Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
File: 1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft (raw, json)
Hash identifier: 1YW/Q8QRWEy1PMQC3zesvsKdoQ1SvzHLOOGcpj65SEQ=
Subject key identifier: 3A:23:9C:15:83:02:61:9A:B4:E7:A9:CB:60:DF:4D:CB:86:0E:77:87
Authority key identifier: F8:1F:C8:C8:29:86:31:0C:5F:6A:9B:56:FB:76:B6:BD:98:77:FC:C0
Certificate issuer: /CN=f81fc8c82986310c5f6a9b56fb76b6bd9877fcc0
Certificate serial: 0194BD852F2E5B62360E0449F2C4BF530E17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:09 +0000
Manifest this update: Fri 31 Jan 2025 18:00:09 +0000
Manifest next update: Sat 01 Feb 2025 18:00:09 +0000
Files and hashes: 1: 1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl (hash: ALlqmaBPyfQtMzeNBYSTHLaMX+niaohcTthlh97Z7ag=)
2: 6wlg7_4FPmuXNKS9TGtMblKpb18.roa (hash: NB4kxO5xhtaDmptY5MXonKpcqUfNico299jC167lw3c=)
3: K8XuD1NpxrW0TJB7qtrYsXkJRDA.roa (hash: /CdBF5kIZ5ECcmHw5H6/OJaH4oIiEyJ+Vl+1/T4lKZc=)
4: uEtH-WMzGMQ39OBfcunTZEOsrt8.roa (hash: DDKUC3onp/8aOQ+NFAy3yM0YxsOrViUAEuEDZFkRFtg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2f:2e:5b:62:36:0e:04:49:f2:c4:bf:53:0e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81fc8c82986310c5f6a9b56fb76b6bd9877fcc0
Validity
Not Before: Jan 31 18:00:09 2025 GMT
Not After : Feb 1 18:00:09 2025 GMT
Subject: CN=3a239c158302619ab4e7a9cb60df4dcb860e7787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e6:dc:31:4f:08:55:8d:59:d9:0f:cd:d2:ea:
bb:1c:b9:9b:0c:2c:5c:86:4c:15:97:dc:19:fe:1b:
1f:58:e6:5d:2c:1c:cc:12:40:b6:85:f0:32:f6:89:
41:06:72:43:7f:1f:2f:4e:d4:fb:31:6c:3e:e8:7e:
36:c0:cb:68:75:ce:e2:a0:ac:5c:88:75:83:ac:8d:
be:6f:ef:32:d2:cf:a0:20:7a:de:9b:54:4e:77:8a:
ed:76:b9:58:21:0d:5e:60:18:4a:f1:65:58:cb:9e:
3d:54:c6:53:e7:9d:20:ff:d7:ba:9c:64:22:d6:9e:
44:27:3c:57:63:5e:89:13:03:5b:79:15:7f:72:a9:
23:7e:92:8e:3a:6a:cd:6e:ea:e7:eb:d6:b0:fb:7a:
20:72:36:30:70:9b:ff:bd:43:43:c5:5e:92:10:34:
9b:48:90:98:fc:57:f7:63:77:7c:0d:da:9b:01:db:
cc:b3:f1:eb:c8:4b:c1:8c:44:86:58:b9:85:34:6c:
69:72:19:60:f8:f9:95:78:41:eb:0c:a8:e1:1f:49:
12:04:da:80:1a:bf:f0:1e:39:7b:f2:b3:dc:09:53:
ab:32:59:0a:9d:50:28:c8:6d:bf:82:f3:6a:c3:8a:
be:e4:75:05:d4:ff:92:40:bb:68:b1:ac:d5:06:ba:
34:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:23:9C:15:83:02:61:9A:B4:E7:A9:CB:60:DF:4D:CB:86:0E:77:87
X509v3 Authority Key Identifier:
keyid:F8:1F:C8:C8:29:86:31:0C:5F:6A:9B:56:FB:76:B6:BD:98:77:FC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:8b:9a:61:11:28:99:49:37:f1:2b:3f:9f:7f:92:d5:59:c9:
83:d8:15:ff:01:ab:a2:94:7c:a2:3f:06:39:50:ee:f4:93:c0:
6d:ee:0a:71:e0:fd:86:c3:5b:ed:ca:d1:d5:7c:b4:ab:ce:89:
42:74:b0:00:fd:63:69:ff:bb:b5:03:47:33:3b:54:01:b8:17:
5f:61:5f:cc:cb:2e:0e:04:b5:e5:56:8a:85:34:46:2c:7c:0a:
08:48:46:8e:f4:cd:06:b6:80:f0:36:65:48:8c:83:d4:96:0c:
70:bd:f2:60:bb:43:00:c7:02:80:34:99:86:5e:9d:d7:e4:42:
d7:bd:a6:3b:ae:f8:2c:87:07:83:98:69:1f:01:74:4f:5e:b9:
bb:5b:97:2d:8f:b9:d8:a2:e7:0f:ff:88:3a:81:fa:53:86:2a:
af:01:d1:b2:46:5a:e8:20:a3:df:41:da:3b:23:b3:80:7f:88:
47:c2:92:f6:89:b0:cd:2f:2b:ed:38:80:95:ef:5a:08:e5:ed:
bd:3e:43:f9:39:38:f2:d4:09:21:4b:63:8f:0e:34:a4:1b:0e:
b7:9d:21:3a:ce:31:d4:b0:84:83:08:e1:9b:ab:af:a7:69:e9:
37:85:cc:39:ea:a2:62:38:8d:45:7b:42:d1:cf:39:ee:39:7f:
93:f6:47:f8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS9hS8uW2I2DgRJ8sS/Uw4XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MWZjOGM4Mjk4NjMxMGM1ZjZhOWI1NmZiNzZiNmJkOTg3
N2ZjYzAwHhcNMjUwMTMxMTgwMDA5WhcNMjUwMjAxMTgwMDA5WjAzMTEwLwYDVQQD
EygzYTIzOWMxNTgzMDI2MTlhYjRlN2E5Y2I2MGRmNGRjYjg2MGU3Nzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ObcMU8IVY1Z2Q/N0uq7HLmbDCxc
hkwVl9wZ/hsfWOZdLBzMEkC2hfAy9olBBnJDfx8vTtT7MWw+6H42wMtodc7ioKxc
iHWDrI2+b+8y0s+gIHrem1ROd4rtdrlYIQ1eYBhK8WVYy549VMZT550g/9e6nGQi
1p5EJzxXY16JEwNbeRV/cqkjfpKOOmrNburn69aw+3ogcjYwcJv/vUNDxV6SEDSb
SJCY/Ff3Y3d8DdqbAdvMs/HryEvBjESGWLmFNGxpchlg+PmVeEHrDKjhH0kSBNqA
Gr/wHjl78rPcCVOrMlkKnVAoyG2/gvNqw4q+5HUF1P+SQLtosazVBro0awIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDojnBWDAmGatOepy2DfTcuGDneHMB8GA1UdIwQY
MBaAFPgfyMgphjEMX2qbVvt2tr2Yd/zAMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1CX0l5Q21HTVF4ZmFwdFctM2EydlpoM19NQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvM2U1OWM5LTlmMDEtNDU2Mi05MjFk
LTUxM2NhOGU2Y2VjZS8xLzEtQl9JeUNtR01ReGZhcHRXLTNhMnZaaDNfTUEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzhmLzNlNTljOS05ZjAxLTQ1NjItOTIxZC01MTNjYThlNmNl
Y2UvMS8xLUJfSXlDbUdNUXhmYXB0Vy0zYTJ2WmgzX01BLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4ua
YREomUk38Ss/n3+S1VnJg9gV/wGropR8oj8GOVDu9JPAbe4KceD9hsNb7crR1Xy0
q86JQnSwAP1jaf+7tQNHMztUAbgXX2FfzMsuDgS15VaKhTRGLHwKCEhGjvTNBraA
8DZlSIyD1JYMcL3yYLtDAMcCgDSZhl6d1+RC172mO674LIcHg5hpHwF0T165u1uX
LY+52KLnD/+IOoH6U4YqrwHRskZa6CCj30HaOyOzgH+IR8KS9omwzS8r7TiAle9a
COXtvT5D+Tk48tQJIUtjjw40pBsOt50hOs4x1LCEgwjhm6uvp2npN4XMOeqiYjiN
RXtC0c857jl/k/ZH+A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:03 2025 by rpki-client