Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
File: MsAnS8F_nHXNP8EPi1gloZOCq08.mft (raw, json)
Hash identifier: efmSSJt9dI10NBBZCNMQd7/s+paNP+C9b/oxY5Toygc=
Subject key identifier: BA:15:A0:FE:74:1C:54:DC:AB:0B:F1:82:17:35:2B:2F:C1:22:9D:33
Authority key identifier: 32:C0:27:4B:C1:7F:9C:75:CD:3F:C1:0F:8B:58:25:A1:93:82:AB:4F
Certificate issuer: /CN=32c0274bc17f9c75cd3fc10f8b5825a19382ab4f
Certificate serial: 0194BD4E9B07217A56B3E697F8073BED3987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: MsAnS8F_nHXNP8EPi1gloZOCq08.crl (hash: DFi2FyEaHRjPiWaGXmcagHKu+u5N7VGPHJhLhgW5fo8=)
2: TOIzNWX91Fklg3hNSjJLHCHMbgY.roa (hash: vI/ydx27fqpwXcKYk7mipA2wZEP7zEBHHuwYkt7nRa0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9b:07:21:7a:56:b3:e6:97:f8:07:3b:ed:39:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c0274bc17f9c75cd3fc10f8b5825a19382ab4f
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=ba15a0fe741c54dcab0bf18217352b2fc1229d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:72:c3:82:58:2b:90:65:e6:8e:8d:cb:39:ae:
ed:6e:cb:2c:42:cc:5c:0c:bd:e8:3a:2f:01:b2:3d:
b6:27:3b:60:d5:d1:79:f3:7a:dd:31:62:5b:a8:b6:
8e:46:58:93:38:2c:35:5f:7d:82:62:c2:85:65:b6:
74:62:aa:58:08:74:e7:1e:34:62:f2:2f:6b:e8:d0:
9f:09:54:98:74:a5:4c:26:a0:6b:0d:2f:c3:5d:ec:
69:ad:1c:05:c3:d1:c0:de:aa:3b:14:53:53:33:c2:
14:40:46:51:38:b9:58:95:3d:93:02:00:9b:50:36:
18:a1:11:20:43:fc:f5:30:76:63:fd:68:a7:e2:e6:
7e:8e:c3:7c:22:02:f8:f3:9f:ab:5c:08:1b:d6:98:
98:40:19:91:0a:4e:65:23:d5:1a:a5:69:5a:11:73:
3f:22:7e:59:1d:9b:18:e0:95:59:50:bc:39:a2:ea:
d9:4e:ea:7a:a8:09:5f:d5:7e:24:1b:01:a5:6c:8b:
5a:fd:03:3a:8f:c0:94:5e:ef:a8:98:73:99:ad:93:
24:6e:82:99:de:60:34:8a:42:ad:53:58:b3:79:7a:
fb:93:ed:bd:36:5e:78:dd:b1:83:74:73:83:0f:ff:
d2:72:00:4a:9f:7e:b7:e3:e7:50:5a:c0:3b:6e:6c:
5d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:15:A0:FE:74:1C:54:DC:AB:0B:F1:82:17:35:2B:2F:C1:22:9D:33
X509v3 Authority Key Identifier:
keyid:32:C0:27:4B:C1:7F:9C:75:CD:3F:C1:0F:8B:58:25:A1:93:82:AB:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:73:0b:1f:98:82:1f:a2:e9:5f:69:43:83:55:61:27:63:e7:
d2:ad:af:f2:43:2d:97:72:02:54:d6:88:d6:e6:0a:b6:4d:93:
3d:89:a0:25:7b:bb:27:20:62:cc:ef:55:d0:6d:f2:74:7b:ed:
a1:64:c3:5a:3c:58:79:23:81:8d:5f:8b:b9:c3:8a:df:cd:95:
5e:ee:96:2c:f1:b6:76:e7:6a:d8:c2:69:a8:5d:e1:92:ed:4f:
0f:eb:2b:ef:ab:80:09:c5:00:7e:5d:44:b6:ae:d4:9c:52:a0:
96:68:4c:dc:85:ea:80:11:38:b5:2b:a3:24:8f:d6:f4:c5:be:
e0:8e:4a:83:74:13:f0:99:fb:05:e1:0c:d8:53:c9:b3:c2:c3:
91:64:11:41:d3:54:aa:f5:e2:e0:9c:b7:55:ff:da:ef:d7:f9:
32:5a:0d:12:15:ba:23:8f:1c:b7:56:67:79:1b:04:e3:4f:56:
8e:ba:37:93:6b:43:1f:f2:bf:0d:94:ae:f9:93:f7:a1:7d:a8:
32:1c:2a:57:b8:7a:64:85:18:8c:30:a7:9d:4e:93:9a:ab:06:
28:aa:7e:12:29:31:1a:16:cb:ea:6a:72:90:b3:db:7b:18:16:
1a:75:21:97:0c:f4:6d:57:ca:19:5e:b5:bc:b9:12:e2:d9:05:
76:b8:55:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TpsHIXpWs+aX+Ac77TmHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYzAyNzRiYzE3ZjljNzVjZDNmYzEwZjhiNTgyNWExOTM4
MmFiNGYwHhcNMjUwMTMxMTcwMDMyWhcNMjUwMjAxMTcwMDMyWjAzMTEwLwYDVQQD
EyhiYTE1YTBmZTc0MWM1NGRjYWIwYmYxODIxNzM1MmIyZmMxMjI5ZDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nLDglgrkGXmjo3LOa7tbsssQsxc
DL3oOi8Bsj22Jztg1dF583rdMWJbqLaORliTOCw1X32CYsKFZbZ0YqpYCHTnHjRi
8i9r6NCfCVSYdKVMJqBrDS/DXexprRwFw9HA3qo7FFNTM8IUQEZROLlYlT2TAgCb
UDYYoREgQ/z1MHZj/Win4uZ+jsN8IgL485+rXAgb1piYQBmRCk5lI9UapWlaEXM/
In5ZHZsY4JVZULw5ourZTup6qAlf1X4kGwGlbIta/QM6j8CUXu+omHOZrZMkboKZ
3mA0ikKtU1izeXr7k+29Nl543bGDdHODD//ScgBKn3634+dQWsA7bmxdCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoVoP50HFTcqwvxghc1Ky/BIp0zMB8GA1UdIwQY
MBaAFDLAJ0vBf5x1zT/BD4tYJaGTgqtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXNBblM4Rl9uSFhOUDhFUGkxZ2xvWk9DcTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS80MTZhYWYtODYwMi00MTk2LWI1MWQt
NDFkMDg3YjM4MjhiLzEvTXNBblM4Rl9uSFhOUDhFUGkxZ2xvWk9DcTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS80MTZhYWYtODYwMi00MTk2LWI1MWQtNDFkMDg3YjM4Mjhi
LzEvTXNBblM4Rl9uSFhOUDhFUGkxZ2xvWk9DcTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF3MLH5iC
H6LpX2lDg1VhJ2Pn0q2v8kMtl3ICVNaI1uYKtk2TPYmgJXu7JyBizO9V0G3ydHvt
oWTDWjxYeSOBjV+LucOK382VXu6WLPG2dudq2MJpqF3hku1PD+sr76uACcUAfl1E
tq7UnFKglmhM3IXqgBE4tSujJI/W9MW+4I5Kg3QT8Jn7BeEM2FPJs8LDkWQRQdNU
qvXi4Jy3Vf/a79f5MloNEhW6I48ct1ZneRsE409Wjro3k2tDH/K/DZSu+ZP3oX2o
MhwqV7h6ZIUYjDCnnU6TmqsGKKp+EikxGhbL6mpykLPbexgWGnUhlwz0bVfKGV61
vLkS4tkFdrhVDg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:40:13 2025 by rpki-client