Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
File: l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft (raw, json)
Hash identifier: PMbLP9gfPJyUOYGGhU7+NCGxyeYg6Q42kyvRMFRMTfA=
Subject key identifier: 76:AB:91:E2:0E:18:44:D1:FF:53:CC:A1:E4:E3:97:3E:C0:43:2D:9F
Authority key identifier: 97:CC:C0:EC:DC:EB:7C:4D:A9:12:E1:D7:92:BD:16:E6:22:AF:4A:46
Certificate issuer: /CN=97ccc0ecdceb7c4da912e1d792bd16e622af4a46
Certificate serial: 0194BC04F0B284BB509104D1EBFB49A31A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
Manifest number: 0A
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: KGvd9Dk5_a_R1xkL2TWSdydfpdk.roa (hash: HlescFWLzPsD70c5CcwFp2ufdRCBYWVscapXjHm9XI4=)
2: l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl (hash: c3aPE5YufxKBvZmzTtWPQvkOvpGB/WHUIve/IsZ06jU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f0:b2:84:bb:50:91:04:d1:eb:fb:49:a3:1a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ccc0ecdceb7c4da912e1d792bd16e622af4a46
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=76ab91e20e1844d1ff53cca1e4e3973ec0432d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a7:95:68:1a:c1:e4:68:2b:61:62:95:a0:52:
02:61:1a:55:b7:cd:b2:3c:87:50:09:84:54:c9:c3:
cd:45:95:f5:12:ed:88:19:54:c6:ba:70:86:88:78:
af:c6:d4:f0:6d:ce:03:be:b0:9e:78:ef:4b:84:c0:
d5:a7:43:f6:d3:9e:81:ed:13:66:c8:49:62:60:64:
8c:2f:68:5d:92:9d:38:d8:f5:7d:72:68:b2:58:0c:
e1:ba:31:0a:13:71:ac:9c:2d:d7:df:d4:2a:38:2b:
08:f8:59:47:42:5c:0b:db:ab:74:82:a2:9e:30:7a:
e3:17:a4:2c:98:e9:9c:6a:36:4e:16:03:cd:34:c8:
bb:9a:1d:20:9f:9d:a6:25:79:2e:01:78:18:33:88:
81:3f:87:9c:e9:c5:f2:9f:dc:70:bd:0e:f2:83:16:
fd:03:8d:2c:57:8f:d3:c7:ec:fa:34:3e:f7:a6:c0:
e7:66:77:b6:ed:7c:7f:6b:bd:fb:fb:0d:45:27:90:
03:c3:00:8d:36:96:a6:e1:f8:14:d1:a1:75:77:78:
0f:46:83:0a:12:13:da:25:ef:ba:d0:c0:d3:af:6c:
23:c7:4c:de:f1:85:e8:62:5e:e6:2f:e4:04:d2:6a:
9a:dc:22:45:e9:fb:e0:28:c0:45:bf:34:ec:43:a1:
cf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AB:91:E2:0E:18:44:D1:FF:53:CC:A1:E4:E3:97:3E:C0:43:2D:9F
X509v3 Authority Key Identifier:
keyid:97:CC:C0:EC:DC:EB:7C:4D:A9:12:E1:D7:92:BD:16:E6:22:AF:4A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:34:8b:eb:7b:63:23:57:20:1d:61:ac:0e:3a:b1:8c:8b:76:
fe:fd:3d:7c:31:37:21:33:95:94:17:16:83:70:fd:df:b4:1f:
e1:6b:c4:a1:62:19:63:bf:51:74:45:c6:f6:bc:4a:71:7b:74:
ab:be:02:bd:e5:e4:29:4a:c9:31:e1:e3:7b:65:88:2c:c1:4d:
d0:fb:6a:c1:9e:ed:da:af:cc:b2:a4:d1:ac:39:7c:1a:71:62:
13:67:fb:32:89:da:e3:86:9c:7f:81:24:2e:68:91:f2:6f:22:
a6:70:a1:f3:81:12:9e:36:1a:1f:e9:8b:42:16:93:f7:b6:73:
8c:70:86:14:f2:36:91:00:74:40:20:c7:f4:86:82:ee:58:0d:
25:f3:0d:7e:c5:f5:bb:3e:41:01:39:4f:b6:4f:29:65:de:8f:
b4:0d:25:5e:f3:92:a0:6a:55:a2:8b:90:5a:65:26:5c:89:6d:
4c:68:cf:2f:eb:e4:36:20:08:8a:c3:cb:be:9e:98:cb:7a:a9:
63:b2:0b:f1:03:01:28:96:77:c3:6e:47:0a:0a:1a:08:ba:2a:
75:10:28:6e:28:98:33:ac:ab:7f:f0:b0:2d:29:51:99:25:81:
87:b0:54:d0:e4:c4:9f:df:63:a9:f0:15:c7:1c:7e:b3:ef:fa:
a5:bb:44:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BPCyhLtQkQTR6/tJoxpaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3Y2NjMGVjZGNlYjdjNGRhOTEyZTFkNzkyYmQxNmU2MjJh
ZjRhNDYwHhcNMjUwMTMxMTEwMDI3WhcNMjUwMjAxMTEwMDI3WjAzMTEwLwYDVQQD
Eyg3NmFiOTFlMjBlMTg0NGQxZmY1M2NjYTFlNGUzOTczZWMwNDMyZDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6eVaBrB5GgrYWKVoFICYRpVt82y
PIdQCYRUycPNRZX1Eu2IGVTGunCGiHivxtTwbc4DvrCeeO9LhMDVp0P2056B7RNm
yEliYGSML2hdkp042PV9cmiyWAzhujEKE3GsnC3X39QqOCsI+FlHQlwL26t0gqKe
MHrjF6QsmOmcajZOFgPNNMi7mh0gn52mJXkuAXgYM4iBP4ec6cXyn9xwvQ7ygxb9
A40sV4/Tx+z6ND73psDnZne27Xx/a737+w1FJ5ADwwCNNpam4fgU0aF1d3gPRoMK
EhPaJe+60MDTr2wjx0ze8YXoYl7mL+QE0mqa3CJF6fvgKMBFvzTsQ6HPRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHarkeIOGETR/1PMoeTjlz7AQy2fMB8GA1UdIwQY
MBaAFJfMwOzc63xNqRLh15K9FuYir0pGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDh6QTdOenJmRTJwRXVIWGtyMFc1aUt2U2tZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8wYWE0ZGQtM2ZhYS00YjNjLWI0YzAt
OTNkMTdhMjljMGE5LzEvbDh6QTdOenJmRTJwRXVIWGtyMFc1aUt2U2tZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8wYWE0ZGQtM2ZhYS00YjNjLWI0YzAtOTNkMTdhMjljMGE5
LzEvbDh6QTdOenJmRTJwRXVIWGtyMFc1aUt2U2tZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDSL63tj
I1cgHWGsDjqxjIt2/v09fDE3ITOVlBcWg3D937Qf4WvEoWIZY79RdEXG9rxKcXt0
q74CveXkKUrJMeHje2WILMFN0PtqwZ7t2q/MsqTRrDl8GnFiE2f7Mona44acf4Ek
LmiR8m8ipnCh84ESnjYaH+mLQhaT97ZzjHCGFPI2kQB0QCDH9IaC7lgNJfMNfsX1
uz5BATlPtk8pZd6PtA0lXvOSoGpVoouQWmUmXIltTGjPL+vkNiAIisPLvp6Yy3qp
Y7IL8QMBKJZ3w25HCgoaCLoqdRAobiiYM6yrf/CwLSlRmSWBh7BU0OTEn99jqfAV
xxx+s+/6pbtE7w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:55 2025 by rpki-client