:16:93:30:9d:
22:7d:39:35:42:57:8a:bc:bd:ef:a5:71:d2:0b:da:
48:c6:a6:bc:7d:a6:aa:eb:f0:51:3e:36:dc:19:59:
2b:74:cf:08:9a:6f:4e:c2:f3:3b:42:13:56:d8:6c:
42:7f:5c:e7:e3:e5:a9:6f:68:30:ff:4f:f3:6b:f6:
db:f2:37:35:f3:66:fc:7a:20:7c:23:aa:97:33:2f:
21:9b:3b:fb:93:c6:99:8b:1d:2e:47:66:13:b4:e7:
b0:b4:04:78:f7:e3:c6:d5:98:4e:c0:90:86:ed:fe:
b7:63:89:91:c2:6f:03:11:15:db:71:ee:c3:a1:41:
1a:23:8c:01:2d:1f:ab:c6:3d:b3:5b:d2:36:cc:78:
b5:00:ef:12:8e:ca:b2:a5:d0:fb:8c:8b:21:ff:3d:
fc:93:ca:2f:fd:1b:ca:92:ee:09:37:bb:04:18:65:
e1:12:75:f8:06:94:d8:59:21:ad:15:28:7b:4d:c1:
a6:54:2e:ac:cf:07:92:8f:fa:1e:a2:94:4d:bf:dc:
da:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C7:59:F9:7D:C0:31:E5:4A:22:A3:4B:1E:8F:E1:D3:06:3F:4A:26
X509v3 Authority Key Identifier:
keyid:EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4e:86:37:fd:81:5e:37:b5:a9:3e:1b:07:7f:6e:56:b9:0b:
59:f8:50:c0:17:59:0f:35:62:a1:5a:5d:2a:7f:9b:c0:29:19:
42:01:3b:76:91:cd:24:e7:52:ab:93:50:94:e1:93:68:8a:13:
12:98:9a:7d:36:8f:3a:c7:e5:2e:55:fd:84:95:71:f8:f8:79:
4f:3d:a6:ff:d5:8b:c8:e3:ff:c9:c0:27:15:db:6c:95:af:ce:
da:e7:cf:48:df:76:fb:bb:1a:11:be:af:00:f3:53:c7:26:21:
34:f4:36:79:56:f0:c0:3a:21:57:5b:0a:70:99:a5:4b:ee:7d:
51:b6:6b:7a:d1:ee:f2:26:ad:a5:04:cc:e1:91:2c:a6:35:1c:
d9:2d:09:aa:1f:54:67:f5:78:9f:cf:b3:6e:d3:57:10:19:ef:
ec:08:a1:be:2c:0e:5a:4d:73:11:f2:04:f5:89:9a:d8:8d:f6:
ec:1b:32:b3:ad:8c:46:49:75:f2:ec:7d:eb:45:2f:78:9b:d3:
0a:63:6d:44:c7:e8:cd:a2:37:34:f5:f6:59:29:1a:17:d4:3c:
b8:d5:2e:41:58:e9:3f:8b:8e:36:d7:ae:fe:88:16:3a:ff:80:
35:73:76:16:d0:61:90:9a:bd:a6:6f:a2:50:bd:e5:74:cd:11:
e0:81:bf:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cxE4F8yDaPJSyQDbmWjAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTA4MmQzN2ZiYzgxOTk4YmZjZjk0OGE1YmJkZGE2M2Vk
ZmRlZTAwHhcNMjUwMTMxMTMwMDQ1WhcNMjUwMjAxMTMwMDQ1WjAzMTEwLwYDVQQD
EyhmN2M3NTlmOTdkYzAzMWU1NGEyMmEzNGIxZThmZTFkMzA2M2Y0YTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk07VwlCp2isEDkMiFhVVYHRBhSCU
zf8MUlzJLYF2S58URGrYnNWlZi4A/PrenZCM5jAF9zCXQhaTMJ0ifTk1QleKvL3v
pXHSC9pIxqa8faaq6/BRPjbcGVkrdM8Imm9OwvM7QhNW2GxCf1zn4+Wpb2gw/0/z
a/bb8jc182b8eiB8I6qXMy8hmzv7k8aZix0uR2YTtOewtAR49+PG1ZhOwJCG7f63
Y4mRwm8DERXbce7DoUEaI4wBLR+rxj2zW9I2zHi1AO8SjsqypdD7jIsh/z38k8ov
/RvKku4JN7sEGGXhEnX4BpTYWSGtFSh7TcGmVC6szweSj/oeopRNv9zaSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfHWfl9wDHlSiKjSx6P4dMGP0omMB8GA1UdIwQY
MBaAFO9QgtN/vIGZi/z5SKW73aY+397gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFDQzAzLThnWm1MX1BsSXBidmRwajdmM3VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wYzNjNGQtMDFkMi00NDBhLWE1MWYt
OTE5NWQwMmRlZDU1LzEvNzFDQzAzLThnWm1MX1BsSXBidmRwajdmM3VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wYzNjNGQtMDFkMi00NDBhLWE1MWYtOTE5NWQwMmRlZDU1
LzEvNzFDQzAzLThnWm1MX1BsSXBidmRwajdmM3VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARU6GN/2B
Xje1qT4bB39uVrkLWfhQwBdZDzVioVpdKn+bwCkZQgE7dpHNJOdSq5NQlOGTaIoT
EpiafTaPOsflLlX9hJVx+Ph5Tz2m/9WLyOP/ycAnFdtsla/O2ufPSN92+7saEb6v
APNTxyYhNPQ2eVbwwDohV1sKcJmlS+59UbZretHu8iatpQTM4ZEspjUc2S0Jqh9U
Z/V4n8+zbtNXEBnv7AihviwOWk1zEfIE9Yma2I327Bsys62MRkl18ux960UveJvT
CmNtRMfozaI3NPX2WSkaF9Q8uNUuQVjpP4uONteu/ogWOv+ANXN2FtBhkJq9pm+i
UL3ldM0R4IG/TA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:09 2025 by rpki-client