Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
File: rev8Tln35kZGDZAxFWbfH0ftqRc.mft (raw, json)
Hash identifier: EtGzTSCDUzdy3HAbA2ZceQqMMM8s9MK2gb7Lq+98SEk=
Subject key identifier: 42:7E:94:62:10:A5:1F:8A:F1:3D:2A:18:3A:C8:1C:0C:4A:50:A6:FE
Authority key identifier: AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17
Certificate issuer: /CN=adebfc4e59f7e646460d90311566df1f47eda917
Certificate serial: 0194BC0507E8AD79146CA3BF526AFDBF7D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
Manifest number: 0F67
Signing time: Fri 31 Jan 2025 11:00:33 +0000
Manifest this update: Fri 31 Jan 2025 11:00:33 +0000
Manifest next update: Sat 01 Feb 2025 11:00:33 +0000
Files and hashes: 1: cQyc6nVgHzK4QNpSkp4cDVRMkiE.roa (hash: N1QdoGGRESzbdDo8ibNStMhsdyaZ5jyu5P6HBd0ZTZU=)
2: rev8Tln35kZGDZAxFWbfH0ftqRc.crl (hash: mf6CRK5PZ4kKyCKmDMTQJIbhwLsTaIfIvcVa9ujq7Y4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:07:e8:ad:79:14:6c:a3:bf:52:6a:fd:bf:7d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adebfc4e59f7e646460d90311566df1f47eda917
Validity
Not Before: Jan 31 11:00:33 2025 GMT
Not After : Feb 1 11:00:33 2025 GMT
Subject: CN=427e946210a51f8af13d2a183ac81c0c4a50a6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ed:88:a8:96:93:3a:da:b7:6d:a6:cb:5c:24:
5d:a4:e2:69:63:c7:d8:cf:70:e3:8e:2b:d2:d7:fe:
67:1e:cc:07:c8:4f:f6:b8:87:a8:f4:e0:a8:e4:89:
9c:85:83:2d:77:12:f0:f0:5f:e3:0a:83:d9:a4:10:
3e:79:32:15:bd:03:5d:ce:d0:e5:22:bd:1b:6b:07:
b9:5b:35:1c:6a:5c:17:92:43:55:30:28:8d:49:27:
49:c3:e2:40:d1:25:2e:53:91:44:c7:5f:47:ee:4a:
5b:7f:c3:f6:8e:0a:7d:ea:d4:9b:7c:53:14:0b:b5:
15:b1:39:28:ec:10:68:f8:35:d2:19:ce:0e:09:7a:
5f:62:bb:fa:37:77:5d:41:a5:27:ac:04:79:60:c6:
bf:72:cb:ec:8c:e0:72:8c:ac:77:17:6a:ec:e5:2b:
f6:99:e7:9a:ae:c5:f2:a9:89:b2:29:f2:13:3a:f9:
3f:9b:62:a9:d4:07:94:5f:33:fa:41:b3:1d:c3:3c:
9f:57:22:38:e3:47:85:79:ee:02:0c:fd:54:aa:04:
f4:50:54:49:0d:0c:22:67:af:d3:3c:8a:d8:1d:80:
c4:9b:2f:6b:e8:ca:47:1e:f1:ac:ef:b7:b5:da:de:
2d:88:89:0d:6b:c7:4a:df:55:fb:2e:3f:7e:1a:49:
7e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7E:94:62:10:A5:1F:8A:F1:3D:2A:18:3A:C8:1C:0C:4A:50:A6:FE
X509v3 Authority Key Identifier:
keyid:AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a4:e1:a9:26:e2:af:f3:7c:13:44:b2:34:dc:f4:fe:6b:91:
15:b4:81:67:10:7d:69:2f:82:f7:20:65:8e:ae:f8:82:76:c4:
0b:54:53:aa:b2:c2:6e:fe:71:ee:1a:d4:6e:57:b5:7b:17:ef:
9a:10:ea:c1:69:ac:da:9e:46:e4:8a:6e:e7:34:77:fc:51:16:
e8:f5:30:d4:8b:08:fd:29:e3:53:5d:fd:69:a1:b6:8a:c1:58:
3d:3b:f7:d8:4e:b3:1b:dc:c5:28:7a:0a:bd:b9:e3:66:0e:24:
67:63:fa:bf:b6:f1:97:1b:d8:56:df:ac:b1:39:9b:e3:57:62:
fc:e9:ab:f6:ad:83:75:5f:73:13:75:ca:d1:86:6f:3d:6a:b9:
f1:4c:17:30:f2:3c:d9:9c:df:73:34:91:b0:d4:b6:d5:0b:85:
05:2f:9e:1c:3a:1a:38:c8:01:70:c8:97:e2:06:b4:69:86:4c:
b8:5c:d8:31:de:4c:9a:37:e5:ca:0b:d3:65:56:b4:a0:69:9e:
8f:ce:2e:a7:7a:d1:3c:0a:fa:0f:25:0a:da:85:8c:42:75:19:
4d:a9:8a:d5:92:96:d9:aa:9f:32:7b:69:dd:a6:95:6d:5a:41:
97:b4:c4:12:49:ff:5f:50:d1:90:8d:5d:41:20:4f:ea:9b:d6:
b5:0a:f4:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BQforXkUbKO/Umr9v31KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZWJmYzRlNTlmN2U2NDY0NjBkOTAzMTE1NjZkZjFmNDdl
ZGE5MTcwHhcNMjUwMTMxMTEwMDMzWhcNMjUwMjAxMTEwMDMzWjAzMTEwLwYDVQQD
Eyg0MjdlOTQ2MjEwYTUxZjhhZjEzZDJhMTgzYWM4MWMwYzRhNTBhNmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+2IqJaTOtq3babLXCRdpOJpY8fY
z3DjjivS1/5nHswHyE/2uIeo9OCo5ImchYMtdxLw8F/jCoPZpBA+eTIVvQNdztDl
Ir0bawe5WzUcalwXkkNVMCiNSSdJw+JA0SUuU5FEx19H7kpbf8P2jgp96tSbfFMU
C7UVsTko7BBo+DXSGc4OCXpfYrv6N3ddQaUnrAR5YMa/csvsjOByjKx3F2rs5Sv2
meearsXyqYmyKfITOvk/m2Kp1AeUXzP6QbMdwzyfVyI440eFee4CDP1UqgT0UFRJ
DQwiZ6/TPIrYHYDEmy9r6MpHHvGs77e12t4tiIkNa8dK31X7Lj9+Gkl+ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJ+lGIQpR+K8T0qGDrIHAxKUKb+MB8GA1UdIwQY
MBaAFK3r/E5Z9+ZGRg2QMRVm3x9H7akXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmV2OFRsbjM1a1pHRFpBeEZXYmZIMGZ0cVJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8zODQ5OTUtM2FkZS00YjUyLWJmZmIt
ODY2MjY2NDcwODZjLzEvcmV2OFRsbjM1a1pHRFpBeEZXYmZIMGZ0cVJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8zODQ5OTUtM2FkZS00YjUyLWJmZmItODY2MjY2NDcwODZj
LzEvcmV2OFRsbjM1a1pHRFpBeEZXYmZIMGZ0cVJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIaThqSbi
r/N8E0SyNNz0/muRFbSBZxB9aS+C9yBljq74gnbEC1RTqrLCbv5x7hrUble1exfv
mhDqwWms2p5G5Ipu5zR3/FEW6PUw1IsI/SnjU139aaG2isFYPTv32E6zG9zFKHoK
vbnjZg4kZ2P6v7bxlxvYVt+ssTmb41di/Omr9q2DdV9zE3XK0YZvPWq58UwXMPI8
2ZzfczSRsNS21QuFBS+eHDoaOMgBcMiX4ga0aYZMuFzYMd5MmjflygvTZVa0oGme
j84up3rRPAr6DyUK2oWMQnUZTamK1ZKW2aqfMntp3aaVbVpBl7TEEkn/X1DRkI1d
QSBP6pvWtQr0gQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:37 2025 by rpki-client