Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
File: _COczybqOCV6B9QJT6bXCyaWn7k.mft (raw, json)
Hash identifier: qWisTeO8sEaGMJ3ttyLvjond+gNOgwupK+CmBU4hbvI=
Subject key identifier: 8B:C0:92:B8:28:3F:0B:74:BC:2D:6A:D3:AF:AC:BE:CE:77:7C:3F:E4
Authority key identifier: FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9
Certificate issuer: /CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9
Certificate serial: 0194BCA97C9339C3315A16E5210BF6C65FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
Manifest number: 0263
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: 8b2MYp-hkoi3xWAERwOdBetyEr0.roa (hash: xdjzN/dKBz+p1uPtY9z1q8M+hEUT4eY7/Ecx7N8LfC8=)
2: _COczybqOCV6B9QJT6bXCyaWn7k.crl (hash: AdfiDybY7dBj6FgCywdhYqpKKbQgQVOXYqqexesHgWc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7c:93:39:c3:31:5a:16:e5:21:0b:f6:c6:5f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=8bc092b8283f0b74bc2d6ad3afacbece777c3fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3c:9c:f1:c1:58:bb:01:0b:ec:5f:35:b8:51:
2b:f5:b7:3b:28:98:e3:d6:e2:d1:32:67:c9:6b:e0:
5a:ce:3b:13:48:e7:eb:65:8d:dd:3d:c6:2a:ab:4c:
37:25:0a:32:70:be:5c:ca:db:f3:90:ae:e1:06:99:
ca:01:b8:11:80:de:ab:73:85:10:6e:5d:06:ee:cc:
22:67:4d:b0:1a:b2:87:f7:aa:34:73:1b:01:9f:ca:
46:b9:e6:2c:77:67:c0:61:9a:89:e8:3e:8a:aa:8a:
d2:58:a2:2e:e7:d6:b2:4d:01:1f:b2:1d:32:aa:bc:
e0:24:fc:11:f7:a3:09:a2:7a:75:81:bf:2f:be:72:
83:f8:2e:ed:a8:65:a6:6d:92:78:be:2a:14:5b:c3:
a6:5d:f8:ff:08:65:67:bb:61:a8:9f:83:b0:ba:38:
27:1a:03:9e:f5:c5:46:b6:0b:0d:fc:8f:41:5d:ae:
f5:b1:eb:80:24:34:c7:98:ef:4d:ad:db:96:e9:77:
bf:e9:08:81:f5:6e:41:17:b5:1c:95:44:a4:a2:a8:
87:a4:38:46:7c:d9:c0:e7:2f:96:9e:14:68:8a:2d:
0d:f7:97:9a:14:08:ba:70:3a:c2:9b:d8:53:d8:47:
ca:dd:c7:d1:8e:3c:59:99:c7:5b:61:89:77:f8:44:
a8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C0:92:B8:28:3F:0B:74:BC:2D:6A:D3:AF:AC:BE:CE:77:7C:3F:E4
X509v3 Authority Key Identifier:
keyid:FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:5a:72:06:69:1e:9d:d9:52:df:bc:05:35:95:0b:32:f6:72:
94:ab:14:eb:ed:7d:65:8d:5a:a8:35:2d:ae:93:81:e8:16:c1:
27:eb:15:37:38:e4:af:7c:5e:6d:7b:c1:f4:5c:0d:43:9f:58:
00:a9:32:7e:63:ba:6f:46:84:eb:ce:11:f0:ff:c5:24:8b:30:
49:5a:db:23:c3:fb:d4:ce:0d:64:55:c7:0d:c9:5f:5d:d1:e2:
50:d8:1d:a4:e4:99:71:ff:57:69:53:4a:5d:b3:b9:f8:3c:95:
9c:e4:be:69:e5:02:f5:16:40:a5:7c:ea:6f:ba:9d:fb:64:bc:
bc:7f:9c:0e:4f:e0:6e:7f:e7:1d:c7:8a:87:1f:e5:9f:17:ab:
59:25:dc:74:fe:de:52:a7:0e:40:38:16:01:1a:6f:f6:80:e0:
ef:04:db:c7:9b:90:1b:49:51:f2:21:3f:34:17:05:01:d4:c1:
2a:e5:4a:41:ec:6d:24:e6:30:ee:96:34:5b:58:28:ac:98:cc:
0a:06:99:58:12:13:74:40:df:09:99:54:21:62:c4:64:e7:7f:
d5:c2:eb:94:f7:6c:8b:db:e4:e1:a8:b6:1d:85:c3:c0:76:65:
bc:2b:c5:29:89:85:5c:4b:06:d8:aa:f9:52:23:67:3b:3a:c4:
0e:b3:d0:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qXyTOcMxWhblIQv2xl+3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMjM5Y2NmMjZlYTM4MjU3YTA3ZDQwOTRmYTZkNzBiMjY5
NjlmYjkwHhcNMjUwMTMxMTQwMDExWhcNMjUwMjAxMTQwMDExWjAzMTEwLwYDVQQD
Eyg4YmMwOTJiODI4M2YwYjc0YmMyZDZhZDNhZmFjYmVjZTc3N2MzZmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Dyc8cFYuwEL7F81uFEr9bc7KJjj
1uLRMmfJa+BazjsTSOfrZY3dPcYqq0w3JQoycL5cytvzkK7hBpnKAbgRgN6rc4UQ
bl0G7swiZ02wGrKH96o0cxsBn8pGueYsd2fAYZqJ6D6KqorSWKIu59ayTQEfsh0y
qrzgJPwR96MJonp1gb8vvnKD+C7tqGWmbZJ4vioUW8OmXfj/CGVnu2Gon4Owujgn
GgOe9cVGtgsN/I9BXa71seuAJDTHmO9NrduW6Xe/6QiB9W5BF7UclUSkoqiHpDhG
fNnA5y+WnhRoii0N95eaFAi6cDrCm9hT2EfK3cfRjjxZmcdbYYl3+ESoPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvAkrgoPwt0vC1q06+svs53fD/kMB8GA1UdIwQY
MBaAFPwjnM8m6jglegfUCU+m1wsmlp+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0NPY3p5YnFPQ1Y2QjlRSlQ2YlhDeWFXbjdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mMDZjNzktN2M3ZS00NTA0LTg4YzAt
YThhOTExYTNlMmUwLzEvX0NPY3p5YnFPQ1Y2QjlRSlQ2YlhDeWFXbjdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9mMDZjNzktN2M3ZS00NTA0LTg4YzAtYThhOTExYTNlMmUw
LzEvX0NPY3p5YnFPQ1Y2QjlRSlQ2YlhDeWFXbjdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFpyBmke
ndlS37wFNZULMvZylKsU6+19ZY1aqDUtrpOB6BbBJ+sVNzjkr3xebXvB9FwNQ59Y
AKkyfmO6b0aE684R8P/FJIswSVrbI8P71M4NZFXHDclfXdHiUNgdpOSZcf9XaVNK
XbO5+DyVnOS+aeUC9RZApXzqb7qd+2S8vH+cDk/gbn/nHceKhx/lnxerWSXcdP7e
UqcOQDgWARpv9oDg7wTbx5uQG0lR8iE/NBcFAdTBKuVKQextJOYw7pY0W1gorJjM
CgaZWBITdEDfCZlUIWLEZOd/1cLrlPdsi9vk4ai2HYXDwHZlvCvFKYmFXEsG2Kr5
UiNnOzrEDrPQvQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:38 2025 by rpki-client