Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
File: 8maByqHTfliZuiffvDaWDga10_I.mft (raw, json)
Hash identifier: V2bqRRfZ/hw9sMKGiVA7C2vGykL/V1rA0Az4A2Ev3eY=
Subject key identifier: 56:B7:D9:D8:28:5A:35:41:8D:77:6E:8A:84:D5:43:CE:5C:F3:E2:9C
Authority key identifier: F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
Certificate issuer: /CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Certificate serial: 0194BBCEC63704B75FCD8461E2BFC9EC6C9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:18 +0000
Manifest this update: Fri 31 Jan 2025 10:01:18 +0000
Manifest next update: Sat 01 Feb 2025 10:01:18 +0000
Files and hashes: 1: 8maByqHTfliZuiffvDaWDga10_I.crl (hash: rOE7Rw0GPQF4KjotVs8TVmkB2Sa4PMzLPtvV99lWUzg=)
2: a-zhZjuXDc_FsfQbRuaEtluPpHA.roa (hash: 5+3esVT/zzC55YQOAsi2tnDDnrmv1Y7c5U2ef5q3Qdw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c6:37:04:b7:5f:cd:84:61:e2:bf:c9:ec:6c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Validity
Not Before: Jan 31 10:01:18 2025 GMT
Not After : Feb 1 10:01:18 2025 GMT
Subject: CN=56b7d9d8285a35418d776e8a84d543ce5cf3e29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:fa:30:82:a0:ed:2b:10:fd:4a:59:a3:8f:a8:
ee:70:ce:26:48:59:5a:87:58:b5:ac:69:32:b4:53:
59:e0:56:26:b8:d5:24:a0:be:9d:29:1d:28:cb:64:
38:b8:2d:e3:08:39:7a:14:8d:cd:56:25:f4:d6:1c:
95:ed:03:b8:d0:8d:f0:9a:7c:14:31:03:82:8e:96:
c6:9b:66:a0:32:df:f4:d1:cf:ec:3f:d5:67:cc:ec:
24:4d:8e:c9:39:b3:24:e5:7a:22:46:47:36:da:cb:
37:5a:42:87:d3:84:3b:d3:b3:47:86:b2:a5:2b:c0:
05:7b:4b:93:fb:8f:0d:ba:4b:66:3d:b7:05:d8:05:
a0:fe:1f:5a:00:45:4c:c3:50:78:7e:45:67:f6:83:
88:3b:e8:1d:79:1c:83:65:3b:4a:6f:7e:be:8e:3e:
83:ad:cf:22:41:a1:77:46:2b:27:ed:e6:3a:bf:f9:
38:5e:93:24:9d:e4:f9:f9:82:33:f7:d3:5a:12:b5:
40:94:5b:0e:de:21:fc:42:06:7f:7e:f6:45:b6:b4:
e7:e9:c5:ca:2d:5d:ba:c7:c1:59:22:25:95:20:c0:
a3:0d:9e:e4:d7:1f:eb:fe:54:34:21:f8:0b:9c:fb:
14:7b:fb:ff:ec:93:5c:db:47:74:a2:60:f5:3d:9c:
91:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B7:D9:D8:28:5A:35:41:8D:77:6E:8A:84:D5:43:CE:5C:F3:E2:9C
X509v3 Authority Key Identifier:
keyid:F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:be:a5:37:e6:46:bb:40:e7:2b:c3:91:c4:85:f5:73:71:07:
2e:9a:76:6c:bd:39:9c:a9:9c:1e:71:10:aa:a2:51:19:f8:ce:
ac:4c:e5:ef:f7:9f:5b:9c:13:f3:7d:89:1e:e4:b0:d4:c1:ad:
f4:8b:02:79:fd:42:0d:69:96:37:e4:86:a2:59:49:8a:b0:a8:
1e:f0:e7:6f:0a:b9:14:66:63:45:69:a5:7f:a5:2a:60:8e:f7:
9e:b8:63:6e:04:05:91:45:13:66:68:ba:ae:64:51:3a:d5:a6:
30:60:d7:93:0f:8e:f2:43:ce:e3:33:a5:ae:bc:af:93:bb:29:
3b:12:87:62:ca:a3:b6:a6:38:5f:4c:97:09:26:9b:e1:4f:f1:
5d:90:2f:96:04:30:89:20:89:a9:36:cb:36:f5:75:2e:b2:cd:
76:e5:58:9b:13:34:e5:c0:fd:f2:fb:4d:cc:f3:ee:9d:6a:d4:
10:b3:b8:82:54:c6:fd:cf:46:a4:80:c9:c8:6e:e9:0d:96:57:
b0:8f:a0:db:7b:8f:83:91:d3:19:29:c2:36:97:27:61:51:08:
38:c8:94:19:c4:7b:ba:aa:d1:a1:c4:02:12:98:01:d6:83:81:
08:f4:36:25:90:cf:29:1c:f9:3a:ca:35:cf:be:86:52:33:72:
6b:fa:31:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zsY3BLdfzYRh4r/J7GydMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjY4MWNhYTFkMzdlNTg5OWJhMjdkZmJjMzY5NjBlMDZi
NWQzZjIwHhcNMjUwMTMxMTAwMTE4WhcNMjUwMjAxMTAwMTE4WjAzMTEwLwYDVQQD
Eyg1NmI3ZDlkODI4NWEzNTQxOGQ3NzZlOGE4NGQ1NDNjZTVjZjNlMjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/owgqDtKxD9Slmjj6jucM4mSFla
h1i1rGkytFNZ4FYmuNUkoL6dKR0oy2Q4uC3jCDl6FI3NViX01hyV7QO40I3wmnwU
MQOCjpbGm2agMt/00c/sP9VnzOwkTY7JObMk5XoiRkc22ss3WkKH04Q707NHhrKl
K8AFe0uT+48NuktmPbcF2AWg/h9aAEVMw1B4fkVn9oOIO+gdeRyDZTtKb36+jj6D
rc8iQaF3Risn7eY6v/k4XpMkneT5+YIz99NaErVAlFsO3iH8QgZ/fvZFtrTn6cXK
LV26x8FZIiWVIMCjDZ7k1x/r/lQ0IfgLnPsUe/v/7JNc20d0omD1PZyR5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFa32dgoWjVBjXduioTVQ85c8+KcMB8GA1UdIwQY
MBaAFPJmgcqh035Ymbon37w2lg4GtdPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1hQnlxSFRmbGladWlmZnZEYVdEZ2ExMF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jYWVlYjYtODAxNy00YzIyLWE4MWMt
NjQwNzVjMmFlNDYzLzEvOG1hQnlxSFRmbGladWlmZnZEYVdEZ2ExMF9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jYWVlYjYtODAxNy00YzIyLWE4MWMtNjQwNzVjMmFlNDYz
LzEvOG1hQnlxSFRmbGladWlmZnZEYVdEZ2ExMF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAar6lN+ZG
u0DnK8ORxIX1c3EHLpp2bL05nKmcHnEQqqJRGfjOrEzl7/efW5wT832JHuSw1MGt
9IsCef1CDWmWN+SGollJirCoHvDnbwq5FGZjRWmlf6UqYI73nrhjbgQFkUUTZmi6
rmRROtWmMGDXkw+O8kPO4zOlrryvk7spOxKHYsqjtqY4X0yXCSab4U/xXZAvlgQw
iSCJqTbLNvV1LrLNduVYmxM05cD98vtNzPPunWrUELO4glTG/c9GpIDJyG7pDZZX
sI+g23uPg5HTGSnCNpcnYVEIOMiUGcR7uqrRocQCEpgB1oOBCPQ2JZDPKRz5Oso1
z76GUjNya/oxww==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:57 2025 by rpki-client