Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
File: u7qOzNl-lhif9uM88RCmyaR3RZw.mft (raw, json)
Hash identifier: q0Nl5wiEKPcTDvb3r1NCX7l1lDPfsztwhOojjgJKGUM=
Subject key identifier: 08:C7:60:5D:C5:21:76:EE:AD:13:93:BD:05:96:E4:75:2A:6C:2C:26
Authority key identifier: BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
Certificate issuer: /CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Certificate serial: 0194BD8562217588CB1261F464C5EC82CBB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
Manifest number: 0FAC
Signing time: Fri 31 Jan 2025 18:00:22 +0000
Manifest this update: Fri 31 Jan 2025 18:00:22 +0000
Manifest next update: Sat 01 Feb 2025 18:00:22 +0000
Files and hashes: 1: HxTfLakaEJ_LVNn3ZqoJElNbHoQ.roa (hash: tPr0Odj47LnuFpxE16P/cF19VVsL1tXW82ffakF0EeE=)
2: u7qOzNl-lhif9uM88RCmyaR3RZw.crl (hash: d93k7NbMDaS8H6hndKUQN1EUHJUSXH3tagKlTz2d0MA=)
3: x74EOmKncD9l8_LhQCmRyXpIz94.roa (hash: XUKb+7lZadJCXvjC4Jazh1w2/bHedabOWN8tK0nZBp8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:62:21:75:88:cb:12:61:f4:64:c5:ec:82:cb:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Validity
Not Before: Jan 31 18:00:22 2025 GMT
Not After : Feb 1 18:00:22 2025 GMT
Subject: CN=08c7605dc52176eead1393bd0596e4752a6c2c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:67:6e:2d:8b:07:b7:7f:56:68:13:91:62:b8:
ce:db:7c:f0:d6:3d:e8:b8:89:df:51:39:24:86:cb:
a8:45:b2:ff:58:9a:5a:20:36:a3:85:4c:30:02:19:
23:ff:05:70:2d:70:2c:67:37:6f:6a:b6:d0:6c:a4:
4b:d2:08:4e:71:22:1e:05:83:ec:0b:48:d7:50:c4:
c8:49:b6:8a:16:21:a2:35:be:f9:99:77:a2:50:e0:
07:a5:31:80:39:da:2d:da:93:6a:55:e6:0d:d9:15:
f4:79:7c:ff:23:c9:92:9e:0f:9f:f8:1e:0a:0a:f5:
3e:7e:4e:02:06:7c:07:68:36:71:d6:65:93:f6:4e:
fd:fe:ec:95:58:d6:cb:bf:74:40:94:9a:70:61:2f:
15:7c:ce:41:92:19:33:fd:fe:5d:36:1f:51:d9:c4:
3e:85:60:e2:ae:7f:1e:7a:ac:c8:1b:6b:ff:3e:4e:
a8:72:5d:e7:d7:3a:d3:d6:88:44:7e:d4:bd:f7:0a:
cd:54:af:cb:59:72:f9:77:00:94:4b:cb:9e:77:70:
85:c7:4e:e1:04:f3:a4:36:e1:2c:87:bd:c5:a6:b7:
fc:3c:c6:12:94:5d:3e:62:e8:2f:f8:7d:53:c7:93:
5a:08:d4:1d:95:ab:d9:a1:30:aa:62:e7:56:da:42:
e2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C7:60:5D:C5:21:76:EE:AD:13:93:BD:05:96:E4:75:2A:6C:2C:26
X509v3 Authority Key Identifier:
keyid:BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:1c:e7:a2:09:b7:7f:17:26:3f:83:c3:a2:45:1f:e5:e2:78:
c8:3f:c9:d7:e7:0f:35:54:f9:2f:74:74:92:e5:3b:13:bd:cc:
6d:61:d9:a1:b8:41:de:ed:44:8c:84:cd:43:93:0b:42:ec:8d:
80:07:78:fb:9a:5e:11:79:f3:e1:65:14:55:75:73:53:93:b2:
27:bb:2d:ec:4c:90:46:b2:5f:79:c0:dc:6a:53:64:9a:0e:dd:
a9:92:a5:5e:82:83:16:ce:36:97:e1:6f:4a:90:df:8e:f7:25:
68:1b:06:ed:5f:5e:86:62:fe:e6:a8:1f:d5:ce:e8:c3:f8:31:
0a:aa:c7:b4:ca:38:bd:2f:43:98:47:09:09:1e:89:ad:57:92:
db:6d:90:23:1f:c0:65:fb:4e:63:94:88:75:d3:12:ea:c2:38:
ba:ef:8b:d6:b7:ce:e5:9b:39:72:a0:c4:9f:6e:3c:26:43:d5:
27:cf:3a:d7:0e:21:43:7e:c3:75:ad:69:9f:8a:3f:cc:de:cd:
b1:93:f9:c5:23:30:64:60:53:86:26:12:36:69:40:b0:80:ee:
07:29:34:4d:c3:26:da:99:b4:50:8f:c1:3f:f8:28:2d:3a:c0:
b6:e4:0a:94:1f:70:05:2e:09:e9:43:18:b9:ff:48:6c:cb:a9:
6d:38:85:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hWIhdYjLEmH0ZMXsgsuxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYmE4ZWNjZDk3ZTk2MTg5ZmY2ZTMzY2YxMTBhNmM5YTQ3
NzQ1OWMwHhcNMjUwMTMxMTgwMDIyWhcNMjUwMjAxMTgwMDIyWjAzMTEwLwYDVQQD
EygwOGM3NjA1ZGM1MjE3NmVlYWQxMzkzYmQwNTk2ZTQ3NTJhNmMyYzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mduLYsHt39WaBORYrjO23zw1j3o
uInfUTkkhsuoRbL/WJpaIDajhUwwAhkj/wVwLXAsZzdvarbQbKRL0ghOcSIeBYPs
C0jXUMTISbaKFiGiNb75mXeiUOAHpTGAOdot2pNqVeYN2RX0eXz/I8mSng+f+B4K
CvU+fk4CBnwHaDZx1mWT9k79/uyVWNbLv3RAlJpwYS8VfM5Bkhkz/f5dNh9R2cQ+
hWDirn8eeqzIG2v/Pk6ocl3n1zrT1ohEftS99wrNVK/LWXL5dwCUS8ued3CFx07h
BPOkNuEsh73Fprf8PMYSlF0+Yugv+H1Tx5NaCNQdlavZoTCqYudW2kLiqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjHYF3FIXburROTvQWW5HUqbCwmMB8GA1UdIwQY
MBaAFLu6jszZfpYYn/bjPPEQpsmkd0WcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTdxT3pObC1saGlmOXVNODhSQ215YVIzUlp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iOWRhYjgtZDA4NC00YjczLTk5YjIt
ZWU1YjUxNjhiZjJmLzEvdTdxT3pObC1saGlmOXVNODhSQ215YVIzUlp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iOWRhYjgtZDA4NC00YjczLTk5YjItZWU1YjUxNjhiZjJm
LzEvdTdxT3pObC1saGlmOXVNODhSQ215YVIzUlp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxznogm3
fxcmP4PDokUf5eJ4yD/J1+cPNVT5L3R0kuU7E73MbWHZobhB3u1EjITNQ5MLQuyN
gAd4+5peEXnz4WUUVXVzU5OyJ7st7EyQRrJfecDcalNkmg7dqZKlXoKDFs42l+Fv
SpDfjvclaBsG7V9ehmL+5qgf1c7ow/gxCqrHtMo4vS9DmEcJCR6JrVeS222QIx/A
ZftOY5SIddMS6sI4uu+L1rfO5Zs5cqDEn248JkPVJ8861w4hQ37Dda1pn4o/zN7N
sZP5xSMwZGBThiYSNmlAsIDuByk0TcMm2pm0UI/BP/goLTrAtuQKlB9wBS4J6UMY
uf9IbMupbTiF8Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:26 2025 by rpki-client