
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
File: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft (raw, json)
Hash identifier: K7Ju7cpXwWSNLuJgBMLNYBOIN2SGLTEdTAEtG2Nq7IY=
Subject key identifier: 3F:1C:79:BE:51:37:0A:B6:E0:3D:21:88:FE:BD:46:83:CD:79:71:08
Authority key identifier: F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4
Certificate issuer: /CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
Certificate serial: 0194BC3BD678B6FB549AF0C19C32EAE0BB26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
Manifest number: 0BAE
Signing time: Fri 31 Jan 2025 12:00:25 +0000
Manifest this update: Fri 31 Jan 2025 12:00:25 +0000
Manifest next update: Sat 01 Feb 2025 12:00:25 +0000
Files and hashes: 1: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl (hash: Nvvvps48o1mFJCg0gHUlzXjwEqzsBWmqR1J/JqYzNJU=)
2: GGAjioujqBIqTrQAhNRgglPPRkE.roa (hash: 1FpErs46KltIuhJLiOWBLzSL1Xf0hQCI/1w1QmIm60Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d6:78:b6:fb:54:9a:f0:c1:9c:32:ea:e0:bb:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
Validity
Not Before: Jan 31 12:00:25 2025 GMT
Not After : Feb 1 12:00:25 2025 GMT
Subject: CN=3f1c79be51370ab6e03d2188febd4683cd797108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:37:23:a5:09:97:08:2c:9f:a2:1e:35:bf:a3:
54:29:c2:51:3a:22:93:7f:6b:ad:f5:5f:93:ac:a3:
65:e0:88:fd:06:61:d2:e7:c0:63:5f:f3:61:35:52:
ef:8c:de:74:a4:3e:ef:e2:3b:ee:ed:f9:33:7c:cf:
bb:53:ce:98:85:d3:86:01:76:be:3a:18:f4:75:64:
45:f0:65:7d:d0:7f:2d:66:6e:b9:7c:7c:59:1c:2b:
3f:37:38:86:27:0c:08:50:d4:3d:aa:4b:82:43:01:
b9:8b:de:f8:d2:c6:eb:0f:63:5e:74:3b:4e:8c:ee:
bb:31:77:5e:08:33:72:d9:7c:11:b5:b6:59:5e:37:
a0:50:4d:f3:74:92:1e:28:39:c8:b5:25:72:69:0f:
37:1f:e6:74:c2:cf:73:c1:d2:ec:3d:67:a7:cd:f5:
04:2f:eb:da:5f:6d:72:45:84:90:41:99:06:cc:be:
73:1f:c3:5c:c7:8d:56:f1:64:e1:91:fc:6d:72:69:
45:ac:e9:e9:97:01:8f:f2:a7:ba:fc:ef:0d:e9:04:
fb:dc:2d:0e:d6:bd:c5:f1:78:4f:ff:ea:30:61:b5:
e2:8b:5b:14:a2:ef:8b:a3:d6:1d:bf:16:e6:ff:01:
78:a0:ef:8d:a8:ba:ad:62:ae:7c:30:11:ed:5a:8e:
0e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1C:79:BE:51:37:0A:B6:E0:3D:21:88:FE:BD:46:83:CD:79:71:08
X509v3 Authority Key Identifier:
keyid:F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:5e:06:45:8c:c2:40:ea:be:cb:d6:07:2e:30:66:a5:fa:35:
e2:cc:5f:e7:8d:ad:b1:d2:d9:5b:ab:a0:bb:5e:df:28:96:03:
49:b0:99:6a:6d:f4:ee:50:2c:67:1b:60:a5:c8:5e:60:0b:d7:
e8:da:0e:c9:90:70:3f:64:e3:ed:80:19:a0:f6:2f:3a:41:b3:
f2:05:ac:8a:1b:db:65:95:23:6c:da:82:5e:9a:d7:9c:50:4a:
e9:06:93:ac:ba:bb:f4:ae:f7:10:01:7b:96:8d:95:71:41:41:
9c:8b:92:c3:b4:f4:a1:90:23:f2:d8:8a:05:60:22:83:e9:48:
10:22:4f:93:36:52:20:bc:7f:c9:ea:92:38:30:90:c5:49:8c:
97:f3:3f:86:09:f4:5d:00:88:5c:8a:9a:84:f0:25:93:da:1d:
53:9a:cd:1e:9f:97:92:c9:03:e9:7f:3d:ca:03:36:35:30:ca:
86:37:4d:ff:43:30:c1:74:02:01:89:f4:35:b0:c8:4a:55:1a:
08:c3:69:f2:be:0d:a2:97:a7:a5:6a:2d:84:47:2d:b1:2b:81:
e7:89:f1:d0:d7:c2:6c:8a:83:e0:5b:d8:07:a4:30:01:e3:e8:
68:40:66:06:51:a5:83:48:65:38:a1:dd:b4:d3:70:cb:92:c6:
01:2f:7a:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9Z4tvtUmvDBnDLq4LsmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYjk4ZjU4NGJjMTIzNDc4MGEyYzQ3ZmM4ODMyNGQ0OWVl
MGU2ZjQwHhcNMjUwMTMxMTIwMDI1WhcNMjUwMjAxMTIwMDI1WjAzMTEwLwYDVQQD
EygzZjFjNzliZTUxMzcwYWI2ZTAzZDIxODhmZWJkNDY4M2NkNzk3MTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+DcjpQmXCCyfoh41v6NUKcJROiKT
f2ut9V+TrKNl4Ij9BmHS58BjX/NhNVLvjN50pD7v4jvu7fkzfM+7U86YhdOGAXa+
Ohj0dWRF8GV90H8tZm65fHxZHCs/NziGJwwIUNQ9qkuCQwG5i9740sbrD2NedDtO
jO67MXdeCDNy2XwRtbZZXjegUE3zdJIeKDnItSVyaQ83H+Z0ws9zwdLsPWenzfUE
L+vaX21yRYSQQZkGzL5zH8Ncx41W8WThkfxtcmlFrOnplwGP8qe6/O8N6QT73C0O
1r3F8XhP/+owYbXii1sUou+Lo9Ydvxbm/wF4oO+NqLqtYq58MBHtWo4OYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8ceb5RNwq24D0hiP69RoPNeXEIMB8GA1UdIwQY
MBaAFPK5j1hLwSNHgKLEf8iDJNSe4Ob0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9mZmNiMjUtMTQ1ZS00ZWY4LTkwNDYt
NGVjMWFiZTA4NWVmLzEvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9mZmNiMjUtMTQ1ZS00ZWY4LTkwNDYtNGVjMWFiZTA4NWVm
LzEvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvF4GRYzC
QOq+y9YHLjBmpfo14sxf542tsdLZW6ugu17fKJYDSbCZam307lAsZxtgpcheYAvX
6NoOyZBwP2Tj7YAZoPYvOkGz8gWsihvbZZUjbNqCXprXnFBK6QaTrLq79K73EAF7
lo2VcUFBnIuSw7T0oZAj8tiKBWAig+lIECJPkzZSILx/yeqSODCQxUmMl/M/hgn0
XQCIXIqahPAlk9odU5rNHp+XkskD6X89ygM2NTDKhjdN/0MwwXQCAYn0NbDISlUa
CMNp8r4NopenpWothEctsSuB54nx0NfCbIqD4FvYB6QwAePoaEBmBlGlg0hlOKHd
tNNwy5LGAS96GQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:22 2025 by rpki-client