Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
File: p-cKBbmGOc165X_rGkCzZ-ycQ60.mft (raw, json)
Hash identifier: W7M5do7XQFeKIfdqfnLH+Uf/5rYE7xF8Pn8ktPH2wKk=
Subject key identifier: 68:75:92:43:7D:79:38:46:67:04:E8:8B:A4:18:11:69:2A:9F:B6:8A
Authority key identifier: A7:E7:0A:05:B9:86:39:CD:7A:E5:7F:EB:1A:40:B3:67:EC:9C:43:AD
Certificate issuer: /CN=a7e70a05b98639cd7ae57feb1a40b367ec9c43ad
Certificate serial: 0194BC3C1120B894F5FB84157AFD9CCD93DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-cKBbmGOc165X_rGkCzZ-ycQ60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
Manifest number: 086E
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: fbHkL-NwzOez_gqY2PAh-dqPCjE.roa (hash: Q4MsLL7SIokgLjLmWwHX1Dj+xIpsxjtJ9IG++E0gJUc=)
2: p-cKBbmGOc165X_rGkCzZ-ycQ60.crl (hash: t3LvIMq7t3ugnsHxXn/AkegjYnUnS/4jo9lywb65RHo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:11:20:b8:94:f5:fb:84:15:7a:fd:9c:cd:93:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e70a05b98639cd7ae57feb1a40b367ec9c43ad
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=687592437d7938466704e88ba41811692a9fb68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c5:29:69:4c:6f:2c:dc:de:f7:ac:02:c5:8a:
40:31:11:87:1d:8c:09:6c:70:83:d5:e6:f9:38:c5:
99:71:34:70:0a:85:1f:27:41:80:62:ea:e6:c4:73:
89:c7:a9:bc:80:26:f4:d8:da:e6:2e:d8:14:37:50:
b6:02:33:43:7d:ef:c6:78:e2:1e:a9:5d:a8:37:0f:
e3:90:8c:62:b7:d6:45:7b:c8:2e:b1:bd:01:39:b5:
c8:bb:6e:37:bb:47:cb:11:db:7c:34:3e:cb:49:fe:
7d:1e:2c:1d:b5:8c:d8:da:36:06:f8:57:8f:b2:f2:
cd:36:ff:df:49:b5:5f:e3:13:a9:01:de:c7:78:d7:
48:9f:66:2c:89:2e:c5:50:08:cc:98:84:2b:4f:16:
f5:c4:ee:3a:2c:39:0b:79:df:be:3c:5b:90:3d:83:
40:89:82:e4:0e:3a:e0:a9:7c:42:6d:88:e7:5f:10:
fc:75:40:32:af:94:b8:1c:a2:7c:65:0a:b9:2e:94:
bd:f3:d6:93:bd:70:51:2e:c1:1a:e3:25:73:92:00:
dd:df:dd:a2:74:f2:8e:b3:9e:ca:79:b1:64:fc:8a:
f8:ab:4a:e0:3c:5a:23:e1:c3:07:d3:c8:de:1c:0e:
2b:6e:60:59:86:47:20:17:83:9e:a7:81:c9:77:25:
3f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:75:92:43:7D:79:38:46:67:04:E8:8B:A4:18:11:69:2A:9F:B6:8A
X509v3 Authority Key Identifier:
keyid:A7:E7:0A:05:B9:86:39:CD:7A:E5:7F:EB:1A:40:B3:67:EC:9C:43:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-cKBbmGOc165X_rGkCzZ-ycQ60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:45:9b:91:94:32:b0:d7:c2:85:33:79:2f:9e:c1:d4:39:92:
88:ba:0a:73:e9:5c:3f:ce:96:1f:82:79:14:93:d9:ef:d9:26:
9b:49:07:44:2b:c0:b1:12:64:f0:83:e0:cd:0d:7b:19:8e:c7:
48:9f:e6:ea:30:87:67:c0:24:37:39:95:e9:b8:2d:ec:98:68:
81:12:d2:58:87:1f:5e:ac:cf:48:25:70:01:eb:eb:94:15:88:
3c:d8:5e:63:2e:e4:a3:e3:de:d5:0f:5f:dd:a6:55:8f:8e:27:
5f:08:82:a6:68:68:0c:62:ae:6c:37:c9:94:29:ec:1d:c2:8b:
d1:79:1e:ab:94:fc:32:59:6d:b9:6a:79:e6:84:1c:75:8d:b8:
7a:22:00:94:b6:a9:da:5b:fd:f8:48:d4:64:c3:a4:73:d6:ea:
5a:4d:5a:06:f5:b2:f5:ee:d7:1a:f3:cc:6e:b8:5f:fb:7c:92:
0e:d6:04:52:7f:b7:99:1e:88:71:67:4f:f4:3e:8c:a5:cf:b7:
92:df:79:71:07:70:cd:1b:e0:f0:59:eb:9d:d5:e8:0b:ea:6f:
ac:1e:cc:e5:9a:f9:2d:9c:fc:5f:68:f3:e1:68:6a:25:53:5d:
75:ad:d5:9c:2a:61:62:40:08:9f:5c:77:de:2c:c1:47:0a:57:
ca:54:57:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PBEguJT1+4QVev2czZPaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZTcwYTA1Yjk4NjM5Y2Q3YWU1N2ZlYjFhNDBiMzY3ZWM5
YzQzYWQwHhcNMjUwMTMxMTIwMDQwWhcNMjUwMjAxMTIwMDQwWjAzMTEwLwYDVQQD
Eyg2ODc1OTI0MzdkNzkzODQ2NjcwNGU4OGJhNDE4MTE2OTJhOWZiNjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8UpaUxvLNze96wCxYpAMRGHHYwJ
bHCD1eb5OMWZcTRwCoUfJ0GAYurmxHOJx6m8gCb02NrmLtgUN1C2AjNDfe/GeOIe
qV2oNw/jkIxit9ZFe8gusb0BObXIu243u0fLEdt8ND7LSf59HiwdtYzY2jYG+FeP
svLNNv/fSbVf4xOpAd7HeNdIn2YsiS7FUAjMmIQrTxb1xO46LDkLed++PFuQPYNA
iYLkDjrgqXxCbYjnXxD8dUAyr5S4HKJ8ZQq5LpS989aTvXBRLsEa4yVzkgDd392i
dPKOs57KebFk/Ir4q0rgPFoj4cMH08jeHA4rbmBZhkcgF4Oep4HJdyU/wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGh1kkN9eThGZwToi6QYEWkqn7aKMB8GA1UdIwQY
MBaAFKfnCgW5hjnNeuV/6xpAs2fsnEOtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcC1jS0JibUdPYzE2NVhfckdrQ3paLXljUTYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xMjAyZTItMGI1NC00MmVlLTkzM2Et
MmIxZGM5OTJlY2EyLzEvcC1jS0JibUdPYzE2NVhfckdrQ3paLXljUTYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8xMjAyZTItMGI1NC00MmVlLTkzM2EtMmIxZGM5OTJlY2Ey
LzEvcC1jS0JibUdPYzE2NVhfckdrQ3paLXljUTYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0WbkZQy
sNfChTN5L57B1DmSiLoKc+lcP86WH4J5FJPZ79kmm0kHRCvAsRJk8IPgzQ17GY7H
SJ/m6jCHZ8AkNzmV6bgt7JhogRLSWIcfXqzPSCVwAevrlBWIPNheYy7ko+Pe1Q9f
3aZVj44nXwiCpmhoDGKubDfJlCnsHcKL0Xkeq5T8MlltuWp55oQcdY24eiIAlLap
2lv9+EjUZMOkc9bqWk1aBvWy9e7XGvPMbrhf+3ySDtYEUn+3mR6IcWdP9D6Mpc+3
kt95cQdwzRvg8FnrndXoC+pvrB7M5Zr5LZz8X2jz4WhqJVNdda3VnCphYkAIn1x3
3izBRwpXylRXVw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:04:22 2025 by rpki-client