Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
File: 84LLE93hJljNrBjKyukfu_XFgJA.mft (raw, json)
Hash identifier: xStvSQglBE7DXcMEeqxSOreUIMp6e0OG1P9MRej6K2Y=
Subject key identifier: F8:EE:B4:22:42:21:56:E2:1E:50:D8:FB:69:7A:4C:87:DD:19:8C:24
Authority key identifier: F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
Certificate issuer: /CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Certificate serial: 0194BC72853C5A6EC584AFE57F624B60F17B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:09 +0000
Manifest this update: Fri 31 Jan 2025 13:00:09 +0000
Manifest next update: Sat 01 Feb 2025 13:00:09 +0000
Files and hashes: 1: 84LLE93hJljNrBjKyukfu_XFgJA.crl (hash: w7qRUE2Qpsv284Lbw0+dU0QbgxpCzEtsHNKPbAqEnRs=)
2: 9p3RysO-CtOjkTkrDq-1QR8iEt8.roa (hash: 7EEdwfYjIsLQLyh8n9mT3oh8OfyTFAKQe+oB+lllHm4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:85:3c:5a:6e:c5:84:af:e5:7f:62:4b:60:f1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Validity
Not Before: Jan 31 13:00:09 2025 GMT
Not After : Feb 1 13:00:09 2025 GMT
Subject: CN=f8eeb422422156e21e50d8fb697a4c87dd198c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a1:d8:c0:bb:a9:69:14:c9:91:2c:92:d8:f7:
c5:d7:87:8a:6a:f2:8d:98:1c:7c:0f:05:26:3c:15:
4d:87:f6:ad:42:4b:0e:37:d3:ad:61:7f:4c:fc:49:
04:49:e3:88:7d:47:3b:91:df:02:eb:2e:56:30:be:
c7:df:c4:3f:4f:d8:8a:b7:f4:d2:05:8d:96:5f:b2:
bc:7e:1d:82:84:35:b0:01:05:4a:7f:c5:14:4a:1c:
37:f2:77:6e:93:09:40:04:c7:05:64:ae:b8:29:ad:
45:74:9d:12:12:28:ba:8d:d3:5b:00:04:b7:71:00:
39:00:a3:07:23:62:30:56:b4:ab:e7:2c:cd:d7:14:
30:bf:2e:b1:64:f4:83:59:88:19:1b:83:b0:94:a4:
bf:ee:b8:e6:6a:f8:9b:27:3d:a6:0f:1b:af:da:c4:
e7:3a:a8:f4:2e:84:47:61:6c:d2:bf:59:65:e5:eb:
92:41:62:f9:d5:3f:24:4b:90:31:05:0f:90:c5:d8:
53:c4:db:fd:c6:3e:c7:87:ab:91:7d:e9:ff:b8:b1:
e6:fa:3e:8f:08:4c:24:fa:31:c9:38:5d:11:49:7b:
8d:0b:4f:8e:e8:88:f8:fc:71:74:e9:26:64:7f:08:
76:b5:06:0c:c3:63:f1:70:6f:86:30:09:c9:ad:9a:
5d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EE:B4:22:42:21:56:E2:1E:50:D8:FB:69:7A:4C:87:DD:19:8C:24
X509v3 Authority Key Identifier:
keyid:F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f6:0b:ab:e8:d6:73:f7:5e:da:0f:67:e2:6a:5c:09:d2:4a:
4e:01:78:6c:90:02:43:2c:50:1b:88:3e:07:c0:27:cb:bf:14:
0a:66:10:c0:ce:9a:ba:1e:b5:33:22:9d:43:79:c1:90:59:29:
60:02:3b:44:8b:dd:fa:19:38:0e:cb:4c:21:af:0f:82:e8:6d:
57:45:17:f2:f7:60:52:7d:ee:87:4c:8b:c4:4b:f2:ce:ee:ce:
6a:31:e4:e2:05:ea:26:9d:b0:9b:12:d9:98:57:54:b6:92:1d:
af:12:03:13:f8:15:53:00:df:b4:68:f7:9e:fe:fb:4e:38:59:
f5:ab:ba:a4:0e:03:0a:94:d3:06:40:e5:74:ae:a4:14:a2:8c:
c2:ca:e3:b2:79:87:7f:02:58:ff:bf:71:12:09:04:75:d2:e8:
97:7b:c7:c7:01:4a:74:74:c6:f5:fb:25:0f:e9:c6:c9:ba:09:
d5:b3:2b:67:3b:48:2f:94:e0:5a:a3:d2:89:30:67:7c:c7:3b:
cc:08:ce:9e:3e:7e:1c:dc:1b:79:d5:10:cc:e3:70:df:78:af:
a1:3f:9d:8d:5a:f1:a8:85:f6:74:df:10:4a:ec:32:42:fe:ef:
b8:5b:44:a3:97:cd:0c:fb:13:6c:71:7e:17:44:84:7d:5c:be:
0a:11:3f:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8coU8Wm7FhK/lf2JLYPF7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzODJjYjEzZGRlMTI2NThjZGFjMThjYWNhZTkxZmJiZjVj
NTgwOTAwHhcNMjUwMTMxMTMwMDA5WhcNMjUwMjAxMTMwMDA5WjAzMTEwLwYDVQQD
EyhmOGVlYjQyMjQyMjE1NmUyMWU1MGQ4ZmI2OTdhNGM4N2RkMTk4YzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKHYwLupaRTJkSyS2PfF14eKavKN
mBx8DwUmPBVNh/atQksON9OtYX9M/EkESeOIfUc7kd8C6y5WML7H38Q/T9iKt/TS
BY2WX7K8fh2ChDWwAQVKf8UUShw38ndukwlABMcFZK64Ka1FdJ0SEii6jdNbAAS3
cQA5AKMHI2IwVrSr5yzN1xQwvy6xZPSDWYgZG4OwlKS/7rjmavibJz2mDxuv2sTn
Oqj0LoRHYWzSv1ll5euSQWL51T8kS5AxBQ+QxdhTxNv9xj7Hh6uRfen/uLHm+j6P
CEwk+jHJOF0RSXuNC0+O6Ij4/HF06SZkfwh2tQYMw2PxcG+GMAnJrZpdAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjutCJCIVbiHlDY+2l6TIfdGYwkMB8GA1UdIwQY
MBaAFPOCyxPd4SZYzawYysrpH7v1xYCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODRMTEU5M2hKbGpOckJqS3l1a2Z1X1hGZ0pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lN2RhOWEtOTMyYS00NjdiLWIyZDIt
OTcwNDI4OTFlYjk5LzEvODRMTEU5M2hKbGpOckJqS3l1a2Z1X1hGZ0pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9lN2RhOWEtOTMyYS00NjdiLWIyZDItOTcwNDI4OTFlYjk5
LzEvODRMTEU5M2hKbGpOckJqS3l1a2Z1X1hGZ0pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPYLq+jW
c/de2g9n4mpcCdJKTgF4bJACQyxQG4g+B8Any78UCmYQwM6auh61MyKdQ3nBkFkp
YAI7RIvd+hk4DstMIa8PguhtV0UX8vdgUn3uh0yLxEvyzu7OajHk4gXqJp2wmxLZ
mFdUtpIdrxIDE/gVUwDftGj3nv77TjhZ9au6pA4DCpTTBkDldK6kFKKMwsrjsnmH
fwJY/79xEgkEddLol3vHxwFKdHTG9fslD+nGyboJ1bMrZztIL5TgWqPSiTBnfMc7
zAjOnj5+HNwbedUQzONw33ivoT+djVrxqIX2dN8QSuwyQv7vuFtEo5fNDPsTbHF+
F0SEfVy+ChE/Rg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:23 2025 by rpki-client