Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
File: v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft (raw, json)
Hash identifier: VgpLahzlGnJZVFkCsCHQ9TQ5OGJyIjcPyeBdcptRT/A=
Subject key identifier: A6:5B:B6:0E:A4:28:4E:FC:83:6C:BF:E8:AA:05:FD:54:0F:FF:DC:60
Authority key identifier: BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25
Certificate issuer: /CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
Certificate serial: 0194BC3BDABDD61BA88F6A2C6CB693F979CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: 1-7RPCOXBfIKW07w2_gfX-l5xjwU.roa (hash: l+CJQac/GH3qcNGwSYOMkKACx6s8h1Uwqg0edh7Y8jc=)
2: 6gNZAsVf-wN84JvRq_OcC2fCfZI.roa (hash: bKq5ijI4cHYkiNFIZmWyJ6ZOR6ehBPjiusPq1BV3o9w=)
3: rO8C2yXE8mPLn4xcaSZFvJfmcBI.roa (hash: JplCjWuJ5ovdM9C/PIfiX8c4OxLYvblhXA8CqjzGOwk=)
4: s4AwXqhqtrcDqPKIpmaM34VvuVk.roa (hash: omUzj8bx95orfDmkVMaZXkJzmvX0N8m/6+VDQgcz/84=)
5: v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl (hash: pJkQOfqSJlRo5FwrBZmXiwVtKqGptq8g7xLu9o0rcbc=)
6: xhgTHQyXIy450iP62m75oStMlkg.roa (hash: z3oer5qK5pT0D7zvUlqDepBtwAxWfOe3pSOkgZLXdDQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:da:bd:d6:1b:a8:8f:6a:2c:6c:b6:93:f9:79:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=a65bb60ea4284efc836cbfe8aa05fd540fffdc60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:75:b8:7a:d5:77:9a:c1:2a:5c:62:da:c4:77:
d3:1f:40:d6:4e:ba:22:e9:2e:82:dc:27:85:55:cf:
1b:ce:77:f5:c6:70:b1:14:f7:9b:f7:bf:8a:85:d6:
1f:02:7e:41:a9:4f:de:5a:ba:55:80:85:47:f1:24:
7b:07:12:0e:05:61:52:3d:04:9b:3f:4b:7a:49:ec:
e9:ed:13:ef:e1:3a:c4:96:ef:4c:46:72:a2:20:31:
7f:26:26:25:f1:3a:33:90:93:98:8d:9c:30:02:34:
09:01:fc:e7:27:7d:fa:f4:82:5c:f6:60:e5:d1:85:
a5:84:ca:56:4b:12:7e:cd:ab:67:a0:30:2f:14:e8:
e2:1a:1f:89:14:7e:cd:01:4b:de:fb:1c:93:60:19:
ad:ff:05:df:6a:7c:b7:16:df:90:fc:3b:21:7b:6b:
c8:59:2d:81:c0:16:12:15:45:d8:79:66:17:a3:1b:
1d:12:f9:b9:19:74:94:de:6e:df:e7:07:09:e4:d2:
25:83:f2:0a:e1:6a:33:14:d6:03:78:75:4f:70:33:
d5:89:8c:e6:20:9b:df:0b:9e:09:2e:81:41:f0:07:
a2:52:6d:e9:86:8b:54:86:50:a3:4c:f1:46:a1:56:
30:72:7c:0e:b7:3f:f8:43:48:06:09:e5:9d:4a:e8:
d1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5B:B6:0E:A4:28:4E:FC:83:6C:BF:E8:AA:05:FD:54:0F:FF:DC:60
X509v3 Authority Key Identifier:
keyid:BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:88:cf:37:6c:c8:5e:bf:2f:51:3d:b1:2f:be:8c:94:f4:79:
b6:7b:40:04:12:ff:13:ab:37:b5:ae:2d:87:7e:78:0d:ea:e8:
93:7a:cd:14:ac:63:72:8c:80:ae:ba:60:39:6d:7a:19:5c:ac:
71:c7:ae:90:dd:c0:e7:06:73:eb:d5:05:50:ba:5c:bc:fa:8e:
b0:05:86:b5:ef:ca:46:38:c8:c6:39:ee:8e:a6:2c:d9:13:7a:
8f:a4:b4:f6:8e:59:f6:62:9b:28:b8:a3:3c:c6:10:6d:92:0f:
0e:5b:70:0c:47:33:a1:d8:5e:7b:de:f6:0a:57:af:62:7c:53:
a1:71:e5:ef:d4:4f:5f:fa:bf:f4:62:8d:91:26:1f:b2:43:54:
8d:95:db:61:a0:db:51:f2:6c:c4:28:3c:65:7d:f0:2c:24:39:
6c:8d:af:0c:aa:83:ba:3f:6e:94:70:21:8c:9b:e9:08:95:eb:
7e:1d:4a:98:10:91:38:8b:42:b7:c9:bc:db:61:dd:c9:9a:1c:
b3:ac:6e:ec:97:58:51:66:72:4e:ee:52:82:4f:16:a4:5c:8f:
3c:c5:68:21:9e:31:cb:2e:3d:c6:ea:32:1c:9b:e6:5a:7c:c5:
68:fd:ca:12:4a:be:a6:73:aa:f9:5c:35:24:82:a8:6f:77:e2:
10:f4:c4:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9q91huoj2osbLaT+XnNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYzQ3MGU5YjU4ZTU1N2VhOGMxZGJlZGFlYjljNmE1ZmM0
NTUxMjUwHhcNMjUwMTMxMTIwMDI2WhcNMjUwMjAxMTIwMDI2WjAzMTEwLwYDVQQD
EyhhNjViYjYwZWE0Mjg0ZWZjODM2Y2JmZThhYTA1ZmQ1NDBmZmZkYzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXW4etV3msEqXGLaxHfTH0DWTroi
6S6C3CeFVc8bznf1xnCxFPeb97+KhdYfAn5BqU/eWrpVgIVH8SR7BxIOBWFSPQSb
P0t6Sezp7RPv4TrElu9MRnKiIDF/JiYl8TozkJOYjZwwAjQJAfznJ3369IJc9mDl
0YWlhMpWSxJ+zatnoDAvFOjiGh+JFH7NAUve+xyTYBmt/wXfany3Ft+Q/Dshe2vI
WS2BwBYSFUXYeWYXoxsdEvm5GXSU3m7f5wcJ5NIlg/IK4WozFNYDeHVPcDPViYzm
IJvfC54JLoFB8AeiUm3photUhlCjTPFGoVYwcnwOtz/4Q0gGCeWdSujRvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZbtg6kKE78g2y/6KoF/VQP/9xgMB8GA1UdIwQY
MBaAFL/EcOm1jlV+qMHb7a65xqX8RVElMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yN2IzOWItMDQ0OS00YzY0LWJhNzkt
YTJhYTY1NDBmODc1LzEvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8yN2IzOWItMDQ0OS00YzY0LWJhNzktYTJhYTY1NDBmODc1
LzEvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYjPN2zI
Xr8vUT2xL76MlPR5tntABBL/E6s3ta4th354Derok3rNFKxjcoyArrpgOW16GVys
cceukN3A5wZz69UFULpcvPqOsAWGte/KRjjIxjnujqYs2RN6j6S09o5Z9mKbKLij
PMYQbZIPDltwDEczodhee972ClevYnxToXHl79RPX/q/9GKNkSYfskNUjZXbYaDb
UfJsxCg8ZX3wLCQ5bI2vDKqDuj9ulHAhjJvpCJXrfh1KmBCROItCt8m822HdyZoc
s6xu7JdYUWZyTu5Sgk8WpFyPPMVoIZ4xyy49xuoyHJvmWnzFaP3KEkq+pnOq+Vw1
JIKob3fiEPTE8A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:15 2025 by rpki-client