Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
File: 8runwtAt4Uiqno-gmhx6K3cKGdw.mft (raw, json)
Hash identifier: oxW6/enS145qV+BrjfY4Ck8+ZGQj4xaevP6s8nvim8Y=
Subject key identifier: 29:1E:E0:CF:23:0C:E4:62:01:5D:79:66:77:7F:3A:6E:CE:06:2F:A8
Authority key identifier: F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
Certificate issuer: /CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Certificate serial: 0194BBCE80F05347218F5356A777A9037432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:01:00 +0000
Manifest this update: Fri 31 Jan 2025 10:01:00 +0000
Manifest next update: Sat 01 Feb 2025 10:01:00 +0000
Files and hashes: 1: 8runwtAt4Uiqno-gmhx6K3cKGdw.crl (hash: gvWRDuKRfnl89C05IPcgBpm0qAWPu6YDTz80GhOOLto=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:80:f0:53:47:21:8f:53:56:a7:77:a9:03:74:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Validity
Not Before: Jan 31 10:01:00 2025 GMT
Not After : Feb 1 10:01:00 2025 GMT
Subject: CN=291ee0cf230ce462015d7966777f3a6ece062fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:df:fd:40:a4:3c:42:ad:80:3e:36:8d:b8:
99:e3:4e:2b:4a:24:a8:fd:35:39:41:70:44:e4:b6:
fb:12:f1:a1:27:10:58:32:aa:e2:19:58:9f:40:50:
5b:6a:76:43:a0:89:0f:5b:c4:40:ef:8c:6d:ff:6a:
f0:d1:9c:b9:ff:39:2d:ff:47:0b:65:32:22:f3:02:
9c:f2:8c:b4:62:39:ea:43:23:51:c6:be:67:3c:11:
61:aa:35:fd:45:db:8b:98:7c:62:54:5e:76:a3:e6:
45:e5:5e:cd:58:95:01:88:55:db:af:99:17:6b:d6:
86:31:fc:fa:58:3e:71:f8:a2:3f:d9:4a:9f:b0:df:
a5:5c:c6:ad:82:7e:66:e1:48:7d:5f:10:a3:21:66:
5d:cf:65:27:f3:8e:a6:13:ea:10:c6:f2:58:1f:73:
09:aa:eb:46:dd:e3:cb:24:fe:49:da:3f:6a:44:df:
24:7d:f1:68:01:0d:9a:10:45:81:5c:fb:0a:38:af:
74:6e:77:58:11:7a:98:c7:6b:f6:e7:c5:90:38:27:
22:35:d0:09:a9:ab:8f:68:cc:b1:e2:2e:40:5c:ae:
e2:1a:a2:da:bc:4e:88:41:fa:8d:1f:e3:ea:5d:12:
b5:a4:56:57:5f:1b:d9:6b:c0:e6:29:60:4f:76:f4:
23:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1E:E0:CF:23:0C:E4:62:01:5D:79:66:77:7F:3A:6E:CE:06:2F:A8
X509v3 Authority Key Identifier:
keyid:F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c9:e0:f6:53:89:07:bc:2c:3e:0f:60:a1:4a:d8:00:12:b4:
cc:5e:e8:c4:28:63:e3:9c:42:16:1d:43:9a:5c:23:18:46:19:
b2:70:33:ac:b4:77:2b:3d:9c:06:a2:f4:5a:a3:cf:25:4b:13:
5b:57:ee:26:a9:67:78:c3:2a:53:0c:28:07:8e:a2:be:23:2f:
61:64:fb:34:2e:77:c1:85:24:52:b1:b5:6a:fb:58:c9:65:3a:
30:87:89:bd:8d:c9:5c:3d:00:9d:1f:45:c7:f9:e7:7f:5d:08:
b3:d4:21:0a:11:17:f9:c0:c8:ac:58:6a:72:a6:74:12:99:bc:
98:b2:29:db:72:ff:b5:82:72:c7:f1:57:fb:de:d4:64:b1:e9:
6d:74:f7:36:9b:42:f6:8a:83:73:f5:ec:c8:e7:af:b9:02:06:
84:dc:e7:aa:f3:5a:77:8c:23:6e:6b:30:67:c0:d4:58:c8:05:
32:41:bb:a8:58:8c:ff:fb:46:ac:d0:57:4f:05:9e:a6:59:58:
ed:34:8d:55:16:a4:56:d0:3b:b2:c8:d6:2d:c6:c4:f6:04:3c:
a2:ea:00:a2:33:72:e3:cc:92:e8:b6:6d:78:4d:6a:d5:ec:a2:
22:cd:45:ea:8c:8a:c2:43:ef:28:50:d8:f6:c4:78:c3:bc:74:
81:9c:24:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zoDwU0chj1NWp3epA3QyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYmJhN2MyZDAyZGUxNDhhYTllOGZhMDlhMWM3YTJiNzcw
YTE5ZGMwHhcNMjUwMTMxMTAwMTAwWhcNMjUwMjAxMTAwMTAwWjAzMTEwLwYDVQQD
EygyOTFlZTBjZjIzMGNlNDYyMDE1ZDc5NjY3NzdmM2E2ZWNlMDYyZmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSbf/UCkPEKtgD42jbiZ404rSiSo
/TU5QXBE5Lb7EvGhJxBYMqriGVifQFBbanZDoIkPW8RA74xt/2rw0Zy5/zkt/0cL
ZTIi8wKc8oy0YjnqQyNRxr5nPBFhqjX9RduLmHxiVF52o+ZF5V7NWJUBiFXbr5kX
a9aGMfz6WD5x+KI/2UqfsN+lXMatgn5m4Uh9XxCjIWZdz2Un846mE+oQxvJYH3MJ
qutG3ePLJP5J2j9qRN8kffFoAQ2aEEWBXPsKOK90bndYEXqYx2v258WQOCciNdAJ
qauPaMyx4i5AXK7iGqLavE6IQfqNH+PqXRK1pFZXXxvZa8DmKWBPdvQj1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCke4M8jDORiAV15Znd/Om7OBi+oMB8GA1UdIwQY
MBaAFPK7p8LQLeFIqp6PoJoceit3ChncMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHJ1bnd0QXQ0VWlxbm8tZ21oeDZLM2NLR2R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85NTcxMDktMzg5Mi00ZGM0LTgxNmEt
NWJkZDE0MmJhZTc0LzEvOHJ1bnd0QXQ0VWlxbm8tZ21oeDZLM2NLR2R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy85NTcxMDktMzg5Mi00ZGM0LTgxNmEtNWJkZDE0MmJhZTc0
LzEvOHJ1bnd0QXQ0VWlxbm8tZ21oeDZLM2NLR2R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkcng9lOJ
B7wsPg9goUrYABK0zF7oxChj45xCFh1DmlwjGEYZsnAzrLR3Kz2cBqL0WqPPJUsT
W1fuJqlneMMqUwwoB46iviMvYWT7NC53wYUkUrG1avtYyWU6MIeJvY3JXD0AnR9F
x/nnf10Is9QhChEX+cDIrFhqcqZ0Epm8mLIp23L/tYJyx/FX+97UZLHpbXT3NptC
9oqDc/XsyOevuQIGhNznqvNad4wjbmswZ8DUWMgFMkG7qFiM//tGrNBXTwWepllY
7TSNVRakVtA7ssjWLcbE9gQ8ouoAojNy48yS6LZteE1q1eyiIs1F6oyKwkPvKFDY
9sR4w7x0gZwkoQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:09 2025 by rpki-client