Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
File: 77RcySOXjBokve6WzHs683OG0qg.mft (raw, json)
Hash identifier: GuDPysXmOC7Of7cklSGFKPpHyYXXUQWD6tgNPDEUUUE=
Subject key identifier: C5:8F:91:15:EE:93:51:6D:22:2B:E2:38:BB:5C:0F:68:60:EA:0E:27
Authority key identifier: EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8
Certificate issuer: /CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
Certificate serial: 0194BC3C9170A8DA85CE54F21A4A19D9373D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
Manifest number: 0BCC
Signing time: Fri 31 Jan 2025 12:01:13 +0000
Manifest this update: Fri 31 Jan 2025 12:01:13 +0000
Manifest next update: Sat 01 Feb 2025 12:01:13 +0000
Files and hashes: 1: 77RcySOXjBokve6WzHs683OG0qg.crl (hash: +9ver9Buf8dmi3jfwm/xktokbgdxhuaEndIqEx2qK80=)
2: ONW_HHb2ZjsySF4n5zNLufP_Ugo.roa (hash: Fs9suOzCDzlX3MVkt67omPbuhLWfHekY4xcrsMfgW7s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:91:70:a8:da:85:ce:54:f2:1a:4a:19:d9:37:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
Validity
Not Before: Jan 31 12:01:13 2025 GMT
Not After : Feb 1 12:01:13 2025 GMT
Subject: CN=c58f9115ee93516d222be238bb5c0f6860ea0e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:db:a3:da:a3:a8:b5:18:96:8e:9d:22:cf:56:
43:0d:00:7e:53:fe:94:c4:7e:72:35:d9:2d:52:25:
43:e0:e3:38:21:d5:69:db:fb:bb:43:bb:0f:f8:ad:
11:46:95:8c:e0:62:5a:dd:ce:11:7a:bc:49:98:44:
53:30:1c:45:93:e6:66:f2:10:1c:ed:dd:3e:2a:65:
f4:d1:cc:82:dd:4e:5d:fc:86:14:1f:f0:36:5d:43:
c3:d2:21:17:5d:b1:a8:0c:53:35:c6:1b:3e:a9:35:
69:ed:8c:4a:ea:74:67:77:84:b5:7f:33:c6:fd:48:
c3:32:c2:3a:96:f6:23:f7:1c:d1:79:de:00:69:1c:
5d:00:d6:47:30:96:de:fe:66:80:0f:d8:da:5e:9e:
36:54:48:99:be:28:9e:3c:23:f3:f9:ed:02:af:3b:
09:d4:0f:e8:a5:ef:ba:0a:e1:34:d3:cd:55:b0:df:
fd:5a:89:e6:65:d1:f8:d6:79:43:56:48:5f:e6:2c:
9b:cf:19:79:b5:b0:45:8e:d3:17:dc:1f:34:65:83:
92:d4:76:bf:ed:93:69:ae:ac:be:8d:1c:9c:87:ca:
54:87:a5:ee:c7:0b:d7:3d:62:cd:04:c3:49:9b:fe:
30:11:e2:50:83:bd:5b:9b:a8:86:ce:f5:26:79:fb:
c8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8F:91:15:EE:93:51:6D:22:2B:E2:38:BB:5C:0F:68:60:EA:0E:27
X509v3 Authority Key Identifier:
keyid:EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:64:bf:ed:4b:33:4c:8d:f8:f1:83:ee:5d:8d:4a:16:51:98:
9e:38:70:98:81:9b:bf:8f:ed:69:9c:f6:34:26:3b:93:36:ac:
9b:be:2f:57:67:2d:ad:61:3b:45:c8:ec:26:12:7e:42:a6:e6:
91:13:12:cd:b7:7e:1c:74:10:6a:3e:85:a5:c7:74:ee:65:7a:
fe:55:14:53:8d:2f:f6:a3:39:a5:29:f6:bf:f2:99:a1:ce:62:
36:fc:ec:f1:08:d6:ed:c4:c2:48:c4:38:ff:1a:ee:af:1d:dd:
b8:5e:c9:63:11:c8:b3:69:4d:bb:38:35:29:54:60:60:76:09:
9a:3b:f8:72:8a:d7:0c:c7:c5:fe:fb:26:68:8b:f6:ac:8a:a0:
f4:de:f7:2a:af:74:5a:87:ee:9c:35:63:76:39:26:d2:5b:b5:
31:85:66:4c:52:1c:80:4b:55:77:53:bd:a1:56:9a:07:22:30:
bc:65:56:ec:b3:ee:87:ac:4b:b1:99:6d:21:ae:d4:57:fc:32:
55:ae:01:7a:db:7e:79:74:2c:4e:de:35:ac:cd:c2:97:ea:ea:
29:d2:59:bc:08:01:71:cd:2c:33:54:01:9d:9d:a8:b3:d3:4a:
0f:3b:33:1d:e4:d8:dc:80:59:c6:0a:f6:8d:13:73:c1:87:e6:
9a:1f:f1:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PJFwqNqFzlTyGkoZ2Tc9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYjQ1Y2M5MjM5NzhjMWEyNGJkZWU5NmNjN2IzYWYzNzM4
NmQyYTgwHhcNMjUwMTMxMTIwMTEzWhcNMjUwMjAxMTIwMTEzWjAzMTEwLwYDVQQD
EyhjNThmOTExNWVlOTM1MTZkMjIyYmUyMzhiYjVjMGY2ODYwZWEwZTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtuj2qOotRiWjp0iz1ZDDQB+U/6U
xH5yNdktUiVD4OM4IdVp2/u7Q7sP+K0RRpWM4GJa3c4RerxJmERTMBxFk+Zm8hAc
7d0+KmX00cyC3U5d/IYUH/A2XUPD0iEXXbGoDFM1xhs+qTVp7YxK6nRnd4S1fzPG
/UjDMsI6lvYj9xzRed4AaRxdANZHMJbe/maAD9jaXp42VEiZviiePCPz+e0CrzsJ
1A/ope+6CuE0081VsN/9WonmZdH41nlDVkhf5iybzxl5tbBFjtMX3B80ZYOS1Ha/
7ZNprqy+jRych8pUh6XuxwvXPWLNBMNJm/4wEeJQg71bm6iGzvUmefvIaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWPkRXuk1FtIiviOLtcD2hg6g4nMB8GA1UdIwQY
MBaAFO+0XMkjl4waJL3ulsx7OvNzhtKoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzdSY3lTT1hqQm9rdmU2V3pIczY4M09HMHFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hYWMwMTAtNWVmMC00ODQ0LWIyMzMt
NDQ1N2ViZWE1YTQ1LzEvNzdSY3lTT1hqQm9rdmU2V3pIczY4M09HMHFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9hYWMwMTAtNWVmMC00ODQ0LWIyMzMtNDQ1N2ViZWE1YTQ1
LzEvNzdSY3lTT1hqQm9rdmU2V3pIczY4M09HMHFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlmS/7Usz
TI348YPuXY1KFlGYnjhwmIGbv4/taZz2NCY7kzasm74vV2ctrWE7RcjsJhJ+Qqbm
kRMSzbd+HHQQaj6Fpcd07mV6/lUUU40v9qM5pSn2v/KZoc5iNvzs8QjW7cTCSMQ4
/xrurx3duF7JYxHIs2lNuzg1KVRgYHYJmjv4corXDMfF/vsmaIv2rIqg9N73Kq90
WofunDVjdjkm0lu1MYVmTFIcgEtVd1O9oVaaByIwvGVW7LPuh6xLsZltIa7UV/wy
Va4Bett+eXQsTt41rM3Cl+rqKdJZvAgBcc0sM1QBnZ2os9NKDzszHeTY3IBZxgr2
jRNzwYfmmh/xQA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:16:59 2025 by rpki-client