Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
File: i85CgamU1SFm7z_xdyi64hiFX8Q.mft (raw, json)
Hash identifier: l9mFESsF5FdqwDuB33YEEirhfHUynb5UwIMHkOvk6oo=
Subject key identifier: C8:80:25:DA:9D:A4:E7:E6:98:2B:7A:EE:EB:30:33:0E:56:DE:0F:FB
Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4
Certificate serial: 0194BC049D60DA98EE5C5CB93031CE192721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 11:00:06 +0000
Manifest this update: Fri 31 Jan 2025 11:00:06 +0000
Manifest next update: Sat 01 Feb 2025 11:00:06 +0000
Files and hashes: 1: 92LlPsnUIAq2_qCu90vUr2n0raU.roa (hash: foBfA1Aqx+KxyLS/ipFmoqJrrHi0Kf81SvkfmiaHeCY=)
2: i85CgamU1SFm7z_xdyi64hiFX8Q.crl (hash: zDqIsgwIbXNfI+5OcIa/XWqb8Llr0ZW8aBOVU2UQsek=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:9d:60:da:98:ee:5c:5c:b9:30:31:ce:19:27:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4
Validity
Not Before: Jan 31 11:00:06 2025 GMT
Not After : Feb 1 11:00:06 2025 GMT
Subject: CN=c88025da9da4e7e6982b7aeeeb30330e56de0ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fb:30:f5:93:e0:b7:88:a0:f0:72:31:0d:cc:
fa:f4:0c:bc:7c:97:cd:f7:54:c8:ac:49:1e:ec:e3:
68:9a:04:52:07:14:2a:72:e7:c0:9b:75:61:51:05:
c3:c7:b7:10:2f:8f:2c:67:71:9c:12:2f:fc:a5:36:
b1:bf:61:19:b9:cc:12:b2:83:ea:90:a4:4e:f5:27:
1a:18:d0:b2:1c:2f:5f:a0:64:a7:43:06:4e:11:f0:
c1:0e:d9:eb:9a:ab:62:d3:ed:34:c6:0c:02:b7:59:
cf:b0:be:0b:1a:ec:0d:20:01:57:91:db:c1:24:06:
e1:ac:e2:6b:27:7a:a3:8a:1e:5b:af:bd:11:0b:ab:
a9:bc:80:11:1e:18:cc:a4:e3:b1:60:10:a6:5c:08:
c9:de:78:f7:ea:17:68:66:25:8d:1a:52:3d:c2:ff:
fa:08:7e:7a:f0:8c:0c:92:24:ff:b4:f2:d5:2b:eb:
59:00:46:91:e2:08:cf:0b:21:62:e1:fe:86:61:9a:
cf:c7:72:dc:7d:ad:97:f5:23:0e:fb:98:70:3a:60:
e3:a2:4d:e3:c8:e2:60:b0:5d:18:71:21:f7:53:01:
64:90:33:8d:dd:29:b8:13:8a:1d:dd:cf:32:ff:0b:
ce:ba:d0:b1:c2:a4:bd:c2:86:ec:b0:b8:07:39:39:
a3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:80:25:DA:9D:A4:E7:E6:98:2B:7A:EE:EB:30:33:0E:56:DE:0F:FB
X509v3 Authority Key Identifier:
keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ab:05:27:06:53:a1:ce:f7:3f:60:51:ea:36:ad:74:6f:fc:
ef:fa:ea:22:45:21:06:66:f9:e9:df:5e:27:09:b3:d1:14:25:
ad:bf:8b:cf:79:27:5a:f1:49:d1:08:5a:10:70:c5:aa:32:da:
94:bb:dd:f6:65:8e:3e:e7:6b:2b:c6:da:fd:0e:ee:40:93:f0:
38:fd:0f:63:99:50:7c:0e:63:23:c2:6e:e1:47:4a:5c:47:2a:
d4:a4:90:17:c6:ef:a1:29:88:37:18:9f:97:95:fe:1d:20:87:
eb:c9:9f:1d:40:7b:66:61:77:6a:b7:79:63:3e:70:e2:24:63:
e2:05:ef:ff:8b:04:80:75:2e:5e:bf:18:13:8d:54:65:01:4c:
d0:ea:17:29:3d:9c:fe:58:4d:b6:48:8d:d9:8f:1e:f1:75:f1:
b7:d2:26:4c:0c:3a:34:f7:b6:c3:5b:93:89:a8:e8:ab:aa:b6:
6d:d7:ec:05:bc:70:2b:29:b6:ec:96:87:db:15:0e:5d:cb:6b:
96:65:93:a0:3f:ff:1d:93:af:88:50:5d:20:24:96:1a:7d:db:
02:44:60:14:e9:96:60:a8:3f:68:29:06:4f:55:a1:5a:3d:a9:
67:f5:8a:d8:a2:6e:c1:5d:55:bd:14:26:48:ed:38:f6:bb:cd:
6e:a9:99:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BJ1g2pjuXFy5MDHOGSchMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiY2U0MjgxYTk5NGQ1MjE2NmVmM2ZmMTc3MjhiYWUyMTg4
NTVmYzQwHhcNMjUwMTMxMTEwMDA2WhcNMjUwMjAxMTEwMDA2WjAzMTEwLwYDVQQD
EyhjODgwMjVkYTlkYTRlN2U2OTgyYjdhZWVlYjMwMzMwZTU2ZGUwZmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPsw9ZPgt4ig8HIxDcz69Ay8fJfN
91TIrEke7ONomgRSBxQqcufAm3VhUQXDx7cQL48sZ3GcEi/8pTaxv2EZucwSsoPq
kKRO9ScaGNCyHC9foGSnQwZOEfDBDtnrmqti0+00xgwCt1nPsL4LGuwNIAFXkdvB
JAbhrOJrJ3qjih5br70RC6upvIARHhjMpOOxYBCmXAjJ3nj36hdoZiWNGlI9wv/6
CH568IwMkiT/tPLVK+tZAEaR4gjPCyFi4f6GYZrPx3Lcfa2X9SMO+5hwOmDjok3j
yOJgsF0YcSH3UwFkkDON3Sm4E4od3c8y/wvOutCxwqS9wobssLgHOTmjTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiAJdqdpOfmmCt67uswMw5W3g/7MB8GA1UdIwQY
MBaAFIvOQoGplNUhZu8/8XcouuIYhV/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTg1Q2dhbVUxU0ZtN3pfeGR5aTY0aGlGWDhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mZmM0NDgtOGUxOS00N2FhLTk2NjUt
YTFlMDFjNjMzNDNhLzEvaTg1Q2dhbVUxU0ZtN3pfeGR5aTY0aGlGWDhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mZmM0NDgtOGUxOS00N2FhLTk2NjUtYTFlMDFjNjMzNDNh
LzEvaTg1Q2dhbVUxU0ZtN3pfeGR5aTY0aGlGWDhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqsFJwZT
oc73P2BR6jatdG/87/rqIkUhBmb56d9eJwmz0RQlrb+Lz3knWvFJ0QhaEHDFqjLa
lLvd9mWOPudrK8ba/Q7uQJPwOP0PY5lQfA5jI8Ju4UdKXEcq1KSQF8bvoSmINxif
l5X+HSCH68mfHUB7ZmF3ard5Yz5w4iRj4gXv/4sEgHUuXr8YE41UZQFM0OoXKT2c
/lhNtkiN2Y8e8XXxt9ImTAw6NPe2w1uTiajoq6q2bdfsBbxwKym27JaH2xUOXctr
lmWToD//HZOviFBdICSWGn3bAkRgFOmWYKg/aCkGT1WhWj2pZ/WK2KJuwV1VvRQm
SO049rvNbqmZ7A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:38 2025 by rpki-client